$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/504ee0b7-b1f3-4f91-a867-2dd94be1a212.roa File: 504ee0b7-b1f3-4f91-a867-2dd94be1a212.roa (raw, json) Hash identifier: r8PQsixoKInF4G+2KQyhfdDA0Fc/N5j/a36fDRbOpr8= Subject key identifier: C8:E0:B2:C0:44:49:6A:75:D1:E2:86:55:41:C2:DC:4C:DF:65:01:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0170CFF9669F0D22ACFA055ED27DFED52CAC1663 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/504ee0b7-b1f3-4f91-a867-2dd94be1a212.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:70:cf:f9:66:9f:0d:22:ac:fa:05:5e:d2:7d:fe:d5:2c:ac:16:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:61:94:05:5c:99:2b:22:bc:1f:89:65:af: 74:bb:d8:db:6d:a6:56:21:a2:b2:ed:02:42:d3:e4: a4:6a:21:92:27:af:8b:ff:87:3f:12:e8:19:75:8a: 7a:7e:17:d5:1b:24:19:dd:03:52:8b:27:0a:ca:e5: 4b:59:db:3d:3a:36:1d:47:ed:3d:75:97:67:28:77: b6:53:64:5f:17:87:34:34:48:a2:d7:2a:53:40:6b: 04:f6:74:44:51:c6:0d:ff:b6:15:ca:dc:01:4e:5c: 90:91:89:c2:bf:83:05:6d:b5:0a:2d:c4:0f:92:cf: e9:f4:24:f7:b0:b1:55:0a:01:c5:b2:4a:2c:e8:57: f6:cc:1f:90:ce:3f:7f:a0:19:b1:82:ef:78:e5:cb: 25:7c:f3:94:af:b0:17:53:53:74:0d:1a:20:b8:8d: 22:26:db:44:f6:3f:77:d7:5f:55:1c:62:82:06:69: bc:4c:3b:f8:a1:bb:f5:95:e8:4c:f9:fc:7e:31:c7: fb:bc:e6:0b:8b:1b:b8:1b:62:b9:67:60:ad:75:c7: 08:c1:60:f9:3e:ca:cf:e3:c6:d5:3c:86:ca:21:d7: 8d:59:fd:8d:37:b7:b1:5e:ee:90:69:dc:ec:9d:56: 1f:e3:e0:f5:21:2d:28:00:73:9b:87:86:ce:27:86: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E0:B2:C0:44:49:6A:75:D1:E2:86:55:41:C2:DC:4C:DF:65:01:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/504ee0b7-b1f3-4f91-a867-2dd94be1a212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:8800::/40 Signature Algorithm: sha256WithRSAEncryption 01:9d:d3:b4:ad:d9:1a:9d:40:70:97:75:9e:9f:fe:2a:6a:47: 57:7e:f2:0a:19:5a:b2:2e:ad:51:b1:66:c2:82:62:e1:e0:ad: e4:5e:fd:cb:4e:9f:cc:8f:8a:0f:d7:e8:10:c6:20:48:56:40: 2f:1f:bf:0c:af:14:24:0a:ef:3a:48:bc:45:bc:c7:fa:26:2e: ac:6b:1e:bb:e3:6f:d0:6f:f3:75:fc:79:2f:dd:b4:9d:4f:f0: d7:6a:26:d0:3f:d3:eb:06:3d:8e:3f:b1:b0:98:9e:32:45:c0: 30:e0:15:aa:3a:4b:70:aa:67:19:c4:95:3c:f8:b9:cd:0d:d6: 31:02:71:4c:ba:63:81:45:a6:d8:bb:93:51:93:ad:db:89:ea: 1f:45:cd:ec:08:b4:96:7b:36:0a:08:dc:02:44:a3:f2:5f:3d: 38:ea:f3:4c:31:f4:62:b9:57:b5:41:a4:e2:50:d7:3b:9c:c6: 1c:51:19:72:2e:6b:87:87:9e:18:90:64:bd:93:36:ac:f1:4e: 2a:4b:e5:0a:12:e7:ae:1c:de:4e:13:b0:bf:7e:c1:d0:9b:04: 06:e0:25:d1:6e:6b:58:80:39:34:ae:df:32:e9:ed:b9:6c:b6: f6:65:8d:ff:d3:76:af:d5:c8:8d:5b:3b:8c:6b:3d:12:ce:e2: eb:ce:02:1b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAXDP+WafDSKs+gVe0n3+1SysFmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANWJjMzU0NmU0ODBkOTUyOGZjMDY0 ZGVjY2VkYmViNTFiNGE4NWQ4YTY0ZmY5ZWI2N2Y3MDhlYjEzNzMzNjAwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjxhlAVcmSsivB+JZa90u9jbbaZW IaKy7QJC0+SkaiGSJ6+L/4c/EugZdYp6fhfVGyQZ3QNSiycKyuVLWds9OjYdR+09 dZdnKHe2U2RfF4c0NEii1ypTQGsE9nREUcYN/7YVytwBTlyQkYnCv4MFbbUKLcQP ks/p9CT3sLFVCgHFskos6Ff2zB+Qzj9/oBmxgu945cslfPOUr7AXU1N0DRoguI0i JttE9j93119VHGKCBmm8TDv4obv1lehM+fx+Mcf7vOYLixu4G2K5Z2CtdccIwWD5 PsrP48bVPIbKIdeNWf2NN7exXu6QadzsnVYf4+D1IS0oAHObh4bOJ4Z+9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMjgssBESWp10eKGVUHC3EzfZQEYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUwNGVlMGI3LWIxZjMtNGY5MS1hODY3LTJkZDk0YmUxYTIxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNogwDQYJKoZIhvcNAQELBQADggEBAAGd07St2RqdQHCXdZ6f /ipqR1d+8goZWrIurVGxZsKCYuHgreRe/ctOn8yPig/X6BDGIEhWQC8fvwyvFCQK 7zpIvEW8x/omLqxrHrvjb9Bv83X8eS/dtJ1P8NdqJtA/0+sGPY4/sbCYnjJFwDDg Fao6S3CqZxnElTz4uc0N1jECcUy6Y4FFpti7k1GTrduJ6h9FzewItJZ7NgoI3AJE o/JfPTjq80wx9GK5V7VBpOJQ1zucxhxRGXIua4eHnhiQZL2TNqzxTipL5QoS564c 3k4TsL9+wdCbBAbgJdFua1iAOTSu3zLp7blstvZljf/Tdq/VyI1bO4xrPRLO4uvO Ahs= -----END CERTIFICATE-----Generated at Wed Feb 5 03:55:15 2025 by rpki-client