$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa File: 56a3ec11-278f-484a-aee2-dc1f64294598.roa (raw, json) Hash identifier: v+4wnGTiP6ctAu9steRJBTOxFPB4RH0zSw01Qpor5ms= Subject key identifier: 0C:5C:48:A0:AC:91:81:E8:43:25:1E:E7:44:31:5B:BB:4C:FA:5A:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E7BE298AD900EEDB82D6B0D3B87CE8B64E4B86B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7b:e2:98:ad:90:0e:ed:b8:2d:6b:0d:3b:87:ce:8b:64:e4:b8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:8d:8c:9c:87:f0:1c:19:e2:42:1d:cc:79: 5c:6b:47:90:b4:8b:ca:c1:52:2f:91:54:00:05:61: 0c:1a:21:37:1d:2b:06:31:18:50:27:32:ce:74:4a: f1:d2:fd:04:be:d6:13:c4:83:cf:02:ab:f2:77:86: 7b:49:b9:78:c6:cb:03:6c:6b:79:ae:c3:13:37:e5: 8a:31:29:0a:ca:6b:dc:a2:7d:9b:80:d5:52:9c:60: db:66:00:54:7b:d9:dc:f5:7c:f5:f8:66:f3:2e:ff: ec:b2:5b:e1:ea:5c:4f:67:ea:f3:d8:29:3f:7d:c5: 49:7a:33:9b:1b:93:b0:73:5f:05:98:97:ae:75:fd: 93:ab:d1:79:b5:6e:7e:5e:b6:9e:6e:a5:85:c2:de: 61:81:19:64:00:6a:a0:2f:d6:94:7e:a7:71:59:7d: 67:b3:25:ab:84:80:3c:80:a3:b6:6a:22:4b:30:3a: 6c:fb:19:ec:c1:ba:2e:2f:5f:81:cb:f6:67:06:da: 9f:86:22:8e:19:0b:17:14:19:b0:2c:b2:8c:58:d3: 11:72:dc:73:09:0b:67:98:f6:12:bc:d2:14:fb:46: 12:02:64:28:a6:1d:2e:01:f4:78:0b:a9:50:b8:47: 0e:2b:4c:56:9f:ff:7c:49:4f:1c:0a:6d:39:31:25: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:48:A0:AC:91:81:E8:43:25:1E:E7:44:31:5B:BB:4C:FA:5A:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4040::/46 Signature Algorithm: sha256WithRSAEncryption 8c:d2:52:29:b8:5a:ae:b9:a5:76:0b:9a:e4:2b:17:2e:df:6a: 44:3d:52:e2:ac:bc:a8:da:aa:7e:ed:c8:01:9b:22:51:86:34: 50:1c:68:5b:4f:ea:a4:3d:5c:c4:db:5c:1b:c4:19:6f:82:d2: 38:0c:39:b3:79:1a:47:ca:9c:7c:03:74:74:ee:8e:60:b2:06: 0e:2a:d1:01:38:90:8d:0a:51:e4:1b:2d:61:e2:e8:df:4d:8b: d8:7e:eb:65:f5:b0:df:30:aa:5d:24:d5:2f:f9:c2:7a:20:0c: 60:74:b3:30:c8:cd:bd:03:32:bf:2e:b3:d4:39:a0:d5:33:ef: a9:ff:ae:58:e4:b7:8d:3f:4d:9b:db:50:6a:f1:70:33:a3:6c: 69:af:84:b5:07:9f:d5:9d:f5:4c:c8:67:3b:3c:5e:00:fc:ba: db:51:4a:7a:e5:c5:0b:37:d9:f1:63:24:f3:82:98:fa:b6:77: da:f6:ac:0d:fd:16:4e:99:8b:08:bb:89:12:12:36:b6:15:bf: 64:4c:23:3f:65:a4:b2:9d:7e:60:3a:d2:0b:39:9c:04:c2:f1: 99:2b:56:c6:0f:bb:7d:40:8c:f3:f5:ec:9c:18:88:6a:c8:02: 6e:1e:59:24:20:e7:e5:d9:99:88:36:4d:a7:18:f2:f5:79:45: be:3f:df:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULnvimK2QDu24LWsNO4fOi2TkuGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTExOWM5OGZiZTkwYmRjYjg4OTJm YjdmNWEzNTNlMTk4ZDAyMzNhODUzNjNkNDQ1MjNkNzJjYjhkZDBlYzlmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tWNjJyH8BwZ4kIdzHlca0eQtIvK wVIvkVQABWEMGiE3HSsGMRhQJzLOdErx0v0EvtYTxIPPAqvyd4Z7Sbl4xssDbGt5 rsMTN+WKMSkKymvcon2bgNVSnGDbZgBUe9nc9Xz1+GbzLv/sslvh6lxPZ+rz2Ck/ fcVJejObG5Owc18FmJeudf2Tq9F5tW5+XraebqWFwt5hgRlkAGqgL9aUfqdxWX1n syWrhIA8gKO2aiJLMDps+xnswbouL1+By/ZnBtqfhiKOGQsXFBmwLLKMWNMRctxz CQtnmPYSvNIU+0YSAmQoph0uAfR4C6lQuEcOK0xWn/98SU8cCm05MSUtoQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAxcSKCskYHoQyUe50QxW7tM+lqdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2YTNlYzExLTI3OGYtNDg0YS1hZWUyLWRjMWY2NDI5NDU5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba90BAMA0GCSqGSIb3DQEBCwUAA4IBAQCM0lIpuFquuaV2C5rk Kxcu32pEPVLirLyo2qp+7cgBmyJRhjRQHGhbT+qkPVzE21wbxBlvgtI4DDmzeRpH ypx8A3R07o5gsgYOKtEBOJCNClHkGy1h4ujfTYvYfutl9bDfMKpdJNUv+cJ6IAxg dLMwyM29AzK/LrPUOaDVM++p/65Y5LeNP02b21Bq8XAzo2xpr4S1B5/VnfVMyGc7 PF4A/LrbUUp65cULN9nxYyTzgpj6tnfa9qwN/RZOmYsIu4kSEja2Fb9kTCM/ZaSy nX5gOtILOZwEwvGZK1bGD7t9QIzz9eycGIhqyAJuHlkkIOfl2ZmINk2nGPL1eUW+ P99F -----END CERTIFICATE-----Generated at Wed Feb 5 03:57:29 2025 by rpki-client