$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa File: 9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa (raw, json) Hash identifier: YGoiaZmM4+qnYO9P4bl2oybUR4mu5h7X2bok2/Xf35c= Subject key identifier: A1:A4:7F:CE:A6:D4:02:59:7D:9B:38:0E:E0:A5:61:A0:99:5C:CA:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6585F585455FE66D83CDABDF43D8F1380E64EF8E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:85:f5:85:45:5f:e6:6d:83:cd:ab:df:43:d8:f1:38:0e:64:ef:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:29:e1:26:a2:e6:0d:df:51:76:22:40:31: 53:1d:77:b4:47:e4:01:17:8f:bf:27:ba:92:6c:33: c8:d3:ce:cf:04:76:6b:fb:e9:a6:c5:c1:e6:c6:c5: d8:ed:30:95:05:b3:c4:78:d6:1e:92:26:dd:e1:10: 16:3a:a4:54:e0:65:01:1c:9a:74:e0:07:64:2f:43: 7a:ae:c2:6f:21:84:37:66:86:86:e4:b4:e4:61:73: d2:0a:0e:1d:c5:58:0c:e1:3e:03:2e:eb:18:3f:3d: 55:67:f3:eb:54:af:2a:59:1c:9a:1a:6b:36:b7:e2: d0:bd:5c:e0:04:4d:6e:13:d0:36:fc:48:04:3a:92: b5:8f:39:90:78:ae:44:f6:6d:18:11:db:99:f0:5a: f2:9c:bc:ea:2f:9d:89:50:15:f7:08:ee:ee:a9:da: ac:52:27:17:43:93:60:f3:88:d6:3b:8c:ed:54:fe: a7:28:05:f0:ef:ef:8d:0d:6e:d1:c7:f8:d7:d7:f9: cb:37:8a:d1:37:26:4a:d9:13:b8:41:b8:91:26:4e: 63:bb:cd:a9:2f:be:f0:05:4f:ce:5a:b7:5b:ac:b3: d6:bd:59:1a:92:67:6b:59:1e:69:30:d9:9b:b7:3a: 56:0f:42:62:82:4b:45:dc:dd:37:5f:08:16:ef:ad: 36:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A4:7F:CE:A6:D4:02:59:7D:9B:38:0E:E0:A5:61:A0:99:5C:CA:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:8000::/40 Signature Algorithm: sha256WithRSAEncryption b0:c7:bc:29:eb:36:71:f2:e8:cb:6c:8a:c7:89:8e:aa:e7:44: 45:b7:95:07:f1:b2:95:95:df:b5:e8:ec:fc:c2:5d:27:af:cd: cb:88:7d:c9:92:8f:51:4c:34:d6:1a:4f:0c:50:fd:34:08:2b: 83:7b:bd:24:f7:97:23:16:94:1c:b0:ac:86:33:16:ba:45:0d: a7:2c:79:4f:b9:dd:6e:8d:ed:f6:35:90:fa:97:ab:28:76:23: 76:e7:1c:a3:0b:25:8d:ac:64:99:d2:49:83:ca:5f:97:61:7e: 43:c3:9f:7c:8c:83:62:64:ab:34:95:46:11:36:b8:55:44:38: 49:90:b4:32:1e:cc:ef:63:a2:c0:c7:57:f4:7d:02:08:55:de: a8:3d:cd:ae:28:29:f6:32:98:4f:ee:be:03:c9:44:35:5f:ea: 3d:40:50:8a:9a:95:4e:05:94:04:24:4b:b0:05:e4:11:22:dd: 02:b1:27:82:cb:69:79:57:84:eb:6f:c6:66:90:08:00:c5:d3: 1f:d2:a9:23:b0:2b:ad:a0:b7:bd:de:88:2e:1f:9f:56:8e:3b: 8f:0d:0e:22:62:1c:c8:ef:ba:e9:77:99:f3:f3:20:39:ad:e0: a1:5c:04:b6:b0:06:ef:4e:59:2c:a4:be:4f:b9:a4:2d:17:68: 3a:e5:42:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZYX1hUVf5m2DzavfQ9jxOA5k744wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZjk1MTM0NjdmN2I0NDNhY2QzYjU0 MjJhZjBjZDQ0NzA5MzU5MjA3NDdjYWM5NjE1MTljMjYwMDc5ZTE5YWYxMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUQp4Sai5g3fUXYiQDFTHXe0R+QB F4+/J7qSbDPI087PBHZr++mmxcHmxsXY7TCVBbPEeNYekibd4RAWOqRU4GUBHJp0 4AdkL0N6rsJvIYQ3ZoaG5LTkYXPSCg4dxVgM4T4DLusYPz1VZ/PrVK8qWRyaGms2 t+LQvVzgBE1uE9A2/EgEOpK1jzmQeK5E9m0YEduZ8FrynLzqL52JUBX3CO7uqdqs UicXQ5Ng84jWO4ztVP6nKAXw7++NDW7Rx/jX1/nLN4rRNyZK2RO4QbiRJk5ju82p L77wBU/OWrdbrLPWvVkakmdrWR5pMNmbtzpWD0JigktF3N03XwgW7602FwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKGkf86m1AJZfZs4DuClYaCZXMrMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNmE4YThjLTU3NjYtNGMwMC05OTJhLTQ3MGRlMmNhODZiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9oAwDQYJKoZIhvcNAQELBQADggEBALDHvCnrNnHy6MtsiseJ jqrnREW3lQfxspWV37Xo7PzCXSevzcuIfcmSj1FMNNYaTwxQ/TQIK4N7vST3lyMW lBywrIYzFrpFDacseU+53W6N7fY1kPqXqyh2I3bnHKMLJY2sZJnSSYPKX5dhfkPD n3yMg2JkqzSVRhE2uFVEOEmQtDIezO9josDHV/R9AghV3qg9za4oKfYymE/uvgPJ RDVf6j1AUIqalU4FlAQkS7AF5BEi3QKxJ4LLaXlXhOtvxmaQCADF0x/SqSOwK62g t73eiC4fn1aOO48NDiJiHMjvuul3mfPzIDmt4KFcBLawBu9OWSykvk+5pC0XaDrl Qus= -----END CERTIFICATE-----Generated at Wed Feb 5 04:12:00 2025 by rpki-client