$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa File: ff6d0825-64c9-42eb-979c-d2252693e691.roa (raw, json) Hash identifier: 5Rj3BbGkzkqhQKWCmL7wJwZR+aI5AsaD0P2TII6YXpw= Subject key identifier: 21:60:B4:F2:84:F7:D5:82:0B:F9:E8:A9:82:D8:F2:EE:3B:EE:D8:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D1B873972152C3398B5584E4F9536BA5D238014 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1b:87:39:72:15:2c:33:98:b5:58:4e:4f:95:36:ba:5d:23:80:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:e7:d3:a9:7a:63:a4:26:c1:14:6d:a3:fa: 81:ba:b1:c4:2c:c3:7c:dd:60:dd:52:cd:29:62:32: 8b:4e:53:cf:25:84:11:0b:e0:db:3a:5a:87:26:94: 76:fa:d7:39:d2:44:1a:d9:c8:6c:3c:54:13:75:5b: cc:80:f2:a9:83:48:85:42:9d:87:83:42:9b:0d:7c: a0:57:3f:4e:3b:fe:55:b2:a0:f9:c2:92:fc:8e:53: db:f2:a4:15:05:71:54:4f:7d:4f:9a:52:02:f5:60: a1:d6:03:c7:f4:e3:62:9e:83:b8:98:d6:1e:13:e3: 9a:3b:6b:31:4d:b6:e8:07:05:eb:1a:39:dd:2c:62: 33:0f:3d:73:d1:34:48:cd:08:b6:80:0b:3f:b9:02: 92:99:52:ee:6e:b5:f5:97:bc:4f:be:d1:aa:8d:ee: dd:53:f8:aa:25:ba:07:3b:aa:84:dc:47:47:ac:ef: 1b:ab:bf:f3:57:9b:90:92:f9:e6:0b:13:ff:f4:db: c1:04:82:b6:11:be:90:ae:00:1a:5d:d3:29:34:87: 64:e0:d5:eb:8e:38:88:57:c2:26:90:be:08:b3:8e: 84:64:f5:62:d0:75:87:6e:1d:46:06:30:7f:62:e3: 68:3e:26:ec:da:a3:eb:04:97:d3:88:b9:26:26:1b: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:B4:F2:84:F7:D5:82:0B:F9:E8:A9:82:D8:F2:EE:3B:EE:D8:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4010::/48 Signature Algorithm: sha256WithRSAEncryption b4:e9:94:11:9f:f0:59:3b:ad:4d:07:1f:ab:67:88:db:3a:8e: 64:21:9a:bc:4a:c3:a4:56:e1:f3:d6:39:29:05:46:5a:35:eb: 56:b0:ac:11:1b:0b:35:c4:ea:49:e7:e6:b7:35:df:68:0b:52: 2c:46:59:bc:00:6b:dc:7c:02:f9:6b:e9:42:62:f1:58:bf:d5: 91:13:91:35:be:0f:b0:80:7c:f5:d8:34:b7:18:d8:29:5b:a2: f7:58:13:f2:c4:e4:c3:35:5c:9d:73:d7:40:f9:ae:1e:94:4c: 0d:cf:d5:4c:b8:b9:8b:08:38:bb:98:e3:59:db:b6:67:13:e6: 5b:c1:e6:4f:b5:41:d7:9d:94:58:12:ce:03:ba:58:91:7d:7f: 83:5a:34:8b:41:13:7e:7d:e8:ac:b4:af:e1:82:9a:1e:79:f9: 4b:19:88:3b:bd:92:9a:1b:98:0f:ab:1c:60:88:4c:bc:02:88: 15:d7:8d:cf:6d:f1:8d:1b:e8:2c:14:c0:77:1c:fb:14:f4:ca: 99:c4:9b:da:05:1e:db:f7:04:f3:fc:ec:06:52:41:8f:20:d2: 53:d3:1b:76:48:81:24:94:2a:76:d7:ff:61:05:ea:40:52:64: 2b:9e:f4:cb:e3:73:37:9c:c4:cb:40:df:82:27:5e:b5:88:84: a5:29:19:53 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPRuHOXIVLDOYtVhOT5U2ul0jgBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAOTQyNjk0YzdjZDcxNjU0Njk3YWRj NjdiNGM5ZmIzNWRjMDQzZTI2MGQ0MzdlYTIyYzliNTRjYjRiZTdlYmU3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Obn06l6Y6QmwRRto/qBurHELMN8 3WDdUs0pYjKLTlPPJYQRC+DbOlqHJpR2+tc50kQa2chsPFQTdVvMgPKpg0iFQp2H g0KbDXygVz9OO/5VsqD5wpL8jlPb8qQVBXFUT31PmlIC9WCh1gPH9ONinoO4mNYe E+OaO2sxTbboBwXrGjndLGIzDz1z0TRIzQi2gAs/uQKSmVLubrX1l7xPvtGqje7d U/iqJboHO6qE3EdHrO8bq7/zV5uQkvnmCxP/9NvBBIK2Eb6QrgAaXdMpNIdk4NXr jjiIV8ImkL4Is46EZPVi0HWHbh1GBjB/YuNoPibs2qPrBJfTiLkmJhtexwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCFgtPKE99WCC/noqYLY8u477tj8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmNmQwODI1LTY0YzktNDJlYi05NzljLWQyMjUyNjkzZTY5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0AQMA0GCSqGSIb3DQEBCwUAA4IBAQC06ZQRn/BZO61NBx+r Z4jbOo5kIZq8SsOkVuHz1jkpBUZaNetWsKwRGws1xOpJ5+a3Nd9oC1IsRlm8AGvc fAL5a+lCYvFYv9WRE5E1vg+wgHz12DS3GNgpW6L3WBPyxOTDNVydc9dA+a4elEwN z9VMuLmLCDi7mONZ27ZnE+ZbweZPtUHXnZRYEs4DuliRfX+DWjSLQRN+feistK/h gpoeeflLGYg7vZKaG5gPqxxgiEy8AogV143PbfGNG+gsFMB3HPsU9MqZxJvaBR7b 9wTz/OwGUkGPINJT0xt2SIEklCp21/9hBepAUmQrnvTL43M3nMTLQN+CJ161iISl KRlT -----END CERTIFICATE-----Generated at Wed Feb 5 04:08:04 2025 by rpki-client