$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa File: 39e837a2-fed3-4fe3-959f-d22cb42598c4.roa (raw, json) Hash identifier: cWJqxWGC5DnwYza5ew23gWt9sQhXCvODUIpIxNGY9xw= Subject key identifier: B2:A1:41:6A:F6:98:A9:3E:3E:E3:EB:30:82:B9:76:BC:DB:EA:3A:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A0E6480336090BEF20AF2980C580F083060B2DE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0e:64:80:33:60:90:be:f2:0a:f2:98:0c:58:0f:08:30:60:b2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b0:69:77:d2:55:4a:cb:62:10:c5:e6:6c:ae: 69:da:4d:c5:9f:82:ea:23:17:56:4a:b9:80:10:79: ba:78:31:89:08:61:5a:23:f5:50:ea:df:04:62:03: 7e:89:66:4c:37:2c:93:b8:43:f8:28:1c:cd:5c:bf: e5:0e:ff:63:50:f3:41:45:ba:a6:47:9e:3a:7d:b5: 1f:a1:24:68:aa:29:d6:bc:0c:94:82:e4:72:0b:7f: b6:3c:2d:87:d4:80:96:53:5c:69:76:19:ee:d7:c0: 6a:9d:e5:c6:6d:19:b4:1f:01:5b:ef:62:bf:f8:bc: fe:2b:74:a7:19:7a:8a:13:2c:6a:e6:05:31:54:3d: 01:f8:eb:01:2a:e6:7f:1b:82:9a:b2:0a:61:bf:f4: 2f:8b:4d:08:6a:5b:73:fb:d7:f3:75:81:ac:73:f3: 79:eb:8f:cb:d6:4c:0c:79:87:ca:a3:99:0f:ad:3e: 25:a8:3c:25:db:a1:a7:26:88:75:53:03:37:6d:44: 85:30:c9:49:a1:8a:04:7f:9a:53:26:58:95:b6:71: 52:09:f7:05:2c:95:b8:48:59:67:c9:7e:30:12:fc: d9:0d:c5:cd:e4:2f:17:cb:ea:f4:86:c1:aa:54:5e: 88:ec:12:21:ac:62:e2:dd:37:ab:c2:44:97:a2:ab: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A1:41:6A:F6:98:A9:3E:3E:E3:EB:30:82:B9:76:BC:DB:EA:3A:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39e837a2-fed3-4fe3-959f-d22cb42598c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:2800::/40 Signature Algorithm: sha256WithRSAEncryption 45:6d:1b:b6:d1:b7:c1:58:42:db:81:72:82:24:8f:2a:31:86: 26:a6:f2:f7:d3:bd:5e:53:8b:50:a5:9c:63:99:9d:0f:96:b3: e2:9d:ca:d8:46:c0:e5:cb:87:44:d3:a5:be:da:ca:29:01:c6: e9:7b:49:34:4d:f4:4b:1d:fa:91:28:93:d0:c1:44:d4:9d:31: 53:86:d7:93:cf:6b:74:3d:52:81:36:88:91:eb:32:f7:ed:df: 76:47:58:fb:50:a4:f3:5d:44:c3:eb:f3:74:a8:f6:22:57:9a: eb:c8:fb:55:e5:e2:0e:d5:f2:33:dc:fd:63:1e:47:c9:b3:eb: dd:b2:a1:a1:94:2d:0b:6c:94:ef:d2:51:cf:8f:59:cb:98:5e: 0a:a1:d6:6d:fc:98:9b:1f:50:59:bd:46:4a:6b:87:a3:0c:1d: 51:de:39:bc:75:8f:83:15:e1:c0:91:b2:61:b8:02:b1:a9:23: e3:f4:ea:de:9e:ac:37:f3:4a:e3:7d:ee:ab:05:87:59:9a:4d: 52:d4:6b:6c:0f:d4:a6:f0:d0:4e:dc:35:8d:7a:f8:14:3b:6e: db:10:7c:4a:92:ba:b5:9e:08:4b:75:f2:f1:b5:6e:1f:6a:d6: 82:39:fb:70:83:fb:78:87:14:89:38:a0:d8:1d:4d:0e:fb:a9: 6a:df:56:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSg5kgDNgkL7yCvKYDFgPCDBgst4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANjc1YmY1MTY0YzcxNDlmMGMwMTdm MjEyYzM4Yjk1MGFiMmE3MmY0NTllZDM5ZjcyMDM3NjE0ZTUyNmRkZTU0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bBpd9JVSstiEMXmbK5p2k3Fn4Lq IxdWSrmAEHm6eDGJCGFaI/VQ6t8EYgN+iWZMNyyTuEP4KBzNXL/lDv9jUPNBRbqm R546fbUfoSRoqinWvAyUguRyC3+2PC2H1ICWU1xpdhnu18BqneXGbRm0HwFb72K/ +Lz+K3SnGXqKEyxq5gUxVD0B+OsBKuZ/G4Kasgphv/Qvi00Ialtz+9fzdYGsc/N5 64/L1kwMeYfKo5kPrT4lqDwl26GnJoh1UwM3bUSFMMlJoYoEf5pTJliVtnFSCfcF LJW4SFlnyX4wEvzZDcXN5C8Xy+r0hsGqVF6I7BIhrGLi3TerwkSXoqu68wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLKhQWr2mKk+PuPrMIK5drzb6jq1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5ZTgzN2EyLWZlZDMtNGZlMy05NTlmLWQyMmNiNDI1OThjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNigwDQYJKoZIhvcNAQELBQADggEBAEVtG7bRt8FYQtuBcoIk jyoxhiam8vfTvV5Ti1ClnGOZnQ+Ws+KdythGwOXLh0TTpb7ayikBxul7STRN9Esd +pEok9DBRNSdMVOG15PPa3Q9UoE2iJHrMvft33ZHWPtQpPNdRMPr83So9iJXmuvI +1Xl4g7V8jPc/WMeR8mz692yoaGULQtslO/SUc+PWcuYXgqh1m38mJsfUFm9Rkpr h6MMHVHeObx1j4MV4cCRsmG4ArGpI+P06t6erDfzSuN97qsFh1maTVLUa2wP1Kbw 0E7cNY16+BQ7btsQfEqSurWeCEt18vG1bh9q1oI5+3CD+3iHFIk4oNgdTQ77qWrf VoM= -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:24 2025 by rpki-client