$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa File: df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa (raw, json) Hash identifier: BBrXVgqbW1Gf4dC2OzbbDbsh7sB7MC8WWNRMygB5nq0= Subject key identifier: 43:83:9E:6A:CB:EE:86:F2:83:E5:0D:1C:AB:CC:36:B9:81:7F:5D:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A161FDAA7AB5B97107C16F5C7B7F9560A538D29 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:16:1f:da:a7:ab:5b:97:10:7c:16:f5:c7:b7:f9:56:0a:53:8d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:9f:19:1a:73:30:56:be:cf:cc:73:1a:26: 8a:a0:6a:29:42:ee:d0:08:b5:d0:26:93:9c:28:75: dc:10:75:28:ed:39:8b:45:2a:32:44:5d:f0:34:1d: 87:4f:3d:48:48:86:30:7a:55:fc:21:02:0c:9b:43: 3b:e1:b1:0a:17:61:28:fe:9d:b6:d5:ea:c4:1c:96: d4:6e:66:fc:43:4e:f2:46:32:fc:4e:c4:49:5e:56: 9a:68:77:f5:61:b7:0c:18:74:82:9a:28:f9:bb:08: 3c:c0:04:57:8a:95:b8:6a:2d:54:31:53:a9:1e:18: 53:24:46:d2:ca:cf:16:ad:31:e5:18:0b:0c:4d:bd: 75:6b:c7:63:2a:f9:5c:de:ad:14:4c:71:d6:b2:f8: 98:f7:0e:9c:37:1c:3c:79:10:18:43:a6:7e:08:a4: a1:3c:b4:7e:b5:a7:ed:1b:ff:bb:90:a0:c4:9b:ef: e3:84:68:f0:b5:b0:df:e3:f8:73:9e:37:86:ec:20: 7f:73:38:c8:84:e5:aa:d6:55:a2:25:3b:7c:d1:cc: d0:b3:91:0f:a9:c9:08:b9:3d:07:19:47:f1:e1:a1: 14:ab:c3:9d:21:cd:b2:d7:92:ed:81:73:f1:1a:60: 8b:e7:c4:87:ea:fb:83:7e:e4:33:69:74:e0:a2:93: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:9E:6A:CB:EE:86:F2:83:E5:0D:1C:AB:CC:36:B9:81:7F:5D:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:800::/40 Signature Algorithm: sha256WithRSAEncryption c3:fd:45:10:43:ed:c5:ef:2c:f6:23:66:93:51:a2:d1:f8:34: 55:9a:f6:2c:36:35:28:6c:6f:1d:de:38:ad:02:f4:30:24:b4: 05:09:a5:ac:7e:0a:36:b1:3a:a6:f9:96:b8:7e:9d:01:9f:09: 9a:b0:1a:53:8d:d9:c7:1e:27:5d:4a:1a:8b:b4:5b:53:fd:f2: 75:34:79:5d:3a:81:13:e5:6a:08:a2:8b:4a:21:b9:d9:82:d4: 76:55:66:a1:a6:77:2a:97:87:b5:f2:c5:1b:70:38:05:53:b1: cc:c8:13:e4:63:dd:3d:38:1d:cf:9b:e0:e0:0c:df:56:18:1a: 07:16:50:0d:db:b6:c2:12:94:42:cf:e7:82:eb:13:84:45:fa: 0a:48:cc:a8:93:f9:1a:aa:3e:f9:5b:ee:1c:96:b3:1a:bf:b4: ed:e2:b5:b7:14:19:81:82:84:77:c6:f6:2c:79:1f:92:2c:42: bd:92:56:a8:6f:99:cc:e3:d1:c5:e2:e7:01:64:ae:78:89:c5: a5:43:1c:ba:84:03:6f:cf:06:38:3b:ba:45:99:a2:39:86:0a: 04:4e:a7:a5:82:08:86:b4:68:7d:d9:34:34:16:e5:e9:31:55: 60:79:4a:4e:46:34:06:d2:1f:50:5e:86:f2:59:cf:01:80:f9: 8b:ea:c4:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUehYf2qerW5cQfBb1x7f5VgpTjSkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwNTAwMDAwMFoX DTI1MDMxMjIzNTk1OVowejFJMEcGA1UEBRNAZmJjMmY4ZGVjNmIwNGQ4MDEwYTI3 NTIxYjg3OWVhMjk3ZmQ3MzdmMTFlNjdlODllNzRmNjViYTVjMTc2MmEzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkKfGRpzMFa+z8xzGiaKoGopQu7Q CLXQJpOcKHXcEHUo7TmLRSoyRF3wNB2HTz1ISIYwelX8IQIMm0M74bEKF2Eo/p22 1erEHJbUbmb8Q07yRjL8TsRJXlaaaHf1YbcMGHSCmij5uwg8wARXipW4ai1UMVOp HhhTJEbSys8WrTHlGAsMTb11a8djKvlc3q0UTHHWsviY9w6cNxw8eRAYQ6Z+CKSh PLR+taftG/+7kKDEm+/jhGjwtbDf4/hznjeG7CB/czjIhOWq1lWiJTt80czQs5EP qckIuT0HGUfx4aEUq8OdIc2y15LtgXPxGmCL58SH6vuDfuQzaXTgopOiAwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEODnmrL7obyg+UNHKvMNrmBf10vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMGVhOGU1LTJkNTUtNDIxNC05ZTA2LTVlNmZmMzg1MDgzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoAgwDQYJKoZIhvcNAQELBQADggEBAMP9RRBD7cXvLPYjZpNR otH4NFWa9iw2NShsbx3eOK0C9DAktAUJpax+CjaxOqb5lrh+nQGfCZqwGlON2cce J11KGou0W1P98nU0eV06gRPlagiii0ohudmC1HZVZqGmdyqXh7XyxRtwOAVTsczI E+Rj3T04Hc+b4OAM31YYGgcWUA3btsISlELP54LrE4RF+gpIzKiT+RqqPvlb7hyW sxq/tO3itbcUGYGChHfG9ix5H5IsQr2SVqhvmczj0cXi5wFkrniJxaVDHLqEA2/P Bjg7ukWZojmGCgROp6WCCIa0aH3ZNDQW5ekxVWB5Sk5GNAbSH1BehvJZzwGA+Yvq xMA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:06 2025 by rpki-client