$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67234885-c8a6-442c-9c14-9cd26763c5b1.roa File: 67234885-c8a6-442c-9c14-9cd26763c5b1.roa (raw, json) Hash identifier: VRhuXG85Dr80yHNPomz/JHoeW75FfIDfNjT+8ziSwe4= Subject key identifier: 22:2C:37:33:BA:A8:D5:D2:BA:27:2C:E2:13:B6:D6:2C:C3:27:D0:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63347CD9AC5EB04B168D34EAEA4D0E358FF0FAD1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67234885-c8a6-442c-9c14-9cd26763c5b1.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:34:7c:d9:ac:5e:b0:4b:16:8d:34:ea:ea:4d:0e:35:8f:f0:fa:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:a7:aa:19:18:67:77:e0:c6:ed:99:4d:33: 15:75:f9:0a:e9:59:79:55:29:1b:50:7d:80:c3:97: b0:d3:04:83:cc:df:e3:d5:18:9f:91:54:84:b4:64: 71:43:87:6b:b6:af:2e:a0:ff:73:62:c5:fd:37:1d: 75:30:f0:4b:02:ea:d4:b9:f4:3e:1e:96:45:5f:39: dc:01:68:b5:b6:40:7b:8e:38:a0:53:ee:ea:5b:cb: 1f:15:04:03:ec:4b:77:9e:6b:69:88:5d:ee:65:62: ee:c6:c2:24:94:d5:8a:ed:7a:c7:d3:2d:2d:ef:2b: bf:10:42:19:48:cc:8a:f3:2c:8a:de:9b:ee:90:63: c7:e4:25:06:35:c6:22:5f:d9:55:46:ed:45:f0:d3: 22:c1:f0:5d:41:0b:3a:24:c5:2e:e6:d6:6d:c3:2f: 1c:88:02:f8:28:71:54:d6:9e:5a:61:f6:fd:67:4a: 66:51:f2:af:ff:71:a7:0f:64:ad:ce:ac:d9:5e:28: 41:a4:5e:7f:81:a1:17:34:2a:f7:5e:6b:b0:b8:ef: da:74:b3:38:de:33:d6:25:f8:b3:69:a2:93:d9:bd: 18:a2:d5:95:5a:1c:2d:31:7c:df:dd:b4:31:c0:c6: dc:ca:c7:3b:b1:4f:58:90:8a:53:b7:2e:e5:37:2a: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:37:33:BA:A8:D5:D2:BA:27:2C:E2:13:B6:D6:2C:C3:27:D0:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67234885-c8a6-442c-9c14-9cd26763c5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:6000::/40 Signature Algorithm: sha256WithRSAEncryption 05:a2:8e:93:d0:f6:a3:63:de:f7:81:b0:69:dc:9a:c7:15:93: 8a:13:c6:5b:5d:19:5d:b3:4d:e6:5b:00:29:d5:4c:0f:09:c4: 4a:7b:78:4b:c7:52:f2:3c:04:22:93:76:f6:3a:f5:af:8d:47: 3a:0d:b6:d6:01:f2:30:00:a9:0c:b3:30:1d:5d:56:55:d8:ce: 7c:a9:79:4c:c5:2f:a9:f4:11:d5:33:f0:43:0e:29:15:90:01: ab:dc:16:8b:13:21:89:64:9d:5a:24:5a:f3:74:5d:94:c2:85: 66:37:81:64:f6:e7:5f:f3:f8:d1:6b:24:0f:d4:af:f6:61:96: fb:98:8f:0e:1a:0f:24:da:b5:15:e8:ae:7f:35:c8:b2:68:32: 1d:8a:a0:b9:fd:41:48:3f:91:26:b0:a9:71:d4:28:3f:94:59: 51:9b:70:e8:86:45:5a:e5:aa:4e:2b:87:07:a3:06:08:ae:a5: 7f:33:20:98:b1:f7:8c:18:9d:1a:7c:da:4f:72:aa:f1:f8:07: e8:a0:cc:c2:2e:e6:d7:5d:45:53:75:b3:fe:e9:cf:75:e5:2e: 07:5a:dd:4f:ad:2e:bb:01:8c:a5:22:8e:3d:df:0b:b0:d7:3c: 1d:3f:7a:b9:3d:8f:fb:6e:d1:2f:31:01:92:4c:26:a6:e7:ac: 5e:16:91:10 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYzR82axesEsWjTTq6k0ONY/w+tEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAM2ViYTQ2OTQyNTFhN2E5MjNlOWI5 YmVhMmYyNWQ4MTE4NTA2Y2FlZWFlMGVhMjZmMDc2ZDU5MDQ4NDRmODczMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6anqhkYZ3fgxu2ZTTMVdfkK6Vl5 VSkbUH2Aw5ew0wSDzN/j1RifkVSEtGRxQ4drtq8uoP9zYsX9Nx11MPBLAurUufQ+ HpZFXzncAWi1tkB7jjigU+7qW8sfFQQD7Et3nmtpiF3uZWLuxsIklNWK7XrH0y0t 7yu/EEIZSMyK8yyK3pvukGPH5CUGNcYiX9lVRu1F8NMiwfBdQQs6JMUu5tZtwy8c iAL4KHFU1p5aYfb9Z0pmUfKv/3GnD2StzqzZXihBpF5/gaEXNCr3XmuwuO/adLM4 3jPWJfizaaKT2b0YotWVWhwtMXzf3bQxwMbcysc7sU9YkIpTty7lNyqrdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCIsNzO6qNXSuics4hO21izDJ9CgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3MjM0ODg1LWM4YTYtNDQyYy05YzE0LTljZDI2NzYzYzViMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9GAwDQYJKoZIhvcNAQELBQADggEBAAWijpPQ9qNj3veBsGnc mscVk4oTxltdGV2zTeZbACnVTA8JxEp7eEvHUvI8BCKTdvY69a+NRzoNttYB8jAA qQyzMB1dVlXYznypeUzFL6n0EdUz8EMOKRWQAavcFosTIYlknVokWvN0XZTChWY3 gWT251/z+NFrJA/Ur/ZhlvuYjw4aDyTatRXorn81yLJoMh2KoLn9QUg/kSawqXHU KD+UWVGbcOiGRVrlqk4rhwejBgiupX8zIJix94wYnRp82k9yqvH4B+igzMIu5tdd RVN1s/7pz3XlLgda3U+tLrsBjKUijj3fC7DXPB0/erk9j/tu0S8xAZJMJqbnrF4W kRA= -----END CERTIFICATE-----Generated at Wed Feb 5 04:02:01 2025 by rpki-client