$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49fb7e22-9413-4e85-9c70-9dd3a60de128.roa File: 49fb7e22-9413-4e85-9c70-9dd3a60de128.roa (raw, json) Hash identifier: QLrwUzKcTt9vYUpgyRdM2yNGE15qB/GKQvuPYt2gJMM= Subject key identifier: 83:98:17:59:48:D7:49:F4:CC:FF:D7:9E:74:4E:A0:A8:5C:5E:76:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 127A295CE047D52BEB72E8B6E27BA94349887DAF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49fb7e22-9413-4e85-9c70-9dd3a60de128.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7a:29:5c:e0:47:d5:2b:eb:72:e8:b6:e2:7b:a9:43:49:88:7d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:f6:0a:d6:5b:99:d1:03:ed:31:12:d5:e1: af:d7:88:93:17:b4:bb:e4:99:33:b5:26:cd:20:8e: 0d:82:eb:a2:19:5a:87:2a:59:11:47:34:11:85:21: b2:01:7e:3d:8e:60:f1:d2:56:19:b7:9b:52:e3:99: 51:29:f1:a9:f4:13:43:77:e3:d5:40:9d:d8:9b:97: 78:7d:b8:eb:11:70:2c:07:f6:46:25:29:d0:57:21: f7:31:de:c9:a5:3e:61:79:8c:43:2d:4f:00:32:c9: 97:72:54:61:a8:0e:d8:d2:e6:86:d3:f4:a8:a6:75: 05:55:1b:c0:91:72:7b:20:3f:f1:9e:12:fc:95:75: b8:9c:b8:eb:de:48:53:d0:af:92:75:df:2b:b0:ab: 57:d1:2a:97:56:fc:77:6d:9d:33:2c:b2:4c:b0:8d: 6a:08:15:e4:0d:a2:40:83:8e:86:8c:e3:cd:7c:24: 11:42:f5:80:50:97:8a:04:f7:d9:52:8e:3b:55:e7: 1e:43:61:af:6b:61:12:bb:8b:ec:b0:09:0a:28:3c: 12:36:0c:10:bf:61:1e:e3:57:4c:4b:e8:aa:dd:82: f7:a6:c8:f5:27:a2:3e:01:a6:c3:6b:45:2a:93:9b: 3c:29:f2:a7:c4:70:16:15:94:a2:22:31:61:47:47: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:17:59:48:D7:49:F4:CC:FF:D7:9E:74:4E:A0:A8:5C:5E:76:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49fb7e22-9413-4e85-9c70-9dd3a60de128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f040::/48 Signature Algorithm: sha256WithRSAEncryption 72:a4:9e:7c:e8:ea:d3:78:e3:fa:11:c2:f9:5e:53:4b:77:e6: b6:8e:16:9c:b5:90:7f:e8:4c:28:ae:71:f7:69:dc:17:10:31: 2e:8b:ed:71:a7:37:7c:18:77:73:96:b0:11:f7:a5:eb:26:bf: de:61:e4:e4:9e:5c:9c:9c:82:47:22:4b:db:72:91:5d:0a:ed: f1:15:a5:d0:e5:49:f3:5a:ec:db:ae:c5:72:2f:dd:12:8c:d1: d2:00:fd:a3:b0:2a:f5:69:bb:dc:aa:33:c4:da:e9:75:93:7a: c4:2b:f2:e6:34:9a:a8:ae:88:ae:d9:89:ab:d0:b9:ee:b1:c3: bb:ac:2b:50:f0:10:2a:7a:d4:ea:d7:39:ae:88:54:1d:4a:93: 43:23:6e:15:e2:bf:57:65:7e:de:e1:fb:56:d6:22:99:46:73: f3:74:78:f9:be:97:bd:bf:92:4b:0e:53:14:bf:d6:25:93:3f: 12:ad:c9:cd:2e:3a:1c:f2:2d:f6:6f:43:da:de:da:e7:b4:a0: ad:28:90:01:7e:b6:bb:1f:a4:13:da:d7:86:29:d8:19:7e:f1: 06:dd:a2:29:2d:f9:4b:22:20:1e:2b:69:d7:e4:36:98:02:5a: d4:e3:4b:23:6c:ad:aa:40:b5:0b:4a:1d:aa:21:a4:8d:fd:e8: ba:67:fa:89 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEnopXOBH1Svrcui24nupQ0mIfa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANjJhMDUwZDAxMWUzNzk3OWJmNTBl NGM4YTA3ZmM4ZGFlMDc2YTI0NGY2YjAyMjg1YzcyMGI5MTAwZTNjMjk0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhD2CtZbmdED7TES1eGv14iTF7S7 5JkztSbNII4NguuiGVqHKlkRRzQRhSGyAX49jmDx0lYZt5tS45lRKfGp9BNDd+PV QJ3Ym5d4fbjrEXAsB/ZGJSnQVyH3Md7JpT5heYxDLU8AMsmXclRhqA7Y0uaG0/So pnUFVRvAkXJ7ID/xnhL8lXW4nLjr3khT0K+Sdd8rsKtX0SqXVvx3bZ0zLLJMsI1q CBXkDaJAg46GjOPNfCQRQvWAUJeKBPfZUo47VeceQ2Gva2ESu4vssAkKKDwSNgwQ v2Ee41dMS+iq3YL3psj1J6I+AabDa0Uqk5s8KfKnxHAWFZSiIjFhR0ezqwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIOYF1lI10n0zP/XnnROoKhcXnYWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5ZmI3ZTIyLTk0MTMtNGU4NS05YzcwLTlkZDNhNjBkZTEyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8vBAMA0GCSqGSIb3DQEBCwUAA4IBAQBypJ586OrTeOP6EcL5 XlNLd+a2jhactZB/6EwornH3adwXEDEui+1xpzd8GHdzlrAR96XrJr/eYeTknlyc nIJHIkvbcpFdCu3xFaXQ5UnzWuzbrsVyL90SjNHSAP2jsCr1abvcqjPE2ul1k3rE K/LmNJqoroiu2Ymr0LnuscO7rCtQ8BAqetTq1zmuiFQdSpNDI24V4r9XZX7e4ftW 1iKZRnPzdHj5vpe9v5JLDlMUv9Ylkz8SrcnNLjoc8i32b0Pa3trntKCtKJABfra7 H6QT2teGKdgZfvEG3aIpLflLIiAeK2nX5DaYAlrU40sjbK2qQLULSh2qIaSN/ei6 Z/qJ -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:08 2025 by rpki-client