$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/20dc8ccc-5415-4e50-96f3-cbcc3a8b69ee.roa File: 20dc8ccc-5415-4e50-96f3-cbcc3a8b69ee.roa (raw, json) Hash identifier: RGMW5+X6VOC6c8i1qIl+9sDV+54kShetnhjbw1LRNts= Subject key identifier: 91:91:DB:7F:3B:DA:D5:B0:EA:A7:64:EF:23:38:1D:6E:C3:83:6D:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E43B51C3C6C2279D3885B9809F5016E0FF1372E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/20dc8ccc-5415-4e50-96f3-cbcc3a8b69ee.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:43:b5:1c:3c:6c:22:79:d3:88:5b:98:09:f5:01:6e:0f:f1:37:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:81:ae:34:e3:88:9b:7f:09:46:e5:a9:d3: 87:26:b0:6e:00:b4:39:a2:6b:8b:d4:5e:10:3b:7d: 96:6e:41:bf:de:2d:57:e5:8d:5e:ec:a1:3f:9f:95: 41:96:26:42:4a:81:f9:30:9a:83:82:b2:ee:0d:84: 7d:1c:c3:b2:2c:30:77:38:9d:46:af:0b:0c:98:0f: 6a:19:f5:fb:5e:60:25:d4:99:08:c2:11:d1:03:4b: 0b:ae:df:94:68:a4:b4:38:d2:c1:a6:c0:b3:c4:0b: bc:5c:ee:51:60:b2:cc:b1:36:9f:3a:b9:e8:8d:be: ea:74:85:0a:09:7d:b9:d3:0a:e0:58:8e:09:a9:54: 23:83:7f:f3:77:4e:d6:71:15:f4:8d:57:ed:40:30: 6e:4c:5d:58:b8:08:48:a0:71:8c:71:03:02:5a:8a: 44:c9:fc:e0:05:0d:ec:32:cd:de:4e:1e:87:7a:b4: 27:0e:b9:c4:5d:f8:c6:f3:eb:ef:2c:53:01:e4:3d: 8c:1f:90:8c:17:55:8b:63:09:2d:70:71:7f:7c:13: 5f:49:6d:98:6c:56:9e:e4:a3:2a:49:d5:18:f3:5b: 74:fd:21:8b:fd:12:53:5f:d2:29:66:8f:45:fa:0a: 5a:95:79:17:72:6b:b4:6c:62:17:91:ef:5c:1a:6a: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:91:DB:7F:3B:DA:D5:B0:EA:A7:64:EF:23:38:1D:6E:C3:83:6D:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/20dc8ccc-5415-4e50-96f3-cbcc3a8b69ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 31:e5:ec:ec:d6:72:28:22:cf:26:36:d0:89:69:6f:f4:80:c6: 3d:ca:fa:48:f6:9f:bb:bf:e1:61:fe:7f:34:e0:17:83:56:5d: 5a:52:60:01:82:f8:a7:25:4e:04:35:25:e3:0d:cb:47:fa:63: 46:2b:df:4c:a5:39:a5:f2:ae:19:c2:c5:f1:a6:8b:f6:26:3b: d4:c2:e7:54:2d:03:43:cd:90:98:a0:6b:ae:ed:34:26:37:77: c5:a0:ce:3c:31:dc:95:e7:e3:b7:6d:50:9b:fa:a6:3a:fd:21: d8:5b:76:2c:63:07:8e:a6:18:d0:c2:00:7b:ad:0c:45:48:0e: e4:65:5e:db:0a:e8:37:4e:4b:7f:10:b0:13:7e:6a:80:78:1c: c5:be:7c:47:91:bb:3b:f6:f5:4a:6c:a3:72:24:84:35:42:a6: 4d:82:c6:71:e2:a3:bb:a4:21:fc:fd:52:59:4d:5c:60:2a:87: 34:4c:6c:1c:ff:f4:9e:66:67:cc:f1:3c:9b:55:bb:2a:6d:a9: 1d:6d:fd:20:a1:d1:24:5c:06:46:65:91:b1:ee:5d:7a:d1:e5: 9a:92:2b:44:82:36:2e:b5:c4:09:02:2e:07:c0:78:0b:c6:00: 6b:ae:92:da:5a:84:48:6b:48:f1:fc:91:9e:0f:f2:e6:41:fc: 2d:a4:f4:9d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDkO1HDxsInnTiFuYCfUBbg/xNy4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAZTQ4ZWZiMzVlOWRhNjg3N2Y5YWM2 ODE3NDYyZDNkMzE0YWE2ZjkzOGU0MmNkMjg3ODU3YzRkYmQ5NWEyMzU0NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MyBrjTjiJt/CUblqdOHJrBuALQ5 omuL1F4QO32WbkG/3i1X5Y1e7KE/n5VBliZCSoH5MJqDgrLuDYR9HMOyLDB3OJ1G rwsMmA9qGfX7XmAl1JkIwhHRA0sLrt+UaKS0ONLBpsCzxAu8XO5RYLLMsTafOrno jb7qdIUKCX250wrgWI4JqVQjg3/zd07WcRX0jVftQDBuTF1YuAhIoHGMcQMCWopE yfzgBQ3sMs3eTh6HerQnDrnEXfjG8+vvLFMB5D2MH5CMF1WLYwktcHF/fBNfSW2Y bFae5KMqSdUY81t0/SGL/RJTX9IpZo9F+gpalXkXcmu0bGIXke9cGmprLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJGR23872tWw6qdk7yM4HW7Dg23+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwZGM4Y2NjLTU0MTUtNGU1MC05NmYzLWNiY2MzYThiNjllZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYbDAMA0GCSqGSIb3DQEBCwUAA4IBAQAx5ezs1nIoIs8mNtCJ aW/0gMY9yvpI9p+7v+Fh/n804BeDVl1aUmABgvinJU4ENSXjDctH+mNGK99MpTml 8q4ZwsXxpov2JjvUwudULQNDzZCYoGuu7TQmN3fFoM48MdyV5+O3bVCb+qY6/SHY W3YsYweOphjQwgB7rQxFSA7kZV7bCug3Tkt/ELATfmqAeBzFvnxHkbs79vVKbKNy JIQ1QqZNgsZx4qO7pCH8/VJZTVxgKoc0TGwc//SeZmfM8TybVbsqbakdbf0godEk XAZGZZGx7l160eWakitEgjYutcQJAi4HwHgLxgBrrpLaWoRIa0jx/JGeD/LmQfwt pPSd -----END CERTIFICATE-----Generated at Wed Feb 5 04:00:20 2025 by rpki-client