$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03946701-8b36-428e-a995-e140eb64f729.roa File: 03946701-8b36-428e-a995-e140eb64f729.roa (raw, json) Hash identifier: d/TRb0kmqaA9c/7/vJ27ItEcS00k73sUzrXW0/IfRuE= Subject key identifier: 3F:BD:F1:DC:87:C7:A4:AF:27:DA:6E:9A:5E:58:43:00:2E:29:DE:7A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5682199CBD09994A02CB3E301D4F240B7CDD52BA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03946701-8b36-428e-a995-e140eb64f729.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:82:19:9c:bd:09:99:4a:02:cb:3e:30:1d:4f:24:0b:7c:dd:52:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:c0:00:89:62:63:c2:c4:29:20:cb:74:0e: 0a:50:09:85:9b:62:f2:df:4c:8b:f3:a2:a8:ce:5e: 46:cf:41:08:14:b4:28:26:2a:8b:51:69:30:48:92: 06:06:b8:e5:61:d9:83:6f:4d:b7:13:00:85:98:00: a7:6d:0e:33:18:0d:1b:f0:a9:ca:4e:2e:cc:ab:46: 32:c4:9e:f0:d7:a4:88:29:68:23:be:f2:ec:fc:63: 5b:de:a9:0d:51:b2:5f:d4:60:5a:2f:6e:79:0d:72: e7:64:5a:43:e7:f5:ba:bd:ca:af:f8:42:22:75:32: de:6f:13:ae:99:b9:80:49:4a:22:71:b0:7e:9f:54: 46:ca:0b:8c:42:47:42:50:f7:07:69:83:8a:7c:15: d0:69:0f:74:08:13:4f:fb:72:a1:30:e5:53:c9:a4: 62:06:d5:95:ef:ef:40:4c:82:ca:8d:85:69:97:1c: 93:76:6d:d7:5a:4b:3e:78:34:57:dc:3f:71:eb:44: fc:03:be:35:58:f2:f4:d0:6e:3b:e5:52:8b:b2:e4: 60:33:1e:5c:35:c4:68:5b:ea:40:63:0b:53:5b:87: 56:ac:cf:46:54:6b:0c:5c:8b:36:0d:68:c5:57:73: 61:fd:c7:6e:ad:05:a8:10:73:0e:63:93:e7:89:03: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BD:F1:DC:87:C7:A4:AF:27:DA:6E:9A:5E:58:43:00:2E:29:DE:7A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03946701-8b36-428e-a995-e140eb64f729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4020::/48 Signature Algorithm: sha256WithRSAEncryption 67:0d:2f:fd:a8:17:a9:67:2f:01:99:14:b6:e3:e8:ff:12:61: d3:64:24:4d:e7:1c:53:8f:43:45:30:7c:b5:2b:4a:13:cf:c6: de:c7:86:55:6c:20:ea:27:29:6a:54:b6:aa:e4:3d:f0:5d:b2: bb:4e:8a:6a:b4:3e:aa:9f:3a:44:9d:15:26:a5:16:5c:24:04: 44:81:06:10:fe:77:3d:b3:59:c0:96:b3:b1:0e:eb:03:29:94: 7c:88:77:1f:b2:20:87:b7:f5:3e:f6:54:d3:9c:f7:18:db:1c: b4:a8:c6:2d:54:d0:68:65:79:69:a0:72:04:d9:9b:a5:96:4f: a3:5c:c4:5e:18:11:86:d1:b6:c3:d4:c8:48:a1:f9:31:68:57: 49:06:67:af:5c:c6:1c:f4:35:45:d1:64:09:21:8f:df:af:2a: 13:76:32:8d:ec:fd:55:41:16:36:92:b7:fb:c7:93:94:49:9a: 36:67:67:d0:a5:40:15:26:f3:03:8d:29:4a:1e:24:5b:3b:c3: 25:8a:9e:3c:3c:51:51:76:9e:ff:8e:f2:1a:18:47:c4:fd:f1: 3d:69:72:ed:87:28:e3:83:5e:e9:65:22:40:25:28:c0:1a:9a: 0d:6d:3b:d6:a7:04:13:c2:31:0b:41:ba:ac:ae:14:03:18:3a: 19:f6:b0:07 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVoIZnL0JmUoCyz4wHU8kC3zdUrowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAN2EyYzJmOWI3OTQ3ZDk1NjRkY2Zl OTAzMzIwZjBkNGYzOWIzNzY5ZjUzZGM3NDM1NTVlYjlkNjIwNDZkZGVmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA353AAIliY8LEKSDLdA4KUAmFm2Ly 30yL86Kozl5Gz0EIFLQoJiqLUWkwSJIGBrjlYdmDb023EwCFmACnbQ4zGA0b8KnK Ti7Mq0YyxJ7w16SIKWgjvvLs/GNb3qkNUbJf1GBaL255DXLnZFpD5/W6vcqv+EIi dTLebxOumbmASUoicbB+n1RGyguMQkdCUPcHaYOKfBXQaQ90CBNP+3KhMOVTyaRi BtWV7+9ATILKjYVplxyTdm3XWks+eDRX3D9x60T8A741WPL00G475VKLsuRgMx5c NcRoW+pAYwtTW4dWrM9GVGsMXIs2DWjFV3Nh/cdurQWoEHMOY5PniQN6JQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD+98dyHx6SvJ9puml5YQwAuKd56MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzOTQ2NzAxLThiMzYtNDI4ZS1hOTk1LWUxNDBlYjY0ZjcyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUAgMA0GCSqGSIb3DQEBCwUAA4IBAQBnDS/9qBepZy8BmRS2 4+j/EmHTZCRN5xxTj0NFMHy1K0oTz8bex4ZVbCDqJylqVLaq5D3wXbK7TopqtD6q nzpEnRUmpRZcJAREgQYQ/nc9s1nAlrOxDusDKZR8iHcfsiCHt/U+9lTTnPcY2xy0 qMYtVNBoZXlpoHIE2Zullk+jXMReGBGG0bbD1MhIofkxaFdJBmevXMYc9DVF0WQJ IY/fryoTdjKN7P1VQRY2krf7x5OUSZo2Z2fQpUAVJvMDjSlKHiRbO8Mlip48PFFR dp7/jvIaGEfE/fE9aXLthyjjg17pZSJAJSjAGpoNbTvWpwQTwjELQbqsrhQDGDoZ 9rAH -----END CERTIFICATE-----Generated at Wed Feb 5 03:48:05 2025 by rpki-client