$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/404b1f09-58ed-4d8b-8b95-8dfe3d833427.roa File: 404b1f09-58ed-4d8b-8b95-8dfe3d833427.roa (raw, json) Hash identifier: fL/xlCDkpbmsCstJ6ke+bpI3qeY+Vz3KPWr8tZETuKE= Subject key identifier: 24:4C:F5:E9:BA:E3:54:06:C5:25:E3:9E:87:CE:76:85:95:22:61:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DF1505A4A9E51B10DA5B61D5D061A2A49485561 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/404b1f09-58ed-4d8b-8b95-8dfe3d833427.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f1:50:5a:4a:9e:51:b1:0d:a5:b6:1d:5d:06:1a:2a:49:48:55:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:88:b2:fa:18:a1:64:47:fd:c8:37:ff:09: 04:3a:37:91:03:24:c3:1d:af:c9:cb:0d:b2:a9:60: a3:af:88:80:4f:e9:d3:e8:1c:33:da:5b:2d:54:97: 6d:c7:7a:57:ef:d5:a8:b9:1d:e5:46:52:a0:11:c1: 88:d3:84:d4:52:19:0b:20:37:02:0a:5b:9e:40:c4: 2b:e7:80:d5:00:ef:8e:85:b5:5f:b6:db:9b:1a:07: 01:c3:8c:22:03:ad:34:87:85:1f:54:1b:0e:a5:2e: 90:0c:1b:07:51:d2:9e:16:27:1c:40:73:15:71:73: 8b:38:8b:32:6b:a3:62:5b:21:e9:31:e0:84:8c:3c: 06:7f:43:ad:6e:38:23:f8:d3:50:4f:08:03:4b:a1: 40:97:66:67:9f:32:93:bc:56:4d:93:5a:56:55:1f: 9b:20:82:dc:85:07:b0:b9:a4:a5:e8:f8:83:a7:76: f7:0e:06:8a:95:c0:e8:86:2e:d6:e1:ce:d0:59:f7: 11:2f:ea:7a:a5:79:df:9c:34:e3:ac:23:b5:b9:ea: c7:f3:52:cc:ba:bb:2c:bd:d1:7d:ff:9c:31:7b:04: b6:d8:64:cb:43:41:57:39:aa:84:21:93:05:72:0c: 88:ff:33:c4:a2:b5:30:e7:74:0a:08:99:3e:6d:ae: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:F5:E9:BA:E3:54:06:C5:25:E3:9E:87:CE:76:85:95:22:61:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/404b1f09-58ed-4d8b-8b95-8dfe3d833427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5::/32 Signature Algorithm: sha256WithRSAEncryption 95:09:4e:c8:a8:81:ae:79:51:64:23:43:27:c8:e3:34:60:8d: d4:45:9e:13:c3:c3:6b:f8:7e:a1:11:58:bf:dc:69:5d:d8:3a: 1c:8f:06:f8:21:ee:39:0a:22:78:54:8a:65:0b:90:d7:9d:7a: b0:ec:06:f6:73:35:92:f6:3e:8b:62:7a:7a:1a:e9:e7:b8:a8: d1:da:fc:d6:cd:95:0c:ae:a8:f9:d6:9e:2a:d0:8c:d8:49:c0: ef:e1:45:73:c8:dd:16:d6:03:d8:19:36:0d:e8:a5:1c:3c:4d: 0f:26:06:34:cb:8b:b9:5c:e2:76:1a:f8:de:03:5f:b3:3c:9b: 00:03:9e:c2:01:45:32:c5:df:15:10:2a:e0:99:ce:33:77:f7: 01:71:23:55:c7:3c:7b:d4:5d:57:c9:58:b2:1b:c5:f7:c7:ee: 00:9a:40:5f:f6:17:b1:91:50:1a:c8:44:4e:7d:4f:56:61:94: 5b:01:96:06:44:be:e8:c1:ab:bb:de:2f:3e:27:79:d8:02:9f: a9:76:0a:39:f8:bd:ae:6b:b1:b5:00:71:30:2e:9a:dd:23:74: ae:6a:ca:38:a2:06:26:05:b3:a4:35:f7:28:51:35:54:7f:dc: c2:80:15:61:9b:b4:00:db:97:34:50:b3:af:ef:3d:13:a7:4f: 4b:63:22:76 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUffFQWkqeUbENpbYdXQYaKklIVWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMDJmNTVmZmM3NmE4YTU1ZGJhN2Yx ZDUyMGQ1Zjc4NTk2OGRiYzQxZjlkNTgzZDU5OGQ3NDFiZWE2NWM1MDYzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CuIsvoYoWRH/cg3/wkEOjeRAyTD Ha/Jyw2yqWCjr4iAT+nT6Bwz2lstVJdtx3pX79WouR3lRlKgEcGI04TUUhkLIDcC ClueQMQr54DVAO+OhbVfttubGgcBw4wiA600h4UfVBsOpS6QDBsHUdKeFiccQHMV cXOLOIsya6NiWyHpMeCEjDwGf0Otbjgj+NNQTwgDS6FAl2ZnnzKTvFZNk1pWVR+b IILchQewuaSl6PiDp3b3DgaKlcDohi7W4c7QWfcRL+p6pXnfnDTjrCO1uerH81LM urssvdF9/5wxewS22GTLQ0FXOaqEIZMFcgyI/zPEorUw53QKCJk+ba4bLwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCRM9em641QGxSXjnofOdoWVImEgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwNGIxZjA5LTU4ZWQtNGQ4Yi04Yjk1LThkZmUzZDgzMzQyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9TANBgkqhkiG9w0BAQsFAAOCAQEAlQlOyKiBrnlRZCNDJ8jj NGCN1EWeE8PDa/h+oRFYv9xpXdg6HI8G+CHuOQoieFSKZQuQ1516sOwG9nM1kvY+ i2J6ehrp57io0dr81s2VDK6o+daeKtCM2EnA7+FFc8jdFtYD2Bk2DeilHDxNDyYG NMuLuVzidhr43gNfszybAAOewgFFMsXfFRAq4JnOM3f3AXEjVcc8e9RdV8lYshvF 98fuAJpAX/YXsZFQGshETn1PVmGUWwGWBkS+6MGru94vPid52AKfqXYKOfi9rmux tQBxMC6a3SN0rmrKOKIGJgWzpDX3KFE1VH/cwoAVYZu0ANuXNFCzr+89E6dPS2Mi dg== -----END CERTIFICATE-----Generated at Wed Feb 5 03:53:39 2025 by rpki-client