$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa File: 3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa (raw, json) Hash identifier: cYP+Sb01874Vvcn3c523JuxT22lV1B3RVm1BU4szdsI= Subject key identifier: 7B:E7:2F:4B:62:E6:92:8E:53:5D:C3:0D:4F:BC:B2:74:80:D6:20:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4239E174E1ADF7A447F2A971C8C86183668E8DC7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:39:e1:74:e1:ad:f7:a4:47:f2:a9:71:c8:c8:61:83:66:8e:8d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:db:33:c5:83:03:fc:bf:1c:98:30:77:d6:7e: da:a6:29:e5:64:9f:7e:19:79:c4:4a:5e:2e:f9:a5: d4:a8:f3:3b:08:5e:83:8a:73:2a:31:07:22:1f:11: 10:3b:26:1b:13:9e:6d:7d:e7:f6:07:35:08:28:0f: 7e:7e:9b:bc:6e:55:8d:a1:5c:4d:c0:24:18:f3:82: 09:7b:7e:84:1a:69:fa:24:19:20:18:4d:72:d9:37: 09:0c:37:92:94:3a:8e:73:8a:af:ac:77:e0:d0:06: 36:52:29:2e:68:c4:86:0d:5f:ff:36:92:e5:01:c8: 81:2f:32:3d:8f:e8:ce:20:3d:53:0b:7b:70:b4:8b: 00:52:a3:7e:4c:6e:98:b9:b6:aa:fc:71:a8:4f:97: 85:ce:4d:64:c3:39:80:bc:81:0b:77:45:50:e8:d3: 13:5e:35:9f:73:4c:6d:23:6f:d4:8a:dc:a7:7f:3a: ef:f9:b4:aa:6d:88:49:0d:e4:f6:bc:75:9c:fb:25: d5:b5:c8:d5:5a:b3:02:14:10:e1:a0:77:3b:0b:e4: 30:9a:8e:86:b4:82:d8:78:7c:82:3c:fd:48:25:7c: 0c:3b:be:68:b8:b0:a7:04:5d:5d:ec:7f:1b:a1:1c: 23:49:49:ec:27:45:a8:9c:a8:d2:94:51:ca:d3:72: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E7:2F:4B:62:E6:92:8E:53:5D:C3:0D:4F:BC:B2:74:80:D6:20:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:f000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:bf:d7:5c:35:c2:e1:97:69:9f:0a:e6:7c:cf:4e:41:fd:83: 32:7c:4f:4b:a8:23:ff:9a:67:12:96:8d:89:2e:e8:a6:b7:ed: 8f:f6:a3:d2:6f:f7:8c:b2:34:9c:38:61:10:bc:8f:32:36:89: ef:7f:ba:3d:d8:91:e3:9a:dd:0c:21:e6:61:d1:63:48:2c:0d: c2:ca:ac:c0:89:e3:0b:ea:b2:f9:b0:24:a9:c7:a6:23:2b:63: 0a:d1:83:c4:71:c2:24:6e:f0:d1:59:e5:c0:82:fb:07:01:52: fe:af:81:28:d3:21:16:2e:d3:c8:92:d2:25:37:a3:90:0a:9f: 01:83:fd:f9:bc:b5:fa:a2:99:5d:f5:dd:95:70:ad:5b:9d:86: f2:96:55:16:61:63:2f:40:c4:92:da:b2:ec:44:00:4d:6c:04: 81:45:91:91:82:6b:70:63:71:19:f4:37:a8:a5:0f:93:6c:20: 59:68:a7:ad:0a:ff:9d:d3:92:15:8e:bb:a7:23:b6:4f:0d:74: 00:8a:2a:ce:0d:d5:be:75:c6:d4:5a:0e:8e:f2:f0:f8:b7:62: 75:e1:8a:9e:ca:8a:f5:7d:68:65:02:a8:d0:75:70:97:9c:e0: d3:b9:b6:aa:16:19:08:b9:9d:47:e2:b2:4b:be:15:96:6a:e4: 55:b5:c1:22 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQjnhdOGt96RH8qlxyMhhg2aOjccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANmFkMDJhNWVhYzVmOTczMjFjMzdl N2UwMzBlZjI1NzE3ZTA3YWY1N2FkNTVhZjBlYzdkZWVkNmRmMDhmMzgzNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dszxYMD/L8cmDB31n7apinlZJ9+ GXnESl4u+aXUqPM7CF6DinMqMQciHxEQOyYbE55tfef2BzUIKA9+fpu8blWNoVxN wCQY84IJe36EGmn6JBkgGE1y2TcJDDeSlDqOc4qvrHfg0AY2UikuaMSGDV//NpLl AciBLzI9j+jOID1TC3twtIsAUqN+TG6Yubaq/HGoT5eFzk1kwzmAvIELd0VQ6NMT XjWfc0xtI2/Uitynfzrv+bSqbYhJDeT2vHWc+yXVtcjVWrMCFBDhoHc7C+Qwmo6G tILYeHyCPP1IJXwMO75ouLCnBF1d7H8boRwjSUnsJ0WonKjSlFHK03ITJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHvnL0ti5pKOU13DDU+8snSA1iA9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhYTE5N2M0LWFkNTItNGRiZC05Y2JlLTY3OTkwMjUzY2JmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNvAwDQYJKoZIhvcNAQELBQADggEBAF6/11w1wuGXaZ8K5nzP TkH9gzJ8T0uoI/+aZxKWjYku6Ka37Y/2o9Jv94yyNJw4YRC8jzI2ie9/uj3YkeOa 3Qwh5mHRY0gsDcLKrMCJ4wvqsvmwJKnHpiMrYwrRg8RxwiRu8NFZ5cCC+wcBUv6v gSjTIRYu08iS0iU3o5AKnwGD/fm8tfqimV313ZVwrVudhvKWVRZhYy9AxJLasuxE AE1sBIFFkZGCa3BjcRn0N6ilD5NsIFlop60K/53TkhWOu6cjtk8NdACKKs4N1b51 xtRaDo7y8Pi3YnXhip7KivV9aGUCqNB1cJec4NO5tqoWGQi5nUfisku+FZZq5FW1 wSI= -----END CERTIFICATE-----Generated at Wed Feb 5 04:02:14 2025 by rpki-client