$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa File: e4a99edb-d5fe-48fe-a94d-645381e8080f.roa (raw, json) Hash identifier: WY3yYC8SbnPp73RUIz9zkuyTWT+c+LC+nLLitDeMfcg= Subject key identifier: B7:ED:F7:45:58:4B:BD:FA:6F:3D:8A:CE:2F:C1:21:E9:91:19:F1:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D13E1993ED79A2002970793D64CB2040D5B26E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:13:e1:99:3e:d7:9a:20:02:97:07:93:d6:4c:b2:04:0d:5b:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:61:34:01:dd:34:eb:b1:77:4d:ed:06:0c:7b: 57:ba:79:35:96:91:69:4f:26:00:a4:a4:bf:13:67: ec:b8:33:49:27:cc:83:9e:40:81:45:c9:9f:93:98: 4d:5d:f9:bf:71:91:86:23:09:28:45:b3:0e:e4:ba: 52:55:1b:ca:bd:3e:c0:0f:35:e4:40:ff:0f:bf:cd: 6c:ab:17:32:4e:94:80:6f:9e:8a:17:9a:0b:4b:74: de:6c:d2:aa:b7:24:a2:29:3e:35:2f:62:89:3e:f0: 47:7f:32:15:9e:c7:1c:a5:20:6a:00:5c:e7:ce:79: 06:2e:36:7c:b2:32:0e:2c:cf:98:5f:b8:08:78:bd: 57:eb:cd:c8:7c:3d:35:ce:74:cc:cf:eb:e4:9d:a7: ad:8c:ea:b0:95:ba:4f:3c:5a:8c:59:b5:78:13:89: 58:3e:42:27:c2:a5:e6:dd:3f:fb:d8:11:9f:90:c5: fc:93:f8:af:cc:92:5b:62:ea:95:4b:58:73:fe:e7: 44:c5:65:82:63:fc:a4:1b:c5:0d:25:28:8d:13:bf: a5:0f:d9:d9:0d:fa:33:bc:11:ca:c6:60:fa:a2:38: 70:fa:6f:06:b1:39:6d:44:30:b3:37:44:5e:fb:95: 8f:c5:98:eb:42:07:5a:57:42:e7:39:24:d3:24:50: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:F7:45:58:4B:BD:FA:6F:3D:8A:CE:2F:C1:21:E9:91:19:F1:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:2d:19:b9:65:2d:9b:7d:6b:82:1b:b0:ce:24:53:1f:96:d2: 79:4c:54:39:fa:cc:cc:b2:02:37:0a:e5:61:20:86:99:ca:68: 3d:6c:1a:b3:e3:fd:ff:cf:07:10:ce:af:c8:55:69:a0:e9:99: 96:cb:15:ce:f4:c2:cf:c2:72:8d:49:d0:fb:55:50:53:f2:7f: d2:b9:c3:45:09:c4:06:3d:29:16:2b:ef:e9:f5:7f:64:fe:1d: 8a:6e:48:61:09:cb:b0:a9:4e:aa:9c:08:68:70:88:11:0e:1c: 25:43:6f:92:93:20:9f:c1:aa:88:5d:03:5a:49:6c:5f:bc:d5: 9e:d3:ee:ba:e0:4d:0a:f5:47:42:30:51:11:5f:9f:ae:18:db: cd:55:78:30:27:e6:8a:a2:b9:00:1e:d4:39:64:11:91:2f:c4: 96:17:d6:6c:66:5d:bc:c1:a4:af:69:46:55:fc:cc:db:1c:19: b4:4c:93:98:4e:6d:4a:cd:e1:f5:cc:bd:5f:2b:f8:9d:85:c4: fd:da:c6:22:15:e2:ca:bb:f4:32:2f:c2:30:e0:54:b9:87:76: 2f:97:4a:7d:b3:3d:28:24:ce:f7:36:f9:81:9b:d3:09:4a:02: b2:d5:38:73:7c:01:00:35:fb:b8:a3:e3:48:d5:34:ba:ba:0c: d0:71:4f:b5 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUHRPhmT7XmiAClweT1kyyBA1bJuAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwNDAwMDAwMFoX DTI1MDMxMTIzNTk1OVowejFJMEcGA1UEBRNAZDMxNTY0Y2ZkNTliZGJjYTNkMWE2 ZWM3ZjE4MjQ5OTM4N2FlNGUwMDJkMTFhYWQ3N2UwZDAwNDQ1MzFiMzlhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mE0Ad0067F3Te0GDHtXunk1lpFp TyYApKS/E2fsuDNJJ8yDnkCBRcmfk5hNXfm/cZGGIwkoRbMO5LpSVRvKvT7ADzXk QP8Pv81sqxcyTpSAb56KF5oLS3TebNKqtySiKT41L2KJPvBHfzIVnsccpSBqAFzn znkGLjZ8sjIOLM+YX7gIeL1X683IfD01znTMz+vknaetjOqwlbpPPFqMWbV4E4lY PkInwqXm3T/72BGfkMX8k/ivzJJbYuqVS1hz/udExWWCY/ykG8UNJSiNE7+lD9nZ DfozvBHKxmD6ojhw+m8GsTltRDCzN0Re+5WPxZjrQgdaV0LnOSTTJFD5bwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLft90VYS736bz2Kzi/BIemRGfHAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U0YTk5ZWRiLWQ1ZmUtNDhmZS1hOTRkLTY0NTM4MWU4MDgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9swDQYJKoZIhvcNAQELBQADggEBAAgtGbllLZt9a4IbsM4kUx+W 0nlMVDn6zMyyAjcK5WEghpnKaD1sGrPj/f/PBxDOr8hVaaDpmZbLFc70ws/Cco1J 0PtVUFPyf9K5w0UJxAY9KRYr7+n1f2T+HYpuSGEJy7CpTqqcCGhwiBEOHCVDb5KT IJ/BqohdA1pJbF+81Z7T7rrgTQr1R0IwURFfn64Y281VeDAn5oqiuQAe1DlkEZEv xJYX1mxmXbzBpK9pRlX8zNscGbRMk5hObUrN4fXMvV8r+J2FxP3axiIV4sq79DIv wjDgVLmHdi+XSn2zPSgkzvc2+YGb0wlKArLVOHN8AQA1+7ij40jVNLq6DNBxT7U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:32 2025 by rpki-client