$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bdcc7b0-021b-40da-9332-82434be37f74.roa File: 0bdcc7b0-021b-40da-9332-82434be37f74.roa (raw, json) Hash identifier: vz0JHLRn99Ov9+rPMDB6/CQh6gTFFt1MbVMvDtftTS4= Subject key identifier: 50:0C:A8:22:4B:62:60:32:07:07:CA:B8:31:3C:26:6D:51:1B:38:3A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44B9E2092789FFD6F239398A60997274D2AA6A0C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bdcc7b0-021b-40da-9332-82434be37f74.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b9:e2:09:27:89:ff:d6:f2:39:39:8a:60:99:72:74:d2:aa:6a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:20:87:e6:d4:f8:6e:c5:8d:cf:46:ef:a0: 4f:83:98:80:75:b0:d1:63:e9:89:22:cd:fc:89:4a: e1:d3:62:93:32:da:e3:1a:27:da:6f:fe:43:06:8c: e0:71:38:6b:2c:3d:95:2e:fc:b3:7b:b4:fd:f6:2f: 4f:8f:63:0e:e0:39:06:76:15:c4:e6:c2:0f:2e:6f: ed:5e:23:50:4f:64:52:db:df:b1:f2:11:4d:e0:e3: 1d:23:fe:4e:3f:9b:90:e1:2e:a0:f5:98:ad:b2:2b: 5c:e4:8d:d1:46:0c:f3:39:f4:0b:a2:c4:95:e2:df: 74:da:18:35:10:8a:e0:10:16:e2:63:23:81:d2:f7: 48:4a:7f:f1:82:4f:91:e0:7d:8d:c2:02:70:13:84: d1:5a:70:93:2e:e1:43:db:17:4e:c5:12:24:5f:bf: 1c:55:8b:8d:c9:0b:fc:d7:1d:78:da:6b:30:c3:9f: 8a:e8:cc:1a:fb:24:69:6d:54:a9:1f:3b:f2:98:87: 62:7f:a4:e9:29:a7:38:44:6f:cc:94:89:c1:4f:85: db:ad:03:8f:c5:f2:0e:4d:04:57:cb:6f:4f:fc:a7: 6f:ec:b0:c2:6d:6a:8a:a7:b9:ee:95:58:b3:84:35: b8:c1:92:f7:3b:51:d7:72:34:6f:64:21:e5:4e:3a: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0C:A8:22:4B:62:60:32:07:07:CA:B8:31:3C:26:6D:51:1B:38:3A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bdcc7b0-021b-40da-9332-82434be37f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4040::/48 Signature Algorithm: sha256WithRSAEncryption 34:6e:54:92:cd:5d:1e:cd:6d:40:b8:79:69:36:2c:1c:2e:e8: 25:95:8f:34:0a:7e:d8:f2:27:78:86:11:80:7a:93:01:7a:a7: 26:4b:3d:9e:97:5d:e2:5b:b4:d7:3a:44:ac:43:3d:6b:6e:4c: 8b:49:6a:91:94:57:2b:04:cc:e4:34:d4:af:5a:23:dd:5e:e7: 76:5b:6b:cf:c9:ac:75:61:76:91:d8:b4:ac:5d:89:c0:90:80: 23:65:3e:b9:68:46:f3:69:3d:71:58:e0:44:f5:76:41:37:fe: 2b:65:ab:c0:e0:77:e6:e1:43:e1:9f:2f:0f:3b:66:1f:fa:4e: 12:b4:bc:d7:49:e2:f3:85:33:a5:ff:6d:a0:dc:43:ae:66:7b: d2:01:30:a6:fc:39:0a:b1:99:3f:aa:5b:3a:2f:d3:9d:2d:58: f9:c6:9c:ae:00:7a:df:55:00:a5:91:59:69:fa:54:16:f1:46: 76:fe:fd:5a:f5:d3:ee:e3:91:c3:c6:3f:e8:b0:35:fe:94:4a: eb:fe:f2:10:3d:e7:c0:0e:a7:c0:66:40:69:45:f4:cb:6e:cb: d5:fd:6f:7d:82:55:dc:44:07:22:ee:8e:07:7b:ea:60:1f:5e: 4b:a5:40:2d:37:45:22:33:44:d8:77:78:57:06:79:24:23:e8: e3:2c:da:57 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURLniCSeJ/9byOTmKYJlydNKqagwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZDJlZjc2NjQwZTNhM2M4MGFjOGMz ZTdlMWMyN2JhZGE4OWQ5MTQyNWE0ZTllNTQ1OTk2MzJiZmZhZGJlOTY2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Gogh+bU+G7Fjc9G76BPg5iAdbDR Y+mJIs38iUrh02KTMtrjGifab/5DBozgcThrLD2VLvyze7T99i9Pj2MO4DkGdhXE 5sIPLm/tXiNQT2RS29+x8hFN4OMdI/5OP5uQ4S6g9Zitsitc5I3RRgzzOfQLosSV 4t902hg1EIrgEBbiYyOB0vdISn/xgk+R4H2NwgJwE4TRWnCTLuFD2xdOxRIkX78c VYuNyQv81x142msww5+K6Mwa+yRpbVSpHzvymIdif6TpKac4RG/MlInBT4XbrQOP xfIOTQRXy29P/Kdv7LDCbWqKp7nulVizhDW4wZL3O1HXcjRvZCHlTjqV5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFAMqCJLYmAyBwfKuDE8Jm1RGzg6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBiZGNjN2IwLTAyMWItNDBkYS05MzMyLTgyNDM0YmUzN2Y3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEBAMA0GCSqGSIb3DQEBCwUAA4IBAQA0blSSzV0ezW1AuHlp NiwcLugllY80Cn7Y8id4hhGAepMBeqcmSz2el13iW7TXOkSsQz1rbkyLSWqRlFcr BMzkNNSvWiPdXud2W2vPyax1YXaR2LSsXYnAkIAjZT65aEbzaT1xWOBE9XZBN/4r ZavA4Hfm4UPhny8PO2Yf+k4StLzXSeLzhTOl/22g3EOuZnvSATCm/DkKsZk/qls6 L9OdLVj5xpyuAHrfVQClkVlp+lQW8UZ2/v1a9dPu45HDxj/osDX+lErr/vIQPefA DqfAZkBpRfTLbsvV/W99glXcRAci7o4He+pgH15LpUAtN0UiM0TYd3hXBnkkI+jj LNpX -----END CERTIFICATE-----Generated at Wed Feb 5 03:57:01 2025 by rpki-client