$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ef94ee4-4310-4cee-8115-190220d10277.roa File: 2ef94ee4-4310-4cee-8115-190220d10277.roa (raw, json) Hash identifier: W5SpxyzbhXw3aKrduIHQWx2qSO2EtXdQxlEJK/SAks0= Subject key identifier: CD:AB:90:24:A2:8A:9F:62:B1:41:AE:12:DA:ED:E7:8E:9C:6E:F6:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A5909B41AF60DA6F2CA67CEB6B7761B97A89256 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ef94ee4-4310-4cee-8115-190220d10277.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:59:09:b4:1a:f6:0d:a6:f2:ca:67:ce:b6:b7:76:1b:97:a8:92:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:dd:1c:95:f7:e0:12:5f:70:16:f1:d7:88: b0:af:a2:ef:af:40:75:f9:e6:23:b8:0b:ef:f7:77: 70:de:af:3b:84:f5:d2:6d:9e:5f:01:90:c7:86:11: b0:f6:75:37:f2:96:43:03:1a:73:c3:12:35:36:83: 3e:d9:4e:0b:f2:bf:ff:0f:1e:a2:c3:9d:9b:a5:fa: 0f:b6:64:26:51:7d:85:6b:92:95:de:51:93:95:3a: 5c:c5:74:55:c5:88:99:18:e5:8f:b4:a3:a6:4f:3a: 29:43:a4:99:58:55:6a:4c:cb:96:0f:9f:91:3e:de: 6b:a3:d9:af:a8:1c:28:bd:2d:c3:2a:5c:d4:e6:98: 99:75:68:54:d1:0b:f9:20:df:09:ea:49:4a:20:00: ca:30:57:c4:50:3f:9b:7d:4f:0e:cc:91:33:21:27: 81:9e:ae:ea:5a:e3:40:00:78:83:b0:37:63:22:92: 77:1e:a7:15:68:d9:67:da:e1:af:47:96:dd:58:9a: b3:d2:44:e9:26:b9:47:06:16:92:f4:40:42:fc:b5: fa:fb:c4:26:a9:88:d6:fc:b6:a9:dd:43:3d:28:79: 6c:ab:0e:f9:eb:42:b7:9c:d6:df:57:6f:7a:50:b3: 26:0b:60:1c:f9:c9:d7:9e:c1:99:97:f1:fe:68:d6: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:90:24:A2:8A:9F:62:B1:41:AE:12:DA:ED:E7:8E:9C:6E:F6:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ef94ee4-4310-4cee-8115-190220d10277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:840::/46 Signature Algorithm: sha256WithRSAEncryption 8f:a8:54:f4:ff:6a:68:9b:f4:12:98:0c:31:82:46:7e:d3:ea: ef:fb:2e:0c:ac:e5:60:9c:6d:aa:96:fe:5d:03:06:08:50:e3: a3:a1:c4:87:99:d7:71:82:40:e0:d2:c8:03:44:0d:2b:fc:1b: df:55:e9:77:36:72:c9:62:8d:ee:a0:24:25:30:66:ac:08:de: ce:65:4b:b4:65:96:95:bc:ec:f3:d4:4e:75:b0:0f:6b:b1:6f: f7:e0:5d:31:df:24:8e:ad:6a:19:67:c4:5e:24:c5:51:aa:7d: 57:1c:25:78:20:d8:1f:a1:c9:e4:af:12:9b:18:7a:d1:60:77: 74:af:f7:51:77:d6:a8:e0:37:0d:dc:ba:25:58:99:b8:5d:07: 28:fa:0d:4b:d8:2d:1c:4e:73:b0:fa:8d:2d:24:3d:29:dd:0d: 4d:7a:cc:fa:18:44:0c:67:05:1c:e4:d0:bf:a2:00:5a:c1:ba: 85:95:d7:55:22:e0:03:22:8b:a0:df:d0:a1:2d:06:ad:d1:40: 85:95:bc:95:27:0a:b4:e1:4b:63:dc:fe:59:3a:92:fb:27:d6: 89:9b:7d:7d:79:bc:c5:a6:bc:37:d6:24:e8:21:59:47:10:d5: ac:33:fd:42:5c:19:b9:b7:42:49:9e:3c:bd:1a:85:62:fa:33: df:20:2e:8a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUClkJtBr2DabyymfOtrd2G5eoklYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMjYzN2I2NmFmMTBmNWMyN2FkMTM4 OGUwY2VjOTlhMWUwNjcwY2NhMDU0MTZhYzczY2M2YjEwYjU5ZTg1ODJmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ndHJX34BJfcBbx14iwr6Lvr0B1 +eYjuAvv93dw3q87hPXSbZ5fAZDHhhGw9nU38pZDAxpzwxI1NoM+2U4L8r//Dx6i w52bpfoPtmQmUX2Fa5KV3lGTlTpcxXRVxYiZGOWPtKOmTzopQ6SZWFVqTMuWD5+R Pt5ro9mvqBwovS3DKlzU5piZdWhU0Qv5IN8J6klKIADKMFfEUD+bfU8OzJEzISeB nq7qWuNAAHiDsDdjIpJ3HqcVaNln2uGvR5bdWJqz0kTpJrlHBhaS9EBC/LX6+8Qm qYjW/Lap3UM9KHlsqw7560K3nNbfV296ULMmC2Ac+cnXnsGZl/H+aNbEcQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM2rkCSiip9isUGuEtrt546cbvYiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlZjk0ZWU0LTQzMTAtNGNlZS04MTE1LTE5MDIyMGQxMDI3Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9whAMA0GCSqGSIb3DQEBCwUAA4IBAQCPqFT0/2pom/QSmAwx gkZ+0+rv+y4MrOVgnG2qlv5dAwYIUOOjocSHmddxgkDg0sgDRA0r/BvfVel3NnLJ Yo3uoCQlMGasCN7OZUu0ZZaVvOzz1E51sA9rsW/34F0x3ySOrWoZZ8ReJMVRqn1X HCV4INgfocnkrxKbGHrRYHd0r/dRd9ao4DcN3LolWJm4XQco+g1L2C0cTnOw+o0t JD0p3Q1Nesz6GEQMZwUc5NC/ogBawbqFlddVIuADIoug39ChLQat0UCFlbyVJwq0 4Utj3P5ZOpL7J9aJm319ebzFprw31iToIVlHENWsM/1CXBm5t0JJnjy9GoVi+jPf IC6K -----END CERTIFICATE-----Generated at Wed Feb 5 04:01:16 2025 by rpki-client