$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa File: f30265ee-dfe7-4906-974a-06db74656ac8.roa (raw, json) Hash identifier: M1FGrG71yKaSIMij5EVCBMnUudMs+pjYK0rtliqZk60= Subject key identifier: 82:9C:B5:89:9D:4E:59:3A:69:8F:45:A3:44:57:A0:22:90:07:DE:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48700BA537285D200D1AEFA153ABB0EF240AB3A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:70:0b:a5:37:28:5d:20:0d:1a:ef:a1:53:ab:b0:ef:24:0a:b3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d3:b5:56:61:ae:a4:ee:1c:f4:65:31:e9:26: d6:8e:21:ea:01:4b:34:1c:36:ec:9c:dc:9c:4f:29: 97:08:ab:7c:05:98:4e:8c:ae:84:96:4d:01:68:f0: fb:95:65:42:c3:b5:04:91:b6:3c:55:5c:bb:61:12: 38:47:43:85:c7:9a:f8:ad:d1:2f:e9:5b:0d:4f:79: 81:cc:a5:b6:32:92:1a:5c:8c:3f:df:dd:33:30:c6: 09:fa:b7:50:64:fd:cf:a1:ad:e5:e8:e3:77:ef:74: e2:ac:b5:68:f9:e0:a5:7d:77:52:28:5b:6d:7c:d2: 57:f1:40:06:b9:a4:4c:1a:ae:5c:29:8e:11:03:37: e0:2b:11:d0:12:70:9a:6c:d2:a1:7c:b1:40:46:9a: 36:b7:26:af:e1:e0:d1:2e:d5:72:ed:a2:cf:57:17: 27:65:97:ed:78:3e:1e:f1:e1:d2:75:b6:49:52:d2: 87:67:dc:c3:c7:50:dd:30:63:75:57:69:7f:91:18: 4d:94:54:3d:f8:80:14:3c:a8:60:e5:ba:12:f3:bd: 3d:d1:7c:c9:1b:4d:54:34:ac:ab:2e:38:63:fa:8e: a3:07:99:b0:f2:5e:f5:ec:38:9b:60:9a:24:1b:31: d8:6b:a6:20:98:93:5b:9a:33:73:ba:ae:ee:1e:5e: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:B5:89:9D:4E:59:3A:69:8F:45:A3:44:57:A0:22:90:07:DE:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption 09:8b:0f:f9:e4:bd:7b:ef:64:0e:19:a2:81:eb:7e:a3:7a:f2: 43:11:77:87:69:98:90:c5:96:59:ec:9d:cc:45:f8:c7:c9:25: 8e:7c:01:87:4a:bd:1f:1f:86:45:87:04:44:88:f4:47:b3:1e: b8:54:da:3b:c7:95:5d:84:72:51:c3:6f:e3:6b:4d:d3:91:c1: d1:6d:7d:58:4f:5c:0b:6f:7c:2d:0b:25:e1:1b:cf:0e:86:22: df:24:a9:c4:8a:8f:a0:cb:e4:10:dc:f8:ed:5e:6a:aa:9f:61: 74:a8:75:00:b2:23:82:8b:1a:cb:83:39:c8:b8:e2:f0:06:2d: a5:b9:48:34:98:68:b4:58:8d:3d:db:aa:b9:eb:7f:03:1e:3b: a3:a3:22:c0:7a:ee:b5:4f:cb:f6:5c:45:18:1d:f0:17:70:bd: 91:01:d7:6d:a9:c9:49:ce:d5:fb:c7:af:85:7c:8e:29:e6:f8: a5:da:d4:1d:61:5b:72:04:f3:36:f4:29:4f:0c:4e:dd:57:54: e5:ab:76:33:ea:f1:30:0f:eb:42:e8:29:17:ee:aa:2c:ac:1f: d9:5c:e2:4b:ae:7a:c1:8f:81:74:7c:68:e9:df:d9:62:97:ff: 27:95:bd:1f:52:c2:99:7e:64:fb:ab:dd:5a:91:8c:b7:af:11: 0e:a2:62:ce -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSHALpTcoXSANGu+hU6uw7yQKs6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAZTlkY2I0MjcwMzNjYmJkODEzNDgw OTJjOTgzYjZjNDk1ZDRkMmM1Mzk4ZTU0OTcyM2JlYTdiYzM1ZGZmYmNiNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9O1VmGupO4c9GUx6SbWjiHqAUs0 HDbsnNycTymXCKt8BZhOjK6Elk0BaPD7lWVCw7UEkbY8VVy7YRI4R0OFx5r4rdEv 6VsNT3mBzKW2MpIaXIw/390zMMYJ+rdQZP3Poa3l6ON373TirLVo+eClfXdSKFtt fNJX8UAGuaRMGq5cKY4RAzfgKxHQEnCabNKhfLFARpo2tyav4eDRLtVy7aLPVxcn ZZfteD4e8eHSdbZJUtKHZ9zDx1DdMGN1V2l/kRhNlFQ9+IAUPKhg5boS87090XzJ G01UNKyrLjhj+o6jB5mw8l717DibYJokGzHYa6YgmJNbmjNzuq7uHl4l5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIKctYmdTlk6aY9Fo0RXoCKQB95iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzMDI2NWVlLWRmZTctNDkwNi05NzRhLTA2ZGI3NDY1NmFjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMCgMA0GCSqGSIb3DQEBCwUAA4IBAQAJiw/55L1772QOGaKB 636jevJDEXeHaZiQxZZZ7J3MRfjHySWOfAGHSr0fH4ZFhwREiPRHsx64VNo7x5Vd hHJRw2/ja03TkcHRbX1YT1wLb3wtCyXhG88OhiLfJKnEio+gy+QQ3PjtXmqqn2F0 qHUAsiOCixrLgznIuOLwBi2luUg0mGi0WI0926q5638DHjujoyLAeu61T8v2XEUY HfAXcL2RAddtqclJztX7x6+FfI4p5vil2tQdYVtyBPM29ClPDE7dV1Tlq3Yz6vEw D+tC6CkX7qosrB/ZXOJLrnrBj4F0fGjp39lil/8nlb0fUsKZfmT7q91akYy3rxEO omLO -----END CERTIFICATE-----Generated at Wed Feb 5 04:06:08 2025 by rpki-client