$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa File: 2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa (raw, json) Hash identifier: N/pYrPKtg43QNMJKXoIsqnb4aTDyeCOSl8ywG96AG5I= Subject key identifier: 1A:78:ED:11:DE:CE:12:9A:AC:B5:DF:E5:45:85:7D:38:ED:BE:88:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A587EC911552A4F8F470D248A9A2555549C9052 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:58:7e:c9:11:55:2a:4f:8f:47:0d:24:8a:9a:25:55:54:9c:90:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:6e:01:f4:11:25:b1:21:ac:da:3a:97:92: f0:67:5f:0e:11:e3:10:8d:1b:ad:3f:ed:a4:4d:02: 00:c3:26:6a:d6:11:68:a7:a1:b7:be:62:a1:a2:33: 6a:23:2c:ff:da:c6:72:0c:06:31:a4:3c:ca:12:f5: 2c:ce:39:90:cd:25:0a:fc:91:c2:34:c8:97:3e:e9: 8d:55:d4:a2:94:85:02:1a:8d:46:51:61:16:9c:70: a1:f1:49:52:8a:0a:2f:1f:03:67:07:91:bf:14:cc: f1:88:d0:4e:d2:98:e2:81:93:c7:f6:a6:d6:b3:ae: b3:38:e8:fb:09:b6:e8:84:f0:44:c8:4a:68:5a:23: 47:2c:5a:0f:98:40:52:e5:e1:86:b0:74:d9:7f:06: 8d:73:2c:4f:e1:d8:f4:3b:14:af:80:3c:d3:07:e3: 14:d1:63:84:03:47:72:48:d4:f0:43:63:df:11:e4: 6f:91:14:64:7b:38:1c:59:fb:d6:da:be:ee:91:7e: 8e:5b:27:10:89:aa:38:4e:ef:27:a7:5a:cf:dd:0e: 0b:c9:77:2f:fa:16:04:84:fd:b4:a2:64:58:70:a6: 93:e9:b9:df:b0:de:77:83:c0:38:5c:b8:75:ed:10: ad:ca:2c:ef:7e:58:1f:79:fb:d6:df:d7:86:1d:5f: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:ED:11:DE:CE:12:9A:AC:B5:DF:E5:45:85:7D:38:ED:BE:88:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c840::/48 Signature Algorithm: sha256WithRSAEncryption 17:52:85:16:5b:80:2e:a8:f8:70:c3:3b:e4:1c:91:9c:29:94: af:89:23:50:2a:e7:cb:ce:7c:02:35:ff:eb:4c:87:0f:b1:18: 75:8b:57:b1:11:22:f6:a9:0d:07:f9:70:82:e0:55:01:95:a6: 41:46:37:af:5e:b1:6b:43:60:b5:84:58:7a:d6:ce:d2:c8:39: 2b:4a:99:b2:7c:3e:44:65:f9:c7:9b:ea:01:c6:51:0d:50:a5: 95:b3:81:f8:bf:58:89:11:03:e9:f9:6d:2f:88:72:22:59:63: 1a:7c:29:b4:2a:a0:c1:f3:44:18:04:20:c0:03:a8:c3:b4:0c: a5:41:31:80:b8:7e:0f:90:e6:54:91:27:44:79:70:24:a2:d8: 04:77:67:82:c2:7f:86:28:30:6c:2c:39:62:1e:5f:21:97:c8: b0:b3:c9:2c:fc:64:d6:80:ac:58:ca:05:3d:c3:c2:d9:21:51: 70:53:a6:0a:c1:f9:b6:a9:c0:35:9b:79:fd:0f:0a:ac:ce:34: 8e:0a:01:fe:d0:7e:4c:59:c8:90:cf:69:43:82:23:48:e9:ef: 4f:e8:68:c2:70:df:60:ec:f1:48:c1:65:18:13:0d:67:02:18: f3:03:c6:dd:1e:76:bb:c0:e9:2b:b3:4c:44:93:0d:23:67:e7: 42:8f:ef:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUClh+yRFVKk+PRw0kipolVVSckFIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANDRlNDA0MTI5YTAwYmJiOGQ4ZTNj ZGZkNDhlYWI2NTNhZmFiNDQ3MDdlM2E1ZDRiZTY5MTg2ZDc1MWIxMmQ5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f9uAfQRJbEhrNo6l5LwZ18OEeMQ jRutP+2kTQIAwyZq1hFop6G3vmKhojNqIyz/2sZyDAYxpDzKEvUszjmQzSUK/JHC NMiXPumNVdSilIUCGo1GUWEWnHCh8UlSigovHwNnB5G/FMzxiNBO0pjigZPH9qbW s66zOOj7CbbohPBEyEpoWiNHLFoPmEBS5eGGsHTZfwaNcyxP4dj0OxSvgDzTB+MU 0WOEA0dySNTwQ2PfEeRvkRRkezgcWfvW2r7ukX6OWycQiao4Tu8np1rP3Q4LyXcv +hYEhP20omRYcKaT6bnfsN53g8A4XLh17RCtyizvflgfefvW39eGHV9U3QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBp47RHezhKarLXf5UWFfTjtvoiwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNWY3Yzk2LWNiZjYtNGNkNy1hMmRhLTZjODZmZjAyOTY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8hAMA0GCSqGSIb3DQEBCwUAA4IBAQAXUoUWW4AuqPhwwzvk HJGcKZSviSNQKufLznwCNf/rTIcPsRh1i1exESL2qQ0H+XCC4FUBlaZBRjevXrFr Q2C1hFh61s7SyDkrSpmyfD5EZfnHm+oBxlENUKWVs4H4v1iJEQPp+W0viHIiWWMa fCm0KqDB80QYBCDAA6jDtAylQTGAuH4PkOZUkSdEeXAkotgEd2eCwn+GKDBsLDli Hl8hl8iws8ks/GTWgKxYygU9w8LZIVFwU6YKwfm2qcA1m3n9DwqszjSOCgH+0H5M WciQz2lDgiNI6e9P6GjCcN9g7PFIwWUYEw1nAhjzA8bdHna7wOkrs0xEkw0jZ+dC j+9r -----END CERTIFICATE-----Generated at Wed Feb 5 03:53:35 2025 by rpki-client