$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa File: c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa (raw, json) Hash identifier: udQZVOF3DNvZi5Cm4seLEDk5VZps4GPPKR15guHwEhA= Subject key identifier: ED:22:45:E5:44:99:C2:04:4F:30:13:09:22:DD:14:58:AE:6D:61:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1BB467FB1C5D226BC9D2F0AA97C30E5ED9AA4D61 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b4:67:fb:1c:5d:22:6b:c9:d2:f0:aa:97:c3:0e:5e:d9:aa:4d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:39:c9:2c:1c:6b:c1:90:7a:92:6e:c5:4e: 5c:11:e5:f4:a1:5a:52:f1:d8:12:06:41:8a:75:69: 5a:ff:a9:a7:3a:0d:72:02:dd:05:97:0c:6f:4f:8d: 17:b3:46:d6:70:ed:56:a8:c3:0b:1f:1a:7b:44:6b: 1e:34:45:d4:c0:8c:ff:c1:02:a1:66:d5:b0:62:2d: 3c:ba:7a:c6:5c:56:d8:65:62:87:60:7e:86:16:b3: e9:1c:8c:a0:42:dd:8e:b6:8e:0d:e0:ea:ae:ac:50: 40:88:46:6e:f2:3d:32:e4:e6:d5:b3:66:d1:6e:fb: 01:b1:ce:5e:78:73:69:bc:75:55:5f:fc:e5:f3:02: 56:e3:55:75:39:30:b0:ef:b8:26:be:ac:b5:93:95: ab:a6:32:0c:03:2e:cf:07:77:be:1c:25:3d:a8:b2: e3:16:9f:2f:1c:fa:ab:66:77:bd:1d:ef:49:3b:d6: f5:2c:fe:1d:a5:f0:22:a8:a0:45:86:c0:9e:ef:53: a6:a1:ef:84:17:80:1d:e5:18:7c:63:e0:a5:d9:49: 5b:d7:e0:3f:f8:18:b7:7b:fc:f4:6a:d2:90:f3:bc: 3c:7d:09:d3:27:5b:1c:df:28:4b:b7:91:ea:c5:f0: b5:33:bb:14:3c:70:5d:c2:2b:ac:e4:45:69:6b:cb: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:45:E5:44:99:C2:04:4F:30:13:09:22:DD:14:58:AE:6D:61:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9080::/48 Signature Algorithm: sha256WithRSAEncryption a9:33:c0:d9:2e:53:5e:ab:49:d0:ec:37:f9:3b:db:64:44:3f: a7:68:ba:a6:d8:66:d0:49:94:45:11:d1:cb:5b:a2:ac:e3:cc: 5f:9c:fc:ad:d9:79:e1:a6:89:84:18:24:12:2d:7d:ae:4f:e5: 7d:16:48:a2:33:fd:9d:ff:1a:95:d2:30:19:55:9e:33:18:07: 62:80:4c:d4:95:d8:89:0b:70:9f:57:58:a0:9c:59:fc:3e:26: 64:de:ef:8a:2c:03:47:74:a7:95:c8:c8:97:6e:69:76:59:35: f5:34:3b:9c:ac:1b:0f:7e:50:8b:42:fc:db:c7:43:20:8e:2b: 2b:6e:44:a7:8a:90:7c:b9:7a:56:3b:5a:1a:35:15:76:32:d3: 62:ed:0a:20:aa:96:79:88:30:a3:5d:37:8b:71:0d:59:33:58: 45:a7:17:96:c4:a1:da:5e:90:ce:4c:4d:96:21:31:fd:f9:a8: b5:d9:5e:f2:f6:93:b0:f4:24:e6:40:32:a8:ff:79:39:f6:53: 6e:47:ed:3a:bc:51:ca:df:07:1c:d2:a1:c8:62:b9:ee:fa:0d: 01:29:90:01:92:06:b0:04:b9:2a:fb:d8:52:06:18:f4:17:ed: 38:db:2a:99:42:e0:01:25:fd:d6:8e:6f:f4:52:0f:54:e1:23: 52:b7:ac:67 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUG7Rn+xxdImvJ0vCql8MOXtmqTWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANmQxNDA4Mjc4NGVhM2U1NmQ4MDQ5 MTA5ZDBjZGNmMWYzOTc3NjQzMjVlODdjMzlkM2M4YWVlZjVhMGJkN2Q0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE05ySwca8GQepJuxU5cEeX0oVpS 8dgSBkGKdWla/6mnOg1yAt0FlwxvT40Xs0bWcO1WqMMLHxp7RGseNEXUwIz/wQKh ZtWwYi08unrGXFbYZWKHYH6GFrPpHIygQt2Oto4N4OqurFBAiEZu8j0y5ObVs2bR bvsBsc5eeHNpvHVVX/zl8wJW41V1OTCw77gmvqy1k5WrpjIMAy7PB3e+HCU9qLLj Fp8vHPqrZne9He9JO9b1LP4dpfAiqKBFhsCe71Omoe+EF4Ad5Rh8Y+Cl2Ulb1+A/ +Bi3e/z0atKQ87w8fQnTJ1sc3yhLt5HqxfC1M7sUPHBdwius5EVpa8twdQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO0iReVEmcIETzATCSLdFFiubWHcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5MzYwODdkLWRmNDAtNGNhNC1hOGYyLTRiZjhmNmFjZWI2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8pCAMA0GCSqGSIb3DQEBCwUAA4IBAQCpM8DZLlNeq0nQ7Df5 O9tkRD+naLqm2GbQSZRFEdHLW6Ks48xfnPyt2XnhpomEGCQSLX2uT+V9FkiiM/2d /xqV0jAZVZ4zGAdigEzUldiJC3CfV1ignFn8PiZk3u+KLANHdKeVyMiXbml2WTX1 NDucrBsPflCLQvzbx0MgjisrbkSnipB8uXpWO1oaNRV2MtNi7QogqpZ5iDCjXTeL cQ1ZM1hFpxeWxKHaXpDOTE2WITH9+ai12V7y9pOw9CTmQDKo/3k59lNuR+06vFHK 3wcc0qHIYrnu+g0BKZABkgawBLkq+9hSBhj0F+042yqZQuABJf3Wjm/0Ug9U4SNS t6xn -----END CERTIFICATE-----Generated at Wed Feb 5 03:53:39 2025 by rpki-client