$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa File: 55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa (raw, json) Hash identifier: XmZddn1ZR8uLJNEwu4yNLH020n4foPkBXTDzsD+skck= Subject key identifier: 73:8D:B7:04:A2:A5:D3:44:44:0C:28:9B:7F:2E:CD:00:D5:19:D8:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B7AA224B33C4DB32C5319B7F94E6414AD7F5E40 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7a:a2:24:b3:3c:4d:b3:2c:53:19:b7:f9:4e:64:14:ad:7f:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:af:ed:d6:3f:d0:f8:eb:df:39:11:62:62: 9a:90:0f:64:26:c6:29:da:cc:9a:91:73:bb:86:c2: fa:86:09:38:22:5d:d5:b8:6b:bd:df:74:3b:90:f9: ac:4c:ee:8e:d3:f7:35:95:d3:42:3c:e6:a1:20:9a: 3a:31:db:e1:cf:55:2f:37:e2:96:d6:77:10:93:a8: 59:4b:37:3c:58:39:f4:e5:0d:85:be:0a:30:08:b6: d0:e4:47:93:e2:bb:12:86:1f:23:84:c7:6f:2c:5e: 4a:0d:d8:40:35:36:65:7a:47:af:82:58:68:77:ed: 09:d0:45:d3:ed:c0:aa:ca:45:28:30:55:0d:fc:89: 2d:99:8e:5a:a0:2c:07:f3:8e:b4:b8:70:64:2c:18: 45:21:51:3f:f9:d9:9a:88:e6:74:fd:17:ce:18:a1: f6:d7:59:d9:08:6d:9b:a8:c3:42:b5:21:1a:7c:56: a3:76:ce:d6:5b:5b:bf:43:2e:14:84:6b:03:a9:37: 66:a9:e1:ca:c4:be:fc:f0:24:9c:86:84:7a:87:1d: c1:6a:34:53:7d:44:95:2d:cc:4a:03:45:fb:33:f7: 85:1b:55:76:53:38:be:8a:da:04:5e:dc:e0:ce:47: 1b:e0:60:38:36:06:e9:23:ed:56:93:81:b2:60:de: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:B7:04:A2:A5:D3:44:44:0C:28:9B:7F:2E:CD:00:D5:19:D8:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4880::/48 Signature Algorithm: sha256WithRSAEncryption 60:59:bd:c4:e1:d7:5a:73:c2:c8:e9:5d:7f:ac:39:60:ac:a5: 1c:26:4a:6f:39:59:02:01:c6:3d:fe:6b:03:7d:ec:c2:12:9c: aa:ab:d9:33:25:b3:4f:7f:d6:1f:d1:52:3f:39:3c:49:16:83: da:a2:99:6a:01:4c:f5:36:fe:e1:b2:5b:c6:7a:b4:38:8c:7f: eb:d7:73:d8:6a:c8:52:b9:f3:bd:b8:0b:a7:3c:a2:01:bc:1b: fd:51:9b:45:a8:44:cc:3e:78:bc:b6:cc:36:eb:55:12:9c:df: 43:c7:c9:09:84:59:6d:91:43:65:9f:a4:fd:61:32:c9:b7:93: c1:8c:ce:cb:01:f1:3c:45:b0:e7:d4:e1:5d:e1:8e:de:b4:9d: 09:04:20:6b:69:ea:d1:0a:75:e4:0b:58:0d:9c:b6:8c:8e:8d: e0:6f:de:bf:81:e7:0b:aa:b5:c0:78:2e:7c:26:41:0f:62:b4: 85:fa:2e:8e:b2:24:37:84:79:3e:db:33:89:7c:02:10:8c:db: 06:b2:e2:7c:2f:08:58:6e:25:6c:3d:08:3e:3e:4d:25:02:05: 27:1b:8e:89:7b:22:33:07:fc:92:46:d3:1e:9c:11:0f:4c:3b: 27:ff:fa:8d:af:5e:1e:8e:37:6b:fd:91:43:9f:2b:4e:84:69: db:e6:b8:b7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUO3qiJLM8TbMsUxm3+U5kFK1/XkAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZjBmNTZmY2ZhYTZkYTViNzI0Y2Vh ODdiZjUwZmFiN2M0NDg1ZWJlNWRhMTU0NjZjNTNlNTU0MzBkOTExMzk2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ6v7dY/0Pjr3zkRYmKakA9kJsYp 2syakXO7hsL6hgk4Il3VuGu933Q7kPmsTO6O0/c1ldNCPOahIJo6Mdvhz1UvN+KW 1ncQk6hZSzc8WDn05Q2FvgowCLbQ5EeT4rsShh8jhMdvLF5KDdhANTZlekevglho d+0J0EXT7cCqykUoMFUN/IktmY5aoCwH8460uHBkLBhFIVE/+dmaiOZ0/RfOGKH2 11nZCG2bqMNCtSEafFajds7WW1u/Qy4UhGsDqTdmqeHKxL788CSchoR6hx3BajRT fUSVLcxKA0X7M/eFG1V2Uzi+itoEXtzgzkcb4GA4NgbpI+1Wk4GyYN4t6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHONtwSipdNERAwom38uzQDVGdhlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1NzEyYmQ0LWFmNjgtNGQ4MS1iMGI0LTBlOWMwODcwMGE1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUiAMA0GCSqGSIb3DQEBCwUAA4IBAQBgWb3E4ddac8LI6V1/ rDlgrKUcJkpvOVkCAcY9/msDfezCEpyqq9kzJbNPf9Yf0VI/OTxJFoPaoplqAUz1 Nv7hslvGerQ4jH/r13PYashSufO9uAunPKIBvBv9UZtFqETMPni8tsw261USnN9D x8kJhFltkUNln6T9YTLJt5PBjM7LAfE8RbDn1OFd4Y7etJ0JBCBraerRCnXkC1gN nLaMjo3gb96/gecLqrXAeC58JkEPYrSF+i6OsiQ3hHk+2zOJfAIQjNsGsuJ8LwhY biVsPQg+Pk0lAgUnG46JeyIzB/ySRtMenBEPTDsn//qNr14ejjdr/ZFDnytOhGnb 5ri3 -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:51 2025 by rpki-client