$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c30dddf-9f6e-495d-8005-1d32fd6005a0.roa File: 5c30dddf-9f6e-495d-8005-1d32fd6005a0.roa (raw, json) Hash identifier: 8iZ7+E6I8EOoW4+tHPxChV9SsvGuvOpi5Hu4ez8bFaE= Subject key identifier: DF:DC:E6:4F:78:C5:DC:61:E0:75:0B:1A:FF:51:7A:57:8A:E9:62:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62B8937F47157FBC4844CEF3E3840C88A5D74783 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c30dddf-9f6e-495d-8005-1d32fd6005a0.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b8:93:7f:47:15:7f:bc:48:44:ce:f3:e3:84:0c:88:a5:d7:47:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:48:fb:66:a5:ac:15:54:cd:b9:15:33:21: 75:89:a7:2f:ed:53:6e:ae:d1:23:4b:78:0d:1c:3c: 45:9a:0b:db:f4:c8:93:c6:33:1c:ad:b4:ce:13:cd: 35:91:8f:09:c7:42:77:f9:5e:c2:b5:39:ce:5d:c5: eb:95:e3:b2:55:5a:42:be:81:21:4e:f8:5a:4e:9a: 5f:d8:8c:f1:81:c6:15:aa:76:9f:db:fa:33:47:99: f6:d4:58:34:cc:48:53:72:c1:f4:47:1b:1b:65:45: ef:15:fd:6a:ab:b4:02:bf:91:17:c6:90:4c:d5:21: 34:2e:e8:2a:fd:50:57:fb:62:75:eb:be:3f:18:70: 70:7f:1d:23:7c:d7:ca:cc:7a:d8:ac:ba:bf:9b:b9: a3:cd:5e:ef:11:ac:37:9f:17:dc:8d:6a:de:f4:a2: 42:26:ed:ec:3a:70:0c:83:40:1a:cc:e1:e0:d1:88: 4b:87:c8:d7:cd:b4:3e:bc:a0:1a:88:26:aa:bc:b7: 25:02:e5:d2:fc:15:d3:4a:c5:3e:26:12:14:22:aa: 04:64:5b:dc:f4:c7:5c:b9:fa:70:0f:4f:e3:a9:8f: 5f:be:d7:d8:e7:22:bf:61:25:95:b3:58:41:5b:1c: af:f8:17:f7:a5:1d:a9:7d:93:50:de:5e:1a:9b:62: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:E6:4F:78:C5:DC:61:E0:75:0B:1A:FF:51:7A:57:8A:E9:62:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c30dddf-9f6e-495d-8005-1d32fd6005a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4840::/48 Signature Algorithm: sha256WithRSAEncryption 25:b6:4d:a8:35:28:4d:cf:f7:2b:b0:64:73:40:82:7a:ed:8d: 78:41:66:1c:2b:5f:af:69:b3:3b:c6:2d:60:bb:85:9a:d6:ac: 20:ca:2c:77:89:f3:64:f6:b9:1e:ea:43:c1:68:a1:0d:0c:69: c0:46:fd:fc:37:5a:22:8b:37:b1:61:73:c2:67:e4:c2:c8:ca: d3:28:28:62:6a:0b:67:99:c8:d3:26:83:ba:c8:4e:a3:1e:29: 48:47:b9:2a:0f:7a:3b:ca:c7:00:a6:37:ab:af:33:7d:67:f2: 17:b7:47:7d:84:d4:c6:74:b5:4a:7d:64:eb:c8:c2:8e:9c:f2: 11:df:5f:c0:57:1e:01:2e:b7:f4:a2:2a:5c:b7:23:21:62:3f: 77:c5:65:71:c9:5b:a4:59:51:11:41:fe:e3:ab:22:ed:85:4d: 98:68:ab:03:5f:90:8e:bf:73:3a:4e:3f:ba:83:b6:8f:e5:48: 27:93:ac:ce:f1:7b:33:56:94:1c:4d:62:cb:99:2a:f9:ab:da: 89:01:0b:51:53:25:d1:75:93:d8:1c:9d:30:83:24:09:d2:15: cf:8e:53:20:8a:99:ae:58:ad:34:8f:ba:96:bd:77:8c:54:a8: e0:3f:e9:d8:5d:1f:8d:72:42:31:f1:f2:cc:96:09:6f:2d:08: 2e:a8:e1:3e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYriTf0cVf7xIRM7z44QMiKXXR4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAY2UwMDMwOGZlODg1YjIzYzczNzdj YzBkODk5ODk2MWUzNTFkNDIwMDFkZThiZGUzZDg3YjYzY2Y1ODE3NDMxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKhI+2alrBVUzbkVMyF1iacv7VNu rtEjS3gNHDxFmgvb9MiTxjMcrbTOE801kY8Jx0J3+V7CtTnOXcXrleOyVVpCvoEh TvhaTppf2IzxgcYVqnaf2/ozR5n21Fg0zEhTcsH0RxsbZUXvFf1qq7QCv5EXxpBM 1SE0Lugq/VBX+2J1674/GHBwfx0jfNfKzHrYrLq/m7mjzV7vEaw3nxfcjWre9KJC Ju3sOnAMg0AazOHg0YhLh8jXzbQ+vKAaiCaqvLclAuXS/BXTSsU+JhIUIqoEZFvc 9MdcufpwD0/jqY9fvtfY5yK/YSWVs1hBWxyv+Bf3pR2pfZNQ3l4am2KarQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN/c5k94xdxh4HULGv9ReleK6WJIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjMzBkZGRmLTlmNmUtNDk1ZC04MDA1LTFkMzJmZDYwMDVhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEhAMA0GCSqGSIb3DQEBCwUAA4IBAQAltk2oNShNz/crsGRz QIJ67Y14QWYcK1+vabM7xi1gu4Wa1qwgyix3ifNk9rke6kPBaKENDGnARv38N1oi izexYXPCZ+TCyMrTKChiagtnmcjTJoO6yE6jHilIR7kqD3o7yscApjerrzN9Z/IX t0d9hNTGdLVKfWTryMKOnPIR31/AVx4BLrf0oipctyMhYj93xWVxyVukWVERQf7j qyLthU2YaKsDX5COv3M6Tj+6g7aP5Ugnk6zO8XszVpQcTWLLmSr5q9qJAQtRUyXR dZPYHJ0wgyQJ0hXPjlMgipmuWK00j7qWvXeMVKjgP+nYXR+NckIx8fLMlglvLQgu qOE+ -----END CERTIFICATE-----Generated at Wed Feb 5 04:06:13 2025 by rpki-client