$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7b377b-906b-49a0-87a2-73168e0d8254.roa File: 5a7b377b-906b-49a0-87a2-73168e0d8254.roa (raw, json) Hash identifier: QY3qkHTbEknGI0/7yfnk0I2QaaJvkT8azXp0p66jlRc= Subject key identifier: 69:65:EB:A2:72:46:34:93:17:CA:69:47:16:66:60:35:15:4F:21:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6CDB0DF3E6E6404C6083DFB072433739C34AE78D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7b377b-906b-49a0-87a2-73168e0d8254.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:db:0d:f3:e6:e6:40:4c:60:83:df:b0:72:43:37:39:c3:4a:e7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:75:74:05:e2:2d:e5:66:68:50:d7:2c:78:99: 67:3c:91:44:1d:30:6f:53:2c:26:f9:53:f4:f4:bc: 39:98:00:93:df:bb:8a:b7:11:04:f1:e0:38:3d:3f: ad:b2:15:86:c1:67:33:4a:da:e6:99:64:a8:77:f1: 19:48:30:19:f6:e0:4c:91:95:d3:7e:ab:f5:a0:88: 8a:94:8f:21:b1:60:c8:87:0e:8f:e6:1e:a4:ad:74: 53:b2:56:a7:e3:0c:d2:2b:8e:24:d6:2b:00:c9:9f: 6c:54:0b:dc:a6:04:aa:5a:19:e3:68:20:c8:b5:fa: e8:a3:aa:6a:60:54:66:5b:42:d3:7c:80:4a:e6:f1: c2:87:14:15:3b:94:a6:6f:64:6c:3c:7d:94:c3:69: 1e:d7:30:5a:63:db:5a:58:8e:50:7f:f0:dc:44:7f: e9:44:2b:13:3a:30:6c:bc:5c:aa:d5:db:60:5d:df: 3f:8d:fd:3a:e3:84:ff:8d:f6:fe:04:96:22:09:3d: dd:9d:66:84:78:e5:72:26:98:9d:7f:f1:2d:2c:7b: e2:8f:02:d1:b2:b0:c7:e2:8c:a9:f6:7c:84:16:1e: 22:c9:3a:a5:f2:5b:fc:25:73:b9:44:d2:b4:cf:69: 61:7c:cb:0f:c1:0c:02:2a:4d:c3:42:05:35:67:e9: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:EB:A2:72:46:34:93:17:CA:69:47:16:66:60:35:15:4F:21:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7b377b-906b-49a0-87a2-73168e0d8254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:c840::/48 Signature Algorithm: sha256WithRSAEncryption 76:b8:51:89:ba:80:d6:a2:92:b5:e7:09:43:11:5b:69:c2:79: a0:c3:0e:5e:7c:59:07:0d:a0:2c:8d:ee:e5:eb:ac:d1:d8:85: 88:7f:0d:a7:70:dd:81:21:ed:4d:53:cd:68:5e:cd:20:fa:3d: bf:85:99:5d:dc:e5:94:59:4a:fa:48:ed:be:f0:cf:0b:5e:0a: dc:42:d5:c2:09:46:ff:fb:24:2c:87:f8:15:4c:d5:29:79:8c: 4f:81:1c:d9:ca:09:05:e6:33:7f:94:76:4c:8a:68:23:63:e3: 7b:d7:f4:cc:59:39:26:9c:95:66:5f:3b:be:61:5b:a2:e3:cb: 3d:6c:99:93:4d:8f:7a:cd:af:bb:02:a4:cb:bf:68:d5:86:9e: 42:79:1a:c6:af:21:b3:5b:46:c0:a7:f4:a9:29:d0:d8:25:68: ee:07:ad:a6:bf:5c:52:3f:bc:e0:8d:48:a3:89:d4:6b:ca:26: f1:f3:97:3a:02:f5:14:6f:fa:fa:ce:87:6f:d8:9e:86:d1:3b: 94:f2:a3:34:bd:6c:76:8c:66:45:ca:90:29:52:ed:dd:2e:bd: ef:90:1e:92:6c:6e:ca:a3:64:66:73:38:aa:50:fc:b1:34:ab: 92:48:ab:1c:80:33:70:29:46:f0:07:d6:04:cc:4e:e3:de:59: e4:f3:43:18 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbNsN8+bmQExgg9+wckM3OcNK540wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTY1ZDE0NzAyMDk4NTE5NWMxODY2 YmQ2YWUzY2Q3ZDc2ZjA2NDlmZTgwMDAyN2I4OTc2MWQyZjI2ZmE3ZDBjZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nV0BeIt5WZoUNcseJlnPJFEHTBv Uywm+VP09Lw5mACT37uKtxEE8eA4PT+tshWGwWczStrmmWSod/EZSDAZ9uBMkZXT fqv1oIiKlI8hsWDIhw6P5h6krXRTslan4wzSK44k1isAyZ9sVAvcpgSqWhnjaCDI tfroo6pqYFRmW0LTfIBK5vHChxQVO5Smb2RsPH2Uw2ke1zBaY9taWI5Qf/DcRH/p RCsTOjBsvFyq1dtgXd8/jf0644T/jfb+BJYiCT3dnWaEeOVyJpidf/EtLHvijwLR srDH4oyp9nyEFh4iyTql8lv8JXO5RNK0z2lhfMsPwQwCKk3DQgU1Z+nWPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGll66JyRjSTF8ppRxZmYDUVTyHcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhN2IzNzdiLTkwNmItNDlhMC04N2EyLTczMTY4ZTBkODI1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9MhAMA0GCSqGSIb3DQEBCwUAA4IBAQB2uFGJuoDWopK15wlD EVtpwnmgww5efFkHDaAsje7l66zR2IWIfw2ncN2BIe1NU81oXs0g+j2/hZld3OWU WUr6SO2+8M8LXgrcQtXCCUb/+yQsh/gVTNUpeYxPgRzZygkF5jN/lHZMimgjY+N7 1/TMWTkmnJVmXzu+YVui48s9bJmTTY96za+7AqTLv2jVhp5CeRrGryGzW0bAp/Sp KdDYJWjuB62mv1xSP7zgjUijidRryibx85c6AvUUb/r6zodv2J6G0TuU8qM0vWx2 jGZFypApUu3dLr3vkB6SbG7Ko2RmcziqUPyxNKuSSKscgDNwKUbwB9YEzE7j3lnk 80MY -----END CERTIFICATE-----Generated at Wed Feb 5 04:06:03 2025 by rpki-client