$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa File: 3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa (raw, json) Hash identifier: S1D6rmdd3Xql4c8h/xyU6W/B6cauJQlYo20zh7naDm8= Subject key identifier: 6D:A1:E4:59:99:51:BF:3D:53:D8:B7:27:4D:55:D9:DD:A6:AF:27:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41072ADFC3AE44B78166246B0935BDE4A1B345AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:a0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:07:2a:df:c3:ae:44:b7:81:66:24:6b:09:35:bd:e4:a1:b3:45:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:d8:25:59:8f:56:e4:82:f5:89:89:eb:00: 93:14:b1:d6:70:33:74:c8:db:d0:d6:6f:17:b9:9b: 01:27:b6:be:05:c6:bb:c9:73:f4:a2:1e:fe:cb:60: 88:28:3b:3a:51:fb:2b:d5:56:85:5e:99:4b:54:a1: aa:c0:63:cc:bf:4f:9b:c0:47:bc:be:0d:aa:4c:77: 88:d9:20:97:ee:61:2a:d9:2e:c5:71:bd:88:d5:7f: 9e:6a:b6:f4:c9:0c:ee:48:4d:03:08:f6:e4:fe:75: 78:50:61:bc:3e:86:32:ba:46:eb:89:d7:a6:47:1d: 5d:93:72:58:7d:2f:1d:7b:6d:8c:00:13:4f:1d:a6: e3:d0:0e:c6:8b:2c:18:2c:70:d3:cd:3a:02:42:79: d1:a6:6f:60:a6:b6:a2:84:98:3b:2e:27:68:ce:32: e3:cb:45:6f:c3:8d:3b:53:e9:92:89:41:2c:f7:8a: 4d:f1:ed:66:07:59:67:ce:1c:01:ac:3b:e1:ab:be: e2:08:5a:56:a2:7f:bf:5e:95:5e:ed:6f:3e:00:59: 3f:45:bb:84:a2:6c:ed:00:e9:08:67:fd:59:00:93: d5:87:3a:da:00:0a:f3:58:22:35:95:3a:ed:e3:6b: f8:6c:0a:5c:a5:15:0c:8e:f2:2c:0d:fd:3a:fe:c3: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A1:E4:59:99:51:BF:3D:53:D8:B7:27:4D:55:D9:DD:A6:AF:27:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:a0c0::/46 Signature Algorithm: sha256WithRSAEncryption 71:b6:c4:66:e0:76:4d:95:67:2f:d1:75:3b:0a:14:29:64:4c: 15:0e:e6:10:fe:3f:f1:e0:b7:ce:d2:d4:0d:72:59:16:d6:a2: 96:bb:31:ae:24:47:81:b2:80:ab:1b:47:84:4f:ca:c6:6e:81: 97:f1:fb:80:cd:52:75:dc:e0:95:ca:7a:a8:7f:f6:23:96:f6: 41:02:e0:e5:db:a3:90:b3:e0:10:2f:df:d6:87:f9:5a:b7:80: 70:1a:b6:85:02:b4:2d:32:b4:e5:0e:4a:38:23:9d:59:5e:46: 84:81:b1:33:e8:e1:fe:c4:dc:64:c4:08:08:c8:1b:2c:7b:12: 4f:b5:9b:da:22:46:78:e2:14:22:07:66:9f:d9:ad:bd:bd:9d: fa:35:63:30:bc:97:3f:4d:cb:18:02:8f:e5:81:67:fa:9a:3d: 93:45:c2:00:9d:53:30:ca:2c:9c:e6:be:c9:aa:cf:d8:7c:f7: 0e:80:c0:70:00:ca:58:18:87:50:05:ed:ba:00:eb:92:0f:fa: 8b:93:ef:66:5b:c9:23:aa:67:1a:d9:d3:c1:b5:bd:51:27:53: 18:02:8d:e2:d2:b4:de:c7:36:33:f2:29:c3:60:34:7e:cc:15: b1:58:2b:e3:12:c2:31:99:88:88:e1:dd:0f:87:7b:e0:e7:be: ff:7a:92:b9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQQcq38OuRLeBZiRrCTW95KGzRawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMGJmZGZiMDdkMGJmNzkxYjIwMWVm MmYzY2U5ZDU0Y2FlY2E5OGJlYWJjNzY3YTBlYmFlODU1ZjBmNTY4OGM2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY/YJVmPVuSC9YmJ6wCTFLHWcDN0 yNvQ1m8XuZsBJ7a+Bca7yXP0oh7+y2CIKDs6Ufsr1VaFXplLVKGqwGPMv0+bwEe8 vg2qTHeI2SCX7mEq2S7Fcb2I1X+earb0yQzuSE0DCPbk/nV4UGG8PoYyukbridem Rx1dk3JYfS8de22MABNPHabj0A7GiywYLHDTzToCQnnRpm9gpraihJg7LidozjLj y0Vvw407U+mSiUEs94pN8e1mB1lnzhwBrDvhq77iCFpWon+/XpVe7W8+AFk/RbuE omztAOkIZ/1ZAJPVhzraAArzWCI1lTrt42v4bApcpRUMjvIsDf06/sMO1QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG2h5FmZUb89U9i3J01V2d2mryfDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwNzBlMmNjLTdlMTItNDFjNy1hOTgwLTk4OWE0YjE3YWE3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba96DAMA0GCSqGSIb3DQEBCwUAA4IBAQBxtsRm4HZNlWcv0XU7 ChQpZEwVDuYQ/j/x4LfO0tQNclkW1qKWuzGuJEeBsoCrG0eET8rGboGX8fuAzVJ1 3OCVynqof/YjlvZBAuDl26OQs+AQL9/Wh/lat4BwGraFArQtMrTlDko4I51ZXkaE gbEz6OH+xNxkxAgIyBssexJPtZvaIkZ44hQiB2af2a29vZ36NWMwvJc/TcsYAo/l gWf6mj2TRcIAnVMwyiyc5r7Jqs/YfPcOgMBwAMpYGIdQBe26AOuSD/qLk+9mW8kj qmca2dPBtb1RJ1MYAo3i0rTexzYz8inDYDR+zBWxWCvjEsIxmYiI4d0Ph3vg577/ epK5 -----END CERTIFICATE-----Generated at Wed Feb 5 04:08:34 2025 by rpki-client