$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa File: 4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa (raw, json) Hash identifier: tY4HWtVxdQ1F9rYWDAvRU8+poAwYC4HyinRiMi5oFmA= Subject key identifier: 4F:EA:CE:CE:81:8C:77:E2:7D:D3:DF:48:10:6A:DE:71:47:66:2B:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 369B4A51EA7ED8ADB8BC4973F4BBFF2A8B910B77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9b:4a:51:ea:7e:d8:ad:b8:bc:49:73:f4:bb:ff:2a:8b:91:0b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:e1:50:6e:5a:37:58:0e:41:6b:70:58:6d: 8f:68:f6:15:cc:36:ee:5e:ec:e9:b3:8d:af:c7:9c: fe:b6:ca:b4:a0:8f:40:e8:eb:d2:ce:48:4a:b1:bd: db:ad:72:da:6f:7b:a4:c2:99:d1:59:f7:bf:1b:ec: 89:3a:95:a2:34:82:36:cc:dd:28:c4:6b:04:31:c3: d8:eb:63:ff:8d:ee:02:80:c8:e7:f3:85:14:24:e6: e0:3d:5d:14:56:40:53:d5:5b:3a:57:c5:05:db:71: 10:9a:d1:8c:68:4a:d3:21:ef:57:7e:51:6f:b0:0d: 76:8e:50:3f:9f:44:b0:04:d2:4b:62:77:85:c7:33: 23:2c:b6:3c:ff:77:fe:f4:af:20:2e:21:86:36:3f: a1:c2:ce:4a:19:fa:99:fd:42:5b:6f:ef:af:43:62: 74:e9:92:83:0c:84:7b:09:27:9c:46:1e:8a:96:d2: e8:c8:a7:ca:db:7e:66:5f:0f:e5:64:2c:7a:29:a3: e5:25:8d:5f:66:16:39:96:85:29:e9:73:5b:15:e1: ea:5b:60:9c:75:da:6d:a6:d8:92:f1:e4:73:e2:f6: dd:d1:6f:30:2a:b9:66:71:f1:7c:9e:49:3b:21:43: 64:9d:5a:23:ca:6e:f2:c8:72:37:9c:44:d4:0d:69: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EA:CE:CE:81:8C:77:E2:7D:D3:DF:48:10:6A:DE:71:47:66:2B:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2840::/48 Signature Algorithm: sha256WithRSAEncryption 48:b4:c1:57:09:30:51:9e:25:ba:82:97:6e:3b:4d:ce:b6:ef: 44:4d:18:6d:47:90:a8:1b:b8:53:2e:63:f9:54:13:14:ce:ba: ba:09:ce:92:db:d5:53:29:1a:3b:05:55:a1:a0:3b:81:98:39: a1:14:52:db:c7:1c:3c:01:3c:6a:3a:f3:fb:e1:07:c0:cd:43: 0f:02:5a:59:d5:2a:88:ff:66:ab:a9:e5:59:f9:66:2e:14:1d: f8:e4:67:1c:30:98:d4:b6:ad:70:83:57:60:9d:d6:2b:e1:a6: 9b:f2:be:c1:b7:f7:2f:64:4f:b0:ca:8e:83:5f:09:c2:99:cd: d4:a5:b4:ea:10:36:3e:a5:41:9c:2d:0a:62:63:c8:e8:35:74: 6e:32:ea:06:84:ee:11:32:09:bc:54:aa:16:82:a3:1e:69:b2: 5d:92:0f:23:94:23:30:e4:d9:25:f3:d2:c7:8e:17:b4:12:66: f5:63:d4:41:83:ff:91:a9:b2:f4:6d:5d:13:49:36:24:49:3a: 9d:06:eb:d4:41:c2:5c:35:78:01:1f:01:2c:b7:8d:f1:d9:40: cc:b8:95:f7:b5:19:08:a4:31:83:4b:c7:41:d2:a5:c4:84:8f: a4:4b:3f:2b:b4:1f:b0:ae:fc:34:c5:70:68:e0:4d:cb:7d:86: ba:4b:a2:d7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNptKUep+2K24vElz9Lv/KouRC3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYjIzY2ZiNzZjYTcyNjVlMzNjMmMz OWQ2N2ViYzY2NzIwODRjMTlmMzAxMjg0ZDZiZjk5YTRjZTU2Yjk2OTgzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBLhUG5aN1gOQWtwWG2PaPYVzDbu Xuzps42vx5z+tsq0oI9A6OvSzkhKsb3brXLab3ukwpnRWfe/G+yJOpWiNII2zN0o xGsEMcPY62P/je4CgMjn84UUJObgPV0UVkBT1Vs6V8UF23EQmtGMaErTIe9XflFv sA12jlA/n0SwBNJLYneFxzMjLLY8/3f+9K8gLiGGNj+hws5KGfqZ/UJbb++vQ2J0 6ZKDDIR7CSecRh6KltLoyKfK235mXw/lZCx6KaPlJY1fZhY5loUp6XNbFeHqW2Cc ddptptiS8eRz4vbd0W8wKrlmcfF8nkk7IUNknVojym7yyHI3nETUDWl6TwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE/qzs6BjHfifdPfSBBq3nFHZiuHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNDBkM2FiLTA2NjUtNGQ1ZC1iMTlmLTJmM2NlZjU4YjMyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yhAMA0GCSqGSIb3DQEBCwUAA4IBAQBItMFXCTBRniW6gpdu O03Otu9ETRhtR5CoG7hTLmP5VBMUzrq6Cc6S29VTKRo7BVWhoDuBmDmhFFLbxxw8 ATxqOvP74QfAzUMPAlpZ1SqI/2arqeVZ+WYuFB345GccMJjUtq1wg1dgndYr4aab 8r7Bt/cvZE+wyo6DXwnCmc3UpbTqEDY+pUGcLQpiY8joNXRuMuoGhO4RMgm8VKoW gqMeabJdkg8jlCMw5Nkl89LHjhe0Emb1Y9RBg/+RqbL0bV0TSTYkSTqdBuvUQcJc NXgBHwEst43x2UDMuJX3tRkIpDGDS8dB0qXEhI+kSz8rtB+wrvw0xXBo4E3LfYa6 S6LX -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:05 2025 by rpki-client