$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f76ee34-fa5a-4beb-8181-8e57500dd1ae.roa File: 7f76ee34-fa5a-4beb-8181-8e57500dd1ae.roa (raw, json) Hash identifier: qYUS61TZsMrdgb34HS+9yB7c6/o+rmxjrUAub5l9f68= Subject key identifier: A8:F0:C0:BF:37:73:10:82:AE:94:DB:8C:0D:DA:C6:DE:A1:D3:3B:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2AC910031091B94F66198AF379DDF0DC28C4609D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f76ee34-fa5a-4beb-8181-8e57500dd1ae.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c9:10:03:10:91:b9:4f:66:19:8a:f3:79:dd:f0:dc:28:c4:60:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:91:e2:7e:99:37:e3:41:1d:ec:67:df:94: 85:69:0b:31:1a:4c:9b:dc:a4:90:9b:cd:fa:d0:88: f6:1f:20:17:cd:1e:8a:64:48:76:bd:93:dd:88:83: 6a:8c:fd:b7:bf:a0:28:1f:d8:10:a6:39:34:ec:80: 42:2f:45:b6:15:40:e9:e4:0d:9d:7d:01:61:3c:e6: 00:1c:12:fe:e3:db:53:1b:fc:f4:1f:00:a3:0d:62: 4a:32:51:c8:2c:1e:99:83:c7:5d:44:cd:be:8b:1b: 45:c8:c5:22:fc:2f:2a:9f:88:c1:f9:2e:a0:f8:67: 8d:dd:f4:8e:30:e2:e2:4b:49:0d:50:34:80:e1:aa: d4:49:09:82:57:01:d7:9f:02:b2:be:07:f1:fa:0e: 03:5c:96:a4:d3:04:40:d6:ba:f8:35:3c:88:9c:19: 99:92:78:5a:e2:1b:5d:d4:a2:54:d5:74:3f:db:75: 85:51:66:23:28:10:ba:6e:7c:75:d5:aa:62:9b:84: 12:bb:b0:31:f2:22:57:e2:36:ce:86:c8:c0:de:51: d8:f5:20:2e:b4:ac:6d:e3:e2:75:ff:1a:79:45:85: 5c:8f:d3:0a:70:82:1f:b1:2f:87:a9:12:23:06:f1: 0f:70:ea:5e:4d:f5:fc:a9:0f:db:10:46:e9:80:89: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:C0:BF:37:73:10:82:AE:94:DB:8C:0D:DA:C6:DE:A1:D3:3B:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f76ee34-fa5a-4beb-8181-8e57500dd1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e080::/48 Signature Algorithm: sha256WithRSAEncryption 13:87:b7:20:01:43:5e:3b:50:56:81:43:79:c0:48:8f:b4:75: af:ca:a0:f6:ed:4b:db:0f:3d:55:67:79:f1:82:2c:b1:6b:19: f3:93:26:a8:0a:68:ff:94:0e:30:d7:58:7c:c1:e4:47:e6:e5: 80:79:91:bf:4b:ee:6e:07:35:49:ba:22:39:1b:a6:61:3d:8c: 46:5c:e1:43:01:36:79:65:f2:34:ed:e3:37:cd:8f:35:fc:f2: 2b:90:de:1b:a3:88:77:20:e2:3c:0c:6e:c8:0b:43:66:39:d5: d8:d4:d1:e8:33:87:b2:91:b9:86:68:fa:0e:00:18:80:3f:47: 32:64:1d:0c:74:ab:b0:5a:b0:5c:b6:b0:ad:be:45:0a:3a:27: 6f:bf:81:aa:b8:a1:8b:06:10:f5:ac:db:22:39:55:cf:62:30: 8c:ed:47:65:6c:f2:5a:af:e7:3b:b2:bb:06:1a:0b:13:56:a8: 80:d5:c6:a9:6f:95:93:41:d5:c7:b4:e7:0f:d0:ed:15:b0:ce: 75:e0:91:62:ad:02:e9:f8:e4:50:26:71:81:51:01:8a:56:a3: ad:22:93:91:32:69:cf:fb:53:09:c1:2c:6d:28:4e:12:c6:79: 24:84:0f:e2:f3:12:81:53:6b:fe:0e:d5:35:06:af:7d:96:51: b7:16:6d:9a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKskQAxCRuU9mGYrzed3w3CjEYJ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAODNhNzQ1MjQxMzMzNGUxMjc1MjFl MTI2OWI4MTZhZmQ1MDk1ZDcxNTZmM2Y4NTU4OGU3NjgyZGZjMTkxNjE1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6R4n6ZN+NBHexn35SFaQsxGkyb 3KSQm8360Ij2HyAXzR6KZEh2vZPdiINqjP23v6AoH9gQpjk07IBCL0W2FUDp5A2d fQFhPOYAHBL+49tTG/z0HwCjDWJKMlHILB6Zg8ddRM2+ixtFyMUi/C8qn4jB+S6g +GeN3fSOMOLiS0kNUDSA4arUSQmCVwHXnwKyvgfx+g4DXJak0wRA1rr4NTyInBmZ knha4htd1KJU1XQ/23WFUWYjKBC6bnx11apim4QSu7Ax8iJX4jbOhsjA3lHY9SAu tKxt4+J1/xp5RYVcj9MKcIIfsS+HqRIjBvEPcOpeTfX8qQ/bEEbpgImBMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKjwwL83cxCCrpTbjA3axt6h0ztLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmNzZlZTM0LWZhNWEtNGJlYi04MTgxLThlNTc1MDBkZDFhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYeCAMA0GCSqGSIb3DQEBCwUAA4IBAQATh7cgAUNeO1BWgUN5 wEiPtHWvyqD27UvbDz1VZ3nxgiyxaxnzkyaoCmj/lA4w11h8weRH5uWAeZG/S+5u BzVJuiI5G6ZhPYxGXOFDATZ5ZfI07eM3zY81/PIrkN4bo4h3IOI8DG7IC0NmOdXY 1NHoM4eykbmGaPoOABiAP0cyZB0MdKuwWrBctrCtvkUKOidvv4GquKGLBhD1rNsi OVXPYjCM7UdlbPJar+c7srsGGgsTVqiA1capb5WTQdXHtOcP0O0VsM514JFirQLp +ORQJnGBUQGKVqOtIpORMmnP+1MJwSxtKE4SxnkkhA/i8xKBU2v+DtU1Bq99llG3 Fm2a -----END CERTIFICATE-----Generated at Wed Feb 5 04:09:30 2025 by rpki-client