$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa File: 629f07b6-9f47-4955-89e6-77a305389cf6.roa (raw, json) Hash identifier: IlL7XRwumFBf5bFYsL2i6D+v7D2qVmqGbUMOOVXHTac= Subject key identifier: 05:E0:00:40:C6:36:CA:4F:53:2C:B8:1D:BF:A1:0E:8F:F6:6C:2F:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FFCD70987FEBF5BD247FC566BDFDECD2287A309 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fc:d7:09:87:fe:bf:5b:d2:47:fc:56:6b:df:de:cd:22:87:a3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:db:ce:86:ed:b3:b5:82:6c:e7:ef:dd:af: 96:29:df:b0:57:70:99:71:5a:67:7f:de:87:f9:c2: 48:d4:e1:bc:57:e3:88:f2:ff:9e:fc:75:8e:ab:19: 2d:8b:22:5d:2d:aa:a9:64:fa:11:8f:29:bc:6f:ce: a9:7a:a3:03:3e:ac:a5:4b:6c:86:df:e4:25:ed:61: 1a:06:e5:ca:0b:13:c7:e7:5b:b3:91:c0:ac:33:f8: 13:b9:7e:d1:ca:2f:d6:86:da:db:3f:e6:03:0f:40: 2d:92:96:85:3b:d5:dd:a2:ba:16:1f:b8:cb:a1:0d: d3:d5:fb:76:55:e5:4a:6f:5d:2c:7f:e9:74:68:6e: 88:5e:f5:72:22:66:8e:b6:0a:88:b0:62:12:94:c4: 15:b8:b3:49:fb:c0:46:33:99:c9:4f:b8:f5:c7:ce: 36:6e:53:7b:a7:58:3e:d7:46:a7:26:b7:cf:5c:9e: 0b:45:da:f3:c2:12:aa:5f:96:b7:ad:f2:90:62:26: 69:e8:e6:ab:99:5e:d3:3a:1d:36:1f:bf:dd:25:48: 07:3f:fa:e9:5b:5c:6c:f6:da:5a:14:cc:fc:e3:e3: b8:bd:f9:cf:3d:2a:78:74:60:6e:38:d8:0b:30:ff: df:80:68:bc:86:e2:f3:77:de:ce:65:65:4c:be:fd: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:00:40:C6:36:CA:4F:53:2C:B8:1D:BF:A1:0E:8F:F6:6C:2F:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b040::/48 Signature Algorithm: sha256WithRSAEncryption c7:75:51:90:ac:11:1c:58:c5:55:09:69:78:34:b7:00:1d:20: 52:3c:2f:e1:c8:5e:41:8d:45:ac:e4:f8:56:40:06:71:23:f5: 7d:a0:dd:44:82:f6:46:45:8a:3b:46:db:ea:65:dc:23:9a:d5: 54:fc:52:75:c8:ef:77:e8:23:b4:df:8b:ca:8c:35:54:2c:7a: 9a:50:ed:f9:13:7f:b4:59:6d:db:9e:46:cc:c0:e1:01:10:6c: 5b:72:2d:df:b3:32:18:cb:d9:b5:3f:7e:4a:e2:52:10:7d:27: 5b:b9:ee:77:76:af:d6:28:e3:f6:94:77:9c:b5:4d:e9:44:3c: 7a:2a:46:5a:24:87:64:da:a9:23:96:45:8f:e6:d6:a6:6e:2f: e9:34:b1:12:e8:6d:68:63:4c:17:2a:fc:2b:ed:88:a7:3c:75: 91:50:dd:16:d0:60:97:41:cd:da:d2:eb:ae:ea:4a:2d:5f:7e: 8a:a8:d1:17:5c:d5:97:a5:bb:eb:5a:a7:d5:d4:c9:06:23:4f: 9f:ff:f3:99:c9:ab:b8:af:aa:6f:0b:2a:fa:98:66:66:2e:82: e7:8f:c5:a8:52:32:9e:1a:e6:41:df:4f:0b:cd:cb:39:0b:5b: 20:5f:39:3b:20:49:66:36:e0:76:e9:26:78:03:ce:e2:22:51: f7:62:4f:6e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUT/zXCYf+v1vSR/xWa9/ezSKHowkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZDhkM2U4ZWY3ZTg4OTkwYjgxODU4 ZjljOWJiYWMwZjhlYmU3Y2JmMWIwYzE1ZGIwM2NmNGZiNGE3YzQ2ZDJiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fnbzobts7WCbOfv3a+WKd+wV3CZ cVpnf96H+cJI1OG8V+OI8v+e/HWOqxktiyJdLaqpZPoRjym8b86peqMDPqylS2yG 3+Ql7WEaBuXKCxPH51uzkcCsM/gTuX7Ryi/WhtrbP+YDD0AtkpaFO9XdoroWH7jL oQ3T1ft2VeVKb10sf+l0aG6IXvVyImaOtgqIsGISlMQVuLNJ+8BGM5nJT7j1x842 blN7p1g+10anJrfPXJ4LRdrzwhKqX5a3rfKQYiZp6OarmV7TOh02H7/dJUgHP/rp W1xs9tpaFMz84+O4vfnPPSp4dGBuONgLMP/fgGi8huLzd97OZWVMvv2t9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAXgAEDGNspPUyy4Hb+hDo/2bC/NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYyOWYwN2I2LTlmNDctNDk1NS04OWU2LTc3YTMwNTM4OWNmNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7BAMA0GCSqGSIb3DQEBCwUAA4IBAQDHdVGQrBEcWMVVCWl4 NLcAHSBSPC/hyF5BjUWs5PhWQAZxI/V9oN1EgvZGRYo7RtvqZdwjmtVU/FJ1yO93 6CO034vKjDVULHqaUO35E3+0WW3bnkbMwOEBEGxbci3fszIYy9m1P35K4lIQfSdb ue53dq/WKOP2lHectU3pRDx6KkZaJIdk2qkjlkWP5tambi/pNLES6G1oY0wXKvwr 7YinPHWRUN0W0GCXQc3a0uuu6kotX36KqNEXXNWXpbvrWqfV1MkGI0+f//OZyau4 r6pvCyr6mGZmLoLnj8WoUjKeGuZB308Lzcs5C1sgXzk7IElmNuB26SZ4A87iIlH3 Yk9u -----END CERTIFICATE-----Generated at Wed Feb 5 03:46:32 2025 by rpki-client