$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4fb3c5-ffd6-4ac8-9a84-32400beb25a7.roa File: 5f4fb3c5-ffd6-4ac8-9a84-32400beb25a7.roa (raw, json) Hash identifier: ZSc5JpFTTBZDiDlpxtxaN3l2WdAy+j1DKaMZrfjl+Nw= Subject key identifier: A9:0C:2F:58:60:00:5A:AA:DB:12:E7:D1:3B:79:43:11:0F:2F:2B:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47A9076A833E1F4CB784B2874E18D208D2961473 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4fb3c5-ffd6-4ac8-9a84-32400beb25a7.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a9:07:6a:83:3e:1f:4c:b7:84:b2:87:4e:18:d2:08:d2:96:14:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:0a:43:3b:0a:a7:18:2b:a8:36:d5:11:8b: 89:29:bb:9a:27:c3:af:65:9b:b1:41:e2:36:1a:13: 19:1b:2a:a7:1b:58:fe:ec:72:c4:35:a4:e7:58:18: f9:45:89:6e:44:2e:4d:03:7c:88:e3:41:07:71:34: 9a:a7:13:90:2b:3f:6a:8d:25:cd:86:8a:0d:55:01: cc:ca:5f:7a:95:e5:f6:56:8a:91:a2:44:9f:e0:ac: 83:a2:fd:6b:49:80:fa:bb:57:e4:a8:cb:5b:57:4f: 84:36:68:cb:c5:82:26:28:89:7c:a6:11:1a:d5:45: 9e:14:d3:f1:af:e0:18:36:56:50:2a:c0:40:d8:a7: 97:56:8d:c5:42:f7:d5:ec:62:15:27:21:8d:9d:24: 05:f8:98:8b:e9:6e:e1:8d:2c:66:bd:48:a3:79:ae: 10:0f:cb:34:fd:56:6a:90:3f:4f:15:74:d7:fa:08: 65:59:5a:e7:c7:d2:f4:cd:2e:cd:b4:62:26:ec:be: 8d:c7:9f:38:0e:40:ca:ea:4b:3f:56:3a:af:88:71: be:67:90:3f:10:ef:42:64:65:7e:59:60:84:0e:11: ed:47:10:38:94:b1:1b:40:92:b3:26:bc:f4:08:68: f5:1d:4c:1d:e0:fb:49:70:94:f1:e8:8a:10:0b:29: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0C:2F:58:60:00:5A:AA:DB:12:E7:D1:3B:79:43:11:0F:2F:2B:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4fb3c5-ffd6-4ac8-9a84-32400beb25a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f040::/48 Signature Algorithm: sha256WithRSAEncryption 5c:21:7e:35:b1:99:ec:5a:19:0b:e7:e5:9f:27:6a:8b:65:c9: a0:cf:8e:a8:56:71:94:1d:9b:43:e3:d7:b7:23:b8:4f:81:30: f4:fe:c1:da:58:33:d3:b7:11:54:ee:8c:c9:67:7a:f0:eb:f4: 84:48:38:98:9f:74:95:82:d3:ed:cf:58:2e:58:61:8e:3c:8f: ed:4c:5e:85:c1:d8:38:1e:40:77:1a:13:a4:83:0c:5f:0e:3f: 7f:93:fa:25:cf:f9:6a:27:f6:e8:54:42:34:c7:06:3d:96:e8: fd:01:7d:b1:f5:92:af:c3:e7:80:a2:ff:4f:3d:cd:f7:52:08: 87:fc:31:2d:e7:bf:e5:7d:32:82:21:f6:d3:b4:bb:fb:3b:e8: 8d:9c:53:9e:79:ee:25:5c:33:ad:0b:18:d0:8a:99:67:65:41: a8:e9:8d:e4:69:9b:7e:e5:04:77:61:e8:b3:2c:75:25:93:85: 90:27:12:9e:a5:e5:52:f6:10:cd:5c:d0:1f:6e:78:ba:38:03: 6c:e2:e8:5f:da:92:8b:b9:c0:aa:f9:e9:b0:50:b3:c0:c8:f5: 2b:48:b9:5d:f2:7d:08:d3:07:b6:7b:2b:70:2b:51:7d:c3:58: a5:19:0a:99:64:f0:25:53:a0:bb:d0:64:e5:9d:94:29:2c:0f: 2e:c4:84:8b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUR6kHaoM+H0y3hLKHThjSCNKWFHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTBlYTM2YmQ3MjQxNDliNmJiODQ4 NjdhMDI1NTM3ZTAwYTM2NzUxNDkxYmE2ZjZiNThkNDVhNTI3M2JlMThmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz8KQzsKpxgrqDbVEYuJKbuaJ8Ov ZZuxQeI2GhMZGyqnG1j+7HLENaTnWBj5RYluRC5NA3yI40EHcTSapxOQKz9qjSXN hooNVQHMyl96leX2VoqRokSf4KyDov1rSYD6u1fkqMtbV0+ENmjLxYImKIl8phEa 1UWeFNPxr+AYNlZQKsBA2KeXVo3FQvfV7GIVJyGNnSQF+JiL6W7hjSxmvUijea4Q D8s0/VZqkD9PFXTX+ghlWVrnx9L0zS7NtGIm7L6Nx584DkDK6ks/VjqviHG+Z5A/ EO9CZGV+WWCEDhHtRxA4lLEbQJKzJrz0CGj1HUwd4PtJcJTx6IoQCyleXQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKkML1hgAFqq2xLn0Tt5QxEPLyvLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNGZiM2M1LWZmZDYtNGFjOC05YTg0LTMyNDAwYmViMjVhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfBAMA0GCSqGSIb3DQEBCwUAA4IBAQBcIX41sZnsWhkL5+Wf J2qLZcmgz46oVnGUHZtD49e3I7hPgTD0/sHaWDPTtxFU7ozJZ3rw6/SESDiYn3SV gtPtz1guWGGOPI/tTF6Fwdg4HkB3GhOkgwxfDj9/k/olz/lqJ/boVEI0xwY9luj9 AX2x9ZKvw+eAov9PPc33UgiH/DEt57/lfTKCIfbTtLv7O+iNnFOeee4lXDOtCxjQ iplnZUGo6Y3kaZt+5QR3YeizLHUlk4WQJxKepeVS9hDNXNAfbni6OANs4uhf2pKL ucCq+emwULPAyPUrSLld8n0I0we2eytwK1F9w1ilGQqZZPAlU6C70GTlnZQpLA8u xISL -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:00 2025 by rpki-client