$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d77916-88a8-437e-b451-0d53bdaea4bd.roa File: 91d77916-88a8-437e-b451-0d53bdaea4bd.roa (raw, json) Hash identifier: 6xw8dPUOH73wVwbrZ0Uo4WyRssRKZQHsQL3gBCOnY0E= Subject key identifier: 0E:67:AF:AE:41:EF:E7:49:61:2A:6F:AF:18:AF:BD:21:6D:25:04:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1640B0C6C21F1D84EC19EB86A7CFB6379DB96480 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d77916-88a8-437e-b451-0d53bdaea4bd.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:40:b0:c6:c2:1f:1d:84:ec:19:eb:86:a7:cf:b6:37:9d:b9:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3d:71:0d:bb:e9:4a:53:aa:5e:8e:a8:29:ee: e4:d9:e0:2c:1d:44:1c:6f:61:9b:36:6b:87:88:3f: 55:59:d3:20:33:2b:c7:3c:fd:9d:e6:e3:c6:d2:d0: c1:0e:bc:47:a4:c3:ea:68:90:f3:44:87:6a:ba:e5: 21:8a:4f:82:20:e5:33:cd:a0:fc:84:76:e4:14:ed: b4:88:ed:08:25:b5:3a:6f:d4:b3:aa:7a:bb:f3:8b: 26:06:b7:f5:5d:db:8b:59:5b:c2:fb:71:d8:61:31: 06:55:a5:48:56:55:4f:2a:0b:12:88:15:84:90:52: 01:ca:be:f0:25:e8:76:3d:aa:59:05:11:e7:48:69: dc:33:3a:22:b1:38:00:e5:42:50:21:ab:0b:ac:d2: cb:25:79:92:93:df:e0:a2:6a:d2:40:8e:e2:47:19: 65:dc:28:f0:bb:86:24:a6:10:3b:e7:42:05:12:e2: 7c:b6:e1:c3:e4:a0:7f:17:bb:14:bc:31:eb:79:8c: 83:15:7c:60:f7:56:c0:f4:36:b0:9b:9d:ee:54:eb: 0d:f1:5e:b3:b5:83:dc:82:b7:25:d1:13:52:01:b6: ea:a6:bb:6e:cb:84:7e:84:6d:92:0d:72:a6:c1:aa: be:ec:fd:d4:a0:6a:58:2e:d6:66:d5:c4:c1:05:70: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:67:AF:AE:41:EF:E7:49:61:2A:6F:AF:18:AF:BD:21:6D:25:04:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d77916-88a8-437e-b451-0d53bdaea4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:4a:f1:c2:63:5c:9c:1f:52:79:ef:62:d7:1f:ad:ca:f5:2c: 9d:91:10:bf:2a:25:8a:3c:e7:96:23:0f:e1:7e:b7:7c:10:31: 2a:19:8b:26:6f:b3:12:27:f1:35:1a:3b:07:7e:77:6b:db:d7: 1c:b2:47:a5:16:18:3c:c0:1d:3d:6c:23:3c:c1:12:dc:9e:45: d4:ee:e4:3a:e6:b5:8a:81:31:de:8f:bb:99:8d:8e:17:5d:da: 8f:2a:ad:3e:e8:e7:34:2a:cf:ca:76:c1:1c:a9:6c:9a:4f:2e: 1e:8e:09:37:68:ed:b6:cc:e5:f7:17:3f:86:f0:1a:6e:56:d1: f0:01:86:9f:df:20:39:9f:dc:3e:9d:65:08:97:7d:46:dd:e4: b8:80:b1:cc:6c:ab:27:31:fd:ef:0e:e3:9b:d4:e4:7f:d2:93: f6:88:5a:a8:60:71:ec:ad:b9:80:28:32:3b:70:ba:78:1a:ac: 6e:de:23:10:76:d2:20:40:87:b0:eb:4a:dd:7e:5e:27:03:2f: 80:df:54:96:11:32:e5:85:f5:15:89:02:85:3c:66:e0:98:8c: 1b:f0:02:6b:5a:84:84:a9:3b:46:03:2c:4f:70:a9:26:e0:4d: 33:76:81:b8:75:01:c7:1f:41:cf:63:10:3d:30:3c:b3:fe:b3: 7c:b3:05:1b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFkCwxsIfHYTsGeuGp8+2N525ZIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZjVkYzkyMDcxNDk5NTEzOTFlM2E2 MzJhN2ZjYWM0NDZkZTdlMjdhMTEzMDUwNzY3ZWMxYThlMzMxMzk2MGM4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T1xDbvpSlOqXo6oKe7k2eAsHUQc b2GbNmuHiD9VWdMgMyvHPP2d5uPG0tDBDrxHpMPqaJDzRIdquuUhik+CIOUzzaD8 hHbkFO20iO0IJbU6b9Szqnq784smBrf1XduLWVvC+3HYYTEGVaVIVlVPKgsSiBWE kFIByr7wJeh2PapZBRHnSGncMzoisTgA5UJQIasLrNLLJXmSk9/gomrSQI7iRxll 3Cjwu4YkphA750IFEuJ8tuHD5KB/F7sUvDHreYyDFXxg91bA9Dawm53uVOsN8V6z tYPcgrcl0RNSAbbqprtuy4R+hG2SDXKmwaq+7P3UoGpYLtZm1cTBBXBvQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA5nr65B7+dJYSpvrxivvSFtJQSlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxZDc3OTE2LTg4YTgtNDM3ZS1iNDUxLTBkNTNiZGFlYTRiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKDAMA0GCSqGSIb3DQEBCwUAA4IBAQB/SvHCY1ycH1J572LX H63K9SydkRC/KiWKPOeWIw/hfrd8EDEqGYsmb7MSJ/E1GjsHfndr29ccskelFhg8 wB09bCM8wRLcnkXU7uQ65rWKgTHej7uZjY4XXdqPKq0+6Oc0Ks/KdsEcqWyaTy4e jgk3aO22zOX3Fz+G8BpuVtHwAYaf3yA5n9w+nWUIl31G3eS4gLHMbKsnMf3vDuOb 1OR/0pP2iFqoYHHsrbmAKDI7cLp4Gqxu3iMQdtIgQIew60rdfl4nAy+A31SWETLl hfUViQKFPGbgmIwb8AJrWoSEqTtGAyxPcKkm4E0zdoG4dQHHH0HPYxA9MDyz/rN8 swUb -----END CERTIFICATE-----Generated at Wed Feb 5 04:01:02 2025 by rpki-client