$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa File: 561b2653-251b-4a06-91e6-d8a55b1ccb18.roa (raw, json) Hash identifier: H/9S+dk6kEPGt224IH74VV9yOSBkHVD3h3wlJVdStVw= Subject key identifier: E2:17:3D:41:C7:7A:D9:68:2A:68:E8:8C:71:BE:DC:7F:AA:06:03:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C73822CB70C9325189CAED2418B2E6628AB4FB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:73:82:2c:b7:0c:93:25:18:9c:ae:d2:41:8b:2e:66:28:ab:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:9b:df:e0:a5:cb:2b:03:6a:3a:de:ee:e4: 7f:4b:8a:4b:bd:8c:54:e8:bb:03:fb:0b:e2:11:9c: f5:ac:2e:62:de:6c:a9:90:ab:b1:2b:29:9b:fe:ae: 43:46:e5:a3:41:7d:93:2f:a7:2f:1a:33:0f:fa:81: 04:75:44:b5:d5:65:7d:dc:c4:a3:5b:eb:83:7e:84: 5c:2a:6d:38:ae:36:6c:44:fb:5b:56:03:ef:db:28: 50:ee:eb:b2:da:37:a1:88:65:23:06:43:db:9b:6f: 71:44:9b:bf:ef:4f:4d:88:e0:e8:de:9e:ba:38:70: 3d:bf:0f:30:a1:a0:37:3f:99:f1:84:5d:16:5b:0c: a4:ed:e4:6d:15:49:b6:c2:77:e4:f0:0f:83:36:4f: dd:10:4d:16:6c:f8:ba:28:52:e0:ce:41:3f:dc:c9: 88:05:fe:c8:3d:a7:8f:36:bd:a0:31:7d:8b:1a:4f: 81:4a:4f:a6:f2:20:0c:7d:71:f2:6a:a3:6a:aa:17: 67:ae:53:25:dc:45:b3:4f:9c:ca:02:be:99:8f:98: a3:5a:c4:27:9c:88:c6:fb:43:22:65:0b:01:9b:fb: ed:02:41:f2:de:91:bf:ab:02:a1:fe:f5:97:ef:33: 06:28:98:5d:ab:6b:de:13:01:47:88:4b:31:22:70: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:17:3D:41:C7:7A:D9:68:2A:68:E8:8C:71:BE:DC:7F:AA:06:03:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:8800::/40 Signature Algorithm: sha256WithRSAEncryption 79:53:48:d0:4b:10:03:0b:a3:00:26:b3:98:e3:49:61:ef:b1: df:44:b4:45:ac:a5:09:7c:15:20:16:0d:09:fc:f0:24:03:e5: 68:7c:0f:c9:14:8e:45:b4:86:5f:10:80:cc:4b:85:d8:01:62: 90:d9:75:82:10:ff:95:46:42:c8:e5:dd:10:ca:86:06:49:2a: 96:a0:6c:dd:b2:75:65:25:c8:d9:cd:f2:31:b4:73:dd:04:f1: 85:1a:83:b6:40:e6:99:d7:36:89:fb:35:8c:00:31:34:2a:1b: 44:b0:3a:ce:9e:53:c7:e4:39:e0:8c:e7:d7:88:55:e7:39:58: f2:95:4e:44:34:df:8e:70:35:22:58:35:8d:dc:1c:78:10:c1: 0f:cd:c0:b4:d2:09:3c:12:03:93:1c:f0:2d:f8:f2:f9:bc:55: 91:f1:06:8b:b4:12:6d:bf:e3:24:e7:61:16:62:08:90:d3:6f: bf:51:97:03:6d:2f:90:49:b2:7f:7f:36:31:47:1f:57:76:88: 0c:c4:b2:40:1a:91:94:d5:8e:f2:ed:9c:60:84:be:7e:3b:4e: 0e:dd:0b:b3:b4:e8:f8:53:92:f5:2e:43:99:61:62:9c:19:aa: 15:1c:98:3e:f7:19:ec:0d:71:bb:76:1c:94:82:49:02:e0:7b: 0a:a2:e0:c2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXHOCLLcMkyUYnK7SQYsuZiirT7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANjY1NzRlOTQ1NWVjNTA1ZDI0ZTRm MzIwOGMwZmI5MzhkYTc2MTRhNzg4NzU3MjkzNGY2N2NjODMwM2NjYWEzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1yb3+ClyysDajre7uR/S4pLvYxU 6LsD+wviEZz1rC5i3mypkKuxKymb/q5DRuWjQX2TL6cvGjMP+oEEdUS11WV93MSj W+uDfoRcKm04rjZsRPtbVgPv2yhQ7uuy2jehiGUjBkPbm29xRJu/709NiODo3p66 OHA9vw8woaA3P5nxhF0WWwyk7eRtFUm2wnfk8A+DNk/dEE0WbPi6KFLgzkE/3MmI Bf7IPaePNr2gMX2LGk+BSk+m8iAMfXHyaqNqqhdnrlMl3EWzT5zKAr6Zj5ijWsQn nIjG+0MiZQsBm/vtAkHy3pG/qwKh/vWX7zMGKJhdq2veEwFHiEsxInCSwwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOIXPUHHetloKmjojHG+3H+qBgMYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MWIyNjUzLTI1MWItNGEwNi05MWU2LWQ4YTU1YjFjY2IxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMogwDQYJKoZIhvcNAQELBQADggEBAHlTSNBLEAMLowAms5jj SWHvsd9EtEWspQl8FSAWDQn88CQD5Wh8D8kUjkW0hl8QgMxLhdgBYpDZdYIQ/5VG Qsjl3RDKhgZJKpagbN2ydWUlyNnN8jG0c90E8YUag7ZA5pnXNon7NYwAMTQqG0Sw Os6eU8fkOeCM59eIVec5WPKVTkQ0345wNSJYNY3cHHgQwQ/NwLTSCTwSA5Mc8C34 8vm8VZHxBou0Em2/4yTnYRZiCJDTb79RlwNtL5BJsn9/NjFHH1d2iAzEskAakZTV jvLtnGCEvn47Tg7dC7O06PhTkvUuQ5lhYpwZqhUcmD73GewNcbt2HJSCSQLgewqi 4MI= -----END CERTIFICATE-----Generated at Wed Feb 5 03:52:02 2025 by rpki-client