$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36a61bb0-d5ee-40f9-b3eb-0fa1d1a4956c.roa File: 36a61bb0-d5ee-40f9-b3eb-0fa1d1a4956c.roa (raw, json) Hash identifier: RD1m2DcbjIFDM1+58EAq0YgSbc5BTQpiDsvViDpasgg= Subject key identifier: 05:19:03:81:BC:FD:50:AC:DE:35:80:7F:61:C2:12:17:E2:F2:C0:7A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 078A8A3563E2E57F80860548CEB3E6F0448B0D6D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36a61bb0-d5ee-40f9-b3eb-0fa1d1a4956c.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8a:8a:35:63:e2:e5:7f:80:86:05:48:ce:b3:e6:f0:44:8b:0d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:fd:b2:2d:33:8c:20:cb:57:04:d4:5b:a1: 3c:09:4c:5d:09:ca:05:b9:0b:d1:11:e3:f5:fc:b7: 1f:3a:a4:50:75:90:5a:2e:7e:7d:8f:16:ec:82:4f: 00:0d:fe:5d:7a:f8:b9:5b:ab:aa:b3:9b:e6:93:e7: f0:96:34:78:51:a5:25:a5:26:75:f6:78:ee:8e:0a: ff:2e:46:a3:ab:c4:cd:0e:b1:49:7e:ee:58:5d:e7: cb:a8:bd:2e:df:b9:28:1a:9c:b3:61:f4:54:18:95: 4c:cb:ba:33:88:eb:bb:db:15:b8:9d:74:6b:0e:51: d2:2c:af:da:9f:83:72:0f:e6:e7:77:57:47:27:27: 55:75:be:7d:59:ec:b6:7f:9f:fd:b0:d4:52:be:73: e8:29:b9:32:51:7d:1f:12:fa:22:5c:4c:a8:21:16: c6:e7:6a:99:b0:f7:16:1a:9c:81:c2:a5:b4:96:7a: 76:4a:75:b5:f3:96:0c:37:76:b7:4e:76:5c:b8:5c: 73:74:f2:58:0c:e5:09:cf:27:67:d7:65:5e:cd:8c: 2a:61:53:c0:c3:aa:2d:8b:f9:39:0e:9a:a4:6b:6c: 44:d6:09:6a:48:06:0a:07:d2:ed:80:f8:92:cc:ad: cd:af:ad:cf:9d:72:04:30:2c:a3:29:3a:35:c1:45: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:19:03:81:BC:FD:50:AC:DE:35:80:7F:61:C2:12:17:E2:F2:C0:7A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36a61bb0-d5ee-40f9-b3eb-0fa1d1a4956c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36::/32 Signature Algorithm: sha256WithRSAEncryption 23:04:44:0e:6a:11:4f:10:c9:25:14:21:5f:c5:2b:2a:49:d1: 71:7a:da:6d:9f:68:6c:ab:32:01:39:dd:ef:2c:51:f6:d8:bb: c6:65:49:8d:5f:3f:03:4a:7a:64:44:5c:cb:b8:4e:c3:df:4d: b4:fb:59:2a:73:ca:bc:62:2a:56:ab:ed:25:89:45:7a:0e:1c: 83:33:87:75:91:a1:e3:d7:04:e1:5f:94:0f:16:5c:a4:8c:33: 9e:1d:6e:fc:f3:87:6d:d6:27:4b:fa:66:b5:f5:f6:16:c2:7a: 4d:97:66:f0:2f:df:42:81:71:39:ae:94:70:54:75:a4:4d:6b: b4:64:5f:39:38:35:c9:a7:2a:b5:28:b4:1b:91:34:3c:21:d1: 87:6e:05:4c:5d:77:3d:44:f4:ef:c8:05:45:ef:44:df:da:1b: 35:7f:a6:b1:39:0f:95:f9:9b:cf:92:47:26:d5:71:d3:f3:68: 5b:cc:ba:3d:32:0f:cd:98:88:31:61:16:21:48:16:97:07:3e: e5:bf:68:b2:94:33:42:48:8e:2e:0e:57:41:54:5c:14:df:3a: ed:da:25:72:d3:1d:a3:b8:1f:82:9b:c2:0d:2b:83:1d:2d:c6: 15:8d:26:02:a7:31:a2:88:cf:53:c8:e0:fc:fc:1d:43:4a:b4: 93:b3:dc:63 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUB4qKNWPi5X+AhgVIzrPm8ESLDW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwNDAwMDAwMFoX DTI1MDMxMTIzNTk1OVowejFJMEcGA1UEBRNAOTY3ZDYwYmEzODgyM2E2MTg5Yjhl YmRlNGVkNTg2NDA3ZGU2ZDI1NzI5YzIyMjgwMDUwNjEzYWI5N2MyMzk2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNj9si0zjCDLVwTUW6E8CUxdCcoF uQvREeP1/LcfOqRQdZBaLn59jxbsgk8ADf5devi5W6uqs5vmk+fwljR4UaUlpSZ1 9njujgr/Lkajq8TNDrFJfu5YXefLqL0u37koGpyzYfRUGJVMy7oziOu72xW4nXRr DlHSLK/an4NyD+bnd1dHJydVdb59Wey2f5/9sNRSvnPoKbkyUX0fEvoiXEyoIRbG 52qZsPcWGpyBwqW0lnp2SnW185YMN3a3TnZcuFxzdPJYDOUJzydn12VezYwqYVPA w6oti/k5Dpqka2xE1glqSAYKB9LtgPiSzK3Nr63PnXIEMCyjKTo1wUV3gwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFAUZA4G8/VCs3jWAf2HCEhfi8sB6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2YTYxYmIwLWQ1ZWUtNDBmOS1iM2ViLTBmYTFkMWE0OTU2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaNjANBgkqhkiG9w0BAQsFAAOCAQEAIwREDmoRTxDJJRQhX8Ur KknRcXrabZ9obKsyATnd7yxR9ti7xmVJjV8/A0p6ZERcy7hOw99NtPtZKnPKvGIq VqvtJYlFeg4cgzOHdZGh49cE4V+UDxZcpIwznh1u/POHbdYnS/pmtfX2FsJ6TZdm 8C/fQoFxOa6UcFR1pE1rtGRfOTg1yacqtSi0G5E0PCHRh24FTF13PUT078gFRe9E 39obNX+msTkPlfmbz5JHJtVx0/NoW8y6PTIPzZiIMWEWIUgWlwc+5b9ospQzQkiO Lg5XQVRcFN867dolctMdo7gfgpvCDSuDHS3GFY0mAqcxoojPU8jg/PwdQ0q0k7Pc Yw== -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:37 2025 by rpki-client