$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa File: 8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa (raw, json) Hash identifier: QYIPvv3K1C+qkWyOHaryIZ0Ay1G1m+ftGQbFyVsONhg= Subject key identifier: 77:07:BE:42:A1:A0:84:24:B2:FD:5F:B8:77:FF:69:E8:ED:B5:BE:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E9F485DB64269EFBEC5F98AAD2474E2097EC3F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9f:48:5d:b6:42:69:ef:be:c5:f9:8a:ad:24:74:e2:09:7e:c3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:38:b7:d5:af:c9:ed:2d:d2:4b:a9:c9:f8: 35:9d:3f:21:cd:dd:21:28:de:7a:34:c6:1d:83:d1: 96:ba:8e:ec:48:38:18:3f:c9:6c:a6:6a:95:ca:7b: 6d:83:96:38:fb:ae:ce:ed:fe:93:13:57:df:dd:b5: 52:38:62:d0:c2:94:64:b1:55:9b:18:cc:f0:53:c9: 04:c5:ff:2e:0d:82:8e:a2:f4:04:a4:ad:e9:c0:82: f4:c2:2b:6b:8f:d7:c1:a1:6d:77:7c:1b:9e:33:80: 92:0f:55:88:1b:6c:f5:5e:38:a6:ff:42:e0:60:28: db:19:13:9d:a6:d7:44:4c:db:0c:3e:21:6a:43:45: 06:0e:11:d8:f5:d9:d1:d8:dd:75:55:6d:4f:25:e1: 76:10:29:be:6f:35:5a:f4:7b:d6:3a:a5:66:eb:a8: 3e:dd:75:dd:a7:d5:8f:25:2e:40:2c:02:25:9a:f7: 67:80:b4:9d:72:6a:1f:4f:b4:70:98:4c:a6:be:61: 47:9c:4c:d1:6d:78:4d:53:5b:04:33:be:b9:11:5c: 2f:49:1b:4c:8c:d9:eb:6e:cb:5a:28:b0:0e:97:0e: ec:85:aa:fb:42:6a:6d:3c:04:ea:29:2f:80:58:2e: 7d:6c:a6:06:5c:42:8b:8f:83:a1:5c:aa:ae:85:69: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:07:BE:42:A1:A0:84:24:B2:FD:5F:B8:77:FF:69:E8:ED:B5:BE:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 79:9a:6d:e3:00:9e:0f:09:13:ec:c0:1d:c1:2e:86:7b:2a:49: b8:10:ab:6b:97:fb:4c:2a:0d:4b:e8:5c:e6:78:89:90:7c:0d: cb:32:d1:9f:32:28:db:83:d0:99:d0:8c:50:23:70:8a:af:bc: 9b:a4:65:dd:64:8c:bf:d6:da:4a:1d:70:89:b5:06:e3:71:c9: 8f:93:e4:74:d5:e0:c5:2d:78:36:76:3d:20:15:54:61:73:d4: 38:33:5c:cc:68:ff:6e:2d:f7:26:12:7a:71:c9:eb:1e:e6:bf: 5e:46:76:cd:d5:34:19:ee:f1:35:ea:6e:2f:d7:db:24:49:aa: 04:99:df:ed:3b:a7:0a:93:0b:31:c8:55:48:3b:3b:78:76:79: b0:e3:70:37:3e:5b:85:01:77:d7:bc:43:ee:a0:58:d4:7b:78: a7:1c:7c:8d:ac:dc:67:fe:57:31:2c:83:25:1e:4b:58:fd:64: 9d:87:14:ee:a4:33:00:8e:1d:a6:68:79:26:1d:f7:f0:55:b2: 13:35:72:fb:38:34:dc:82:c2:af:4a:e1:ea:73:1f:6b:0f:43: 0b:b4:a7:e9:e5:c7:95:a0:08:be:76:ba:ae:07:3f:d3:1a:35: a8:a4:3e:a8:55:21:3f:fc:58:2e:09:e8:ca:d8:0f:d0:eb:2a: d3:cd:0c:e6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPp9IXbZCae++xfmKrSR04gl+w/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNANjA4YmFlODIwZGE0OTQyODc1MDM5 NmM5M2E0MGZkY2E2YTU3OWZhY2MxMzcxMGQ0N2M1ZTRmZTIwNTVjN2VjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0g4t9Wvye0t0kupyfg1nT8hzd0h KN56NMYdg9GWuo7sSDgYP8lspmqVynttg5Y4+67O7f6TE1ff3bVSOGLQwpRksVWb GMzwU8kExf8uDYKOovQEpK3pwIL0witrj9fBoW13fBueM4CSD1WIG2z1Xjim/0Lg YCjbGROdptdETNsMPiFqQ0UGDhHY9dnR2N11VW1PJeF2ECm+bzVa9HvWOqVm66g+ 3XXdp9WPJS5ALAIlmvdngLSdcmofT7RwmEymvmFHnEzRbXhNU1sEM765EVwvSRtM jNnrbstaKLAOlw7shar7QmptPATqKS+AWC59bKYGXEKLj4OhXKquhWnyiwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHcHvkKhoIQksv1fuHf/aejttb7tMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiY2VjY2E0LTI2NDMtNDQwNi1iYmY0LWU1ZTlmNjM3ODZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7DAMA0GCSqGSIb3DQEBCwUAA4IBAQB5mm3jAJ4PCRPswB3B LoZ7Kkm4EKtrl/tMKg1L6FzmeImQfA3LMtGfMijbg9CZ0IxQI3CKr7ybpGXdZIy/ 1tpKHXCJtQbjccmPk+R01eDFLXg2dj0gFVRhc9Q4M1zMaP9uLfcmEnpxyese5r9e RnbN1TQZ7vE16m4v19skSaoEmd/tO6cKkwsxyFVIOzt4dnmw43A3PluFAXfXvEPu oFjUe3inHHyNrNxn/lcxLIMlHktY/WSdhxTupDMAjh2maHkmHffwVbITNXL7ODTc gsKvSuHqcx9rD0MLtKfp5ceVoAi+drquBz/TGjWopD6oVSE//FguCejK2A/Q6yrT zQzm -----END CERTIFICATE-----Generated at Wed Feb 5 03:53:38 2025 by rpki-client