$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa File: 280a1815-c4cc-48df-a16f-3277770f685f.roa (raw, json) Hash identifier: 7narkGZUjMztw4DH/NfIOpByQHn/T9tS3JX37ypysHA= Subject key identifier: 49:4B:39:27:CD:36:D6:30:39:03:3D:09:4B:EF:DE:94:E6:33:6E:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D53DEDE3DCD960EE29E9A186B23633A18C5C5D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa Signing time: Tue 14 Jan 2025 00:00:00 +0000 ROA not before: Tue 14 Jan 2025 00:00:00 +0000 ROA not after: Tue 18 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.214.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:53:de:de:3d:cd:96:0e:e2:9e:9a:18:6b:23:63:3a:18:c5:c5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Jan 14 00:00:00 2025 GMT Not After : Feb 18 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:a7:6a:a2:41:d9:8a:26:ef:3c:6c:a5:81: 52:6b:7f:60:75:55:88:84:8e:e5:da:6a:43:f3:3b: d1:c9:0f:92:01:ec:7c:87:59:3a:9b:64:13:72:3e: 2d:6f:4c:1a:3f:d5:8e:7d:5c:8d:55:81:55:30:9c: a7:2e:3e:ec:d9:75:9c:8c:c8:d6:89:50:ab:e2:2a: 9f:8c:fc:8d:2a:28:a6:99:d9:ed:16:97:5a:cb:fa: d5:d6:51:1c:71:17:14:ee:2a:4c:4d:25:d7:bd:09: 39:f4:85:5c:c4:91:83:6a:25:7b:dd:c7:fb:45:43: 0b:07:fa:04:0a:2f:8a:33:f9:9f:3d:ce:cd:af:03: f4:3a:d3:74:1f:61:c7:e5:7f:c6:87:94:d6:e8:9a: 8d:46:8e:f4:4c:aa:99:6b:fc:9d:ee:a1:1e:8f:ba: 7a:79:1a:39:51:3f:78:3c:da:67:26:19:cc:2e:bb: b5:41:5c:77:2c:45:fc:59:02:36:97:08:75:0e:f8: 7d:16:39:b9:88:6b:92:1f:8c:3b:da:d3:5b:34:87: ee:63:0d:c3:78:fc:25:a1:d9:1a:72:1b:9d:42:9d: a6:e3:b1:be:d5:2e:34:74:0c:d8:d2:70:d0:77:9e: ae:f2:c2:9f:a9:00:bc:17:01:ad:cc:c1:09:bf:92: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:39:27:CD:36:D6:30:39:03:3D:09:4B:EF:DE:94:E6:33:6E:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6c:57:55:d4:60:42:fc:7d:0a:48:96:ff:12:0a:e7:e6:c1:e2: 7b:d1:33:99:35:b7:1d:8a:87:0a:7c:6c:53:b2:10:6a:52:fe: d0:df:7a:9d:9a:c5:31:16:b4:93:55:92:32:9d:9d:8a:c5:be: b7:a6:70:53:97:42:e4:2b:f3:98:59:23:5f:00:63:9c:6b:84: 3d:1a:54:fc:52:9f:91:f8:c3:93:ae:b1:16:57:b3:bc:b1:49: 35:ac:30:98:df:19:3f:40:8a:e2:1f:24:00:d7:79:a1:20:d2: ae:f8:30:c0:68:66:11:2e:f5:a0:d5:c5:75:c1:cf:bc:07:8a: 64:60:67:43:e5:0b:f2:36:d0:4e:b4:ef:a8:d3:06:23:4f:91: cc:a7:77:10:08:67:83:db:e4:4c:53:84:1d:09:cf:89:81:50: ac:07:3b:fe:68:a2:10:b1:e9:9f:9e:e7:3e:90:7e:9b:27:21: 5f:e6:77:f0:07:c9:a4:45:fd:de:82:06:fe:3b:64:f9:10:49: 1e:13:4f:04:8f:ee:eb:78:7a:c3:a5:4e:6c:90:5d:84:e5:8a: c3:96:d9:d9:57:21:1a:6d:0e:61:6e:35:e8:bd:74:83:60:06: 22:31:6a:e7:c1:49:9b:d2:ce:44:de:fc:fd:04:30:41:4d:f3: 55:1d:5f:c8 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUbVPe3j3Nlg7inpoYayNjOhjFxdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExNDAwMDAwMFoX DTI1MDIxODIzNTk1OVowejFJMEcGA1UEBRNANTAwZWY0OTMwYjQwYjY4NzQxNjVi OGIwYjJiOTM2NTVjYWU0MmU1M2Y4ZjAxMDJhMDQ4OWNmNGI4YWM3NTViNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpanaqJB2Yom7zxspYFSa39gdVWI hI7l2mpD8zvRyQ+SAex8h1k6m2QTcj4tb0waP9WOfVyNVYFVMJynLj7s2XWcjMjW iVCr4iqfjPyNKiimmdntFpday/rV1lEccRcU7ipMTSXXvQk59IVcxJGDaiV73cf7 RUMLB/oECi+KM/mfPc7NrwP0OtN0H2HH5X/Gh5TW6JqNRo70TKqZa/yd7qEej7p6 eRo5UT94PNpnJhnMLru1QVx3LEX8WQI2lwh1Dvh9Fjm5iGuSH4w72tNbNIfuYw3D ePwlodkachudQp2m47G+1S40dAzY0nDQd56u8sKfqQC8FwGtzMEJv5L/TQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFElLOSfNNtYwOQM9CUvv3pTmM24QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MGExODE1LWM0Y2MtNDhkZi1hMTZmLTMyNzc3NzBmNjg1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9YwDQYJKoZIhvcNAQELBQADggEBAGxXVdRgQvx9CkiW/xIK5+bB 4nvRM5k1tx2Khwp8bFOyEGpS/tDfep2axTEWtJNVkjKdnYrFvremcFOXQuQr85hZ I18AY5xrhD0aVPxSn5H4w5OusRZXs7yxSTWsMJjfGT9AiuIfJADXeaEg0q74MMBo ZhEu9aDVxXXBz7wHimRgZ0PlC/I20E6076jTBiNPkcyndxAIZ4Pb5ExThB0Jz4mB UKwHO/5oohCx6Z+e5z6QfpsnIV/md/AHyaRF/d6CBv47ZPkQSR4TTwSP7ut4esOl TmyQXYTlisOW2dlXIRptDmFuNei9dINgBiIxaufBSZvSzkTe/P0EMEFN81UdX8g= -----END CERTIFICATE-----Generated at Wed Feb 5 03:47:28 2025 by rpki-client