$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa File: 17401e4c-0efe-451f-8a30-4d161fbab45f.roa (raw, json) Hash identifier: zmcUSPJphi61cKuv0yhOYQLmMLq+cfjqjRfbk7GZh14= Subject key identifier: 8B:36:DC:1A:AD:20:D0:4E:C7:47:B9:3D:6C:4F:D7:48:5A:1C:DE:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D2B5A698F112723978ABA2137AD6F19C2B2C8A6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2b:5a:69:8f:11:27:23:97:8a:ba:21:37:ad:6f:19:c2:b2:c8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:51:0a:8e:a6:5a:94:7d:00:07:17:49:86: 06:b6:77:61:00:34:53:98:53:e5:90:b5:5c:7d:c2: 56:df:b7:e4:03:3a:1b:aa:0f:d0:2f:c7:6d:35:60: 14:77:a1:04:ac:fb:a3:f9:8c:ba:02:0b:32:06:0e: 82:f4:80:af:26:33:06:3f:4c:83:bd:0a:3e:c7:0b: 2b:c7:9c:ec:65:e7:46:a8:0f:c0:a8:c4:c7:21:1d: 6b:7b:9f:15:22:9a:7d:b8:83:7e:cd:84:42:5e:9f: a8:9f:16:d2:52:c5:64:f9:d8:b4:72:ed:5b:c0:9d: 7c:10:91:a3:98:12:42:93:7e:b7:b9:6c:0d:76:6c: 07:ef:02:b6:e0:ab:a1:3b:dd:ed:c5:d4:a6:58:00: 57:8b:d1:f2:36:c8:9f:a0:29:5b:f2:90:2b:bb:c1: ab:cb:0d:ce:ca:db:29:2a:f9:ae:52:1d:e3:94:b1: bd:7c:18:24:e8:1d:d9:3b:bb:44:0c:75:38:ee:70: b2:46:23:84:dd:95:8b:66:8f:05:c0:8e:3f:a2:18: 64:8a:f0:71:57:de:63:5f:3c:80:ff:d3:79:be:69: f9:b3:ed:47:96:25:34:68:4a:ea:8c:83:7b:5a:41: e8:57:03:29:f0:f5:5b:2f:bf:3e:35:2a:15:57:6b: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:DC:1A:AD:20:D0:4E:C7:47:B9:3D:6C:4F:D7:48:5A:1C:DE:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4080::/46 Signature Algorithm: sha256WithRSAEncryption c9:0a:9e:28:68:76:48:14:8c:15:55:86:2d:9c:c3:89:03:91: 93:cb:99:1a:00:e5:2b:e5:97:f0:37:ef:8d:0f:95:83:b1:10: 98:16:a3:a8:16:7e:0c:8e:9e:17:72:af:94:ae:52:e4:56:ab: cc:15:fa:3d:6f:0d:5d:9d:6a:2b:ae:88:44:74:24:0f:14:33: 9c:23:a7:d7:ec:02:cb:16:c6:b7:36:d0:6c:59:df:c5:49:d7: 56:db:36:54:fd:49:f0:03:91:d2:15:84:df:d9:66:f4:45:73: f6:3b:ff:18:95:12:0a:74:94:aa:d4:98:62:ae:d6:4e:c6:de: 9c:91:04:63:ef:3b:15:3c:f4:05:cc:3b:f6:3a:83:00:f0:fa: e5:bb:aa:2f:59:ef:d9:d0:94:7a:e1:14:d4:b3:39:3b:fc:5a: fc:17:14:d4:65:7c:15:43:56:50:38:0e:b3:53:ad:bc:6c:cd: 25:6a:a7:f1:b9:6b:95:e8:a9:19:60:ea:79:f0:75:96:5d:1b: b0:7e:ac:eb:01:a5:aa:b9:1e:9c:dd:01:db:c7:e1:81:f8:c1: 88:eb:5c:c0:f1:fe:96:67:02:4f:89:f9:b5:fd:31:b9:7a:8f: f7:ce:e4:7c:55:8e:f3:6f:3a:6c:df:9c:20:bd:3f:0c:76:18: ad:61:9e:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTStaaY8RJyOXirohN61vGcKyyKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZWNiZDRlNWE4NWYzMGIzYjQ5MWZk MWE1Y2MxMjViYzk0ODk3OTc1YTRjY2YzY2E4NjNmYjY5MDE2OGRhN2VlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdRCo6mWpR9AAcXSYYGtndhADRT mFPlkLVcfcJW37fkAzobqg/QL8dtNWAUd6EErPuj+Yy6AgsyBg6C9ICvJjMGP0yD vQo+xwsrx5zsZedGqA/AqMTHIR1re58VIpp9uIN+zYRCXp+onxbSUsVk+di0cu1b wJ18EJGjmBJCk363uWwNdmwH7wK24KuhO93txdSmWABXi9HyNsifoClb8pAru8Gr yw3OytspKvmuUh3jlLG9fBgk6B3ZO7tEDHU47nCyRiOE3ZWLZo8FwI4/ohhkivBx V95jXzyA/9N5vmn5s+1HliU0aErqjIN7WkHoVwMp8PVbL78+NSoVV2szDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIs23BqtINBOx0e5PWxP10haHN7bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3NDAxZTRjLTBlZmUtNDUxZi04YTMwLTRkMTYxZmJhYjQ1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba90CAMA0GCSqGSIb3DQEBCwUAA4IBAQDJCp4oaHZIFIwVVYYt nMOJA5GTy5kaAOUr5ZfwN++ND5WDsRCYFqOoFn4Mjp4Xcq+UrlLkVqvMFfo9bw1d nWorrohEdCQPFDOcI6fX7ALLFsa3NtBsWd/FSddW2zZU/UnwA5HSFYTf2Wb0RXP2 O/8YlRIKdJSq1JhirtZOxt6ckQRj7zsVPPQFzDv2OoMA8Prlu6ovWe/Z0JR64RTU szk7/Fr8FxTUZXwVQ1ZQOA6zU628bM0laqfxuWuV6KkZYOp58HWWXRuwfqzrAaWq uR6c3QHbx+GB+MGI61zA8f6WZwJPifm1/TG5eo/3zuR8VY7zbzps35wgvT8Mdhit YZ6F -----END CERTIFICATE-----Generated at Wed Feb 5 04:00:26 2025 by rpki-client