$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d4bf11-2541-434d-85c1-6b1e095e0eec.roa File: 01d4bf11-2541-434d-85c1-6b1e095e0eec.roa (raw, json) Hash identifier: k7zfJjSqyiKa6BEAJQTdCUVbs3fIam2sJX8oo1HvABk= Subject key identifier: F3:B8:E7:CB:25:3A:80:A8:D7:F6:8D:28:CC:D7:3B:FC:64:E7:CF:3F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A57CA5C123DD96A348D744ADF25577FE65F311A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d4bf11-2541-434d-85c1-6b1e095e0eec.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:57:ca:5c:12:3d:d9:6a:34:8d:74:4a:df:25:57:7f:e6:5f:31:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:cc:87:b8:58:1d:29:0e:c6:a5:1c:f5:48: 7c:61:4b:2a:de:f7:dd:fa:5a:93:b4:d0:1b:73:e1: 82:e0:50:65:b3:f6:dc:18:ba:8e:62:7f:ff:56:43: fd:e0:af:df:53:94:34:07:66:26:25:59:51:7d:c0: a8:8d:d2:ec:52:68:6d:52:78:1e:8f:64:1c:a2:73: 46:6f:8f:ca:b0:a3:7a:13:4a:bf:b0:56:8f:c5:ea: bf:4b:df:d9:da:17:d1:83:7b:97:f2:f0:31:14:ab: 74:6f:5e:bf:8a:56:6d:69:79:ed:1f:be:47:9c:94: 13:28:79:ef:91:9c:23:79:20:9f:37:dc:8f:be:36: 40:1a:6a:54:f0:b5:ed:a8:99:50:3e:4f:4e:9d:59: 74:13:9e:03:62:48:13:2d:cc:ea:f6:88:1c:67:40: a4:ea:2a:d6:45:ca:89:81:49:e0:2e:19:c4:8e:65: 65:7f:d3:50:ea:47:6a:7d:a4:93:7f:c0:e0:a0:7b: 7b:c4:42:b4:ea:22:a8:bb:0c:b2:38:f0:3d:d1:2e: 11:72:fd:ee:f0:61:19:02:02:4e:98:c7:8e:91:3e: 0f:4c:12:57:d1:ac:d1:e0:f3:16:bc:9b:80:a6:a8: 6d:12:45:6d:33:4c:80:e8:f8:74:98:e2:22:38:c6: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B8:E7:CB:25:3A:80:A8:D7:F6:8D:28:CC:D7:3B:FC:64:E7:CF:3F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d4bf11-2541-434d-85c1-6b1e095e0eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8040::/48 Signature Algorithm: sha256WithRSAEncryption ac:d1:32:75:e9:d1:f6:4c:99:d8:b1:b6:64:6e:8e:72:cb:e4: d0:10:5d:60:d7:b2:d5:b8:71:be:db:10:f5:f9:98:f8:d1:06: d9:b4:0f:57:a2:42:f2:62:32:bd:e2:b7:53:07:f9:38:4e:70: f9:dd:88:70:7e:75:d0:99:b9:19:06:5e:d3:8b:7c:c5:18:01: 14:32:36:1e:8b:56:76:30:e1:c9:05:b2:c4:d2:0a:18:40:50: 14:b4:15:c6:9e:ab:b0:7f:40:3a:08:09:cb:0f:f2:cf:97:8e: d7:33:49:02:9b:ac:d9:d4:d6:77:59:d4:58:c5:3f:3e:b2:96: da:d7:de:ec:f7:9b:6f:80:7f:a1:d8:8a:b1:ee:3f:b6:54:f5: 35:11:a9:50:de:19:ef:2d:85:28:0c:c6:2f:f5:6e:37:85:4f: 5f:b5:93:e2:1c:18:23:f7:b5:63:84:83:2b:e4:4f:b3:c8:20: 27:c9:a4:1f:42:15:c2:d0:a7:90:df:85:7d:ce:b0:19:7f:0f: b6:b9:4d:00:10:58:9e:94:a6:69:e1:26:7d:ad:d4:38:92:7f: ed:50:c8:e3:9b:de:30:0a:f5:5e:6d:0e:62:dc:24:d8:b1:de: 5c:2d:e5:49:f0:3f:6d:ef:b7:a3:8d:62:26:91:b8:59:58:5d: 15:a2:06:32 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGlfKXBI92Wo0jXRK3yVXf+ZfMRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYjg2Mzk3OGI3NmQ5YTk3ODUzYjRm NWRiNGVkNjgyMTA2MDM0MTA5ZThiNzNkMzM1NjgxMTA1MDhjMGE5NzU5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FvMh7hYHSkOxqUc9Uh8YUsq3vfd +lqTtNAbc+GC4FBls/bcGLqOYn//VkP94K/fU5Q0B2YmJVlRfcCojdLsUmhtUnge j2QconNGb4/KsKN6E0q/sFaPxeq/S9/Z2hfRg3uX8vAxFKt0b16/ilZtaXntH75H nJQTKHnvkZwjeSCfN9yPvjZAGmpU8LXtqJlQPk9OnVl0E54DYkgTLczq9ogcZ0Ck 6irWRcqJgUngLhnEjmVlf9NQ6kdqfaSTf8DgoHt7xEK06iKouwyyOPA90S4Rcv3u 8GEZAgJOmMeOkT4PTBJX0azR4PMWvJuApqhtEkVtM0yA6Ph0mOIiOMahuwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPO458slOoCo1/aNKMzXO/xk588/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxZDRiZjExLTI1NDEtNDM0ZC04NWMxLTZiMWUwOTVlMGVlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4BAMA0GCSqGSIb3DQEBCwUAA4IBAQCs0TJ16dH2TJnYsbZk bo5yy+TQEF1g17LVuHG+2xD1+Zj40QbZtA9XokLyYjK94rdTB/k4TnD53YhwfnXQ mbkZBl7Ti3zFGAEUMjYei1Z2MOHJBbLE0goYQFAUtBXGnquwf0A6CAnLD/LPl47X M0kCm6zZ1NZ3WdRYxT8+spba197s95tvgH+h2Iqx7j+2VPU1EalQ3hnvLYUoDMYv 9W43hU9ftZPiHBgj97VjhIMr5E+zyCAnyaQfQhXC0KeQ34V9zrAZfw+2uU0AEFie lKZp4SZ9rdQ4kn/tUMjjm94wCvVebQ5i3CTYsd5cLeVJ8D9t77ejjWImkbhZWF0V ogYy -----END CERTIFICATE-----Generated at Wed Feb 5 04:04:04 2025 by rpki-client