$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d18dc100-99de-4d45-9f73-df212212e0dd.roa File: d18dc100-99de-4d45-9f73-df212212e0dd.roa (raw, json) Hash identifier: ox+/s4XXgQfQumA/pQsoUThOhrvR5r3cnRodqWqzILc= Subject key identifier: D4:F7:C3:93:C5:27:73:C0:F9:23:B0:48:D2:40:9A:35:FD:8F:CB:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F457EB664041581CE2C1E1ADD66DEB550075A55 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d18dc100-99de-4d45-9f73-df212212e0dd.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:45:7e:b6:64:04:15:81:ce:2c:1e:1a:dd:66:de:b5:50:07:5a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:63:c9:54:c7:67:fa:33:08:3c:14:0d:f8: 23:a0:6a:49:cc:4c:0c:b9:1f:5f:c0:7c:89:10:bd: 4a:94:9d:93:36:98:0c:0a:4c:9b:25:fc:3a:6d:4b: 89:5d:b6:38:b3:90:c2:46:9c:81:dc:d8:70:69:a2: 71:43:d8:11:a8:0c:8b:53:52:e2:46:24:43:d4:b9: 40:f5:64:cd:2f:05:fc:a4:5c:81:8e:ff:46:00:03: 69:e3:47:19:d9:3c:e9:8c:fb:fe:ac:aa:14:3a:1e: de:35:c2:8d:b5:52:3a:2c:1b:cd:b3:df:12:63:5e: ec:45:a9:55:ca:c5:eb:05:7b:0d:8d:32:2f:09:83: 09:b0:64:48:0c:c2:a9:3f:26:fc:b8:2d:91:db:37: e3:0a:6a:0e:61:1e:03:36:e5:8c:8a:da:41:a7:22: e7:48:50:ad:4e:a4:9d:20:54:74:64:cb:53:b9:a1: ba:0f:bb:9e:07:d2:e3:af:ff:52:89:bd:dd:54:ff: ed:62:ec:01:ea:a0:b6:93:48:12:70:fc:7a:ba:e5: a3:62:0a:80:ae:fd:0a:7e:00:af:bb:50:25:24:62: a9:01:69:77:06:f9:20:f0:57:04:6b:8b:e4:72:fa: 88:9e:2f:d5:d1:7a:4c:8d:b3:b2:60:2d:69:ff:bd: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F7:C3:93:C5:27:73:C0:F9:23:B0:48:D2:40:9A:35:FD:8F:CB:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d18dc100-99de-4d45-9f73-df212212e0dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:7000::/40 Signature Algorithm: sha256WithRSAEncryption 95:1b:4c:92:48:cc:7b:d7:dd:51:f9:40:80:0d:07:52:fd:56: 50:03:12:b3:38:35:bd:b5:e8:f1:fc:bd:a5:07:23:41:9c:0c: c1:ab:68:24:70:6b:24:8d:59:0a:73:a8:0f:a7:ea:f4:62:ef: bb:a4:98:72:93:6f:68:58:63:4d:e9:22:30:c8:f5:7b:86:37: 40:dd:8c:8e:5e:8c:f2:4f:cc:22:78:74:d5:8f:fb:14:c2:35: a4:0d:f0:21:0f:cf:6e:86:78:b7:f5:20:1d:5e:73:c3:92:6f: 39:d8:ae:cd:27:d7:45:8b:03:0b:18:50:ff:34:e4:32:e6:0a: 80:8d:0d:f4:d8:27:57:bb:38:65:03:93:d6:6e:3b:8e:c4:de: 5a:46:3d:e5:a5:7d:c6:db:56:55:c8:8c:42:b7:9d:b4:7f:60: 02:27:fe:68:c0:ff:50:96:b7:34:a0:40:1c:c5:a2:6f:a4:c4: 10:d7:05:34:23:a1:82:22:dc:08:fa:2d:08:a7:3b:59:8c:c7: 0c:84:c4:67:a0:f9:3f:67:87:b5:db:3f:c9:a0:9b:1a:7d:66: 56:fd:bc:28:1a:15:cf:6b:aa:9f:f3:b5:40:96:fd:60:f1:ac: b5:10:9c:fb:a9:26:5a:7b:52:23:1a:f6:f8:f8:c9:58:e7:fe: 6e:71:11:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb0V+tmQEFYHOLB4a3WbetVAHWlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZjI0YmZhZGJiMmMwN2I5ZjcxYTZh YTc3ZGI4YTMwYTA4OThhMWNlOTgzYTc5MDU3ZjYwNTllZDcxOGZmMzJlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3pjyVTHZ/ozCDwUDfgjoGpJzEwM uR9fwHyJEL1KlJ2TNpgMCkybJfw6bUuJXbY4s5DCRpyB3NhwaaJxQ9gRqAyLU1Li RiRD1LlA9WTNLwX8pFyBjv9GAANp40cZ2TzpjPv+rKoUOh7eNcKNtVI6LBvNs98S Y17sRalVysXrBXsNjTIvCYMJsGRIDMKpPyb8uC2R2zfjCmoOYR4DNuWMitpBpyLn SFCtTqSdIFR0ZMtTuaG6D7ueB9Ljr/9Sib3dVP/tYuwB6qC2k0gScPx6uuWjYgqA rv0KfgCvu1AlJGKpAWl3Bvkg8FcEa4vkcvqIni/V0XpMjbOyYC1p/71DRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNT3w5PFJ3PA+SOwSNJAmjX9j8uwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxOGRjMTAwLTk5ZGUtNGQ0NS05ZjczLWRmMjEyMjEyZTBkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaXAwDQYJKoZIhvcNAQELBQADggEBAJUbTJJIzHvX3VH5QIAN B1L9VlADErM4Nb216PH8vaUHI0GcDMGraCRwaySNWQpzqA+n6vRi77ukmHKTb2hY Y03pIjDI9XuGN0DdjI5ejPJPzCJ4dNWP+xTCNaQN8CEPz26GeLf1IB1ec8OSbznY rs0n10WLAwsYUP805DLmCoCNDfTYJ1e7OGUDk9ZuO47E3lpGPeWlfcbbVlXIjEK3 nbR/YAIn/mjA/1CWtzSgQBzFom+kxBDXBTQjoYIi3Aj6LQinO1mMxwyExGeg+T9n h7XbP8mgmxp9Zlb9vCgaFc9rqp/ztUCW/WDxrLUQnPupJlp7UiMa9vj4yVjn/m5x EfU= -----END CERTIFICATE-----Generated at Wed Feb 5 03:48:40 2025 by rpki-client