$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: f+8CU9oeVwmlhBhZ5Qq23XAX2Mreyz304Zw3qAxxfWY= Subject key identifier: 49:F3:16:94:12:D8:3C:1D:33:E6:70:2B:F1:92:7B:0F:3E:E2:87:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C28D6AA9C0E9799E6B191E3A21D3BD4243287B2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:28:d6:aa:9c:0e:97:99:e6:b1:91:e3:a2:1d:3b:d4:24:32:87:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:5a:13:71:ea:35:28:a1:fb:0e:ea:5b:49: 2d:21:d0:e8:1b:b3:ce:36:d7:42:d3:e3:5e:04:bd: 79:45:c1:9e:6a:74:be:69:52:2b:98:d4:85:6c:a3: 62:b1:9d:a1:1c:06:03:99:d2:aa:b0:60:e8:07:dd: 73:b3:16:50:d8:b9:19:c9:3e:69:2f:bd:c8:9b:51: 2c:b3:05:33:1c:e4:b2:56:89:fa:5d:01:cc:b3:5e: c3:60:23:28:90:81:fb:8d:8a:32:7a:da:97:fd:05: 18:41:c0:62:90:72:e8:39:9a:cb:34:0c:12:bf:03: 55:81:e9:4b:b3:81:23:ac:d7:2a:43:ee:26:62:32: 96:91:ea:ae:5e:e8:d3:4c:eb:96:d0:08:fa:ab:6a: 58:34:21:03:1e:a8:f1:4e:de:8e:d6:b5:f5:29:6b: 79:29:50:21:31:aa:80:8d:9b:34:4b:d2:5c:26:93: 94:7b:e0:69:06:39:a1:6b:de:e9:98:d5:7a:51:e3: 58:d0:4f:15:17:7b:ba:40:0a:84:2d:5f:1f:5b:1d: d6:97:66:dd:42:e0:ad:21:7e:76:61:0c:32:d3:e3: e8:de:3b:76:15:27:bb:5b:6f:95:55:ac:fc:a3:fc: 3d:a2:0d:65:65:3a:80:8d:90:7c:a1:08:3a:57:98: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F3:16:94:12:D8:3C:1D:33:E6:70:2B:F1:92:7B:0F:3E:E2:87:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption 31:ae:a2:b4:8d:f7:90:4a:88:4e:e2:82:88:7f:05:39:20:e9: 86:d8:e0:ef:9e:52:3a:c9:3e:9e:68:7d:c0:40:87:e2:05:cb: c7:e5:7e:67:41:69:79:6c:1d:83:e7:9d:4c:88:52:63:89:89: 48:86:d0:9d:eb:97:ca:09:a7:98:a0:d2:43:8b:a6:c9:1e:eb: e8:66:05:73:11:a2:e8:ba:7f:32:57:0c:1a:d5:d4:d0:98:65: ec:fe:9a:3e:1c:60:4c:e8:20:54:03:dd:42:8e:35:8f:ff:95: ee:b9:16:60:f1:d9:c9:58:45:56:1c:74:cb:27:26:be:a9:d6: e8:18:d8:e5:cf:dd:67:52:f2:4e:e3:d9:74:2a:a3:78:a9:50: fe:b5:81:eb:22:8d:4f:56:6b:f7:a6:17:c5:85:a1:d6:b8:dd: 26:f1:2d:cb:63:27:91:49:38:b6:e8:07:14:7b:81:f2:71:c5: dd:f0:3f:49:1e:45:0c:9b:82:b2:ea:b3:a2:73:df:0f:87:76: cb:7b:f8:11:12:74:55:33:d5:d0:5d:aa:f7:76:78:c6:6f:c8: b8:fe:ae:27:fa:72:cb:2c:d8:48:4d:25:f8:f0:79:6e:93:f5: 0a:4f:2d:53:0d:53:a5:9f:0d:18:1c:02:3a:ce:33:86:c6:64: ba:fd:b6:66 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTCjWqpwOl5nmsZHjoh071CQyh7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAY2NkZGVkOWU0YmUwNGE0OTk5NWY3 MTU4NWY5ZjZkODUzYzVkZDY2ZDVkOGEwMjRlYTU4ZWQyZDc4Yjg4OTQ4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1aE3HqNSih+w7qW0ktIdDoG7PO NtdC0+NeBL15RcGeanS+aVIrmNSFbKNisZ2hHAYDmdKqsGDoB91zsxZQ2LkZyT5p L73Im1EsswUzHOSyVon6XQHMs17DYCMokIH7jYoyetqX/QUYQcBikHLoOZrLNAwS vwNVgelLs4EjrNcqQ+4mYjKWkequXujTTOuW0Aj6q2pYNCEDHqjxTt6O1rX1KWt5 KVAhMaqAjZs0S9JcJpOUe+BpBjmha97pmNV6UeNY0E8VF3u6QAqELV8fWx3Wl2bd QuCtIX52YQwy0+Po3jt2FSe7W2+VVaz8o/w9og1lZTqAjZB8oQg6V5gi1wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEnzFpQS2DwdM+ZwK/GSew8+4oeWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQAxrqK0jfeQSohO4oKI fwU5IOmG2ODvnlI6yT6eaH3AQIfiBcvH5X5nQWl5bB2D551MiFJjiYlIhtCd65fK CaeYoNJDi6bJHuvoZgVzEaLoun8yVwwa1dTQmGXs/po+HGBM6CBUA91CjjWP/5Xu uRZg8dnJWEVWHHTLJya+qdboGNjlz91nUvJO49l0KqN4qVD+tYHrIo1PVmv3phfF haHWuN0m8S3LYyeRSTi26AcUe4HyccXd8D9JHkUMm4Ky6rOic98Ph3bLe/gREnRV M9XQXar3dnjGb8i4/q4n+nLLLNhITSX48Hluk/UKTy1TDVOlnw0YHAI6zjOGxmS6 /bZm -----END CERTIFICATE-----Generated at Wed Feb 5 04:05:50 2025 by rpki-client