$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa File: 2a4b406c-5546-415b-a581-7d4fac440f72.roa (raw, json) Hash identifier: NdMwPL8eC+Xj7t6uQfxH97VWhYPVzfWoTpnhIavWDq8= Subject key identifier: 4C:BF:1F:21:21:40:26:8B:56:88:FF:9B:D8:83:0B:9A:C4:BE:FE:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F4C4D9172253BA81D291EEBD3815DE52D3F4A5C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:4d:91:72:25:3b:a8:1d:29:1e:eb:d3:81:5d:e5:2d:3f:4a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:b2:2d:89:fa:be:5f:13:7d:ba:ae:fe:6e: 90:38:21:81:b8:e2:7e:36:7a:8b:14:3d:36:53:48: 4b:74:2f:1d:2b:94:9b:73:1d:50:63:f9:a2:89:db: 13:98:fd:a2:17:24:0f:5d:8b:eb:2a:03:80:9a:eb: d7:62:89:e2:00:61:4f:41:24:7b:e6:d3:93:54:38: 6c:1f:18:1c:44:a0:ad:d8:7b:1b:c3:49:35:53:18: b2:7c:f6:76:36:39:f4:52:66:fa:dc:d8:01:50:13: ad:15:a6:a5:02:06:6a:99:da:52:5a:2d:27:54:84: bb:09:83:7e:1b:2e:3c:23:02:54:15:1a:d4:23:fa: 97:91:6e:2c:51:5f:bd:8b:fa:0b:76:3b:2a:58:5d: 4e:6d:63:6d:2d:e5:a7:c5:9e:d7:3a:d0:62:04:3e: f7:b6:b9:f1:4d:a5:7c:8a:e9:1f:a0:52:bd:47:27: 46:1c:cd:33:0d:51:35:fe:ce:65:bc:ae:76:41:98: 0c:c7:fa:c5:ec:53:f9:63:e4:06:f1:0e:6d:8b:36: 4f:a5:83:9b:0e:3d:97:44:57:6a:17:bd:08:b7:88: ad:6d:d1:37:22:5f:72:f2:7c:1c:dd:92:4c:cf:e7: b2:c5:5f:0e:22:a0:0a:2a:8d:a6:51:d9:94:c9:fd: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BF:1F:21:21:40:26:8B:56:88:FF:9B:D8:83:0B:9A:C4:BE:FE:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b080::/48 Signature Algorithm: sha256WithRSAEncryption a9:5d:70:24:4c:0d:ae:bc:6c:f9:71:28:51:58:ed:ec:2a:a3: de:26:bf:86:dc:63:6c:ed:1b:59:a0:1b:2f:49:e2:02:05:ba: 77:5c:d9:28:52:ff:c5:69:3a:f7:81:09:6a:1d:18:e2:23:b7: 00:b9:36:af:27:f5:04:c0:f3:81:f9:3e:8b:6e:37:70:da:25: e1:03:01:2d:1f:f6:6b:10:42:2e:a1:c9:73:f3:9a:e4:c6:fa: 93:08:8b:4c:4e:df:df:1c:8f:c3:a0:61:3c:c3:c3:d7:ca:e1: 84:5d:0d:03:25:14:e3:52:4e:cc:da:96:20:5c:7c:3b:80:d2: 1e:d5:81:51:a3:06:ec:b9:db:c8:05:a2:2e:c4:b0:2d:fe:2e: 5f:8b:86:d0:4f:c1:4b:4f:f6:bf:c9:57:c8:eb:6e:2f:67:81: 85:0e:af:4f:a5:38:32:79:cb:71:ab:99:b7:2a:31:d4:9e:b4: 4c:a6:01:9f:4b:db:f4:dd:9a:7c:8b:5e:ef:e3:e4:9a:0b:56: 82:d4:fa:a8:25:f9:84:4b:3c:29:0e:19:11:50:13:59:64:3a: 77:ee:d8:5d:70:4f:a7:bd:42:3a:ee:27:f4:4d:74:61:83:74: 08:f2:ca:2a:10:13:89:ce:bd:74:73:22:a0:c3:05:86:92:00: 0e:f7:6a:9b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUP0xNkXIlO6gdKR7r04Fd5S0/SlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTVhYjk1ZTUyYmEzNzllMjlkNGQ0 MzVlNTIyMDQ3YWEyNzdhZWMzMzRlN2I5OTFmM2YyNmM0MmRkMTQ3YzdmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKyLYn6vl8Tfbqu/m6QOCGBuOJ+ NnqLFD02U0hLdC8dK5Sbcx1QY/miidsTmP2iFyQPXYvrKgOAmuvXYoniAGFPQSR7 5tOTVDhsHxgcRKCt2Hsbw0k1UxiyfPZ2Njn0Umb63NgBUBOtFaalAgZqmdpSWi0n VIS7CYN+Gy48IwJUFRrUI/qXkW4sUV+9i/oLdjsqWF1ObWNtLeWnxZ7XOtBiBD73 trnxTaV8iukfoFK9RydGHM0zDVE1/s5lvK52QZgMx/rF7FP5Y+QG8Q5tizZPpYOb Dj2XRFdqF70It4itbdE3Il9y8nwc3ZJMz+eyxV8OIqAKKo2mUdmUyf2OHwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEy/HyEhQCaLVoj/m9iDC5rEvv7BMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhNGI0MDZjLTU1NDYtNDE1Yi1hNTgxLTdkNGZhYzQ0MGY3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7CAMA0GCSqGSIb3DQEBCwUAA4IBAQCpXXAkTA2uvGz5cShR WO3sKqPeJr+G3GNs7RtZoBsvSeICBbp3XNkoUv/FaTr3gQlqHRjiI7cAuTavJ/UE wPOB+T6Lbjdw2iXhAwEtH/ZrEEIuoclz85rkxvqTCItMTt/fHI/DoGE8w8PXyuGE XQ0DJRTjUk7M2pYgXHw7gNIe1YFRowbsudvIBaIuxLAt/i5fi4bQT8FLT/a/yVfI 624vZ4GFDq9PpTgyectxq5m3KjHUnrRMpgGfS9v03Zp8i17v4+SaC1aC1PqoJfmE SzwpDhkRUBNZZDp37thdcE+nvUI67if0TXRhg3QI8soqEBOJzr10cyKgwwWGkgAO 92qb -----END CERTIFICATE-----Generated at Wed Feb 5 03:47:02 2025 by rpki-client