$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa File: 511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa (raw, json) Hash identifier: RqtOkUx82G/Oua3KCMOxMfAKGaxphmVQfgwWUgyyW+M= Subject key identifier: E3:E3:10:46:ED:AF:72:4C:72:57:08:E6:75:90:1A:20:C3:E5:25:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2CC07C6DE4993F5DB788D6DF26AC450D77E4C909 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa Signing time: Sat 25 Jan 2025 00:00:00 +0000 ROA not before: Sat 25 Jan 2025 00:00:00 +0000 ROA not after: Sat 01 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c0:7c:6d:e4:99:3f:5d:b7:88:d6:df:26:ac:45:0d:77:e4:c9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Jan 25 00:00:00 2025 GMT Not After : Mar 1 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:bf:8b:b4:f5:6c:9a:ab:8c:ba:71:19:3e: cd:b0:ce:9d:76:8f:04:7a:5e:46:c1:6e:4b:8e:ee: 82:8c:40:5f:25:4e:e7:af:c4:ad:9f:b8:f9:ee:85: 5a:2b:e3:0c:3c:51:80:52:de:12:17:c4:a0:93:65: ad:e4:48:aa:f4:81:08:d3:07:61:fe:76:e9:b7:d9: 86:c8:5f:22:f7:91:7c:fc:c1:cd:13:23:a8:11:9b: 24:89:18:1c:15:f4:a1:d5:02:b6:ac:34:f8:02:d2: f1:0f:e9:3e:e8:70:65:cb:c8:d4:9e:b4:53:36:37: af:cc:38:fd:79:34:98:fc:d7:d6:c4:7e:81:57:1a: 51:1b:a7:84:42:8d:3c:56:4d:4b:17:f9:a5:30:5b: 63:da:94:77:0e:3e:7a:f9:2b:7a:57:82:1d:b6:52: 4f:78:ad:f2:55:13:f3:ee:dc:54:eb:e5:5f:30:cb: 9b:3b:ad:91:d9:a6:5e:91:23:f4:03:5f:aa:0b:f1: 00:c4:b9:52:2e:87:0a:81:ac:5d:8e:1e:cc:e5:a8: ea:69:2c:05:4f:54:e8:9f:a8:b8:2a:81:51:4a:55: f1:e2:12:42:90:55:ac:78:3c:ce:a3:98:6c:c8:4f: b0:30:b5:74:bd:f0:a1:f2:2a:c9:a9:0a:67:81:a5: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E3:10:46:ED:AF:72:4C:72:57:08:E6:75:90:1A:20:C3:E5:25:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:f000::/40 Signature Algorithm: sha256WithRSAEncryption c6:29:a5:ee:b4:ad:14:5d:bb:2a:d5:65:d7:25:41:1a:a3:83: a8:ce:3f:67:75:fa:d7:a0:23:99:76:e5:03:d1:a1:0f:76:85: 36:7e:d6:2a:aa:31:f8:54:e0:49:c6:2f:f5:34:ad:db:03:93: 79:4d:6d:3a:46:d7:26:64:ad:99:22:54:17:6d:9b:93:d9:7b: 5e:7a:d6:ef:ed:6c:f0:fb:b7:fe:ca:1f:a1:9b:84:6e:be:3f: 30:88:d7:b6:4a:b0:ea:f9:a8:9b:de:9c:aa:ce:c3:c3:ba:9d: 49:96:8c:21:7c:c0:75:c6:0f:b0:ba:6e:8e:2f:e9:50:70:79: 0a:a2:e8:7e:54:da:86:1e:2c:ef:3c:af:3b:d3:99:9a:45:bd: 41:b2:55:b7:54:84:34:fe:bd:0b:28:17:1a:53:c8:3d:25:20: 7d:93:96:f4:94:cb:11:5d:fa:e4:15:7d:3e:99:af:07:2d:27: d5:94:4a:c9:8a:ce:79:0f:ea:9f:40:a3:86:cd:ff:51:2b:9a: 0f:4c:bf:8a:ae:d8:f4:24:bb:91:c3:4c:9d:fd:ba:6e:55:df: 79:3d:fc:f9:2a:e7:72:5a:d9:3f:18:5b:0d:72:25:0c:d6:cf: 9b:24:ae:2f:f8:61:4d:d5:6e:ef:f1:e2:eb:a3:97:71:a9:28: f0:4e:2f:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULMB8beSZP123iNbfJqxFDXfkyQkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEyNTAwMDAwMFoX DTI1MDMwMTIzNTk1OVowejFJMEcGA1UEBRNAZTFiYTYzZjc1NGExZWIwM2RhYjMw MGY2YmE5NDAwY2M2ODE2M2MwM2ZiMzM4YWRiZjJiMzc2ZWE0MDNhOGZiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6u/i7T1bJqrjLpxGT7NsM6ddo8E el5GwW5Lju6CjEBfJU7nr8Stn7j57oVaK+MMPFGAUt4SF8Sgk2Wt5Eiq9IEI0wdh /nbpt9mGyF8i95F8/MHNEyOoEZskiRgcFfSh1QK2rDT4AtLxD+k+6HBly8jUnrRT NjevzDj9eTSY/NfWxH6BVxpRG6eEQo08Vk1LF/mlMFtj2pR3Dj56+St6V4IdtlJP eK3yVRPz7txU6+VfMMubO62R2aZekSP0A1+qC/EAxLlSLocKgaxdjh7M5ajqaSwF T1Ton6i4KoFRSlXx4hJCkFWseDzOo5hsyE+wMLV0vfCh8irJqQpngaU1RQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOPjEEbtr3JMclcI5nWQGiDD5SVRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxMTgxNmY5LTIzYzMtNDFmYi05ZDUwLTJhMmY0ZDY2NmM3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauPAwDQYJKoZIhvcNAQELBQADggEBAMYppe60rRRduyrVZdcl QRqjg6jOP2d1+tegI5l25QPRoQ92hTZ+1iqqMfhU4EnGL/U0rdsDk3lNbTpG1yZk rZkiVBdtm5PZe1561u/tbPD7t/7KH6GbhG6+PzCI17ZKsOr5qJvenKrOw8O6nUmW jCF8wHXGD7C6bo4v6VBweQqi6H5U2oYeLO88rzvTmZpFvUGyVbdUhDT+vQsoFxpT yD0lIH2TlvSUyxFd+uQVfT6ZrwctJ9WUSsmKznkP6p9Ao4bN/1Ermg9Mv4qu2PQk u5HDTJ39um5V33k9/Pkq53Ja2T8YWw1yJQzWz5skri/4YU3Vbu/x4uujl3GpKPBO Lzg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:01 2025 by rpki-client