$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa File: 1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa (raw, json) Hash identifier: yNV2xTNArjg6gBLltn4wapr701Jhy8EWGJw2fkiINnM= Subject key identifier: 30:B4:74:43:D9:70:50:24:CE:1E:E9:6A:DE:26:61:EF:18:0D:74:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1335B1F154B7276DE5F516D10ED00B474049F408 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:35:b1:f1:54:b7:27:6d:e5:f5:16:d1:0e:d0:0b:47:40:49:f4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fe:c7:f0:09:5a:74:a7:2f:29:05:d0:c0:cf: 93:cf:89:c0:6c:18:fe:f0:13:31:04:81:9d:28:fc: 7a:61:09:a0:c8:1f:45:6e:cd:1b:0b:fe:36:99:df: 66:7b:72:1d:cd:80:be:c5:d8:db:f9:5b:0d:ef:e1: 6a:61:0c:58:44:b1:1e:fa:e7:c0:f2:61:d2:82:3f: cb:2d:47:19:fa:88:ec:de:43:2f:64:62:4b:be:1e: 75:95:61:5b:83:fb:e1:07:da:75:45:8e:4e:6c:2b: 06:81:1f:51:90:c1:1e:1e:fd:d4:8e:ba:a0:d6:52: 0c:03:d5:ad:89:92:45:18:c3:64:6b:e5:bb:47:d2: 4b:1a:6a:4f:ca:c7:a9:b7:e6:aa:c7:f4:b4:44:6f: 1d:ed:64:d2:a5:d5:ca:f6:21:0e:22:6d:8d:bf:82: 8a:14:d5:bb:6d:cd:04:41:f0:89:1b:50:ae:10:1b: 0c:94:77:8a:dc:eb:5c:48:dd:a5:d5:10:48:d3:0a: 18:e2:fb:9e:95:9b:c2:3e:d6:89:ba:b5:f1:dc:8b: 2d:d0:b2:56:e0:c0:7f:e7:05:cb:66:0f:b1:90:c5: fe:a5:fd:28:ee:ed:4f:4c:ac:81:e2:0a:9d:11:f1: b4:d5:ac:b6:c9:25:49:2e:e1:43:09:bc:c5:4c:1b: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B4:74:43:D9:70:50:24:CE:1E:E9:6A:DE:26:61:EF:18:0D:74:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7040::/48 Signature Algorithm: sha256WithRSAEncryption 13:02:0e:c7:60:6e:d3:6c:2a:18:7e:62:5b:ae:a4:64:2e:c7: 4b:97:9a:8a:41:95:6f:f2:31:cd:b4:58:a5:bf:7e:0c:a9:15: 19:31:f4:d7:64:d4:ca:83:19:e8:88:78:f8:b9:cf:a3:f7:e6: b5:85:bd:e5:eb:27:a7:fa:09:78:80:a0:9d:cc:a5:d7:68:7e: a7:5a:5a:a7:b7:11:e2:53:34:20:ba:63:21:e9:94:71:ba:99: eb:d8:84:b9:36:b9:40:73:11:fb:38:60:3d:a3:33:94:3d:31: f5:13:e4:63:0c:5a:0c:71:5d:5a:98:d7:81:50:0f:d4:72:e6: 16:21:08:52:96:a3:40:0a:14:32:1b:48:65:bb:08:33:39:bd: 15:9e:e3:b4:7c:1b:9a:24:e3:d3:22:82:ee:0d:b0:40:87:19: ca:b8:c8:95:54:b8:0b:01:3c:83:16:57:9b:aa:c6:6a:cf:89: c3:58:7c:e1:35:c7:36:2d:c2:e9:f0:e7:e7:09:78:9a:47:8a: da:3c:b9:f6:f1:79:fd:44:e2:fb:e9:54:32:7b:d1:93:52:c1: ca:0c:2b:ae:be:fc:64:18:74:a1:ef:5f:f1:ba:19:f1:c6:e4: 7c:f8:dd:1f:7b:ad:db:78:aa:ce:a8:fc:6f:2d:7d:67:d7:d7: 1f:93:b6:01 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEzWx8VS3J23l9RbRDtALR0BJ9AgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMmVkMWFlYTk3MTg3YTg5MTIxMjBh NjkwNGE2NGYyZmQ5YTZjNjAwZTVhY2Q4MTc5NzM2MWNjNGIzYjA5NWQ2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/7H8AladKcvKQXQwM+Tz4nAbBj+ 8BMxBIGdKPx6YQmgyB9Fbs0bC/42md9me3IdzYC+xdjb+VsN7+FqYQxYRLEe+ufA 8mHSgj/LLUcZ+ojs3kMvZGJLvh51lWFbg/vhB9p1RY5ObCsGgR9RkMEeHv3Ujrqg 1lIMA9WtiZJFGMNka+W7R9JLGmpPysept+aqx/S0RG8d7WTSpdXK9iEOIm2Nv4KK FNW7bc0EQfCJG1CuEBsMlHeK3OtcSN2l1RBI0woY4vuelZvCPtaJurXx3Ist0LJW 4MB/5wXLZg+xkMX+pf0o7u1PTKyB4gqdEfG01ay2ySVJLuFDCbzFTBsPVwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDC0dEPZcFAkzh7pat4mYe8YDXQRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFmMGM1OGYzLTk1ZWEtNDBmNi1hZDkyLWU1MmU3MjYxZjI2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/3BAMA0GCSqGSIb3DQEBCwUAA4IBAQATAg7HYG7TbCoYfmJb rqRkLsdLl5qKQZVv8jHNtFilv34MqRUZMfTXZNTKgxnoiHj4uc+j9+a1hb3l6yen +gl4gKCdzKXXaH6nWlqntxHiUzQgumMh6ZRxupnr2IS5NrlAcxH7OGA9ozOUPTH1 E+RjDFoMcV1amNeBUA/UcuYWIQhSlqNAChQyG0hluwgzOb0VnuO0fBuaJOPTIoLu DbBAhxnKuMiVVLgLATyDFlebqsZqz4nDWHzhNcc2LcLp8OfnCXiaR4raPLn28Xn9 ROL76VQye9GTUsHKDCuuvvxkGHSh71/xuhnxxuR8+N0fe63beKrOqPxvLX1n19cf k7YB -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:37 2025 by rpki-client