$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa File: 481fbcde-76c6-49f7-8633-8b13537bb9b4.roa (raw, json) Hash identifier: cJVkQtScm+/bIAh6v/tftMBrxg0+XG8JBCZs0D1fI1s= Subject key identifier: 48:6F:9C:34:41:41:AB:81:B7:7C:93:84:AC:07:A8:9C:B1:19:A2:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 600540DE2626016B5C13F70BE63E225C8584862F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:05:40:de:26:26:01:6b:5c:13:f7:0b:e6:3e:22:5c:85:84:86:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:12:9a:f5:ac:af:1a:63:a4:f0:e4:9b:1e: ca:85:03:20:ea:52:1a:7d:51:56:30:0a:61:58:58: 17:12:7e:91:5a:56:04:e3:0e:86:e9:2f:20:c1:58: f4:88:6a:d5:8f:f9:73:af:d8:5d:bb:96:7d:16:89: 30:67:ca:57:3f:53:53:57:1a:78:3d:37:01:04:c2: ca:8b:03:65:9b:c4:f7:9f:b3:75:50:f2:54:af:3a: 4d:b1:05:4d:95:21:0a:e4:17:ab:be:e6:6f:95:10: 32:3e:f8:6b:9b:c6:51:76:1a:09:58:9d:f2:33:b5: d8:21:ec:77:d4:b1:1e:f4:c9:2f:c1:94:8b:bb:4d: cf:26:1e:12:70:ff:95:7f:6c:66:39:55:b6:e3:a8: d9:8e:b7:38:cd:b3:6f:a8:c9:c2:98:85:3e:7a:b9: 04:a9:db:0a:af:84:f9:9b:e7:e3:54:95:11:74:9b: 9b:68:14:89:8f:ec:f2:77:5f:1d:dd:8e:4c:1e:e1: 45:20:78:f5:d9:95:c1:64:e4:f7:68:e5:4e:de:f9: 6d:35:79:32:34:3b:45:89:4f:80:0e:2c:d9:c3:e9: 6f:e6:43:a8:b6:ea:ab:b1:7d:36:9a:94:76:5c:55: 6a:bc:06:e1:be:a2:9a:3e:23:a8:3a:3e:1e:b0:79: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6F:9C:34:41:41:AB:81:B7:7C:93:84:AC:07:A8:9C:B1:19:A2:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4040::/46 Signature Algorithm: sha256WithRSAEncryption 59:43:46:d5:11:c9:e1:97:9b:ea:0d:41:44:ff:dd:b2:d3:52: 29:7f:a7:4f:9a:dd:12:16:42:53:1f:37:0d:34:db:69:f8:9c: 4e:36:3c:9f:00:4f:10:6b:45:59:64:cf:74:24:40:15:5b:62: a7:03:1b:bf:61:df:32:ab:ed:62:a5:a5:5e:d7:88:f9:dd:7e: 3e:e9:77:74:f7:e0:52:98:d3:4f:30:f9:f0:a5:b3:31:1f:42: 8e:4b:59:ff:ab:72:49:e5:0e:92:81:e9:74:83:20:bf:da:51: 7b:73:81:3b:2b:e1:b3:5b:d5:f6:f5:fe:a4:26:5c:5e:26:c5: 4d:91:bc:7d:29:2f:29:a2:09:d0:f6:f5:04:00:3a:4a:ed:54: 1d:28:03:2a:85:2c:80:f6:ba:1b:70:bb:20:41:3f:d7:64:14: a8:e3:65:1a:70:0c:28:e1:9e:4c:68:0b:14:30:e3:d1:46:f5: 41:45:c5:a7:2d:22:67:d9:c4:32:cf:eb:b0:5f:c4:54:44:ae: 77:81:99:1d:a9:45:4a:3c:42:76:c6:99:90:9a:95:88:cd:65: 10:2f:48:c2:a9:1d:6c:ba:bb:0f:5b:69:2d:e6:89:a2:c2:6f: 91:5c:7a:cd:63:2d:ee:55:6d:25:f3:f6:80:ff:2a:4e:6a:5d: e4:19:b5:46 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYAVA3iYmAWtcE/cL5j4iXIWEhi8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAOTY0NDg1MjY2MmQzNTU4NGU5YzQ3 YjRlNTEwNGI1MzI0YTNjNjcwZWYzMDdhMjllMDdiYjQyYmFiNTc4OWZkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y4SmvWsrxpjpPDkmx7KhQMg6lIa fVFWMAphWFgXEn6RWlYE4w6G6S8gwVj0iGrVj/lzr9hdu5Z9FokwZ8pXP1NTVxp4 PTcBBMLKiwNlm8T3n7N1UPJUrzpNsQVNlSEK5BervuZvlRAyPvhrm8ZRdhoJWJ3y M7XYIex31LEe9MkvwZSLu03PJh4ScP+Vf2xmOVW246jZjrc4zbNvqMnCmIU+erkE qdsKr4T5m+fjVJURdJubaBSJj+zyd18d3Y5MHuFFIHj12ZXBZOT3aOVO3vltNXky NDtFiU+ADizZw+lv5kOotuqrsX02mpR2XFVqvAbhvqKaPiOoOj4esHnF7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEhvnDRBQauBt3yThKwHqJyxGaL2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4MWZiY2RlLTc2YzYtNDlmNy04NjMzLThiMTM1MzdiYjliNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaUBAMA0GCSqGSIb3DQEBCwUAA4IBAQBZQ0bVEcnhl5vqDUFE /92y01Ipf6dPmt0SFkJTHzcNNNtp+JxONjyfAE8Qa0VZZM90JEAVW2KnAxu/Yd8y q+1ipaVe14j53X4+6Xd09+BSmNNPMPnwpbMxH0KOS1n/q3JJ5Q6Sgel0gyC/2lF7 c4E7K+GzW9X29f6kJlxeJsVNkbx9KS8pognQ9vUEADpK7VQdKAMqhSyA9robcLsg QT/XZBSo42UacAwo4Z5MaAsUMOPRRvVBRcWnLSJn2cQyz+uwX8RURK53gZkdqUVK PEJ2xpmQmpWIzWUQL0jCqR1sursPW2kt5omiwm+RXHrNYy3uVW0l8/aA/ypOal3k GbVG -----END CERTIFICATE-----Generated at Wed Feb 5 03:50:47 2025 by rpki-client