$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/045f365a-d378-4715-9b15-1b09a05b7ff1.roa File: 045f365a-d378-4715-9b15-1b09a05b7ff1.roa (raw, json) Hash identifier: 9k2c+2emVG94LvxbGI9mzb5tTSEOWAeOZFcPkO0b8yo= Subject key identifier: 93:53:0F:FA:96:A9:4A:03:D2:DD:5A:FE:C1:42:99:C0:E0:F3:C3:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69D44D59FC632258B25DECCD7ACEC9F2DD8F1D75 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/045f365a-d378-4715-9b15-1b09a05b7ff1.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d4:4d:59:fc:63:22:58:b2:5d:ec:cd:7a:ce:c9:f2:dd:8f:1d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:3a:e8:64:64:e6:b9:70:84:6c:98:17:6f: 9e:3a:b3:cb:46:7b:1e:e7:07:17:41:f5:c9:2c:8a: 19:8c:f0:47:f5:5a:e0:c9:94:82:79:81:58:10:dc: 3c:cf:88:1c:2d:ae:86:f9:f8:c4:a7:9e:67:d4:94: 50:37:39:a0:0d:8f:7a:66:23:d3:a7:45:dd:6c:5a: b7:b6:81:96:46:3f:ff:53:52:a0:fc:08:f1:98:53: ec:60:16:f7:b0:ea:35:4d:a7:4e:53:c9:c3:6a:5d: f4:aa:81:7b:fb:79:5a:cb:8e:55:b3:b3:2b:c0:94: 35:82:64:a6:55:0e:d0:38:cf:f3:91:86:a0:30:01: f1:33:9e:59:d8:da:86:36:7f:39:8a:0a:fb:b4:48: 51:a3:10:52:5f:1c:c2:68:b2:0d:b6:0b:0c:3f:d3: 2d:91:d8:30:92:d1:bb:0f:f4:5d:b0:4c:56:37:0f: f1:0a:46:d7:af:37:83:49:9a:08:1d:37:72:c8:a1: 9b:65:39:97:4e:dd:e4:93:9b:13:88:22:fd:cd:4d: 93:0a:55:8c:7d:dd:0a:db:61:99:78:68:f8:33:7c: 58:68:4f:58:12:df:c9:ea:31:45:05:2a:59:3f:a5: 32:68:ba:f1:47:45:a7:21:7e:e2:33:54:a9:b3:db: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:53:0F:FA:96:A9:4A:03:D2:DD:5A:FE:C1:42:99:C0:E0:F3:C3:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/045f365a-d378-4715-9b15-1b09a05b7ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b:400::/38 Signature Algorithm: sha256WithRSAEncryption a4:b8:2d:53:93:6c:ef:9b:eb:da:9e:46:cf:08:91:7b:fc:c0: df:1b:76:9e:b3:d6:ca:57:b2:e8:12:bb:33:e0:ed:13:d0:ee: 3d:e2:a0:c6:23:27:b8:53:74:32:7c:c8:c7:fe:31:5a:c0:14: 32:13:b9:d1:52:8d:17:ce:84:38:5c:9e:5c:0c:c4:44:8a:06: a2:04:29:fa:d1:85:ba:9c:58:30:4f:a5:8c:65:b2:bb:e4:01: 52:c3:1a:7e:88:14:32:aa:e0:57:06:17:a4:97:b0:da:7d:20: 45:08:f5:20:8c:0f:6a:f0:ae:9d:76:45:e0:1c:cb:a7:d7:a6: b3:e7:eb:11:7b:1a:8b:b6:30:4c:16:af:2e:a9:b0:a5:72:a8: b5:ec:cb:31:58:8c:0a:a3:2b:d9:e9:58:03:61:44:97:04:65: a1:95:32:b2:3d:fe:59:bc:d0:5a:41:06:13:b2:02:7d:ed:93: 1b:52:c6:3e:86:8a:05:39:62:0a:7f:d2:d2:eb:df:d4:cf:7c: ec:67:15:74:3b:13:32:aa:d9:0b:dd:9f:96:31:a5:55:f2:70: 68:31:d2:c8:36:1c:ca:44:14:b3:4b:3a:dc:b7:2e:63:31:e8: 77:2f:23:89:07:41:14:ba:c6:2b:7b:6b:77:f9:3c:7e:57:1b: 1e:2d:7f:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUadRNWfxjIliyXezNes7J8t2PHXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMWVjMWM5MDM4M2E1M2Q0ZGM2M2Zj OWFlMzFkY2JhZTIxZGJmZTMwYzYzMmIwZjZkMjVkOTVjNjdkZWY4ODg2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kw66GRk5rlwhGyYF2+eOrPLRnse 5wcXQfXJLIoZjPBH9VrgyZSCeYFYENw8z4gcLa6G+fjEp55n1JRQNzmgDY96ZiPT p0XdbFq3toGWRj//U1Kg/AjxmFPsYBb3sOo1TadOU8nDal30qoF7+3lay45Vs7Mr wJQ1gmSmVQ7QOM/zkYagMAHxM55Z2NqGNn85igr7tEhRoxBSXxzCaLINtgsMP9Mt kdgwktG7D/RdsExWNw/xCkbXrzeDSZoIHTdyyKGbZTmXTt3kk5sTiCL9zU2TClWM fd0K22GZeGj4M3xYaE9YEt/J6jFFBSpZP6UyaLrxR0WnIX7iM1Sps9ut1QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJNTD/qWqUoD0t1a/sFCmcDg88MfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0NWYzNjVhLWQzNzgtNDcxNS05YjE1LTFiMDlhMDViN2ZmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwQwDQYJKoZIhvcNAQELBQADggEBAKS4LVOTbO+b69qeRs8I kXv8wN8bdp6z1spXsugSuzPg7RPQ7j3ioMYjJ7hTdDJ8yMf+MVrAFDITudFSjRfO hDhcnlwMxESKBqIEKfrRhbqcWDBPpYxlsrvkAVLDGn6IFDKq4FcGF6SXsNp9IEUI 9SCMD2rwrp12ReAcy6fXprPn6xF7Gou2MEwWry6psKVyqLXsyzFYjAqjK9npWANh RJcEZaGVMrI9/lm80FpBBhOyAn3tkxtSxj6GigU5Ygp/0tLr39TPfOxnFXQ7EzKq 2Qvdn5YxpVXycGgx0sg2HMpEFLNLOty3LmMx6HcvI4kHQRS6xit7a3f5PH5XGx4t f2Q= -----END CERTIFICATE-----Generated at Wed Feb 5 03:49:00 2025 by rpki-client