$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa File: 55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa (raw, json) Hash identifier: ZVX7oSPuIOqWiZUKYYrgbhEaRtzMtnC0ur0tv56ENkw= Subject key identifier: E0:5B:B9:D5:B1:E1:95:AD:70:1C:42:29:91:81:DD:46:16:AF:70:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DC4FDC91F5621B2B1ADA2BD06128B0375DAB308 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c4:fd:c9:1f:56:21:b2:b1:ad:a2:bd:06:12:8b:03:75:da:b3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:11:7a:17:6c:34:f0:b4:cc:42:98:f7:8c: 11:a9:4c:c3:77:28:25:60:6a:c4:35:75:f5:5f:df: f0:fc:6a:f0:f2:76:43:ab:c6:e0:ff:7f:d6:1c:b9: 8c:29:fd:13:ab:0c:13:28:56:a3:44:b8:15:f3:82: 1b:62:14:ef:23:b3:fe:01:11:21:44:b1:1a:86:68: 21:7a:94:c9:40:5b:3a:21:42:c3:d5:90:8d:f4:ea: 97:c0:e9:ae:18:c7:d7:d1:b3:b4:0c:c9:a7:93:90: 2f:28:1a:c1:2f:57:92:93:5a:03:9a:bc:7b:af:8e: a0:9a:bf:2e:56:e7:6f:18:cf:16:12:39:84:b7:dd: 44:42:98:e9:ac:a5:1f:c3:86:74:e0:da:2f:55:57: ba:c8:4f:b2:af:44:6c:8c:26:54:11:4d:43:5e:8f: 48:f9:de:96:c1:e2:a0:13:e3:b7:29:ee:34:71:71: 88:91:2d:a4:c6:73:59:14:40:03:bb:c0:f4:52:96: 3d:e5:dc:96:a5:f9:b9:9a:0f:72:d2:71:a0:ac:83: aa:4b:12:f0:f3:bd:46:a6:bf:0a:4f:8a:9b:dc:d6: af:a3:45:cc:0e:7d:01:2e:96:66:cd:bc:ba:ab:18: be:d7:45:bb:10:dc:93:49:ce:9c:b5:a8:7f:1e:73: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5B:B9:D5:B1:E1:95:AD:70:1C:42:29:91:81:DD:46:16:AF:70:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4040::/48 Signature Algorithm: sha256WithRSAEncryption 5f:30:e4:39:79:e1:32:b3:06:cd:ce:bc:3c:13:58:50:d6:4a: 4e:6b:cb:8c:b4:c8:6e:6c:96:3b:81:56:79:73:b7:66:44:28: 4c:38:24:35:c4:85:a1:7c:81:9b:39:4f:22:35:d5:9e:21:0b: cf:66:3b:00:14:28:00:f5:2f:7c:87:72:53:7f:e0:6c:e1:6b: cc:bd:dd:83:0e:cd:ab:8b:b2:24:69:03:3a:bb:88:6f:8f:2c: 09:c8:8a:d5:1e:42:d2:34:5e:2a:47:76:3b:a8:2b:80:30:69: 1a:8d:74:03:04:fe:1c:87:ca:1b:95:97:b5:69:c3:26:ff:2c: 15:eb:66:32:3a:ac:b1:da:0e:9b:5f:2c:28:dd:f1:89:77:75: 4f:8d:58:46:cb:86:21:13:a7:9c:75:ad:ae:24:a2:6b:39:ec: 4b:c4:1f:0b:b7:66:ba:b1:d3:df:4c:f6:7e:fd:4a:0c:1b:05: 20:c7:98:74:79:6b:c3:5f:33:cd:a7:ba:e8:11:48:d0:bc:bd: ff:0b:2e:32:84:5f:1d:5c:12:16:f9:a1:94:3f:09:68:d4:a2: 20:0d:76:b7:1f:7c:a2:57:1a:e0:e1:81:21:21:20:31:a5:82: a1:27:6e:99:c7:2a:33:40:ad:d4:6b:b4:1e:30:fc:1d:ce:e1: 93:c6:63:19 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULcT9yR9WIbKxraK9BhKLA3XaswgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANjNiYjdmZjU0OTQwZjE3MGRhYzkw Y2I3NzdlZGVjZWE3MzdlOTNmZjI0YmRmY2RjY2NmMzMyNTM3ZmVmOTJhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsRehdsNPC0zEKY94wRqUzDdygl YGrENXX1X9/w/Grw8nZDq8bg/3/WHLmMKf0TqwwTKFajRLgV84IbYhTvI7P+AREh RLEahmghepTJQFs6IULD1ZCN9OqXwOmuGMfX0bO0DMmnk5AvKBrBL1eSk1oDmrx7 r46gmr8uVudvGM8WEjmEt91EQpjprKUfw4Z04NovVVe6yE+yr0RsjCZUEU1DXo9I +d6WweKgE+O3Ke40cXGIkS2kxnNZFEADu8D0UpY95dyWpfm5mg9y0nGgrIOqSxLw 871Gpr8KT4qb3Navo0XMDn0BLpZmzby6qxi+10W7ENyTSc6ctah/HnM8mwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOBbudWx4ZWtcBxCKZGB3UYWr3AFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1MTY4YzNmLTU5ZjUtNGM0Yi1iZjFmLTNkNzEyYzZhODVjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kBAMA0GCSqGSIb3DQEBCwUAA4IBAQBfMOQ5eeEyswbNzrw8 E1hQ1kpOa8uMtMhubJY7gVZ5c7dmRChMOCQ1xIWhfIGbOU8iNdWeIQvPZjsAFCgA 9S98h3JTf+Bs4WvMvd2DDs2ri7IkaQM6u4hvjywJyIrVHkLSNF4qR3Y7qCuAMGka jXQDBP4ch8oblZe1acMm/ywV62YyOqyx2g6bXywo3fGJd3VPjVhGy4YhE6ecda2u JKJrOexLxB8Lt2a6sdPfTPZ+/UoMGwUgx5h0eWvDXzPNp7roEUjQvL3/Cy4yhF8d XBIW+aGUPwlo1KIgDXa3H3yiVxrg4YEhISAxpYKhJ26ZxyozQK3Ua7QeMPwdzuGT xmMZ -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:41 2025 by rpki-client