$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa File: 5a0d1930-a322-4bbd-8eef-91ba17b37082.roa (raw, json) Hash identifier: 6wnahpPwmJZhofcngykOWa7hnxD6IcIbYbCOaSeE8zw= Subject key identifier: BC:84:60:A1:2A:B5:D0:E6:BA:54:4C:6A:65:38:31:10:E1:F5:7D:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 571FF893606AB0EFB5BDF1491EDC5ECA85CCDC0B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1f:f8:93:60:6a:b0:ef:b5:bd:f1:49:1e:dc:5e:ca:85:cc:dc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:65:41:38:c9:fd:dc:55:40:aa:85:e6:a5: fc:68:53:a8:2a:51:1b:3f:96:d0:e9:0e:bb:e7:48: eb:0a:f1:59:93:86:d6:e4:32:e6:f3:11:7b:1e:be: 18:30:a0:e6:42:49:64:c0:b7:47:21:49:e8:a9:5d: 14:cd:0f:77:71:f7:aa:87:71:ba:96:ed:89:04:df: 18:9d:b9:17:6e:48:31:93:88:db:25:89:24:9e:ae: ac:fd:53:3d:30:a3:32:c3:91:81:64:5d:b4:69:40: 09:74:e4:06:a9:19:8d:00:34:0f:65:5a:8e:c5:f9: ea:4c:ee:44:83:93:8f:4b:ca:34:70:77:d5:ba:77: 8d:bc:28:c2:c3:4a:0b:ef:f3:88:bb:9b:73:49:b2: d1:d7:7a:88:1e:0d:cc:45:50:f6:e9:fb:28:6d:4b: 27:39:52:d9:e8:d0:f8:09:99:73:f4:89:0e:e5:2a: 1a:f7:1d:70:62:e6:35:03:e5:9d:70:3c:dd:9d:12: 43:10:2d:a9:d1:8e:35:e2:d8:37:c3:a3:ed:1c:0c: 2a:a8:66:e8:08:7f:5f:cb:5a:d1:8b:89:09:4e:fb: 51:69:c2:da:4a:93:3b:ec:a5:41:43:b1:26:ec:f4: be:cb:f5:5c:ba:db:6b:84:21:c1:b6:16:dd:2a:09: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:60:A1:2A:B5:D0:E6:BA:54:4C:6A:65:38:31:10:E1:F5:7D:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 84:0e:0a:1c:b9:db:21:ad:a9:f0:69:5b:ee:ef:ff:ee:0c:b7: af:1d:06:89:f2:4b:90:50:de:27:39:85:c4:5b:c7:a4:22:0a: 62:d1:39:da:2e:8b:b9:43:bd:15:7f:48:1f:61:29:ec:6a:be: 0a:2b:63:9d:09:9f:bf:a8:44:78:f3:3d:53:0b:43:09:cd:15: 69:9a:d7:a5:56:b8:52:39:7a:9c:0a:c9:0a:be:78:16:89:a1: c5:b3:f3:49:14:ad:fe:3d:01:20:5a:1c:c6:b5:05:0d:ad:08: c5:e9:f5:e4:90:bc:50:fb:88:ac:4b:c7:31:5e:8f:3a:de:75: c0:0c:0a:e4:18:36:9b:f2:d0:86:84:64:7e:32:bf:42:c1:e4: a5:38:35:65:a1:a2:92:2f:15:e8:81:51:5a:bb:4c:98:11:12: 73:89:09:c4:24:28:78:4e:d6:01:e8:36:2f:10:a9:14:02:c7: cd:a0:dc:26:be:20:b1:d1:f0:a2:e0:54:e3:8d:0b:08:e4:ad: ab:17:9f:df:06:a5:6e:a4:47:8a:93:2c:c6:eb:2a:bd:6c:50: 46:59:e0:18:65:05:98:20:26:f0:d1:f0:84:be:ff:b5:10:6f: 21:09:86:68:0f:f5:6f:e7:cf:05:7f:2e:34:24:42:34:67:85: 4e:61:f0:13 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVx/4k2BqsO+1vfFJHtxeyoXM3AswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZmU3YzJlYmM4NmU1MGUwNzhjZTg2 YTVlYzBiN2JjYmM2ZGVjNmQ3ZTFlMmJkY2JlZmU4YmI1ZGE1ZjE4NjdlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oJlQTjJ/dxVQKqF5qX8aFOoKlEb P5bQ6Q6750jrCvFZk4bW5DLm8xF7Hr4YMKDmQklkwLdHIUnoqV0UzQ93cfeqh3G6 lu2JBN8YnbkXbkgxk4jbJYkknq6s/VM9MKMyw5GBZF20aUAJdOQGqRmNADQPZVqO xfnqTO5Eg5OPS8o0cHfVuneNvCjCw0oL7/OIu5tzSbLR13qIHg3MRVD26fsobUsn OVLZ6ND4CZlz9IkO5Soa9x1wYuY1A+WdcDzdnRJDEC2p0Y414tg3w6PtHAwqqGbo CH9fy1rRi4kJTvtRacLaSpM77KVBQ7Em7PS+y/VcuttrhCHBthbdKgli2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLyEYKEqtdDmulRMamU4MRDh9X2rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhMGQxOTMwLWEzMjItNGJiZC04ZWVmLTkxYmExN2IzNzA4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYeDAMA0GCSqGSIb3DQEBCwUAA4IBAQCEDgocudshranwaVvu 7//uDLevHQaJ8kuQUN4nOYXEW8ekIgpi0TnaLou5Q70Vf0gfYSnsar4KK2OdCZ+/ qER48z1TC0MJzRVpmtelVrhSOXqcCskKvngWiaHFs/NJFK3+PQEgWhzGtQUNrQjF 6fXkkLxQ+4isS8cxXo863nXADArkGDab8tCGhGR+Mr9CweSlODVloaKSLxXogVFa u0yYERJziQnEJCh4TtYB6DYvEKkUAsfNoNwmviCx0fCi4FTjjQsI5K2rF5/fBqVu pEeKkyzG6yq9bFBGWeAYZQWYICbw0fCEvv+1EG8hCYZoD/Vv588Ffy40JEI0Z4VO YfAT -----END CERTIFICATE-----Generated at Wed Feb 5 04:00:41 2025 by rpki-client