$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa File: 61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa (raw, json) Hash identifier: DmYULFU76M90bUL4q663EG/4S2EwJMwmy6Tz5NkpdL8= Subject key identifier: B2:24:C1:8B:A7:C0:EE:C2:64:08:66:29:53:E1:94:D3:71:E2:C4:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48E7570462A17148226029DE6E187F311D92A956 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e7:57:04:62:a1:71:48:22:60:29:de:6e:18:7f:31:1d:92:a9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fb:06:af:63:fe:30:01:8e:9a:5b:8c:c7:dc: 5b:08:59:19:3c:cf:83:e3:15:1f:73:f6:72:db:7e: d0:f9:58:6c:46:a1:76:c3:49:92:a9:12:2a:a6:47: a8:f4:c0:8e:68:e9:24:46:66:fd:5f:45:a3:46:ad: a1:e7:11:c5:0f:61:14:ed:69:2f:22:53:68:95:21: 7c:f7:4f:64:a2:70:78:69:41:74:ea:f3:ac:7e:eb: a2:cb:f3:c8:31:ad:0b:24:74:c2:d8:98:c2:61:5c: 72:54:02:ab:d7:a2:dd:51:9e:d3:7f:28:1c:06:c9: 6e:db:d0:44:6f:c9:a9:79:86:a7:c3:fe:27:a7:24: 4f:15:c1:7d:f0:66:a7:6e:df:94:12:44:10:ea:aa: 04:f3:44:cb:9b:1a:a1:54:84:c8:75:ef:8a:69:e7: ac:a9:2b:07:51:6a:e5:5d:ac:2a:f7:02:75:ce:d5: 7c:5b:d1:4c:6a:df:c4:8e:19:35:1c:b1:4f:fe:a3: 42:df:b3:9b:51:dc:1c:84:43:be:13:3f:15:82:9c: b2:7e:77:06:5f:d1:07:e5:26:71:77:8b:1e:b3:22: 4d:e8:68:90:eb:12:c1:aa:e3:e5:49:43:2c:69:75: 33:cf:ba:47:e6:10:17:8a:bc:4d:8e:41:07:55:33: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:C1:8B:A7:C0:EE:C2:64:08:66:29:53:E1:94:D3:71:E2:C4:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:a080::/46 Signature Algorithm: sha256WithRSAEncryption 22:c8:fe:b8:aa:0a:cc:6c:3f:de:7e:7c:55:65:75:ab:9a:a8: 95:f2:d6:c3:89:9d:a3:f9:d2:ea:89:2d:37:80:5d:b7:8f:9b: 31:99:4c:53:47:d8:df:eb:ac:3b:7a:48:4c:13:da:99:20:3f: 0c:86:17:3f:b9:58:75:d7:40:09:cf:57:2e:8e:8a:2d:f7:88: 1d:95:75:53:0b:00:0a:a3:34:2d:ef:6a:6a:b4:40:43:c1:a2: 86:e1:8c:12:76:bf:fa:bb:99:09:40:58:08:7c:e3:5f:67:96: 9f:b7:e6:9d:d2:a7:da:7c:7c:00:68:bc:3a:5d:03:48:45:79: 59:53:13:c5:f0:e6:c9:e2:b8:46:45:d2:f1:55:b0:95:a0:ce: f3:81:a0:b4:e0:7f:16:5b:b6:66:d6:f4:02:56:48:b0:bf:e8: 02:ef:dd:74:37:e8:62:7a:e9:3f:da:9e:54:06:27:06:b9:7f: 57:6b:ba:93:a5:4b:d0:c9:b0:1d:68:09:f1:8f:03:9e:c5:55: 75:13:50:06:88:e3:ae:3c:b7:5b:ea:ae:21:bc:99:f0:20:e7: 66:9b:e1:e7:fc:e8:bf:de:28:9c:b9:8a:ff:c2:cc:0b:bc:94: b3:36:51:21:15:44:3b:89:09:51:59:fc:dc:e7:91:c0:68:cf: 3c:a6:e1:06 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSOdXBGKhcUgiYCnebhh/MR2SqVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMDU3YzFkMjUwMmJmNzE1NzliMTY3 ZWYzMmI4YTY0NzczZTkzZTNlMWYxMTIwMGY1NGY3NDlhN2I4ODU5M2FlYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PsGr2P+MAGOmluMx9xbCFkZPM+D 4xUfc/Zy237Q+VhsRqF2w0mSqRIqpkeo9MCOaOkkRmb9X0WjRq2h5xHFD2EU7Wkv IlNolSF8909konB4aUF06vOsfuuiy/PIMa0LJHTC2JjCYVxyVAKr16LdUZ7Tfygc Bslu29BEb8mpeYanw/4npyRPFcF98Ganbt+UEkQQ6qoE80TLmxqhVITIde+Kaees qSsHUWrlXawq9wJ1ztV8W9FMat/Ejhk1HLFP/qNC37ObUdwchEO+Ez8VgpyyfncG X9EH5SZxd4sesyJN6GiQ6xLBquPlSUMsaXUzz7pH5hAXirxNjkEHVTMJ0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLIkwYunwO7CZAhmKVPhlNNx4sR4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxZmQ4Y2MzLTZiNzEtNGFlMC05OGFlLWNiMTA4Mjk0Y2M4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba96CAMA0GCSqGSIb3DQEBCwUAA4IBAQAiyP64qgrMbD/efnxV ZXWrmqiV8tbDiZ2j+dLqiS03gF23j5sxmUxTR9jf66w7ekhME9qZID8Mhhc/uVh1 10AJz1cujoot94gdlXVTCwAKozQt72pqtEBDwaKG4YwSdr/6u5kJQFgIfONfZ5af t+ad0qfafHwAaLw6XQNIRXlZUxPF8ObJ4rhGRdLxVbCVoM7zgaC04H8WW7Zm1vQC Vkiwv+gC7910N+hieuk/2p5UBicGuX9Xa7qTpUvQybAdaAnxjwOexVV1E1AGiOOu PLdb6q4hvJnwIOdmm+Hn/Oi/3iicuYr/wswLvJSzNlEhFUQ7iQlRWfzc55HAaM88 puEG -----END CERTIFICATE-----Generated at Wed Feb 5 03:56:16 2025 by rpki-client