$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4478d0a-ce62-4685-9038-43fd6cd444d2.roa File: f4478d0a-ce62-4685-9038-43fd6cd444d2.roa (raw, json) Hash identifier: VlxEWu2cPaoq1I0rSxjEHdS1E6zX5kABoyG7NBQv9oQ= Subject key identifier: 3C:6E:04:A8:ED:A9:B7:8D:C2:56:7F:28:6E:8C:20:F7:FD:E6:66:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B769AFD6B032FA65BFBCEA26056B5051EFE81D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4478d0a-ce62-4685-9038-43fd6cd444d2.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:76:9a:fd:6b:03:2f:a6:5b:fb:ce:a2:60:56:b5:05:1e:fe:81:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8c:54:f2:01:ee:a1:e0:bb:d5:89:24:ac:f4: 25:f6:3e:24:7d:48:ca:32:78:b9:cc:63:12:f1:a9: 1e:ce:8d:a0:e5:9e:76:c3:66:15:1e:7f:d5:e3:00: 9c:4d:25:67:66:ac:1a:93:b9:94:b5:e9:c4:14:d7: 41:f9:8e:e3:1f:54:fc:6c:ca:96:6e:f5:26:4e:74: 12:74:f6:64:16:d6:49:f3:dd:6b:fa:1d:46:63:82: 87:a4:c7:7a:07:d8:bb:4d:9d:a5:7f:dc:28:72:f1: 51:8c:f4:35:7b:fb:75:54:a4:05:b3:7e:ea:d4:8b: 79:76:ac:ec:4b:1d:25:a2:36:33:40:69:5d:d8:6f: 9f:bb:5e:b6:5e:c0:56:1e:d0:63:e5:50:13:e6:f1: 37:8d:ce:48:7c:95:90:31:4c:16:df:c3:b3:dc:d8: 36:ab:cc:2e:a4:b6:0f:a4:da:8b:85:a9:17:db:cd: ae:00:03:59:cc:3f:91:30:d1:7c:26:54:86:0e:31: 6e:26:6e:a4:57:c2:c0:08:af:76:5f:b9:45:75:3b: 8b:3f:98:25:da:34:ee:d6:3c:d0:bc:50:f9:a9:85: 89:fd:de:4d:5d:50:8b:5a:b5:d1:48:25:b1:0f:e0: b8:68:9f:71:d2:7c:16:1f:3e:01:aa:77:24:31:48: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6E:04:A8:ED:A9:B7:8D:C2:56:7F:28:6E:8C:20:F7:FD:E6:66:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4478d0a-ce62-4685-9038-43fd6cd444d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:6080::/48 Signature Algorithm: sha256WithRSAEncryption 87:48:be:b8:60:60:18:d1:de:f7:36:b6:5e:5e:ff:32:56:10: 5b:1b:73:52:60:42:20:37:0f:45:ff:4b:de:58:36:83:3f:90: 9f:eb:9a:b5:df:49:66:c3:65:20:be:38:a9:a1:8c:d5:7b:21: ca:71:74:01:bc:8e:a9:da:34:47:09:c5:30:35:6e:e1:93:f3: 88:fb:3c:65:54:51:f2:0b:8f:ab:63:03:be:82:3a:05:5f:cf: f9:18:86:f7:a2:30:bd:56:02:84:63:58:34:93:27:27:72:ff: f9:8f:41:4a:cf:df:2f:ae:f0:aa:12:08:10:02:aa:30:2a:c9: 6a:d8:69:a6:63:56:ec:a1:ba:31:9d:49:48:f2:b7:79:23:19: 93:19:ca:ee:74:21:0c:6e:d6:71:75:61:1d:2f:1f:ad:60:d3: 33:3b:d1:cc:b1:92:90:c9:f4:5d:30:39:2c:76:55:06:b8:80: 15:cc:06:f5:e7:c6:64:65:85:4e:fa:fa:59:c4:92:80:75:b0: ee:b3:dd:3a:d5:02:c9:a7:fd:b2:9d:57:d2:bd:dc:c2:ad:10: e8:be:08:08:bc:8f:e6:ce:6d:a9:af:60:16:22:76:05:0f:2b: a9:d5:f8:6c:0e:a3:b7:ec:3f:e1:3d:3c:36:45:3b:18:96:f3: 28:a1:af:2e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUO3aa/WsDL6Zb+86iYFa1BR7+gdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAMzA2ZmNkOWQ3MGQ4NmVhNjdlN2Ri ZWUzYzdkMDljMmQ4MmJhNjM5N2MxMDc2YzBhNDVhZmQ5ZDhjODYwNzExODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IxU8gHuoeC71YkkrPQl9j4kfUjK Mni5zGMS8akezo2g5Z52w2YVHn/V4wCcTSVnZqwak7mUtenEFNdB+Y7jH1T8bMqW bvUmTnQSdPZkFtZJ891r+h1GY4KHpMd6B9i7TZ2lf9wocvFRjPQ1e/t1VKQFs37q 1It5dqzsSx0lojYzQGld2G+fu162XsBWHtBj5VAT5vE3jc5IfJWQMUwW38Oz3Ng2 q8wupLYPpNqLhakX282uAANZzD+RMNF8JlSGDjFuJm6kV8LACK92X7lFdTuLP5gl 2jTu1jzQvFD5qYWJ/d5NXVCLWrXRSCWxD+C4aJ9x0nwWHz4BqnckMUjY3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDxuBKjtqbeNwlZ/KG6MIPf95mYXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y0NDc4ZDBhLWNlNjItNDY4NS05MDM4LTQzZmQ2Y2Q0NDRkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9GCAMA0GCSqGSIb3DQEBCwUAA4IBAQCHSL64YGAY0d73NrZe Xv8yVhBbG3NSYEIgNw9F/0veWDaDP5Cf65q130lmw2UgvjipoYzVeyHKcXQBvI6p 2jRHCcUwNW7hk/OI+zxlVFHyC4+rYwO+gjoFX8/5GIb3ojC9VgKEY1g0kycncv/5 j0FKz98vrvCqEggQAqowKslq2GmmY1bsoboxnUlI8rd5IxmTGcrudCEMbtZxdWEd Lx+tYNMzO9HMsZKQyfRdMDksdlUGuIAVzAb158ZkZYVO+vpZxJKAdbDus9061QLJ p/2ynVfSvdzCrRDovggIvI/mzm2pr2AWInYFDyup1fhsDqO37D/hPTw2RTsYlvMo oa8u -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:15 2025 by rpki-client