$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e9fa435-b2ca-4846-8c84-dd6ad902a20c.roa File: 7e9fa435-b2ca-4846-8c84-dd6ad902a20c.roa (raw, json) Hash identifier: S2r7tmx+PhQj31ohqCfU2o6kFMjR7cMPjviW8SdxhHw= Subject key identifier: 38:81:2E:7A:90:BB:BF:30:7F:E5:19:DC:41:FB:12:5E:28:7D:10:85 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28ECC4529C16B67D15FB0DCCE22A89F4C558CFDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e9fa435-b2ca-4846-8c84-dd6ad902a20c.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ec:c4:52:9c:16:b6:7d:15:fb:0d:cc:e2:2a:89:f4:c5:58:cf:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:e0:cc:86:20:ad:4d:a7:2e:24:75:e7:fa: 9a:bc:ad:b6:a7:3b:a4:a3:80:76:28:d6:cf:0c:ef: 10:96:dd:77:d5:38:b4:3a:3b:c5:ef:fe:40:17:50: 4f:56:75:3f:fd:bd:ce:5b:35:17:35:6b:8e:c3:d5: ce:7a:2c:d5:07:73:dc:d8:4e:87:7c:a3:9d:29:b1: 80:fd:5b:30:9e:f4:84:1e:c9:5e:9b:d3:aa:13:33: 60:be:df:90:42:88:be:f2:27:e4:ad:38:10:5b:30: a1:3b:51:00:ea:0f:5e:34:bc:98:fb:41:a0:2f:09: c4:0a:a4:95:48:64:78:d4:a0:4e:31:eb:5d:0b:71: a4:17:d2:36:bb:1f:81:d0:53:fd:83:56:31:c9:9b: 0f:d1:6e:a8:52:52:1a:8b:67:95:7e:f8:bc:22:74: 34:d7:61:71:0f:eb:8e:ce:04:37:ca:15:73:12:6e: 01:42:b7:94:73:1b:cd:f1:00:6e:21:41:c6:5c:47: 29:62:43:d0:60:ba:0d:90:d4:44:2f:5e:4d:c3:62: bc:5d:dc:52:4a:63:d9:0a:c5:c4:19:ca:3e:ca:0d: b4:30:15:c1:f2:9d:66:45:ae:6c:70:b2:ab:2d:9a: 0d:60:b3:6e:57:8a:69:c8:5c:04:99:69:b7:44:43: a9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:2E:7A:90:BB:BF:30:7F:E5:19:DC:41:FB:12:5E:28:7D:10:85 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e9fa435-b2ca-4846-8c84-dd6ad902a20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b000::/40 Signature Algorithm: sha256WithRSAEncryption c0:73:d1:25:c9:d8:fb:20:a5:c5:f1:8d:3c:a2:32:37:8b:74: b1:25:04:d3:3f:23:56:78:d2:bb:b1:8b:19:28:8c:20:89:c6: 1c:49:b4:61:e3:f2:87:45:2c:43:57:66:a6:cf:dc:c9:4c:49: b9:52:c5:d0:8f:c0:23:dd:52:29:eb:eb:c1:e1:1a:e1:b8:ba: 52:7c:97:da:a1:38:9f:c3:03:a0:fc:c5:eb:76:a7:38:5a:ec: 5e:cb:0a:05:28:5c:77:83:f3:05:4f:c8:34:ac:7c:30:50:03: c8:85:40:ee:88:8f:88:1d:fc:1d:b1:e7:70:50:97:09:df:11: 94:89:eb:06:48:f6:7d:3d:9d:17:7c:97:58:e6:67:d3:a3:39: 86:ff:65:c2:e3:18:d0:8d:8b:8f:cd:17:c5:15:34:09:c8:37: 8e:ae:01:90:5c:d1:a8:aa:02:22:4f:f4:29:be:e6:44:54:16: fd:fe:0c:45:ad:ba:f2:74:c6:00:35:57:35:6a:04:1f:e0:84: 79:2d:40:54:98:78:38:8a:46:0b:f6:4f:37:f9:75:4e:1a:a9: 13:b0:70:1d:fd:45:c5:b7:d7:c7:28:7f:5b:05:8a:53:62:22: bf:ab:a8:2c:27:57:f6:32:31:06:4e:ac:c0:a6:8c:60:a4:2b: 98:08:ef:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKOzEUpwWtn0V+w3M4iqJ9MVYz9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYmIwM2QyN2ZhYzE2MjRjYmE4Yjkz NWY0YjliZDE0ZjIxZGI3YWMzNmY3YjNhNGQ2OGI1YjRkYjI4MmQ2MzIzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWfgzIYgrU2nLiR15/qavK22pzuk o4B2KNbPDO8Qlt131Ti0OjvF7/5AF1BPVnU//b3OWzUXNWuOw9XOeizVB3Pc2E6H fKOdKbGA/VswnvSEHslem9OqEzNgvt+QQoi+8ifkrTgQWzChO1EA6g9eNLyY+0Gg LwnECqSVSGR41KBOMetdC3GkF9I2ux+B0FP9g1YxyZsP0W6oUlIai2eVfvi8InQ0 12FxD+uOzgQ3yhVzEm4BQreUcxvN8QBuIUHGXEcpYkPQYLoNkNREL15Nw2K8XdxS SmPZCsXEGco+yg20MBXB8p1mRa5scLKrLZoNYLNuV4ppyFwEmWm3REOpzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDiBLnqQu78wf+UZ3EH7El4ofRCFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlOWZhNDM1LWIyY2EtNDg0Ni04Yzg0LWRkNmFkOTAyYTIwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYbAwDQYJKoZIhvcNAQELBQADggEBAMBz0SXJ2PsgpcXxjTyi MjeLdLElBNM/I1Z40ruxixkojCCJxhxJtGHj8odFLENXZqbP3MlMSblSxdCPwCPd Uinr68HhGuG4ulJ8l9qhOJ/DA6D8xet2pzha7F7LCgUoXHeD8wVPyDSsfDBQA8iF QO6Ij4gd/B2x53BQlwnfEZSJ6wZI9n09nRd8l1jmZ9OjOYb/ZcLjGNCNi4/NF8UV NAnIN46uAZBc0aiqAiJP9Cm+5kRUFv3+DEWtuvJ0xgA1VzVqBB/ghHktQFSYeDiK Rgv2Tzf5dU4aqROwcB39RcW318cof1sFilNiIr+rqCwnV/YyMQZOrMCmjGCkK5gI 77w= -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:18 2025 by rpki-client