$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa File: 7fbd42aa-d252-487d-808d-23e478a07d5e.roa (raw, json) Hash identifier: aTpwENOP0UQ24skHFCiWxchuo8GDiFYz1pvXguiC6F4= Subject key identifier: 49:E7:2F:3F:9D:EB:55:E6:7E:E0:71:3C:0B:90:66:CB:5B:6D:01:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3941A1389D5CD4AF3A2EB01EBBCD11EA4A6E521C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:41:a1:38:9d:5c:d4:af:3a:2e:b0:1e:bb:cd:11:ea:4a:6e:52:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:9a:99:01:97:92:16:43:7e:b6:8a:2b:f7: 5a:e4:26:f1:db:c5:4c:42:80:e3:c7:73:a5:09:52: 72:7f:d5:41:f8:18:a8:c9:fa:c5:36:79:47:df:a7: a2:2b:9e:20:ec:fc:27:47:2d:e8:09:35:38:72:39: da:b0:4b:3a:ee:bb:2d:4b:20:8b:24:2b:06:1e:97: 7d:40:77:93:25:b3:53:7a:97:d4:f3:a0:96:bc:78: 60:ae:7e:d2:c4:0e:c6:9e:d6:ee:76:9a:dd:96:63: fe:55:d4:dc:ef:72:d6:1a:e9:83:17:2b:2e:9a:19: c8:18:d2:53:c9:de:67:94:17:84:db:cf:01:b1:ef: 6d:58:2b:83:d8:20:2a:4f:8a:eb:eb:6d:dc:db:81: 93:4b:c5:a9:12:74:03:60:51:bd:67:c4:bf:eb:64: e3:df:3a:90:d2:54:44:12:b9:91:10:38:eb:8c:ce: f6:d3:98:96:56:5c:21:d4:54:35:03:62:cf:78:62: 7e:57:80:f7:87:b7:b2:74:89:a2:38:72:8e:3c:16: 2e:d5:58:ac:30:ab:9b:2c:17:67:28:c6:6d:0e:2a: ee:d7:b6:08:0d:e0:e0:20:6c:ab:ea:22:58:f6:cf: f0:84:76:b4:f2:f0:a9:1d:47:8d:e0:8a:06:c2:04: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E7:2F:3F:9D:EB:55:E6:7E:E0:71:3C:0B:90:66:CB:5B:6D:01:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b080::/48 Signature Algorithm: sha256WithRSAEncryption c6:d4:7e:41:c6:a7:53:8f:b7:b0:9f:a2:18:68:f6:94:3d:11: 29:87:0e:16:52:9a:ed:88:a0:14:04:ea:43:76:e0:6c:2a:25: 62:e6:3f:16:cb:65:50:e4:99:41:e2:c7:03:0a:76:7c:db:5b: b7:6c:61:71:2d:b2:ae:92:e9:f5:7f:3f:b8:dc:a6:e9:c2:a8: 01:37:87:71:1a:83:54:1a:a2:f4:d6:64:57:42:7d:26:48:f8: 8d:8f:de:0b:6a:f4:6b:43:8a:9c:48:60:6c:bb:90:c6:0f:f5: cc:9b:a5:de:09:10:eb:94:43:3e:98:9c:c8:59:7f:7e:e5:c8: 07:dd:d7:31:f1:6d:5b:91:3f:ef:33:75:0a:03:e4:e6:ea:be: 6c:8a:63:0a:0f:ad:d9:72:73:44:b5:ed:0d:3f:fd:b2:ff:c6: 53:ae:17:92:52:1a:4f:9b:f1:ed:8a:5a:29:a2:c3:3d:cf:b6: 36:c9:10:05:51:47:3d:f5:09:3c:7a:44:c0:6b:ed:52:0a:43: 31:dd:18:c0:1c:2b:82:75:d0:16:9a:d0:ad:30:a7:36:be:7a: ba:06:f4:ca:3f:73:27:7e:b4:e0:85:70:d6:7a:77:0b:85:0a: 9e:df:12:00:99:dd:b3:75:c2:f6:eb:05:20:18:04:12:d7:26: 3e:55:a3:75 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOUGhOJ1c1K86LrAeu80R6kpuUhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANmZlM2ZiMWY2ZjFlM2I3NTY0OGI4 MWRjYTQ3YzNlNTYzZTczNmQ0MWI2OWU0MTQ5NjAyYjNlZjYyMTU1OGM1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHaamQGXkhZDfraKK/da5Cbx28VM QoDjx3OlCVJyf9VB+BioyfrFNnlH36eiK54g7PwnRy3oCTU4cjnasEs67rstSyCL JCsGHpd9QHeTJbNTepfU86CWvHhgrn7SxA7GntbudprdlmP+VdTc73LWGumDFysu mhnIGNJTyd5nlBeE288Bse9tWCuD2CAqT4rr623c24GTS8WpEnQDYFG9Z8S/62Tj 3zqQ0lREErmREDjrjM7205iWVlwh1FQ1A2LPeGJ+V4D3h7eydImiOHKOPBYu1Vis MKubLBdnKMZtDiru17YIDeDgIGyr6iJY9s/whHa08vCpHUeN4IoGwgTP7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEnnLz+d61XmfuBxPAuQZstbbQEWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmYmQ0MmFhLWQyNTItNDg3ZC04MDhkLTIzZTQ3OGEwN2Q1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYbCAMA0GCSqGSIb3DQEBCwUAA4IBAQDG1H5BxqdTj7ewn6IY aPaUPREphw4WUprtiKAUBOpDduBsKiVi5j8Wy2VQ5JlB4scDCnZ821u3bGFxLbKu kun1fz+43KbpwqgBN4dxGoNUGqL01mRXQn0mSPiNj94LavRrQ4qcSGBsu5DGD/XM m6XeCRDrlEM+mJzIWX9+5cgH3dcx8W1bkT/vM3UKA+Tm6r5simMKD63ZcnNEte0N P/2y/8ZTrheSUhpPm/HtiloposM9z7Y2yRAFUUc99Qk8ekTAa+1SCkMx3RjAHCuC ddAWmtCtMKc2vnq6BvTKP3MnfrTghXDWencLhQqe3xIAmd2zdcL26wUgGAQS1yY+ VaN1 -----END CERTIFICATE-----Generated at Wed Feb 5 04:03:25 2025 by rpki-client