$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json) Hash identifier: lo8zLs/3xKknELYeaaIylkgPyQSEKIdi/skCV0+iSwI= Subject key identifier: 3D:5D:B4:BB:97:E7:52:25:BE:33:B5:08:72:0E:A5:56:DF:BC:4C:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 656A3414A0411409D112E29CCDCA5CCF8B5A875B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa Signing time: Tue 14 Jan 2025 00:00:00 +0000 ROA not before: Tue 14 Jan 2025 00:00:00 +0000 ROA not after: Tue 18 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6a:34:14:a0:41:14:09:d1:12:e2:9c:cd:ca:5c:cf:8b:5a:87:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Jan 14 00:00:00 2025 GMT Not After : Feb 18 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:b3:b3:75:ae:2c:4d:7b:bd:ee:0e:5c:b8: 34:7a:67:66:36:d3:29:f6:dd:f4:55:22:ec:19:05: 44:bc:ee:4e:12:8e:00:a5:6e:3c:19:a9:32:4c:ee: c1:fc:19:6e:65:df:bd:86:3c:dd:1f:54:8d:2f:23: 2d:a0:9b:57:c4:d5:b0:14:d6:fc:04:7c:fe:40:bd: 30:e4:26:2a:83:bf:cb:27:26:e9:42:7c:c1:71:22: b0:b6:bd:d7:d4:7d:9d:3b:92:6a:b6:42:45:58:e3: 3a:70:0d:01:bd:3f:b7:f9:ab:b8:60:1e:1b:89:6c: e9:12:d7:74:f7:69:c6:b3:98:16:60:29:cc:4e:17: 55:82:0c:b0:ab:a8:8c:04:ab:5e:6d:12:7d:10:04: b7:4f:a4:3a:cd:01:1b:ae:e7:bb:ad:30:d5:ea:dc: fa:09:3c:d0:ad:b2:a3:b5:41:0a:01:86:5c:98:a6: 80:25:f5:2f:79:56:fa:08:40:8f:ef:16:49:00:46: de:dd:0f:42:03:32:b2:41:7f:0c:73:24:ce:4b:f2: 6d:b9:73:96:d3:6a:73:2c:74:03:b2:f0:59:e9:6b: fc:80:18:c9:3c:ca:9b:9e:21:6a:63:81:09:36:e2: d5:53:d8:b6:e9:62:f2:10:7f:ed:67:e5:cd:a0:7c: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:B4:BB:97:E7:52:25:BE:33:B5:08:72:0E:A5:56:DF:BC:4C:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption ba:5d:1e:22:bb:e4:06:68:ef:f1:54:5b:17:3d:1b:c8:3d:79: 60:e4:33:db:81:60:d3:19:5e:b7:9d:de:dc:96:af:f7:e5:72: eb:a3:3f:ca:2c:6f:6d:1c:01:cb:a4:8b:0e:cf:d8:73:88:54: 7f:f4:9d:6e:59:6d:a0:3c:bc:ec:8a:1f:99:e3:05:b9:b1:1f: 1a:de:d0:b2:33:0b:77:b7:a2:84:3d:ad:fa:86:29:d1:e1:85: f5:c4:ec:68:00:9f:74:28:ea:70:b6:f1:06:ef:fd:58:ed:bc: c6:ca:db:87:0d:82:8f:03:94:c3:6f:c7:10:71:5d:2b:87:ef: 18:fa:c4:9e:15:21:88:90:50:b0:a2:83:7a:05:53:db:c6:52: e7:a4:55:67:37:6e:68:0b:9c:cf:c0:0f:80:76:64:94:c2:7f: 76:44:20:88:1a:d6:12:66:7a:93:c5:32:2b:2c:43:b0:f4:e7: c8:6d:38:ce:46:fd:32:b5:76:7a:69:e6:1c:c5:2a:63:fd:f2: fd:bd:3e:8e:36:19:13:25:c6:7a:fb:1f:41:43:f0:98:ba:9e: 5c:fa:df:1f:dd:55:45:4d:49:bb:bc:12:80:1c:a4:85:e9:0a: 33:50:6a:3d:32:e6:8b:23:5e:75:61:e2:15:06:dc:db:2e:9f: 3a:9e:18:e7 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUZWo0FKBBFAnREuKczcpcz4tah1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExNDAwMDAwMFoX DTI1MDIxODIzNTk1OVowejFJMEcGA1UEBRNAMjgwMDNkY2JhMGMwNjc0NjUxOTQ2 NTIxZDk1NjUyMmNiNTlkZDg4ZTMyYmY0ODJmZTY4MjE4MmE0ODhiYjJkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAOzs3WuLE17ve4OXLg0emdmNtMp 9t30VSLsGQVEvO5OEo4ApW48GakyTO7B/BluZd+9hjzdH1SNLyMtoJtXxNWwFNb8 BHz+QL0w5CYqg7/LJybpQnzBcSKwtr3X1H2dO5JqtkJFWOM6cA0BvT+3+au4YB4b iWzpEtd092nGs5gWYCnMThdVggywq6iMBKtebRJ9EAS3T6Q6zQEbrue7rTDV6tz6 CTzQrbKjtUEKAYZcmKaAJfUveVb6CECP7xZJAEbe3Q9CAzKyQX8McyTOS/JtuXOW 02pzLHQDsvBZ6Wv8gBjJPMqbniFqY4EJNuLVU9i26WLyEH/tZ+XNoHxnTwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFD1dtLuX51IlvjO1CHIOpVbfvEygMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBALpdHiK75AZo7/FUWxc9G8g9 eWDkM9uBYNMZXred3tyWr/flcuujP8osb20cAcukiw7P2HOIVH/0nW5ZbaA8vOyK H5njBbmxHxre0LIzC3e3ooQ9rfqGKdHhhfXE7GgAn3Qo6nC28Qbv/VjtvMbK24cN go8DlMNvxxBxXSuH7xj6xJ4VIYiQULCig3oFU9vGUuekVWc3bmgLnM/AD4B2ZJTC f3ZEIIga1hJmepPFMissQ7D058htOM5G/TK1dnpp5hzFKmP98v29Po42GRMlxnr7 H0FD8Ji6nlz63x/dVUVNSbu8EoAcpIXpCjNQaj0y5osjXnVh4hUG3NsunzqeGOc= -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:41 2025 by rpki-client