$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa File: 4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa (raw, json) Hash identifier: 9JcI8Z17gPstPkVTXIt23GUayJ2IYJALGXzBisABMKU= Subject key identifier: 3A:40:68:69:34:58:B2:E2:37:EC:50:81:6C:79:1B:2B:AC:0A:87:33 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 35190EBBD7B154E356CBBD414B8872BBD72A33F6 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Feb 2025 21:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:19:0e:bb:d7:b1:54:e3:56:cb:bd:41:4b:88:72:bb:d7:2a:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:1a:37:e9:9f:6b:9f:2d:78:3c:d7:2e:83: aa:82:3a:e1:c3:85:08:9d:24:cc:6d:69:45:6a:25: ab:8f:73:ae:7c:4b:ad:8c:a1:4a:96:3a:ab:78:33: 01:bd:0a:58:05:7d:3f:1a:78:ba:3f:07:de:dd:2f: fe:92:a4:93:65:52:43:7a:a2:78:04:27:80:87:c4: 81:e1:23:ce:eb:00:87:ba:79:16:01:35:5f:18:47: 7e:4f:10:99:98:8c:e2:b6:83:ce:52:19:40:9d:73: 21:fa:66:ee:d6:5b:b8:8c:4c:38:5e:73:75:5f:2d: d9:92:25:04:24:30:78:a9:63:5b:a2:c1:83:ca:a8: db:9c:c2:63:f5:24:da:84:77:c8:b1:b0:77:d1:29: d3:ff:a9:05:85:b1:bd:43:19:c2:81:e0:b9:70:cf: ee:c8:45:db:2f:66:8a:54:d2:a9:8d:ea:af:5c:c1: ed:19:49:26:00:0a:0a:26:57:9d:0f:d9:1b:cf:f7: b4:e1:79:a2:45:03:f3:f7:94:3b:9f:33:fa:d7:d7: 8e:10:0f:69:ee:f3:aa:42:dc:ad:07:d8:41:62:1d: ab:11:e9:29:8e:d0:c1:97:87:11:de:1e:c7:16:9d: c2:5e:08:e3:14:fe:60:94:b7:50:e6:de:8b:1d:d7: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:68:69:34:58:B2:E2:37:EC:50:81:6C:79:1B:2B:AC:0A:87:33 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 2f:30:a2:83:ad:e2:af:b0:17:24:f2:a5:bc:af:29:b1:68:4e: 18:7c:16:9c:87:01:71:ee:9f:72:a9:2d:22:86:3f:d2:dc:92: 0e:56:ba:58:7d:3c:0f:96:0f:51:72:09:28:57:4a:e6:e5:ea: 47:01:d3:13:6a:79:aa:e4:d2:39:bb:74:a9:93:47:6c:91:b1: ca:19:14:69:b9:3e:9e:e6:e3:95:99:26:15:23:29:0c:d4:7e: af:48:77:ad:0e:bf:6d:11:f3:60:98:f2:9a:b3:4a:5a:4b:96: e6:c3:93:1a:7e:24:55:66:b3:63:45:5f:b4:18:37:ad:14:f3: 69:80:cb:7d:f5:68:62:80:9e:8d:69:30:e8:54:f4:b9:b7:d6: 34:44:30:6e:94:50:a8:68:2d:ea:c4:5a:58:ce:2e:7b:28:8a: f1:07:fe:8c:5a:b7:c1:52:f4:1f:88:d6:9f:4c:86:55:37:42: 80:96:c7:f8:84:b3:3b:43:7b:24:54:c8:e8:f4:88:2c:4e:08: 74:d9:5f:4e:93:1f:10:b2:b3:b6:3b:32:07:49:78:31:d7:95: 37:2e:a9:91:70:1e:54:a0:47:2e:4b:8d:15:b1:11:4c:02:9f: a2:c6:74:ab:f5:b1:36:09:a4:10:26:45:05:cd:80:48:46:c1: a3:71:3d:82 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNRkOu9exVONWy71BS4hyu9cqM/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMmQ2NDU4ZWZmNWM0YWJmYTg3MmRm OWI1OTYxNjVmMTkzNmJkMjcyNmFhOTVhMDJmZjA2Mzg3NjYzZjdkNjk3NzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUoaN+mfa58teDzXLoOqgjrhw4UI nSTMbWlFaiWrj3OufEutjKFKljqreDMBvQpYBX0/Gni6Pwfe3S/+kqSTZVJDeqJ4 BCeAh8SB4SPO6wCHunkWATVfGEd+TxCZmIzitoPOUhlAnXMh+mbu1lu4jEw4XnN1 Xy3ZkiUEJDB4qWNbosGDyqjbnMJj9STahHfIsbB30SnT/6kFhbG9QxnCgeC5cM/u yEXbL2aKVNKpjeqvXMHtGUkmAAoKJledD9kbz/e04XmiRQPz95Q7nzP619eOEA9p 7vOqQtytB9hBYh2rEekpjtDBl4cR3h7HFp3CXgjjFP5glLdQ5t6LHdf9cQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDpAaGk0WLLiN+xQgWx5GyusCoczMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzRiYmQxYmRmLTg2NmUtNGIyNS05YWM2LWU5MjlhMDUwODBiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQAvMKKDreKvsBck8qW8 rymxaE4YfBachwFx7p9yqS0ihj/S3JIOVrpYfTwPlg9RcgkoV0rm5epHAdMTanmq 5NI5u3Spk0dskbHKGRRpuT6e5uOVmSYVIykM1H6vSHetDr9tEfNgmPKas0paS5bm w5MafiRVZrNjRV+0GDetFPNpgMt99WhigJ6NaTDoVPS5t9Y0RDBulFCoaC3qxFpY zi57KIrxB/6MWrfBUvQfiNafTIZVN0KAlsf4hLM7Q3skVMjo9IgsTgh02V9Okx8Q srO2OzIHSXgx15U3LqmRcB5UoEcuS40VsRFMAp+ixnSr9bE2CaQQJkUFzYBIRsGj cT2C -----END CERTIFICATE-----Generated at Wed Feb 5 09:52:44 2025 by rpki-client