$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa File: 3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa (raw, json) Hash identifier: hkiMp6MVGveI3hTlxwX4DQKCqZ4VSDukdmXd6An8w/A= Subject key identifier: 96:5F:C3:D7:ED:EA:3D:4A:92:85:1F:9A:9D:D2:36:BB:31:04:8F:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30900927DEE71D35828BA5362AC759556766A55C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:90:09:27:de:e7:1d:35:82:8b:a5:36:2a:c7:59:55:67:66:a5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e0:60:a3:77:56:b3:b0:aa:65:88:a1:6c:35: 9c:fa:66:b7:0b:d4:b5:58:45:de:40:b6:1d:9e:c3: 21:09:99:1c:e7:31:4e:2b:78:ea:ae:0a:76:20:45: d8:e7:79:cf:6a:5c:82:48:ba:aa:2d:b4:d5:af:06: b7:a2:a2:61:93:9e:e4:70:c6:8f:0c:e3:2a:e0:57: ad:48:91:0d:80:03:fe:34:8f:d2:99:ea:86:32:23: 96:2b:cc:a6:c4:01:67:28:e8:da:3d:8a:b0:bf:4e: 32:59:f1:ab:c5:90:ef:7d:b4:67:ba:65:2f:1d:d9: 26:a7:cb:13:8f:d7:06:02:c7:95:6c:b3:df:15:12: 17:8b:ec:99:d3:b6:9c:65:bd:38:06:04:b1:e7:18: c5:ab:0d:1c:fb:ff:20:7d:9a:0e:87:c6:a2:c8:08: 40:c3:55:c8:d2:61:81:49:fb:ac:a9:93:f1:a3:2b: 58:4e:f6:a7:6d:7f:14:ca:66:04:a9:85:9f:22:9c: a0:7c:db:12:e3:4b:a9:ad:4d:89:af:5d:65:61:02: 64:bd:03:63:e7:90:21:f0:5e:31:7e:4a:68:0a:83: 2c:63:52:22:ee:50:23:89:a2:bc:fb:96:95:bb:88: 8c:19:10:55:e2:69:8d:cb:e4:20:dd:59:90:f6:22: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5F:C3:D7:ED:EA:3D:4A:92:85:1F:9A:9D:D2:36:BB:31:04:8F:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8080::/46 Signature Algorithm: sha256WithRSAEncryption c8:1d:dd:8a:3c:c6:b6:5e:69:7f:99:0b:7a:0f:6d:35:68:17: 54:1a:38:09:d2:e6:6a:be:20:85:43:33:53:b6:20:7d:a6:c6: 47:1a:a2:1b:66:79:11:7c:9f:8d:8c:ee:fe:88:82:df:38:99: 43:d2:7a:6d:45:3c:89:b7:28:e6:c0:f5:cb:65:97:1b:b2:eb: 48:b4:b4:4d:7b:8f:ba:e0:b0:68:09:d9:1a:c2:b2:7b:67:5e: 1a:7b:7c:ec:5c:81:2f:03:02:d2:e1:fc:58:00:7f:e8:8d:ab: 11:7a:15:df:fc:a0:51:7d:df:0b:4e:f4:37:cc:e0:78:26:2b: 3a:5a:7f:75:9a:03:d2:be:a5:43:51:e1:e9:5f:64:62:75:11: ff:de:20:22:ab:e5:3a:ba:72:5a:f0:72:7c:08:f6:bb:91:ed: 15:63:d5:30:6f:07:17:87:1c:74:8d:bb:ef:ac:13:03:d5:23: ec:3e:23:36:18:4a:ae:ef:4d:9e:d2:53:b9:42:b7:ba:16:b5: 9c:cd:7c:bf:38:b6:9a:a5:cc:73:fc:83:a1:37:00:ca:d9:0e: 22:78:a1:1d:55:87:be:66:fe:64:e6:8d:df:1a:d5:59:3a:b0: 0c:24:70:63:9f:8f:f3:7b:14:b1:93:79:9e:44:31:c4:64:21: 1c:a3:b0:dc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMJAJJ97nHTWCi6U2KsdZVWdmpVwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzM2MzQ2YTAyYjAxNTMwMDkxNGU4 YjAyMmM4N2RhYjRmNzczMmE2MDUzMzU1MjQyMDdkYTJlNTk4YzZlOWJlYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOBgo3dWs7CqZYihbDWc+ma3C9S1 WEXeQLYdnsMhCZkc5zFOK3jqrgp2IEXY53nPalyCSLqqLbTVrwa3oqJhk57kcMaP DOMq4FetSJENgAP+NI/SmeqGMiOWK8ymxAFnKOjaPYqwv04yWfGrxZDvfbRnumUv Hdkmp8sTj9cGAseVbLPfFRIXi+yZ07acZb04BgSx5xjFqw0c+/8gfZoOh8aiyAhA w1XI0mGBSfusqZPxoytYTvanbX8UymYEqYWfIpygfNsS40uprU2Jr11lYQJkvQNj 55Ah8F4xfkpoCoMsY1Ii7lAjiaK8+5aVu4iMGRBV4mmNy+Qg3VmQ9iL9TwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJZfw9ft6j1KkoUfmp3SNrsxBI9YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiZTQ3MGZhLWY5MDMtNDQxNi05YzBjLTNhZDJjYjU4NGE4ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba94CAMA0GCSqGSIb3DQEBCwUAA4IBAQDIHd2KPMa2Xml/mQt6 D201aBdUGjgJ0uZqviCFQzNTtiB9psZHGqIbZnkRfJ+NjO7+iILfOJlD0nptRTyJ tyjmwPXLZZcbsutItLRNe4+64LBoCdkawrJ7Z14ae3zsXIEvAwLS4fxYAH/ojasR ehXf/KBRfd8LTvQ3zOB4Jis6Wn91mgPSvqVDUeHpX2RidRH/3iAiq+U6unJa8HJ8 CPa7ke0VY9UwbwcXhxx0jbvvrBMD1SPsPiM2GEqu702e0lO5Qre6FrWczXy/OLaa pcxz/IOhNwDK2Q4ieKEdVYe+Zv5k5o3fGtVZOrAMJHBjn4/zexSxk3meRDHEZCEc o7Dc -----END CERTIFICATE-----Generated at Wed Feb 5 03:59:01 2025 by rpki-client