$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa File: 1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa (raw, json) Hash identifier: sNRt0q2JnSu1NI67y3kfzHXV50XkQpSYi2dnP8tBEZs= Subject key identifier: D1:94:2F:FD:60:74:26:3E:D6:4A:12:B9:01:25:A4:CC:E2:75:F8:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 391520613FABBFC1A3B78029E6B224D9F57E5DE7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:15:20:61:3f:ab:bf:c1:a3:b7:80:29:e6:b2:24:d9:f5:7e:5d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:54:1d:5f:2f:f4:46:5b:14:49:97:37:18: 5a:e0:6a:00:b6:80:0d:75:1a:c4:84:7e:d0:f0:d8: cf:cf:e7:69:8c:8c:d3:99:f4:96:35:f5:e0:90:14: 45:fe:21:75:4a:39:d6:0c:84:09:19:4f:03:7d:06: 39:bc:6f:52:f0:95:a0:68:29:90:4e:4d:1a:d2:e8: b9:40:48:d4:9c:cf:41:71:f2:64:e4:ed:86:23:06: 76:7d:12:c4:86:60:06:2c:e1:8b:72:c9:36:1b:7a: 4a:b3:fa:0b:99:d1:b2:a8:57:f3:54:3d:cd:3e:f3: 2e:5b:38:e3:9c:92:32:73:15:29:cf:b3:a3:25:69: 6a:f8:3a:b1:b3:c7:bb:9f:33:7d:7b:60:9a:f4:84: b5:68:4c:1b:17:81:4d:a9:b6:ef:28:90:25:7d:27: 33:5f:60:af:70:68:e4:19:20:e4:d7:47:61:ca:8f: 93:f2:a5:2e:71:30:31:6f:87:9c:ff:79:65:bd:34: c1:ad:62:e7:f9:4d:1f:53:f2:03:09:02:60:75:5f: 46:05:1b:0f:2a:26:2d:9d:d2:5f:a2:bd:d5:86:49: b8:b6:68:68:d0:07:1e:c6:c3:4a:96:07:87:a0:64: cc:5e:19:53:67:b2:33:9c:dc:58:47:bd:ba:80:72: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:94:2F:FD:60:74:26:3E:D6:4A:12:B9:01:25:A4:CC:E2:75:F8:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8080::/48 Signature Algorithm: sha256WithRSAEncryption 73:78:6f:85:ff:e4:2e:b6:db:bd:0f:18:75:08:a6:87:21:3b: 2c:af:a1:50:43:72:2c:38:03:e9:8a:06:6a:1c:66:8f:3a:4a: bb:86:b8:9c:fc:54:7c:5c:6f:fe:eb:ff:4c:aa:2d:19:cf:c2: 84:66:30:8b:11:1a:97:f7:26:f1:f7:99:e1:c1:d8:1c:25:f9: b9:a1:c5:bd:c5:04:a1:75:33:6c:47:c3:fb:1a:c5:38:dc:60: 47:39:ed:94:b1:81:ce:32:4b:30:51:f1:bb:c7:f7:e3:9b:56: bc:12:63:ec:ee:c5:28:e3:49:24:89:f0:f6:5a:ef:51:98:87: 52:98:c5:ae:4f:b9:7f:ef:9b:84:44:87:35:e5:f0:ab:e3:55: ae:30:19:57:a5:57:8c:ff:28:d7:87:71:23:80:0c:fc:0b:48: e0:98:7b:a6:45:56:5c:e2:3f:f7:c6:b3:cc:0c:ad:12:47:a1: 3d:4f:b3:ca:1d:7a:88:12:bd:91:0d:b1:d9:72:b4:07:37:a1: 8a:5f:92:ce:ea:2e:53:26:4f:10:9e:38:db:c1:16:ba:cc:49: 7f:35:4f:94:d0:91:e9:ed:60:22:5f:d9:56:71:8e:77:cf:35: cd:55:cb:8d:ba:90:12:bb:7e:4e:8d:ae:5a:6b:4f:fd:32:4e: bb:54:37:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUORUgYT+rv8Gjt4Ap5rIk2fV+XecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANjlhN2M3Njk3ZGYyYmMyZGE1ZGY0 YThkYWQwMGQxMjRhNzFmOGM5N2E1NTJhNzI3YmMxOWU2OTRmODlmNDdkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BFUHV8v9EZbFEmXNxha4GoAtoAN dRrEhH7Q8NjPz+dpjIzTmfSWNfXgkBRF/iF1SjnWDIQJGU8DfQY5vG9S8JWgaCmQ Tk0a0ui5QEjUnM9BcfJk5O2GIwZ2fRLEhmAGLOGLcsk2G3pKs/oLmdGyqFfzVD3N PvMuWzjjnJIycxUpz7OjJWlq+Dqxs8e7nzN9e2Ca9IS1aEwbF4FNqbbvKJAlfScz X2CvcGjkGSDk10dhyo+T8qUucTAxb4ec/3llvTTBrWLn+U0fU/IDCQJgdV9GBRsP KiYtndJfor3Vhkm4tmho0AcexsNKlgeHoGTMXhlTZ7IznNxYR726gHJ+eQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNGUL/1gdCY+1koSuQElpMzidfhBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjYTVlY2MyLTZiYmUtNGFiNS1iMjU1LTJiOGRlMzY3ZGVjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYCAMA0GCSqGSIb3DQEBCwUAA4IBAQBzeG+F/+Quttu9Dxh1 CKaHITssr6FQQ3IsOAPpigZqHGaPOkq7hric/FR8XG/+6/9Mqi0Zz8KEZjCLERqX 9ybx95nhwdgcJfm5ocW9xQShdTNsR8P7GsU43GBHOe2UsYHOMkswUfG7x/fjm1a8 EmPs7sUo40kkifD2Wu9RmIdSmMWuT7l/75uERIc15fCr41WuMBlXpVeM/yjXh3Ej gAz8C0jgmHumRVZc4j/3xrPMDK0SR6E9T7PKHXqIEr2RDbHZcrQHN6GKX5LO6i5T Jk8QnjjbwRa6zEl/NU+U0JHp7WAiX9lWcY53zzXNVcuNupASu35Oja5aa0/9Mk67 VDfy -----END CERTIFICATE-----Generated at Wed Feb 5 03:46:32 2025 by rpki-client