$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa File: f28ef137-0acd-4efd-b9ee-b352810a3e96.roa (raw, json) Hash identifier: xjocR2cp6P784n9tAekntLT10E/T0YE5ESCyge59vew= Subject key identifier: 34:3D:AF:3A:4B:00:A6:B3:66:5A:D3:14:6A:BA:83:12:E1:14:16:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FA23D822C565375A3A3F9CD4CE7997FD514651F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a2:3d:82:2c:56:53:75:a3:a3:f9:cd:4c:e7:99:7f:d5:14:65:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:16:ad:55:b4:45:e7:da:3a:47:af:20:51: 12:e6:69:f9:8f:13:7f:f3:28:70:b0:87:d6:23:a0: dd:43:b7:f2:ad:a2:7e:c6:72:63:5b:30:0f:1c:4f: 50:66:ea:5f:45:be:52:7b:14:f3:2a:a3:01:a3:56: bd:23:9a:a7:9a:44:79:87:d2:8a:2c:b9:ea:c1:7c: 60:00:6a:f0:f5:24:5b:b7:9e:2a:b2:d0:d2:20:52: de:b4:33:18:38:97:7b:3b:a0:c1:93:20:f2:2d:2b: 1a:b4:6e:4a:e2:f2:9b:9c:d8:de:c0:5b:72:b8:2f: 1f:c2:43:65:89:28:c3:d2:34:e2:ac:00:0e:d3:3c: e3:7c:3b:68:65:51:3f:ba:ca:2c:5c:e1:df:51:fd: 7b:17:18:1f:be:a4:67:17:dd:cd:ad:4c:8b:40:54: fe:d6:7c:e2:6c:f2:c4:f6:80:76:d9:6c:33:f7:e5: 0f:cc:71:31:77:75:01:1d:3e:f9:34:22:f0:d3:84: 27:23:6f:f5:eb:e9:36:01:2f:a0:b0:f2:df:b9:7c: 48:24:59:c3:14:ba:f7:8b:3f:f4:8c:f3:50:48:bb: c1:09:2e:b2:34:b6:ab:13:18:ab:9b:4c:64:db:55: a5:38:e1:30:97:9b:eb:b5:0c:b7:f0:b9:5b:78:bb: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3D:AF:3A:4B:00:A6:B3:66:5A:D3:14:6A:BA:83:12:E1:14:16:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e080::/46 Signature Algorithm: sha256WithRSAEncryption 28:da:42:d7:1e:ef:87:91:4a:fc:9c:68:d6:3d:12:f2:5b:43: 47:e0:86:9a:97:42:c4:f7:4a:d8:6d:6b:9f:69:98:c5:f9:ca: 32:f4:6f:69:1f:6d:80:73:13:ba:94:13:49:8d:8f:20:9e:68: be:6a:21:06:69:be:2d:b2:95:21:9b:57:19:55:dd:ec:44:1b: 6b:d3:4e:5e:42:65:1b:40:be:4a:aa:9d:5a:32:6d:07:ae:09: ec:32:d2:5f:d2:3f:fe:a5:a4:bb:15:1e:61:d1:5c:98:0a:6f: 5e:61:48:d0:2f:b6:7b:ca:8c:ce:2c:2f:f0:e7:9c:4c:1b:f3: 67:a1:f0:1a:54:63:dc:ce:a0:5d:75:f5:83:40:9c:d3:9a:08: 88:8d:3f:c0:6b:06:61:68:da:13:e1:8e:fb:d2:c7:09:34:9c: de:69:9e:98:0f:b1:e9:9d:94:8e:09:e6:26:90:4a:77:71:ff: 9e:a3:90:11:2c:8c:57:47:ba:c1:ea:6e:aa:38:01:7f:1a:81: 33:5b:2c:6d:31:75:21:99:a7:5c:6b:98:68:7c:56:2d:54:4e: f5:2c:94:11:cd:82:ee:fc:54:77:e3:ac:2a:eb:ce:b5:db:9b: ba:7d:49:bf:ad:0d:8d:98:e3:11:5e:ea:91:59:ec:5a:c2:71: 2c:70:66:81 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUT6I9gixWU3Wjo/nNTOeZf9UUZR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZjE2MmM1MTAxNzkyNTJiNzJkZjg5 YmE1ODZlNzlhNzEwZDNjNGJhOGFhMDAzZmE2NjNhOGZjMzBlYjQ1MTVkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolsWrVW0RefaOkevIFES5mn5jxN/ 8yhwsIfWI6DdQ7fyraJ+xnJjWzAPHE9QZupfRb5SexTzKqMBo1a9I5qnmkR5h9KK LLnqwXxgAGrw9SRbt54qstDSIFLetDMYOJd7O6DBkyDyLSsatG5K4vKbnNjewFty uC8fwkNliSjD0jTirAAO0zzjfDtoZVE/usosXOHfUf17FxgfvqRnF93NrUyLQFT+ 1nzibPLE9oB22Wwz9+UPzHExd3UBHT75NCLw04QnI2/16+k2AS+gsPLfuXxIJFnD FLr3iz/0jPNQSLvBCS6yNLarExirm0xk21WlOOEwl5vrtQy38LlbeLtG+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDQ9rzpLAKazZlrTFGq6gxLhFBagMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyOGVmMTM3LTBhY2QtNGVmZC1iOWVlLWIzNTI4MTBhM2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeCAMA0GCSqGSIb3DQEBCwUAA4IBAQAo2kLXHu+HkUr8nGjW PRLyW0NH4Iaal0LE90rYbWufaZjF+coy9G9pH22AcxO6lBNJjY8gnmi+aiEGab4t spUhm1cZVd3sRBtr005eQmUbQL5Kqp1aMm0HrgnsMtJf0j/+paS7FR5h0VyYCm9e YUjQL7Z7yozOLC/w55xMG/NnofAaVGPczqBddfWDQJzTmgiIjT/AawZhaNoT4Y77 0scJNJzeaZ6YD7HpnZSOCeYmkEp3cf+eo5ARLIxXR7rB6m6qOAF/GoEzWyxtMXUh madca5hofFYtVE71LJQRzYLu/FR346wq686125u6fUm/rQ2NmOMRXuqRWexawnEs cGaB -----END CERTIFICATE-----Generated at Wed Feb 5 04:12:37 2025 by rpki-client