$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa File: 04a34ce3-dd89-4dc8-af98-17645f710d46.roa (raw, json) Hash identifier: ihWFBs/jXHSdcr/926fTWUdtnf8floemvcBZ1jJQ/To= Subject key identifier: 13:9D:DE:82:70:03:4C:09:84:42:B2:35:92:DE:70:E0:02:E0:44:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F72BECF4F5853C5BDBDAA621D5B02B88B334907 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:72:be:cf:4f:58:53:c5:bd:bd:aa:62:1d:5b:02:b8:8b:33:49:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:fe:7b:ba:b3:11:94:c6:bd:9a:a4:ca:da: d2:72:69:85:c7:27:68:e6:c0:a4:ed:8c:c0:8b:c2: 69:1a:43:0f:24:b3:fd:80:6b:1f:28:ac:d1:95:a3: e6:48:f1:78:65:47:d3:2e:7c:31:bd:ed:92:da:69: 17:03:07:87:dc:a4:f7:99:44:7f:1e:ae:0f:f0:e4: 52:13:a0:e4:b4:b3:66:61:13:61:03:f3:45:45:47: 56:cf:41:83:5e:2b:ba:fb:02:fe:49:a9:0f:70:32: 34:e0:97:d5:4d:4a:00:ee:40:a1:58:77:87:2b:86: da:42:ec:22:36:10:c2:e5:6d:f4:fe:9a:b0:20:b6: 19:c9:ee:da:cd:d6:b4:28:96:0b:88:0c:c5:3d:17: fa:b6:53:ac:f7:a1:82:7d:9a:b6:03:5a:f4:83:cf: 91:34:72:a1:e1:d3:ee:1e:26:a1:62:63:6f:8c:7f: 35:bc:d0:e8:f7:4a:16:bf:1d:a4:fa:e2:18:2b:b0: 1c:53:89:5f:db:a3:dd:c8:09:b9:07:36:1d:85:be: de:14:01:f4:8a:3e:27:98:83:a1:61:bf:46:17:99: e1:57:89:92:ef:b2:8c:34:28:b0:f4:77:5a:6a:ae: 14:be:de:0b:4f:e0:f9:cc:ef:3d:43:f7:f9:5b:ce: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:DE:82:70:03:4C:09:84:42:B2:35:92:DE:70:E0:02:E0:44:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8880::/46 Signature Algorithm: sha256WithRSAEncryption 88:17:a7:4d:b0:23:d4:24:da:b1:20:4b:e2:26:8d:cc:af:1d: 82:72:eb:3f:ac:4e:e9:a3:29:a0:a1:b3:7e:0b:cf:5b:1d:2b: 18:d4:ee:ac:62:73:1d:fa:ea:c7:69:b4:4a:9a:81:26:7f:e3: 1f:bf:b8:c7:d3:93:26:15:1d:e8:22:01:a7:75:a2:6f:cb:31: 1e:6e:6e:2e:04:5e:6a:93:5c:e4:3e:d2:e8:75:28:57:80:94: b7:55:a9:37:78:ad:f8:ee:19:ca:ba:e9:03:9e:a0:70:4f:7d: 8c:6e:d5:e1:4f:c4:75:fb:0b:15:4e:35:61:53:64:0e:bf:3c: 08:c6:81:15:f3:bb:f1:55:43:9e:fd:7e:69:e2:2b:be:3f:0a: 65:56:ec:c7:fb:08:86:81:12:4f:5c:2b:11:55:1e:c6:94:50: 0a:64:db:f8:21:9f:c5:1b:31:c2:06:a7:90:2e:22:43:d4:8e: 1d:e1:85:a8:7b:5b:26:6c:57:ab:3f:ff:c9:5a:52:80:31:c1: 85:b3:32:76:a9:d9:82:bf:23:90:aa:64:a1:1a:9f:b1:9e:84: d8:9d:13:28:0c:6f:9e:d2:a5:3e:8e:ca:e1:11:87:95:2d:1e: cd:33:4b:7c:0c:6c:a1:17:14:ff:74:68:bb:d8:d7:6d:46:ce: 56:d1:fb:e4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUX3K+z09YU8W9vapiHVsCuIszSQcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAODBhMDQxZDFiZDJkM2ZkMWU1ZWZl YjZmOGQwNDljNTlhMDAwYmJkM2M5YmE2YTQ5ZDBiZjkxYzJmY2E4ZjRkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAb+e7qzEZTGvZqkytrScmmFxydo 5sCk7YzAi8JpGkMPJLP9gGsfKKzRlaPmSPF4ZUfTLnwxve2S2mkXAweH3KT3mUR/ Hq4P8ORSE6DktLNmYRNhA/NFRUdWz0GDXiu6+wL+SakPcDI04JfVTUoA7kChWHeH K4baQuwiNhDC5W30/pqwILYZye7azda0KJYLiAzFPRf6tlOs96GCfZq2A1r0g8+R NHKh4dPuHiahYmNvjH81vNDo90oWvx2k+uIYK7AcU4lf26PdyAm5BzYdhb7eFAH0 ij4nmIOhYb9GF5nhV4mS77KMNCiw9Hdaaq4Uvt4LT+D5zO89Q/f5W86IzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBOd3oJwA0wJhEKyNZLecOAC4ESrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0YTM0Y2UzLWRkODktNGRjOC1hZjk4LTE3NjQ1ZjcxMGQ0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba94iAMA0GCSqGSIb3DQEBCwUAA4IBAQCIF6dNsCPUJNqxIEvi Jo3Mrx2Ccus/rE7poymgobN+C89bHSsY1O6sYnMd+urHabRKmoEmf+Mfv7jH05Mm FR3oIgGndaJvyzEebm4uBF5qk1zkPtLodShXgJS3Vak3eK347hnKuukDnqBwT32M btXhT8R1+wsVTjVhU2QOvzwIxoEV87vxVUOe/X5p4iu+PwplVuzH+wiGgRJPXCsR VR7GlFAKZNv4IZ/FGzHCBqeQLiJD1I4d4YWoe1smbFerP//JWlKAMcGFszJ2qdmC vyOQqmShGp+xnoTYnRMoDG+e0qU+jsrhEYeVLR7NM0t8DGyhFxT/dGi72NdtRs5W 0fvk -----END CERTIFICATE-----Generated at Wed Feb 5 03:59:47 2025 by rpki-client