$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b49e771-8c61-46ae-95d2-9d6609249da0.roa File: 3b49e771-8c61-46ae-95d2-9d6609249da0.roa (raw, json) Hash identifier: eQRS4jytVssZ9QvCmUznvE0JNhNgEd71lfC6lvTuvdA= Subject key identifier: B3:57:3F:FC:DF:66:34:4B:1F:03:67:99:95:DE:6B:74:DF:52:09:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 779166B7FC544500AA081059738BBB748E622CA6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b49e771-8c61-46ae-95d2-9d6609249da0.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:91:66:b7:fc:54:45:00:aa:08:10:59:73:8b:bb:74:8e:62:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:42:c1:67:0f:07:aa:69:8c:b0:36:ab:60: 58:27:6f:e1:9b:44:5a:20:6c:48:02:e7:9e:6e:38: 1e:d6:4d:04:d0:f1:00:b5:c2:e0:01:51:3e:76:60: 46:c3:4a:31:67:1d:04:81:94:e3:88:a1:22:41:56: f3:59:6f:a0:26:a2:c8:70:51:dc:85:c8:9f:4e:84: 47:a4:f3:46:ea:0d:07:2b:d5:a3:2d:25:77:8c:41: 3d:ca:1a:41:7c:f8:b9:56:1a:4b:c0:25:28:c3:59: 2c:cc:2a:25:10:0f:58:99:9c:1e:ab:d0:8e:79:4b: c2:d7:e9:3b:7f:33:96:8f:1b:a1:f7:6e:e1:3d:0c: b1:a4:8b:34:1b:92:03:bd:30:0d:a4:d9:b1:f8:53: c7:e8:43:ee:1b:4a:b3:7f:3f:62:f6:b4:49:94:0d: f6:35:97:0b:9f:e8:b3:cf:31:35:61:73:93:f1:34: 89:10:7e:0e:23:7c:42:a0:36:b2:87:23:0e:ca:a9: 76:63:f5:b7:9a:f0:b4:d4:90:e1:61:57:53:83:82: 20:30:6e:48:c8:2e:17:37:90:ad:de:fe:41:39:09: 3e:22:9b:e1:fc:2a:90:29:cb:71:20:d6:79:34:d8: 3f:5b:e8:14:be:6c:01:5e:a1:49:b6:3f:6a:c9:71: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:57:3F:FC:DF:66:34:4B:1F:03:67:99:95:DE:6B:74:DF:52:09:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b49e771-8c61-46ae-95d2-9d6609249da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:800::/38 Signature Algorithm: sha256WithRSAEncryption 5d:05:bc:1c:83:eb:63:55:36:c5:2f:e9:7d:41:5f:b2:78:92: 2f:33:bd:b5:16:36:92:44:ed:f6:b1:0e:21:b1:d5:94:3a:c2: d9:b8:02:d3:f1:5d:4b:ca:2b:14:c4:bc:88:a2:c1:54:b2:59: 2e:c4:82:be:84:aa:03:85:08:05:70:28:49:8a:83:2b:6d:d6: 55:16:83:f1:35:4b:97:d6:2e:b6:06:f2:d8:8c:fb:14:85:61: 31:a7:4c:3c:c5:98:47:21:fd:7f:4c:39:bd:83:a6:9e:66:04: 36:69:d0:54:e5:cb:fc:aa:bd:c1:20:90:6c:a0:2b:59:10:b2: a3:c4:82:cd:db:ac:b3:a7:20:ec:9e:d0:e0:fa:7e:55:b8:fc: 77:27:07:4a:59:e6:e7:2a:9f:a4:c7:f1:42:46:cc:1a:78:39: 08:60:fb:6b:6f:20:cf:a2:49:4b:7e:af:d7:42:9a:1f:ab:51: b0:62:e0:e1:17:ca:96:b2:b7:7a:90:05:73:4d:7a:82:68:aa: 21:c5:26:3c:0c:53:59:69:65:24:f3:36:cd:33:10:1c:30:30: 7f:48:0f:06:03:4f:8e:84:fd:c0:16:1d:22:fd:4a:74:10:ff: c1:2b:9f:a2:4f:31:2a:a2:fc:7c:0c:b1:f4:c9:ca:57:5d:a0: 3a:1c:0c:cc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd5Fmt/xURQCqCBBZc4u7dI5iLKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAOWU2NWYwYjRjZDYyMTdhODBiNTZk N2NmYzViZDExOTU5NDU4NTU0ODY5MTU3ZDc2NDNhYzM1ZjZiODYzYTYyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IlCwWcPB6ppjLA2q2BYJ2/hm0Ra IGxIAueebjge1k0E0PEAtcLgAVE+dmBGw0oxZx0EgZTjiKEiQVbzWW+gJqLIcFHc hcifToRHpPNG6g0HK9WjLSV3jEE9yhpBfPi5VhpLwCUow1kszColEA9YmZweq9CO eUvC1+k7fzOWjxuh927hPQyxpIs0G5IDvTANpNmx+FPH6EPuG0qzfz9i9rRJlA32 NZcLn+izzzE1YXOT8TSJEH4OI3xCoDayhyMOyql2Y/W3mvC01JDhYVdTg4IgMG5I yC4XN5Ct3v5BOQk+Ipvh/CqQKctxINZ5NNg/W+gUvmwBXqFJtj9qyXF5xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLNXP/zfZjRLHwNnmZXea3TfUgnAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiNDllNzcxLThjNjEtNDZhZS05NWQyLTlkNjYwOTI0OWRhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQgwDQYJKoZIhvcNAQELBQADggEBAF0FvByD62NVNsUv6X1B X7J4ki8zvbUWNpJE7faxDiGx1ZQ6wtm4AtPxXUvKKxTEvIiiwVSyWS7Egr6EqgOF CAVwKEmKgytt1lUWg/E1S5fWLrYG8tiM+xSFYTGnTDzFmEch/X9MOb2Dpp5mBDZp 0FTly/yqvcEgkGygK1kQsqPEgs3brLOnIOye0OD6flW4/HcnB0pZ5ucqn6TH8UJG zBp4OQhg+2tvIM+iSUt+r9dCmh+rUbBi4OEXypayt3qQBXNNeoJoqiHFJjwMU1lp ZSTzNs0zEBwwMH9IDwYDT46E/cAWHSL9SnQQ/8Ern6JPMSqi/HwMsfTJylddoDoc DMw= -----END CERTIFICATE-----Generated at Wed Feb 5 04:06:58 2025 by rpki-client