$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa File: 10683670-b448-4b46-8e10-aa3682be179f.roa (raw, json) Hash identifier: wEKS+L234HLwp9gydEfHyI8Zt8SfGDEXa4b52Tob3cE= Subject key identifier: 16:44:08:F2:FE:E0:2C:65:B7:CA:BE:05:CB:8C:27:94:9D:80:8F:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75642C7C71E37FBF826DEBDF97550561FAB77848 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:64:2c:7c:71:e3:7f:bf:82:6d:eb:df:97:55:05:61:fa:b7:78:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:7f:64:79:ee:41:b4:80:15:ac:77:69:90: 2f:3a:4d:64:07:c6:ed:bd:99:ae:e0:11:bd:d0:2e: 07:2a:57:dc:3e:bf:02:22:ef:27:f1:dc:65:98:a1: 22:23:fe:51:4a:d6:9a:fa:d7:61:75:99:d1:b1:a5: e2:24:50:38:49:f8:6b:dc:bd:9a:65:9c:90:96:91: 0e:27:de:b7:cd:c3:fa:12:5b:fb:13:e2:7e:86:69: 94:1c:20:41:00:ff:97:f4:f7:3b:8b:f4:06:6e:10: 56:7b:ec:1e:1d:cf:b1:28:27:63:44:98:4b:ae:13: 57:13:49:e0:4e:b4:67:f7:45:95:96:f2:d7:8e:49: cf:bb:78:b5:9e:ed:85:f3:c5:ee:bd:72:cc:0b:41: 95:c7:b2:dd:4f:3c:4b:27:2a:e9:bc:3d:e8:16:7b: 4d:db:0c:fa:e9:f0:7f:aa:d7:be:5c:74:c5:22:71: 31:18:96:24:25:1a:36:25:58:8e:4a:7f:b3:47:24: d2:ec:2d:ef:2d:c2:40:d3:a2:7f:5d:a7:af:52:1c: dc:57:44:42:3c:ff:d1:c8:0c:e0:8c:7a:64:92:bd: 17:05:55:a5:7e:7b:8b:cc:eb:49:06:2c:17:90:55: a9:6a:4d:5d:cd:c1:67:a0:61:42:4e:f9:7c:ce:01: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:08:F2:FE:E0:2C:65:B7:CA:BE:05:CB:8C:27:94:9D:80:8F:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:840::/48 Signature Algorithm: sha256WithRSAEncryption b3:56:6f:35:c5:95:7b:b8:0e:07:ce:46:2f:9c:e3:11:12:c1: 0e:0d:40:34:f3:3a:1c:4a:f0:1b:a3:0f:0a:e1:05:3d:3c:8e: 95:28:89:74:66:a9:9a:85:50:61:8a:1c:a1:48:ba:2c:12:5d: 34:fc:af:65:2e:4b:4a:75:44:5f:dc:e8:bd:c6:28:93:1d:e0: a8:ce:18:96:af:79:b7:1c:56:c1:45:68:26:8d:d9:3c:37:68: f2:7a:67:42:99:48:c3:89:6a:f8:d1:ad:55:e3:85:ff:fd:1d: 14:e7:10:4c:33:59:da:29:0b:92:d7:4f:35:a3:3a:a6:9d:e8: be:d9:6e:9d:61:46:da:2c:57:a6:14:1b:dd:cf:27:1d:c9:5e: 97:b1:a4:6c:3e:49:0b:f2:5f:c7:02:23:33:63:8b:de:32:dd: 59:4c:52:1f:e0:6d:72:c2:4e:55:8e:ff:70:05:7a:c2:22:9a: 54:a6:a0:d8:53:b7:7e:1d:84:d1:a6:d3:5b:90:23:13:b4:c7: 2f:8f:12:4b:96:4f:b6:f8:8f:79:97:51:9c:ce:c9:87:24:e3: 4c:11:67:ef:4b:69:4c:a2:76:f7:71:26:5f:1e:0e:80:03:59: 9e:b2:32:2f:75:45:63:6a:89:eb:fe:36:08:73:22:c4:52:c9: 27:e0:05:c6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdWQsfHHjf7+Cbevfl1UFYfq3eEgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAOTc3NWY5MWRiNjk1YjBmYzBmMThj OTdjOWM3Nzg0NDk3YmY2MmU3YjI3YWYyYjA1NzMyYzJmMTI3NGQyYTE1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yp/ZHnuQbSAFax3aZAvOk1kB8bt vZmu4BG90C4HKlfcPr8CIu8n8dxlmKEiI/5RStaa+tdhdZnRsaXiJFA4Sfhr3L2a ZZyQlpEOJ963zcP6Elv7E+J+hmmUHCBBAP+X9Pc7i/QGbhBWe+weHc+xKCdjRJhL rhNXE0ngTrRn90WVlvLXjknPu3i1nu2F88XuvXLMC0GVx7LdTzxLJyrpvD3oFntN 2wz66fB/qte+XHTFInExGJYkJRo2JViOSn+zRyTS7C3vLcJA06J/XaevUhzcV0RC PP/RyAzgjHpkkr0XBVWlfnuLzOtJBiwXkFWpak1dzcFnoGFCTvl8zgE99QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBZECPL+4Cxlt8q+BcuMJ5SdgI+3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNjgzNjcwLWI0NDgtNGI0Ni04ZTEwLWFhMzY4MmJlMTc5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAhAMA0GCSqGSIb3DQEBCwUAA4IBAQCzVm81xZV7uA4HzkYv nOMREsEODUA08zocSvAbow8K4QU9PI6VKIl0ZqmahVBhihyhSLosEl00/K9lLktK dURf3Oi9xiiTHeCozhiWr3m3HFbBRWgmjdk8N2jyemdCmUjDiWr40a1V44X//R0U 5xBMM1naKQuS1081ozqmnei+2W6dYUbaLFemFBvdzycdyV6XsaRsPkkL8l/HAiMz Y4veMt1ZTFIf4G1ywk5Vjv9wBXrCIppUpqDYU7d+HYTRptNbkCMTtMcvjxJLlk+2 +I95l1GczsmHJONMEWfvS2lMonb3cSZfHg6AA1mesjIvdUVjaonr/jYIcyLEUskn 4AXG -----END CERTIFICATE-----Generated at Wed Feb 5 03:54:41 2025 by rpki-client