$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa File: 9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa (raw, json) Hash identifier: loGwtUc7sEELSsMmxHNBxw8O/S/gVyfw7D3DjtfpVAk= Subject key identifier: E5:5A:1F:18:5D:EB:6F:13:25:A8:92:B3:74:D5:38:3B:58:10:6E:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34CFC7A02084B17A21818E9869465D5C3396621A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cf:c7:a0:20:84:b1:7a:21:81:8e:98:69:46:5d:5c:33:96:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:49:8c:9a:ad:e7:b9:81:82:30:d4:f0:05: 85:eb:d8:56:bb:2d:7a:95:28:03:e0:ac:2c:95:2d: a1:3c:bc:bb:30:9d:87:09:58:6c:e2:1d:4f:9d:00: 3c:ae:20:7f:4b:c7:15:77:48:5d:1a:aa:28:98:06: 02:6f:19:d0:cb:9c:71:a2:c0:97:c4:3a:dc:45:e9: d9:78:f2:df:8a:f5:79:ff:df:f2:33:3d:78:cb:42: 13:ed:de:8d:54:80:5d:79:e3:c0:64:00:53:17:58: ff:fd:dd:45:ef:d6:b8:15:77:9c:7a:71:4a:37:70: d5:dc:be:45:95:db:aa:38:51:4e:b9:06:97:37:7a: 73:8b:e4:5d:a3:a4:f5:f4:1f:9d:eb:8f:b0:f6:e0: 91:9b:8f:98:26:22:d0:2c:97:35:fd:bb:ec:8f:43: 6a:8d:68:42:cd:af:0b:2a:46:cd:cc:f1:3b:0f:1f: b0:95:6e:a1:22:e4:31:25:45:4a:ed:cc:6b:9b:e8: f8:98:f4:92:ca:28:67:58:7a:a1:a5:2c:5d:69:31: 8c:57:0e:12:02:6e:4f:eb:a3:11:1b:33:cf:2d:6d: 0e:a3:a9:31:74:1b:8b:d9:25:44:8d:4b:15:4b:e4: 90:1b:4f:ab:c3:d8:87:b9:a0:98:03:80:60:27:57: e9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:1F:18:5D:EB:6F:13:25:A8:92:B3:74:D5:38:3B:58:10:6E:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8c00::/38 Signature Algorithm: sha256WithRSAEncryption 72:01:e9:91:84:cb:a3:6c:a1:80:89:53:43:73:01:3d:73:27: e4:cc:56:ef:0e:06:26:fc:83:ca:62:53:cc:73:ad:2e:07:52: 31:12:75:79:9d:d0:2b:f6:ff:db:c2:9b:f6:a3:4e:3b:0b:ed: 02:61:7f:cd:1f:97:ea:dc:bf:50:a6:d4:db:aa:5b:53:e1:c8: 4e:f3:c1:7a:36:bb:64:a6:2b:c4:15:bf:6e:f3:64:f6:ca:6b: f7:bb:54:8b:0e:07:98:d5:7b:25:d7:9c:e8:1e:35:c8:c7:7f: 6a:f0:f5:65:83:23:f1:16:7e:94:07:f8:c5:45:69:22:ea:4e: 82:10:15:02:ba:84:5a:37:85:3f:fe:91:3b:2e:7d:96:4e:64: 6d:6b:35:fb:80:ea:11:26:b7:a0:31:46:70:39:52:01:3b:59: 3b:2c:c0:f2:04:c0:cd:2f:d2:dc:73:42:39:b0:0a:04:b5:a3: c6:3a:10:e7:e3:4d:48:71:95:4c:dd:95:3e:0d:7d:5d:37:63: df:25:e4:16:58:d1:ff:96:a2:47:f5:bf:d4:11:7a:c9:20:ea: ae:91:ea:2f:96:9c:00:81:67:08:9e:fe:7a:f6:38:ed:7e:d7: 94:fd:7a:2a:ad:37:86:9a:fd:3a:bd:da:db:5d:bf:83:7f:0b: 82:36:04:cd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNM/HoCCEsXohgY6YaUZdXDOWYhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANzYyZDNmZmU5YTgzY2VkM2U4YzY0 MWJhZmEzNjEyYjIxMWM3OTE0OGI2NDI1N2Y2ZTc5YWZmOTVmZDllMDNjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohBJjJqt57mBgjDU8AWF69hWuy16 lSgD4KwslS2hPLy7MJ2HCVhs4h1PnQA8riB/S8cVd0hdGqoomAYCbxnQy5xxosCX xDrcRenZePLfivV5/9/yMz14y0IT7d6NVIBdeePAZABTF1j//d1F79a4FXecenFK N3DV3L5FlduqOFFOuQaXN3pzi+Rdo6T19B+d64+w9uCRm4+YJiLQLJc1/bvsj0Nq jWhCza8LKkbNzPE7Dx+wlW6hIuQxJUVK7cxrm+j4mPSSyihnWHqhpSxdaTGMVw4S Am5P66MRGzPPLW0Oo6kxdBuL2SVEjUsVS+SQG0+rw9iHuaCYA4BgJ1fp5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOVaHxhd628TJaiSs3TVODtYEG4uMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNjA5N2JiLTQ2ZjctNGEzOS05YWZlLTk4MjcxYzhiMDViOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIwwDQYJKoZIhvcNAQELBQADggEBAHIB6ZGEy6NsoYCJU0Nz AT1zJ+TMVu8OBib8g8piU8xzrS4HUjESdXmd0Cv2/9vCm/ajTjsL7QJhf80fl+rc v1Cm1NuqW1PhyE7zwXo2u2SmK8QVv27zZPbKa/e7VIsOB5jVeyXXnOgeNcjHf2rw 9WWDI/EWfpQH+MVFaSLqToIQFQK6hFo3hT/+kTsufZZOZG1rNfuA6hEmt6AxRnA5 UgE7WTsswPIEwM0v0txzQjmwCgS1o8Y6EOfjTUhxlUzdlT4NfV03Y98l5BZY0f+W okf1v9QReskg6q6R6i+WnACBZwie/nr2OO1+15T9eiqtN4aa/Tq92ttdv4N/C4I2 BM0= -----END CERTIFICATE-----Generated at Wed Feb 5 03:59:49 2025 by rpki-client