$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa File: 1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa (raw, json) Hash identifier: Ik0+iAxsnN6g2MWIarw3ufplQu1NBH8XYItggFpdykM= Subject key identifier: 9D:0B:3D:27:4E:EB:8A:49:5A:8F:E9:E6:CC:89:A6:96:8B:D7:27:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5564A82CA2AD83B4BD9AC75A0D501934A158E9C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:64:a8:2c:a2:ad:83:b4:bd:9a:c7:5a:0d:50:19:34:a1:58:e9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:78:44:00:99:74:13:44:6d:a0:78:98:34: 85:8c:86:5a:4b:b3:07:e1:fc:5c:0d:3c:01:16:b4: 41:73:a3:b4:f8:00:ee:e1:68:dd:79:30:4a:c6:97: fb:3a:69:aa:20:63:97:94:ab:b1:6f:60:8c:44:30: 01:22:82:3b:39:b3:61:37:45:8f:aa:01:35:71:cd: b4:27:ef:01:5d:44:ce:ca:ed:65:bd:0f:0c:a2:28: 60:cb:43:ce:8a:b3:af:58:64:a3:49:5c:70:1c:f7: f2:a7:04:14:c6:f1:63:5a:b6:97:77:21:3e:6d:9e: fd:fb:71:53:a9:6f:c5:eb:a1:9d:da:ca:a5:b1:2b: 5d:16:1c:6c:5e:73:c3:ce:0d:22:1b:bd:e4:23:5c: c1:59:57:f0:53:a0:f7:7e:79:20:fe:40:a5:34:74: 7a:56:29:83:90:b5:50:5c:3d:0c:27:23:af:5c:8f: cf:1e:8c:41:ed:7f:50:1c:4a:6e:c3:94:02:2f:93: 2c:f8:38:6f:6e:2c:60:b1:c6:b2:f0:c0:1e:ef:1f: 98:51:78:f5:d9:c0:48:82:c6:70:95:79:9a:13:04: 4d:28:cf:4c:44:b2:8a:ef:79:25:e6:62:c7:80:a0: 7e:13:d0:c0:5d:fd:ab:85:34:d2:d9:a8:b9:b5:89: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0B:3D:27:4E:EB:8A:49:5A:8F:E9:E6:CC:89:A6:96:8B:D7:27:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f040::/48 Signature Algorithm: sha256WithRSAEncryption 60:e9:46:62:d4:4d:d1:69:b2:de:52:26:10:03:67:88:e0:7f: fd:da:71:19:42:ed:47:68:d0:fd:57:d3:90:19:80:8f:2a:cd: 0a:cf:3a:0d:fa:8f:83:fa:6f:d8:67:02:9b:26:ca:59:24:f0: b8:6c:14:1e:42:2c:08:a9:68:55:45:ee:19:f1:11:10:0a:18: 4d:eb:9b:52:56:ae:58:02:be:93:23:87:c3:1b:54:83:f7:3e: c6:47:08:a6:5a:fc:26:87:72:6e:6d:ed:58:39:3c:8e:07:eb: fa:72:9c:9b:a9:f4:e9:74:fa:67:f3:a0:d0:17:83:40:2c:22: cf:17:69:28:08:bb:54:2f:1b:ac:7d:be:5a:72:88:3a:3a:e0: f8:fa:17:75:04:e2:cd:fd:75:3d:5f:b6:c3:8f:bc:ff:31:ee: fb:e5:0c:fb:42:49:12:92:8f:25:e1:31:fb:e4:87:9e:4b:21: 6d:c9:96:9b:e5:ee:2a:5b:3b:77:87:a9:6f:2a:5a:cf:48:00: 7c:ba:06:16:dd:a3:1a:17:ac:24:34:6e:3c:f9:3e:26:04:fa: 5a:15:2c:90:23:bf:db:e3:10:d9:f2:aa:eb:8d:06:e1:1c:24: a4:79:dd:cd:a3:ae:24:07:35:c3:a1:57:7f:bd:e3:ed:06:64: 67:16:63:c1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVWSoLKKtg7S9msdaDVAZNKFY6ckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAMmVmOTA1M2Y4Mjg2Y2JhOThlMzE1 N2I3MmMwMjAxZDQ0NjY4MmI0YmFmM2EwZDcxYTUzMmUzMGVhYzc1NTQzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj94RACZdBNEbaB4mDSFjIZaS7MH 4fxcDTwBFrRBc6O0+ADu4WjdeTBKxpf7OmmqIGOXlKuxb2CMRDABIoI7ObNhN0WP qgE1cc20J+8BXUTOyu1lvQ8Moihgy0POirOvWGSjSVxwHPfypwQUxvFjWraXdyE+ bZ79+3FTqW/F66Gd2sqlsStdFhxsXnPDzg0iG73kI1zBWVfwU6D3fnkg/kClNHR6 VimDkLVQXD0MJyOvXI/PHoxB7X9QHEpuw5QCL5Ms+Dhvbixgscay8MAe7x+YUXj1 2cBIgsZwlXmaEwRNKM9MRLKK73kl5mLHgKB+E9DAXf2rhTTS2ai5tYlwqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ0LPSdO64pJWo/p5syJppaL1yf2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlYWU0YzRmLTQ0NWItNGJmNS1hZTdlLTE3NTZkODdkZWExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPBAMA0GCSqGSIb3DQEBCwUAA4IBAQBg6UZi1E3RabLeUiYQ A2eI4H/92nEZQu1HaND9V9OQGYCPKs0KzzoN+o+D+m/YZwKbJspZJPC4bBQeQiwI qWhVRe4Z8REQChhN65tSVq5YAr6TI4fDG1SD9z7GRwimWvwmh3Jube1YOTyOB+v6 cpybqfTpdPpn86DQF4NALCLPF2koCLtULxusfb5acog6OuD4+hd1BOLN/XU9X7bD j7z/Me775Qz7QkkSko8l4TH75IeeSyFtyZab5e4qWzt3h6lvKlrPSAB8ugYW3aMa F6wkNG48+T4mBPpaFSyQI7/b4xDZ8qrrjQbhHCSked3No64kBzXDoVd/vePtBmRn FmPB -----END CERTIFICATE-----Generated at Wed Feb 5 04:01:43 2025 by rpki-client