$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa File: 0f3544c3-90af-45ac-b6c1-f680a3230f34.roa (raw, json) Hash identifier: I69VMQKPxtohvSCMdOVtqLKdqjLIT1AqNZ/2KnxxicA= Subject key identifier: 15:4C:53:05:35:01:BC:3E:DA:8C:8A:58:FC:AF:83:45:51:25:2A:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D38248AEDF0752D12357A01FE514087F867509C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:38:24:8a:ed:f0:75:2d:12:35:7a:01:fe:51:40:87:f8:67:50:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:20:43:41:fc:a2:d6:a0:c9:3c:dc:c6:0f: b3:7c:ad:4e:fa:69:6d:43:c2:8a:13:95:67:1e:de: 3b:1f:d0:59:42:52:f8:1c:ea:77:0c:64:27:de:ea: 30:b5:58:78:eb:b0:26:e3:a6:d1:b1:55:54:27:d6: 40:71:f7:ae:97:13:f7:da:92:5d:78:9e:24:0f:60: 34:ca:93:0e:d2:9c:6d:a7:1b:89:86:ca:69:8b:ab: 43:b4:4a:f1:2b:f3:8e:fe:94:f6:11:0d:b1:82:43: 06:15:22:89:be:1b:62:3a:93:fe:78:ce:92:44:01: 5b:88:2e:f0:55:1c:82:be:fa:e8:31:9e:a1:0d:8d: f2:d0:c9:61:db:ca:a4:c2:2a:27:c5:73:1f:44:6d: 87:36:f4:8a:93:b2:41:1d:ad:c7:5e:67:ba:b2:f3: 64:f5:2d:77:ff:15:3d:49:06:f5:cc:b8:8e:7b:77: 99:cc:3c:74:21:27:85:70:05:1c:88:04:32:e3:e6: d7:08:99:e4:08:ba:88:55:26:c9:28:3b:7a:23:85: e2:af:97:3b:36:8d:61:51:1f:e2:33:84:18:5c:f3: 39:ee:f7:c5:22:e4:80:36:0f:f8:1e:3f:40:c6:5c: 71:9c:d0:2c:e1:4c:e3:91:80:b0:89:2b:13:b2:5e: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4C:53:05:35:01:BC:3E:DA:8C:8A:58:FC:AF:83:45:51:25:2A:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b040::/48 Signature Algorithm: sha256WithRSAEncryption b0:55:41:c0:70:8e:4f:87:e2:1e:dd:35:f8:3b:c2:b6:1c:3a: 18:96:e1:df:3f:69:7c:2d:d3:af:23:44:a3:50:1d:1d:f9:5d: 59:7a:2f:c2:53:30:58:4f:c7:92:44:11:d5:1c:61:9d:ed:da: d6:9e:7a:16:b4:9e:32:0f:8e:ad:26:c0:cd:54:60:8a:67:b2: da:1a:b5:bc:5d:1c:df:35:11:de:3f:2f:e3:39:e3:39:a6:65: ea:d6:9d:a8:5e:ef:19:f5:b6:c7:75:75:aa:95:14:7b:21:02: 55:14:83:c7:81:d5:5e:cb:00:13:95:f8:22:b2:12:e8:c5:39: fe:1d:f1:60:ed:c9:08:34:d2:9d:ca:84:46:0e:34:5c:1f:e0: 1e:6a:54:8a:1a:e0:8a:8b:07:a1:d2:fd:da:9f:ad:50:e5:9b: 9b:c9:f6:4c:4b:3a:00:5d:5f:55:17:cf:db:c6:47:01:47:9f: 7d:0a:0a:ea:f9:f5:60:4a:ce:a8:19:c9:d5:b4:47:39:23:5c: fc:3b:8b:23:67:23:50:6c:03:a9:ff:cc:94:6e:ec:29:7a:3b: da:d9:f1:36:ad:38:e8:a6:eb:38:90:c0:0a:5e:5c:24:26:fa: 08:ec:56:17:e4:9b:6b:63:00:af:39:aa:9b:2b:48:23:64:64: 99:9a:29:95 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULTgkiu3wdS0SNXoB/lFAh/hnUJwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNANzU2YzllM2ZkOGUzZjZjYjIzN2Yz ZDQyYTgxOWVjNjNkMmUwNDljNjNlNTE3ZGJkZjcxZGNkMTBlOWM4YWU2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW0gQ0H8otagyTzcxg+zfK1O+mlt Q8KKE5VnHt47H9BZQlL4HOp3DGQn3uowtVh467Am46bRsVVUJ9ZAcfeulxP32pJd eJ4kD2A0ypMO0pxtpxuJhsppi6tDtErxK/OO/pT2EQ2xgkMGFSKJvhtiOpP+eM6S RAFbiC7wVRyCvvroMZ6hDY3y0Mlh28qkwionxXMfRG2HNvSKk7JBHa3HXme6svNk 9S13/xU9SQb1zLiOe3eZzDx0ISeFcAUciAQy4+bXCJnkCLqIVSbJKDt6I4Xir5c7 No1hUR/iM4QYXPM57vfFIuSANg/4Hj9AxlxxnNAs4UzjkYCwiSsTsl68ywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBVMUwU1Abw+2oyKWPyvg0VRJSrrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzU0NGMzLTkwYWYtNDVhYy1iNmMxLWY2ODBhMzIzMGYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALBAMA0GCSqGSIb3DQEBCwUAA4IBAQCwVUHAcI5Ph+Ie3TX4 O8K2HDoYluHfP2l8LdOvI0SjUB0d+V1Zei/CUzBYT8eSRBHVHGGd7drWnnoWtJ4y D46tJsDNVGCKZ7LaGrW8XRzfNRHePy/jOeM5pmXq1p2oXu8Z9bbHdXWqlRR7IQJV FIPHgdVeywATlfgishLoxTn+HfFg7ckINNKdyoRGDjRcH+AealSKGuCKiweh0v3a n61Q5ZubyfZMSzoAXV9VF8/bxkcBR599Cgrq+fVgSs6oGcnVtEc5I1z8O4sjZyNQ bAOp/8yUbuwpejva2fE2rTjopus4kMAKXlwkJvoI7FYX5JtrYwCvOaqbK0gjZGSZ mimV -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:09 2025 by rpki-client