$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa File: 124c546b-d995-4fdf-978d-19217a16b0c7.roa (raw, json) Hash identifier: wGsbg+IJx2lf51DfHOuodfAFlSOgzlAc4ygf2gS4b38= Subject key identifier: 36:8F:A4:70:21:F0:3F:E3:8D:14:0D:3D:B2:CE:E7:F8:41:C7:A8:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FB667F719F68BE88F368915DF9DCEB0775DAD7E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b6:67:f7:19:f6:8b:e8:8f:36:89:15:df:9d:ce:b0:77:5d:ad:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:5e:ce:02:51:7c:3d:45:6c:47:fd:bf:27: 69:f5:c8:ce:89:1a:db:47:2d:e3:b2:1e:f9:8c:ca: 07:55:d2:ec:5b:ed:9a:6d:23:88:be:af:ae:82:d9: 22:b8:3a:ec:0b:29:1e:b2:37:a7:8d:a2:f7:7b:53: 45:b6:f4:25:5b:70:be:55:99:ff:f0:b8:a2:aa:27: d9:fb:e6:f6:71:c0:1b:c9:bf:58:10:c6:da:e8:97: 8c:5f:6a:43:50:64:80:ee:ae:83:97:3f:d8:67:b4: 11:a5:83:dd:3b:27:4c:1f:66:2f:50:70:6c:2a:7d: e0:a4:8f:52:1d:66:e9:4e:27:10:2c:0f:fc:05:a7: 23:a2:76:1d:d7:48:48:14:9e:86:da:1e:30:f6:50: 2a:ba:80:d9:bf:e4:b1:ce:1b:27:09:d6:17:de:4e: b4:7e:5f:fd:f3:e0:f1:6d:28:67:75:35:6d:e6:23: 85:e3:30:44:16:50:c3:cc:dd:b6:ec:85:f5:d1:55: 12:7a:5c:40:a5:06:6b:06:a0:3a:ee:e7:2f:2d:ff: d3:71:7c:08:3e:32:ec:1a:1b:de:92:87:47:01:79: 4c:db:28:63:42:5c:6f:0e:82:a4:de:f1:95:b3:a5: 69:1b:cb:69:34:05:ce:b9:bb:1c:24:5a:fd:10:b5: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:A4:70:21:F0:3F:E3:8D:14:0D:3D:B2:CE:E7:F8:41:C7:A8:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/38 Signature Algorithm: sha256WithRSAEncryption 47:26:c3:be:24:54:4e:88:36:1c:d6:6e:48:a9:86:5a:af:1b: c3:0e:7e:9c:77:2b:aa:02:a6:98:17:e7:f5:fc:9b:9a:2d:4e: 77:d5:9f:16:26:fa:e1:ed:87:75:c2:f4:13:40:b1:54:99:d9: 24:47:eb:2d:2a:b4:13:0d:cf:c5:5c:37:0a:6c:98:88:18:ee: 41:3f:46:03:93:d1:be:ba:dd:e1:b4:f0:df:a5:f2:a1:88:31: 5b:15:7a:48:bb:c2:34:40:26:43:34:b6:38:6e:ea:ae:a6:f9: ae:70:93:b0:a2:b9:07:fa:64:34:88:c4:59:70:43:e7:62:ff: 42:fd:d1:8a:68:ff:39:5d:23:86:43:8d:4a:e4:89:11:75:8c: 73:fd:68:08:2d:50:3a:57:1f:ed:ca:6b:86:9d:82:56:ba:44: 01:f5:0e:f7:bb:4d:2e:6a:ce:98:a6:58:f7:1e:48:7c:06:ad: 1c:50:a1:81:47:ef:74:e7:1a:cb:5f:bb:e3:8b:31:cd:62:66: e3:21:b7:61:36:18:b5:81:3b:ed:c4:8f:09:ae:da:72:18:60: 9d:57:f9:20:3e:a7:1a:da:8e:9e:08:ea:fb:e0:d4:4e:4b:67: 0c:b5:92:68:f6:f4:8d:9a:ec:10:a8:d0:ba:2f:32:40:a1:0f: 1a:f2:f9:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL7Zn9xn2i+iPNokV353OsHddrX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAODQ2YWUyODJlNTNhODcyNWNhYWQ3 ZjI4MjY0NTJmZGEyY2NmZWJhMzMwZTgwZGM4YzA5MDRlMzcwMWEzZjc1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fNezgJRfD1FbEf9vydp9cjOiRrb Ry3jsh75jMoHVdLsW+2abSOIvq+ugtkiuDrsCykesjenjaL3e1NFtvQlW3C+VZn/ 8LiiqifZ++b2ccAbyb9YEMba6JeMX2pDUGSA7q6Dlz/YZ7QRpYPdOydMH2YvUHBs Kn3gpI9SHWbpTicQLA/8BacjonYd10hIFJ6G2h4w9lAquoDZv+SxzhsnCdYX3k60 fl/98+DxbShndTVt5iOF4zBEFlDDzN227IX10VUSelxApQZrBqA67ucvLf/TcXwI PjLsGhvekodHAXlM2yhjQlxvDoKk3vGVs6VpG8tpNAXOubscJFr9ELVUXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDaPpHAh8D/jjRQNPbLO5/hBx6gKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyNGM1NDZiLWQ5OTUtNGZkZi05NzhkLTE5MjE3YTE2YjBjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIAwDQYJKoZIhvcNAQELBQADggEBAEcmw74kVE6INhzWbkip hlqvG8MOfpx3K6oCppgX5/X8m5otTnfVnxYm+uHth3XC9BNAsVSZ2SRH6y0qtBMN z8VcNwpsmIgY7kE/RgOT0b663eG08N+l8qGIMVsVeki7wjRAJkM0tjhu6q6m+a5w k7CiuQf6ZDSIxFlwQ+di/0L90Ypo/zldI4ZDjUrkiRF1jHP9aAgtUDpXH+3Ka4ad gla6RAH1Dve7TS5qzpimWPceSHwGrRxQoYFH73TnGstfu+OLMc1iZuMht2E2GLWB O+3Ejwmu2nIYYJ1X+SA+pxrajp4I6vvg1E5LZwy1kmj29I2a7BCo0LovMkChDxry +eI= -----END CERTIFICATE-----Generated at Wed Feb 5 03:56:38 2025 by rpki-client