$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03891e7b-6543-41e3-a19f-c52726c62fb8.roa File: 03891e7b-6543-41e3-a19f-c52726c62fb8.roa (raw, json) Hash identifier: h6h1FEOmf+jKf6hEaT8GC7RhQejsS84JSSknSjt7Ui8= Subject key identifier: 67:3D:91:69:2E:02:3D:62:A2:0C:FB:06:1C:C3:92:59:4D:5B:F0:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 055C34ABD39E53A8E495032414D5E3B9B3EB64CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03891e7b-6543-41e3-a19f-c52726c62fb8.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:34:ab:d3:9e:53:a8:e4:95:03:24:14:d5:e3:b9:b3:eb:64:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:20:2d:1f:b1:43:68:9e:26:f9:6c:e4:a3:2b: c6:6b:57:d6:f3:df:fc:31:d4:e6:c5:41:d5:86:eb: a0:a1:34:11:ad:89:a8:05:8d:ce:c3:2c:31:59:e6: c6:b7:55:9d:20:6d:bf:bc:b7:09:05:9c:d5:d1:17: b9:b1:38:db:bb:0c:5c:d0:50:ef:9b:06:8a:7b:86: a8:23:9b:47:36:25:27:f4:33:fa:50:1f:37:c7:c9: 9a:1e:40:bd:01:4d:2e:aa:ba:a8:85:60:48:5d:29: 54:e5:8b:a9:eb:94:88:b1:e5:9a:11:b3:22:1f:2a: da:a1:a2:cc:f0:0d:ee:4b:32:c8:9a:a1:27:69:58: aa:62:16:f4:b8:a7:c6:4e:89:9b:ed:bb:b3:5c:06: a6:23:75:74:26:1e:3e:45:9e:7a:3f:b3:5b:79:c6: d4:0d:be:93:b8:87:8a:68:ae:59:52:27:14:f6:0d: 40:e8:68:40:81:58:fa:0e:c4:15:47:93:6d:f6:62: 9d:0d:ab:b6:e4:7d:02:84:82:d2:25:7e:60:8b:dd: 1b:86:be:04:ca:90:2c:9d:81:6f:7e:47:a6:2f:6e: e7:3d:43:1a:b5:8a:2f:dc:8b:eb:48:3b:b4:cc:ff: 8f:39:d8:9a:84:d5:4f:53:68:f5:5b:33:8e:00:ca: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3D:91:69:2E:02:3D:62:A2:0C:FB:06:1C:C3:92:59:4D:5B:F0:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03891e7b-6543-41e3-a19f-c52726c62fb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 57:0d:b2:0e:a0:13:8d:c9:d5:f7:da:cc:88:fa:24:61:93:9b: eb:37:28:ba:ea:05:39:39:5e:e6:3d:6f:ab:47:cb:9b:5e:33: 0d:06:5e:6b:84:25:89:03:1c:fb:88:0c:a4:6b:a2:be:35:33: fb:66:04:26:8a:23:cb:fe:0d:7f:3a:b5:0c:a3:2a:9f:19:c5: e2:ae:2a:c9:cf:ab:38:0f:b5:8a:a3:77:c4:64:2f:55:5a:26: 83:7a:fa:07:8e:6b:d6:80:ac:bd:07:0e:ff:2f:9e:34:b5:cd: 54:24:67:4f:9a:ee:af:69:70:c7:59:62:86:e1:f0:dc:61:0b: 00:e5:a8:fa:c8:5a:63:a5:75:98:e7:8e:e5:0b:fd:2c:c8:6f: ab:1d:51:9f:a3:39:d2:f5:62:5e:73:f3:c0:c6:eb:c1:fd:91: 54:99:29:73:39:62:1d:61:54:de:cc:06:9f:ae:40:c1:ad:b5: 30:73:9b:f9:77:e4:5b:e2:98:19:70:5a:e3:3d:a0:5e:22:7f: 82:a4:1e:c0:50:32:56:d0:f7:5f:71:da:89:4c:c5:5a:1f:04: 6f:f4:d5:2d:df:46:9a:57:aa:de:27:aa:0d:d3:3f:5b:e7:34: 98:4b:77:cf:0c:70:1b:4a:98:1f:65:be:21:cc:0d:d2:56:41: 0e:01:58:23 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBVw0q9OeU6jklQMkFNXjubPrZMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAOGU4NjRiNGJhZWNhOGJlZDQ4OWE0 YjMwNTBlNzExNmM3ZTMxZTZjOGI4ZDI0MzY0MDUwOGUzZWY1YzNiM2ZiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CAtH7FDaJ4m+WzkoyvGa1fW89/8 MdTmxUHVhuugoTQRrYmoBY3OwywxWebGt1WdIG2/vLcJBZzV0Re5sTjbuwxc0FDv mwaKe4aoI5tHNiUn9DP6UB83x8maHkC9AU0uqrqohWBIXSlU5Yup65SIseWaEbMi HyraoaLM8A3uSzLImqEnaViqYhb0uKfGTomb7buzXAamI3V0Jh4+RZ56P7NbecbU Db6TuIeKaK5ZUicU9g1A6GhAgVj6DsQVR5Nt9mKdDau25H0ChILSJX5gi90bhr4E ypAsnYFvfkemL27nPUMatYov3IvrSDu0zP+POdiahNVPU2j1WzOOAMogbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGc9kWkuAj1iogz7BhzDkllNW/BlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzODkxZTdiLTY1NDMtNDFlMy1hMTlmLWM1MjcyNmM2MmZiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAJDAMA0GCSqGSIb3DQEBCwUAA4IBAQBXDbIOoBONydX32syI +iRhk5vrNyi66gU5OV7mPW+rR8ubXjMNBl5rhCWJAxz7iAyka6K+NTP7ZgQmiiPL /g1/OrUMoyqfGcXirirJz6s4D7WKo3fEZC9VWiaDevoHjmvWgKy9Bw7/L540tc1U JGdPmu6vaXDHWWKG4fDcYQsA5aj6yFpjpXWY547lC/0syG+rHVGfoznS9WJec/PA xuvB/ZFUmSlzOWIdYVTezAafrkDBrbUwc5v5d+Rb4pgZcFrjPaBeIn+CpB7AUDJW 0PdfcdqJTMVaHwRv9NUt30aaV6reJ6oN0z9b5zSYS3fPDHAbSpgfZb4hzA3SVkEO AVgj -----END CERTIFICATE-----Generated at Wed Feb 5 04:11:15 2025 by rpki-client