$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c03ea245-c111-48cc-a8e5-84e8292b3452.roa File: c03ea245-c111-48cc-a8e5-84e8292b3452.roa (raw, json) Hash identifier: nz2EelqM6BDXqMwRwXVEXW8TiMRFU8HAjuT81vaA6j8= Subject key identifier: 65:28:D5:6B:7F:CA:4D:38:1F:5A:E1:46:AB:41:7B:6D:7B:25:7D:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 040BEBC53848B2D5C777A1F3CAF9A31795DBC0D0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c03ea245-c111-48cc-a8e5-84e8292b3452.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0b:eb:c5:38:48:b2:d5:c7:77:a1:f3:ca:f9:a3:17:95:db:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:46:0a:09:ea:41:74:c8:cc:2b:8e:f9:16: a9:b9:95:77:78:21:b5:0b:38:13:c8:60:99:f9:da: 23:b4:a4:f2:88:24:0d:bd:d3:d9:9e:d7:69:7f:94: eb:d1:43:04:52:6a:ca:5b:32:f7:86:84:88:15:b8: 60:0f:37:cc:d7:96:0d:00:13:14:d5:05:31:80:02: e0:c8:77:b4:11:ef:e0:26:f2:af:87:57:5e:fc:c6: 26:96:1c:67:17:19:bd:86:77:91:06:9c:fa:06:12: dd:10:f6:96:d5:7f:62:bb:ca:95:1c:f8:47:33:37: 65:44:6b:b9:2c:ed:9b:9f:b5:13:0c:39:cc:e6:b7: 1c:72:6e:24:9c:cf:15:2a:dd:b5:48:71:33:74:12: cd:d4:56:06:41:58:af:0a:d8:51:b0:ab:bd:5d:cd: 33:40:28:f1:d3:54:1a:c2:e5:cc:b7:8f:b5:c1:a6: 9a:fa:9f:da:1c:4c:32:0f:01:10:a9:d3:1a:a1:f6: a0:60:6f:c3:22:68:1c:0e:33:0d:d8:79:8c:bb:53: c1:b9:1d:25:e7:e1:7c:b1:a5:50:f9:43:58:f4:6d: c5:a4:42:40:a6:1d:9f:bf:49:de:2b:1a:07:50:4e: db:57:4f:e7:df:ae:46:91:44:f9:f9:0b:d3:e8:e7: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:D5:6B:7F:CA:4D:38:1F:5A:E1:46:AB:41:7B:6D:7B:25:7D:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c03ea245-c111-48cc-a8e5-84e8292b3452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:c800::/40 Signature Algorithm: sha256WithRSAEncryption ca:63:15:14:65:4b:0c:6b:d9:8f:05:42:2f:4a:60:ee:28:63: a2:ed:2e:0c:82:3b:ff:be:a3:b0:c1:c1:ea:88:46:12:64:b5: cf:c6:44:6f:02:91:e0:a7:aa:4b:c4:7c:3f:eb:31:e6:f9:09: 5b:93:88:ce:ff:75:7d:2d:5b:b6:35:4e:af:e1:b1:5f:36:d8: 8a:2e:25:e4:6f:de:95:b6:86:84:ca:54:01:f9:fa:03:1d:27: 81:95:d1:46:b1:e3:2e:d3:67:99:48:7e:0c:50:f0:6f:ae:b2: 8f:8d:ec:a3:2a:a0:07:44:7c:16:dc:85:22:41:e7:da:75:e0: 70:f3:d7:13:1c:df:ae:a0:c3:2f:35:4b:66:b4:fa:f0:d9:3d: 6f:da:0b:2f:9f:59:40:e5:6a:f5:b2:51:3c:36:32:92:cc:cc: d4:3a:1b:c7:42:b1:1a:da:39:32:1e:3d:61:c3:cb:e0:1a:a3: 56:dc:dc:95:2d:25:dc:48:10:1b:a6:97:f6:b8:2a:46:9e:fa: 9b:92:fe:20:3b:a2:59:5b:15:aa:c7:8a:4d:b1:e7:d9:ec:f1: 72:d3:13:e5:f2:e3:85:f9:7d:f1:4b:4e:70:79:dd:e7:f2:5d: 6a:b1:e7:9b:97:55:ba:68:44:59:0c:3e:57:cf:db:c9:44:fa: d6:df:d2:ea -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBAvrxThIstXHd6HzyvmjF5XbwNAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZGIyNzcxMzEyZmZkMDE5YmQzNjFm YWYzZjVlMmVjZGFiZTdhNjc3MTJkZjAzNzYxN2ZkNDIyMDJlMTc0YWU2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3JGCgnqQXTIzCuO+RapuZV3eCG1 CzgTyGCZ+dojtKTyiCQNvdPZntdpf5Tr0UMEUmrKWzL3hoSIFbhgDzfM15YNABMU 1QUxgALgyHe0Ee/gJvKvh1de/MYmlhxnFxm9hneRBpz6BhLdEPaW1X9iu8qVHPhH MzdlRGu5LO2bn7UTDDnM5rcccm4knM8VKt21SHEzdBLN1FYGQVivCthRsKu9Xc0z QCjx01QawuXMt4+1waaa+p/aHEwyDwEQqdMaofagYG/DImgcDjMN2HmMu1PBuR0l 5+F8saVQ+UNY9G3FpEJAph2fv0neKxoHUE7bV0/n365GkUT5+QvT6OdA6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGUo1Wt/yk04H1rhRqtBe217JX2eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwM2VhMjQ1LWMxMTEtNDhjYy1hOGU1LTg0ZTgyOTJiMzQ1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9cgwDQYJKoZIhvcNAQELBQADggEBAMpjFRRlSwxr2Y8FQi9K YO4oY6LtLgyCO/++o7DBweqIRhJktc/GRG8CkeCnqkvEfD/rMeb5CVuTiM7/dX0t W7Y1Tq/hsV822IouJeRv3pW2hoTKVAH5+gMdJ4GV0Uax4y7TZ5lIfgxQ8G+uso+N 7KMqoAdEfBbchSJB59p14HDz1xMc366gwy81S2a0+vDZPW/aCy+fWUDlavWyUTw2 MpLMzNQ6G8dCsRraOTIePWHDy+Aao1bc3JUtJdxIEBuml/a4Kkae+puS/iA7ollb FarHik2x59ns8XLTE+Xy44X5ffFLTnB53efyXWqx55uXVbpoRFkMPlfP28lE+tbf 0uo= -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:06 2025 by rpki-client