$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c0a164-da93-428a-bae0-35d34ec93555.roa File: 61c0a164-da93-428a-bae0-35d34ec93555.roa (raw, json) Hash identifier: VF/TLxdM4w0d+pRwWru1kfdZsjC3AQFsgAmHf/1n7ks= Subject key identifier: EF:01:60:AD:00:CD:CC:56:22:89:A8:94:2E:39:F4:51:08:0B:EE:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F2BDB6D430FDB5B2004405553E2F27C4B442CED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c0a164-da93-428a-bae0-35d34ec93555.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2b:db:6d:43:0f:db:5b:20:04:40:55:53:e2:f2:7c:4b:44:2c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:88:04:0c:93:23:56:b0:1d:5d:2c:78:9b: 99:da:56:2a:8d:06:e3:43:e4:b3:7c:d9:f1:28:fc: 66:b2:d9:a0:15:c4:66:ea:2d:1a:f5:59:9b:08:a3: 22:1c:50:ec:cf:92:07:98:d9:09:fa:86:b0:fc:ed: 7d:4f:d7:e0:6b:bd:8a:14:a1:4d:ed:29:22:1f:e7: e4:9a:1a:d4:69:ba:df:23:d4:83:14:3c:29:1c:ec: ae:14:cb:01:f2:df:43:80:ba:1d:97:17:52:c5:40: 40:f2:e8:cb:28:87:6a:5b:3f:66:db:d1:51:e3:ac: 10:65:f5:df:5c:ea:9e:d6:e8:cd:49:3f:ba:b7:3d: ac:d1:bc:35:01:9c:d5:c1:a9:4c:48:92:bb:d8:af: 2a:64:57:30:7c:4c:25:e4:00:aa:76:ec:42:e2:98: e4:28:c0:06:b3:6e:99:bc:e8:d8:6e:7e:0c:21:b0: 1a:1f:fd:95:1f:31:15:40:89:81:42:7d:64:1d:d8: 98:31:7b:e1:30:c1:3a:af:67:f8:7f:b0:04:31:46: d8:ec:e0:53:e6:28:3b:70:af:5f:c8:fa:3d:18:5b: c6:cc:33:8c:18:57:a3:ff:06:81:92:c4:5c:a7:a2: 74:50:45:8e:93:14:6f:08:78:d3:f5:68:a7:f2:0d: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:01:60:AD:00:CD:CC:56:22:89:A8:94:2E:39:F4:51:08:0B:EE:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c0a164-da93-428a-bae0-35d34ec93555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:400::/38 Signature Algorithm: sha256WithRSAEncryption 3c:07:4e:df:d7:98:4d:e7:8d:ea:81:e5:e0:1d:a6:a7:3b:75: ed:c3:f8:87:fc:94:b5:2c:a7:37:90:87:65:65:0e:1a:4f:41: f0:3f:d5:03:7d:05:b3:64:89:46:1f:d4:e1:70:74:4c:b9:76: ec:7f:5c:f2:ef:33:66:86:05:c5:b3:53:07:fe:76:3a:c5:a0: cc:63:5f:48:f6:ec:b2:b1:50:72:e3:ff:6a:de:66:65:1e:02: 74:e7:d3:34:0a:9c:3a:0c:48:0c:15:4c:37:76:9c:af:03:d7: c4:70:2a:10:99:82:7b:fc:50:10:7a:d0:30:d6:22:d6:9e:e2: 1d:9f:6a:a7:8d:0c:dc:ad:90:37:44:94:f1:e4:35:e1:c5:f3: fe:d7:60:08:24:7c:1a:9f:03:02:2e:57:d6:8c:a5:1e:17:a8: 8f:94:f0:25:27:e0:0b:4a:31:1b:f3:7b:a0:e4:31:23:f3:b3: 81:7b:7f:bf:72:f3:da:6c:fb:12:73:7d:00:dd:5a:8c:9d:65: 34:de:a1:9a:b5:8e:5f:61:85:fe:3b:52:2e:60:30:18:f4:c7: 97:77:4b:0f:73:65:76:dc:21:b1:a5:57:68:ad:13:cf:55:be: 82:38:e3:ba:9c:f3:50:53:4f:cd:02:55:f7:87:c4:1d:5e:da: 70:f7:77:99 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTyvbbUMP21sgBEBVU+LyfEtELO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYWYyOTU3OGIxMWU1YWRkYWU2Mzk0 NDNmODVjOGJhMTQyOTMwN2JlYmVjMjMzMzYxZmNiNWY5MzkzODg4YTdjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C6IBAyTI1awHV0seJuZ2lYqjQbj Q+SzfNnxKPxmstmgFcRm6i0a9VmbCKMiHFDsz5IHmNkJ+oaw/O19T9fga72KFKFN 7SkiH+fkmhrUabrfI9SDFDwpHOyuFMsB8t9DgLodlxdSxUBA8ujLKIdqWz9m29FR 46wQZfXfXOqe1ujNST+6tz2s0bw1AZzVwalMSJK72K8qZFcwfEwl5ACqduxC4pjk KMAGs26ZvOjYbn4MIbAaH/2VHzEVQImBQn1kHdiYMXvhMME6r2f4f7AEMUbY7OBT 5ig7cK9fyPo9GFvGzDOMGFej/waBksRcp6J0UEWOkxRvCHjT9Win8g3ErQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO8BYK0AzcxWIomolC459FEIC+6TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYzBhMTY0LWRhOTMtNDI4YS1iYWUwLTM1ZDM0ZWM5MzU1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgQwDQYJKoZIhvcNAQELBQADggEBADwHTt/XmE3njeqB5eAd pqc7de3D+If8lLUspzeQh2VlDhpPQfA/1QN9BbNkiUYf1OFwdEy5dux/XPLvM2aG BcWzUwf+djrFoMxjX0j27LKxUHLj/2reZmUeAnTn0zQKnDoMSAwVTDd2nK8D18Rw KhCZgnv8UBB60DDWItae4h2faqeNDNytkDdElPHkNeHF8/7XYAgkfBqfAwIuV9aM pR4XqI+U8CUn4AtKMRvze6DkMSPzs4F7f79y89ps+xJzfQDdWoydZTTeoZq1jl9h hf47Ui5gMBj0x5d3Sw9zZXbcIbGlV2itE89VvoI447qc81BTT80CVfeHxB1e2nD3 d5k= -----END CERTIFICATE-----Generated at Wed Feb 5 03:57:05 2025 by rpki-client