$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa File: ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa (raw, json) Hash identifier: JqewwKYaTzzraMtL+q+cxxP+XWfosKwqejsEWwiKCBg= Subject key identifier: 7B:EB:EC:9A:93:89:92:AF:3F:35:0B:45:C7:26:EE:6C:5A:F9:5D:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66968133AD419A98B63F4A11EA0909B039FDDE7C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:96:81:33:ad:41:9a:98:b6:3f:4a:11:ea:09:09:b0:39:fd:de:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:28:c8:7d:74:8c:9a:c1:88:0c:73:ce:8a: e6:ba:b5:a8:4e:fb:a8:6f:59:72:2b:e7:4d:f1:c6: 1c:bb:2f:7f:57:dc:b5:3b:ad:5d:67:1d:e9:ef:0b: 78:04:ce:9b:78:3f:68:06:bc:00:7d:67:a6:6b:03: cd:36:b6:78:93:62:37:36:28:5f:3c:bb:99:36:27: 63:7d:56:93:1b:3f:ec:15:f1:fc:72:4b:3a:3d:f3: a3:51:2b:83:86:9e:0f:75:5d:fd:8c:55:c1:88:45: 83:11:c0:db:57:b1:17:cb:4e:75:fb:91:ff:9a:93: 78:a3:de:4d:3c:96:b8:78:b1:67:68:d3:07:b7:aa: 83:87:6a:c3:92:69:f0:dd:c4:99:ea:7f:97:75:76: 90:92:d2:3b:78:1b:43:e0:68:36:ea:4f:11:b5:a2: aa:66:82:77:37:65:5a:e7:fd:ad:c1:69:1f:e8:1b: a4:f2:e1:de:30:12:f0:a8:7a:e6:58:e8:63:3b:67: 48:d3:bc:f8:6b:db:5e:f6:00:cb:8c:d8:3b:27:6d: 19:5a:24:2c:d3:ee:bb:22:9c:a8:d3:63:9c:55:25: f1:38:07:49:19:94:28:5e:c5:a9:ae:de:13:2f:18: 68:3c:93:9b:98:8b:3a:76:ae:cb:e6:fe:35:a0:52: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:EC:9A:93:89:92:AF:3F:35:0B:45:C7:26:EE:6C:5A:F9:5D:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16::/38 Signature Algorithm: sha256WithRSAEncryption a4:a5:93:6b:9c:b5:9d:3d:26:18:45:ec:88:21:41:97:f1:74: 98:d7:c7:96:11:22:94:b7:8f:fa:46:50:21:29:07:d9:ec:a6: c0:92:a3:c6:9d:bb:ed:33:cc:cc:09:7c:cd:4c:f8:6f:35:b7: ce:d1:3a:92:7f:47:a5:4f:6d:68:e0:26:b5:a1:cc:e9:14:18: c4:be:27:17:13:97:ba:61:28:d6:39:0b:ae:6e:1f:9c:b4:b4: 10:f8:7a:30:6f:e2:23:3c:df:3b:8b:0d:f1:c1:4d:0c:a1:7e: c2:6d:b8:e8:42:9f:b9:6b:8d:d2:f2:51:8f:fc:a1:ac:ab:77: be:c4:47:d3:48:90:16:97:61:4d:b0:70:c8:dc:7e:f4:f8:3b: 11:ad:82:bd:0c:7b:22:09:e1:18:b8:9f:b1:af:25:08:7a:cc: 54:f7:2e:64:bd:8d:3f:9f:cb:d2:6f:9d:68:85:f8:78:76:73: ad:f4:20:1b:81:3a:ac:ae:41:f6:08:aa:a2:ca:15:16:74:7c: b5:5d:65:d1:66:73:23:1e:aa:d6:a1:7a:a8:2c:19:03:65:28: 97:98:3d:c3:c9:4f:29:01:7d:8a:97:28:5e:b5:61:00:b9:67: d4:6b:7e:f0:29:af:ea:85:ca:53:8b:e6:f8:85:f7:19:33:36: b5:8f:a6:74 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZpaBM61Bmpi2P0oR6gkJsDn93nwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzkxYmMwNzBiYjZhZmZjMWM0ODlj MDRhNTlmZWUxZDAwYzA1MDE1Y2JmMDRjZDhhNGQ2ZGEyYmE2Yjk2N2RjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzcoyH10jJrBiAxzzormurWoTvuo b1lyK+dN8cYcuy9/V9y1O61dZx3p7wt4BM6beD9oBrwAfWemawPNNrZ4k2I3Nihf PLuZNidjfVaTGz/sFfH8cks6PfOjUSuDhp4PdV39jFXBiEWDEcDbV7EXy051+5H/ mpN4o95NPJa4eLFnaNMHt6qDh2rDkmnw3cSZ6n+XdXaQktI7eBtD4Gg26k8RtaKq ZoJ3N2Va5/2twWkf6Buk8uHeMBLwqHrmWOhjO2dI07z4a9te9gDLjNg7J20ZWiQs 0+67Ipyo02OcVSXxOAdJGZQoXsWprt4TLxhoPJObmIs6dq7L5v41oFLwAwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHvr7JqTiZKvPzULRccm7mxa+V0BMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlOTIwMWEzLTk0ZDktNDYwYi1iZDRkLTQ3OGJhOGJhNjgyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgAwDQYJKoZIhvcNAQELBQADggEBAKSlk2uctZ09JhhF7Igh QZfxdJjXx5YRIpS3j/pGUCEpB9nspsCSo8adu+0zzMwJfM1M+G81t87ROpJ/R6VP bWjgJrWhzOkUGMS+JxcTl7phKNY5C65uH5y0tBD4ejBv4iM83zuLDfHBTQyhfsJt uOhCn7lrjdLyUY/8oayrd77ER9NIkBaXYU2wcMjcfvT4OxGtgr0MeyIJ4Ri4n7Gv JQh6zFT3LmS9jT+fy9JvnWiF+Hh2c630IBuBOqyuQfYIqqLKFRZ0fLVdZdFmcyMe qtaheqgsGQNlKJeYPcPJTykBfYqXKF61YQC5Z9RrfvApr+qFylOL5viF9xkzNrWP pnQ= -----END CERTIFICATE-----Generated at Wed Feb 5 03:54:12 2025 by rpki-client