$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa File: 56f42d5c-eb43-49bf-b9d7-51747507376d.roa (raw, json) Hash identifier: N4D3SY1q1gUqmA35P5Fv3wZaPkt0oNlbNttoXxQch6M= Subject key identifier: 3C:22:74:83:6E:50:01:EF:F7:93:8A:CB:47:C5:DC:F1:D5:DD:AD:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 144C61AE13E8E8392E739534CC44208DE5EA0DC8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4c:61:ae:13:e8:e8:39:2e:73:95:34:cc:44:20:8d:e5:ea:0d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:12:e1:e9:71:35:f8:32:54:04:c6:53:50: ac:42:e9:0d:f8:12:fb:0f:dd:a2:d7:1a:d8:cc:c2: 6c:3f:e7:46:43:3d:94:d4:1d:91:61:c6:2b:ff:63: 4a:e3:5d:66:76:eb:cf:d1:25:87:1c:f7:f9:1b:c8: 77:d1:98:8e:50:13:3e:29:37:cf:da:5d:c1:0f:af: 19:12:db:70:2e:d6:31:7d:e0:f5:99:b1:7d:eb:d2: c4:b1:01:2e:6f:f5:73:b3:c1:90:13:8f:02:8d:28: 24:3c:17:7b:cb:f8:71:e1:a6:14:c5:8e:e3:15:eb: 2c:b9:fe:47:51:32:67:9e:01:c2:22:17:22:ef:d9: 2f:85:0a:0b:3a:24:6e:b7:0a:11:01:0c:c8:36:21: dd:37:9b:5f:17:9f:70:6c:8c:e3:bb:c0:1b:23:59: e1:bd:22:63:37:b3:0c:b2:94:d1:23:9e:16:2c:a7: 4c:ec:ac:e0:e8:c3:7a:0b:5e:27:98:97:50:89:f8: 96:8e:88:51:fa:1f:6e:03:a8:f1:43:de:5f:c9:d6: e7:ff:fe:e8:a0:ca:6c:33:80:ec:ab:1a:13:7d:1f: 40:e0:61:74:f2:98:8c:a3:e4:9c:5a:3f:4f:15:a7: c7:32:6b:fd:01:6f:d0:d7:53:3c:7d:60:8c:a2:b4: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:74:83:6E:50:01:EF:F7:93:8A:CB:47:C5:DC:F1:D5:DD:AD:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:a000::/40 Signature Algorithm: sha256WithRSAEncryption 88:a8:fb:f6:43:b0:6d:18:c3:85:1b:4c:bb:37:05:7f:dd:59: 94:f4:28:a1:a6:b3:e7:db:4a:0e:8d:db:6c:7a:5a:e2:5a:fc: b1:40:c0:95:a5:36:cc:9a:39:5e:76:3a:37:4f:69:bc:35:7e: 0f:38:d6:72:6a:26:b9:60:1a:df:10:88:b8:ac:c0:9f:c6:d6: ba:bc:f7:4a:74:2c:d1:83:c1:2a:b9:93:f5:41:bc:f4:73:b2: ce:f1:6b:a4:bd:6d:01:e8:82:10:a6:91:81:9a:3f:b5:db:13: e7:47:39:32:24:95:d8:49:ae:f0:d1:78:ed:1d:65:e7:a3:93: 56:c7:37:d4:a8:7b:4b:65:48:6b:f9:ea:82:92:bb:3a:f9:ac: b3:7e:cb:46:9d:db:21:b6:eb:b5:b1:90:5a:ae:53:38:77:ee: 2f:bf:7a:e5:50:aa:f1:b0:de:36:f5:2c:68:b3:79:02:6b:81: 36:36:6a:f4:32:b0:3d:70:9d:cb:70:86:24:1e:e7:36:fb:3c: e8:ba:06:88:4f:63:8a:52:84:1f:53:17:85:e2:3b:25:bc:29: 8a:da:09:5c:a9:0a:e3:fe:19:62:25:27:03:d9:4d:18:6a:13: e9:36:88:8c:86:55:0c:0b:0c:6c:5d:ee:ba:d3:b9:69:08:e0: f2:4e:1b:94 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFExhrhPo6Dkuc5U0zEQgjeXqDcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwNDAwMDAwMFoX DTI1MDMxMTIzNTk1OVowejFJMEcGA1UEBRNAZGZkYzEzYWJmMDZhNmM1YTQ1OTA4 MjI5NGFlNzVkMGVmMmRkZDg0NDM1NjgyYTI3MjIwNTFmYTQ4NWJiM2ZiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqssS4elxNfgyVATGU1CsQukN+BL7 D92i1xrYzMJsP+dGQz2U1B2RYcYr/2NK411mduvP0SWHHPf5G8h30ZiOUBM+KTfP 2l3BD68ZEttwLtYxfeD1mbF969LEsQEub/Vzs8GQE48CjSgkPBd7y/hx4aYUxY7j Fessuf5HUTJnngHCIhci79kvhQoLOiRutwoRAQzINiHdN5tfF59wbIzju8AbI1nh vSJjN7MMspTRI54WLKdM7Kzg6MN6C14nmJdQifiWjohR+h9uA6jxQ95fydbn//7o oMpsM4DsqxoTfR9A4GF08piMo+ScWj9PFafHMmv9AW/Q11M8fWCMorSTPwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDwidINuUAHv95OKy0fF3PHV3a2rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2ZjQyZDVjLWViNDMtNDliZi1iOWQ3LTUxNzQ3NTA3Mzc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+qAwDQYJKoZIhvcNAQELBQADggEBAIio+/ZDsG0Yw4UbTLs3 BX/dWZT0KKGms+fbSg6N22x6WuJa/LFAwJWlNsyaOV52OjdPabw1fg841nJqJrlg Gt8QiLiswJ/G1rq890p0LNGDwSq5k/VBvPRzss7xa6S9bQHoghCmkYGaP7XbE+dH OTIkldhJrvDReO0dZeejk1bHN9Soe0tlSGv56oKSuzr5rLN+y0ad2yG267WxkFqu Uzh37i+/euVQqvGw3jb1LGizeQJrgTY2avQysD1wnctwhiQe5zb7POi6BohPY4pS hB9TF4XiOyW8KYraCVypCuP+GWIlJwPZTRhqE+k2iIyGVQwLDGxd7rrTuWkI4PJO G5Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:54 2025 by rpki-client