$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52887821-8ea1-4c00-aade-d864665119f4.roa File: 52887821-8ea1-4c00-aade-d864665119f4.roa (raw, json) Hash identifier: xOOxQdA8Tnri/0aKX1ZCUGYPFJC3jPQUxCwLN9hdSMg= Subject key identifier: 22:8F:18:44:DC:72:74:38:59:54:4D:CD:A2:BC:61:19:9A:56:94:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40F6DDE1FEEF755F35BFF38079EE513A5EE6E66F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52887821-8ea1-4c00-aade-d864665119f4.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f6:dd:e1:fe:ef:75:5f:35:bf:f3:80:79:ee:51:3a:5e:e6:e6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:bf:b4:8c:bd:53:0f:93:f6:dc:09:e5:86: 0f:73:50:6f:d8:12:5f:71:b4:2c:2c:ba:e8:f4:bd: a9:85:db:b9:93:73:23:05:f9:3a:ea:e7:1d:ea:de: bd:13:b3:cd:26:d6:42:7e:52:f0:9a:e2:5d:5d:48: 54:89:49:c9:58:4e:f1:df:ff:88:32:5c:5d:9a:81: e2:d3:6a:e7:a5:99:46:80:8f:a1:4a:a3:26:4d:30: 10:9e:24:4b:1c:a9:52:6b:b5:6e:9e:cd:08:e2:38: c8:11:4b:8b:f8:23:52:d8:ec:97:83:1b:79:91:43: 3c:35:55:84:b1:ef:ae:e0:56:1f:f2:65:e4:cf:eb: 6b:1d:51:fd:86:21:e5:0f:dd:83:6b:80:0b:55:84: 37:97:b5:7a:5b:4a:49:e3:07:7a:04:e1:fd:26:fc: bc:aa:d0:57:00:b0:d1:8f:a0:db:57:1a:f5:d2:d6: 97:bb:12:2a:87:21:93:2a:82:1c:fa:05:16:93:55: 47:be:55:10:00:bf:7a:04:a0:bb:27:be:53:ef:3d: 93:85:40:de:62:83:50:1d:5a:9a:4d:9f:db:2d:95: 96:09:e5:51:2b:aa:b3:8e:e9:5e:7d:2c:a9:54:08: ac:4e:37:1b:eb:d7:51:25:e7:68:38:45:e3:f1:8c: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:18:44:DC:72:74:38:59:54:4D:CD:A2:BC:61:19:9A:56:94:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52887821-8ea1-4c00-aade-d864665119f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:400::/38 Signature Algorithm: sha256WithRSAEncryption 81:c5:c9:69:9c:66:db:c0:f8:36:ba:75:47:29:68:d6:bc:ce: 6e:43:8a:d6:bc:a3:4b:d8:42:2b:2e:ed:90:80:31:a3:92:8e: 7d:2b:02:d0:69:1d:46:78:47:fd:c8:5b:2b:51:0a:4e:1d:94: 2c:08:79:ff:66:51:68:9b:cc:50:b6:eb:fa:30:67:aa:19:9d: 45:ba:63:83:2d:9f:2d:21:c1:0a:97:98:b1:29:9a:de:fe:1b: c6:ce:69:82:0e:86:58:fd:8d:77:ec:6e:ac:07:48:aa:be:f9: 68:f7:71:68:fd:60:d0:d1:63:6d:87:28:c6:7c:82:fe:9c:81: e0:7a:b7:fa:71:e8:f6:c6:c8:43:25:8d:ce:4d:4c:09:a2:8e: 82:d4:1c:7f:19:ba:4b:6f:65:6b:fb:53:b3:82:08:51:66:8d: 8a:02:4a:fe:04:81:65:e8:26:1d:c2:91:82:3e:13:88:bc:73: 07:90:10:8e:2c:ca:da:34:d5:77:42:e2:19:8b:bf:b7:3a:a8: af:5a:48:09:b9:fa:aa:28:c9:ed:1d:36:c9:85:74:49:98:c3: b3:d0:7d:95:c5:fb:9a:bf:71:10:70:2a:81:67:e9:06:e8:3b: 6d:d5:b0:f8:4f:90:dc:33:79:22:79:95:20:dd:ab:8e:82:0d: 66:04:26:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQPbd4f7vdV81v/OAee5ROl7m5m8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMTcwOWM0MzBlMTI4ZWU0MGNmMjJl OTIxYWU1MzM3YmY5ODQ2YzVlZWZmYmQ5NWJkNmVjZjg4Mjg3YmYwNjY1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsm/tIy9Uw+T9twJ5YYPc1Bv2BJf cbQsLLro9L2phdu5k3MjBfk66ucd6t69E7PNJtZCflLwmuJdXUhUiUnJWE7x3/+I MlxdmoHi02rnpZlGgI+hSqMmTTAQniRLHKlSa7Vuns0I4jjIEUuL+CNS2OyXgxt5 kUM8NVWEse+u4FYf8mXkz+trHVH9hiHlD92Da4ALVYQ3l7V6W0pJ4wd6BOH9Jvy8 qtBXALDRj6DbVxr10taXuxIqhyGTKoIc+gUWk1VHvlUQAL96BKC7J75T7z2ThUDe YoNQHVqaTZ/bLZWWCeVRK6qzjulefSypVAisTjcb69dRJedoOEXj8Yy8cwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCKPGETccnQ4WVRNzaK8YRmaVpTDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyODg3ODIxLThlYTEtNGMwMC1hYWRlLWQ4NjQ2NjUxMTlmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQQwDQYJKoZIhvcNAQELBQADggEBAIHFyWmcZtvA+Da6dUcp aNa8zm5Dita8o0vYQisu7ZCAMaOSjn0rAtBpHUZ4R/3IWytRCk4dlCwIef9mUWib zFC26/owZ6oZnUW6Y4Mtny0hwQqXmLEpmt7+G8bOaYIOhlj9jXfsbqwHSKq++Wj3 cWj9YNDRY22HKMZ8gv6cgeB6t/px6PbGyEMljc5NTAmijoLUHH8ZuktvZWv7U7OC CFFmjYoCSv4EgWXoJh3CkYI+E4i8cweQEI4syto01XdC4hmLv7c6qK9aSAm5+qoo ye0dNsmFdEmYw7PQfZXF+5q/cRBwKoFn6QboO23VsPhPkNwzeSJ5lSDdq46CDWYE JuI= -----END CERTIFICATE-----Generated at Wed Feb 5 04:08:34 2025 by rpki-client