$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa File: 7f58f387-58a3-4959-8dec-7781a0fc0834.roa (raw, json) Hash identifier: A9R7r1bVGTD8RjTYNksmoboiM8/encyhkIybph/9yFE= Subject key identifier: 69:1A:89:3C:90:C8:B6:7A:56:13:2B:62:C8:2D:24:A5:8D:20:6F:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 229066167AB44B491BE1AE20A3AAE6AC4274E8AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:90:66:16:7a:b4:4b:49:1b:e1:ae:20:a3:aa:e6:ac:42:74:e8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:4b:e6:e1:04:58:5e:eb:64:4e:ad:6f:b8: 08:13:fe:5e:58:f9:dd:b3:3a:45:39:ac:99:ce:49: 2d:92:75:06:5e:ad:9c:c8:6b:87:0b:ce:c0:b9:bc: 3c:da:ab:51:b9:78:64:c4:a8:26:c7:2f:ba:4e:f0: 55:e5:72:82:34:2f:61:e3:1c:57:15:82:6c:6e:41: 2c:19:75:2c:25:83:5d:ae:76:94:05:df:f4:03:13: 66:d6:9a:18:c1:d5:b7:34:93:e2:80:04:57:da:d4: 0b:c3:ec:9b:3d:af:16:14:ea:4e:cc:05:96:2c:58: 6e:ca:c1:58:d9:8a:9f:fa:6e:39:28:b1:f1:a5:4c: 8b:82:0a:f0:81:2e:5f:06:5b:a9:1b:9c:c9:5d:88: 65:d0:f7:d5:b3:85:c2:1c:bc:67:2a:73:8b:58:72: e8:4f:bd:0f:0b:cb:3c:62:78:50:dd:d3:e8:57:af: 8e:8f:2c:b6:3f:a0:c1:f6:e5:6f:b0:34:a3:90:f9: e1:7a:52:8c:87:a3:88:39:42:b8:be:61:2b:07:19: e6:bc:2e:02:04:2c:0e:fd:41:00:e0:e1:12:0a:52: a8:7a:b1:5b:22:6b:df:e0:6f:5e:2b:19:87:bf:17: df:9f:d2:ed:fc:6e:1d:e4:f3:20:47:4f:d8:3e:60: 5c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:89:3C:90:C8:B6:7A:56:13:2B:62:C8:2D:24:A5:8D:20:6F:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:800::/38 Signature Algorithm: sha256WithRSAEncryption 25:71:48:6b:7a:51:89:ec:c1:d5:49:e0:25:e1:89:e4:31:e1: 9d:ad:e8:42:e6:13:5d:83:25:3c:7e:e5:f3:71:77:29:0d:c3: 43:ff:aa:2e:13:f3:e5:fa:57:04:fc:d4:7e:26:73:99:d2:a9: cf:00:88:c5:86:77:6c:17:39:cb:98:f7:7b:ca:2b:8c:87:b1: 64:a2:8a:22:d3:44:91:62:20:bf:51:8d:e0:be:07:b1:b4:74: 92:73:6e:a0:4c:71:12:d8:b8:ac:da:26:3f:c2:89:b8:e6:c0: 98:8d:52:af:55:ff:56:1d:29:3f:e0:25:b2:03:be:8e:f3:28: e4:f7:59:c5:6c:9f:4f:18:39:09:20:19:4b:83:40:10:fd:dd: 9a:d8:04:32:7f:ba:61:c6:c5:34:ad:37:43:b2:e2:0d:26:ab: ba:5c:e2:bd:6b:62:a0:cf:47:ea:f9:cf:89:57:fc:93:61:dc: 5a:1f:5b:37:4b:12:64:3f:18:35:39:79:c0:52:e6:60:c5:b5: 60:e0:d0:32:a6:29:7b:95:a0:ce:b0:c2:d9:ac:dd:c2:6a:ce: 79:1e:73:5e:fc:3d:11:19:2f:90:9d:49:9a:47:5e:10:08:36: e4:f7:f9:d3:f6:58:0d:11:bc:32:e3:90:45:f0:be:a6:f2:4a: 63:d6:10:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIpBmFnq0S0kb4a4go6rmrEJ06KowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMDUxZDljZWVkZDNkYWY2YjVkZDEx YjYxNzY0Y2NiNWMyZmM4Y2MwYWU3NWUxNTVhOWQ4YTJmY2NhZTU4OGYyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFZL5uEEWF7rZE6tb7gIE/5eWPnd szpFOayZzkktknUGXq2cyGuHC87Aubw82qtRuXhkxKgmxy+6TvBV5XKCNC9h4xxX FYJsbkEsGXUsJYNdrnaUBd/0AxNm1poYwdW3NJPigARX2tQLw+ybPa8WFOpOzAWW LFhuysFY2Yqf+m45KLHxpUyLggrwgS5fBlupG5zJXYhl0PfVs4XCHLxnKnOLWHLo T70PC8s8YnhQ3dPoV6+Ojyy2P6DB9uVvsDSjkPnhelKMh6OIOUK4vmErBxnmvC4C BCwO/UEA4OESClKoerFbImvf4G9eKxmHvxffn9Lt/G4d5PMgR0/YPmBctwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGkaiTyQyLZ6VhMrYsgtJKWNIG+GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmNThmMzg3LTU4YTMtNDk1OS04ZGVjLTc3ODFhMGZjMDgzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGAgwDQYJKoZIhvcNAQELBQADggEBACVxSGt6UYnswdVJ4CXh ieQx4Z2t6ELmE12DJTx+5fNxdykNw0P/qi4T8+X6VwT81H4mc5nSqc8AiMWGd2wX OcuY93vKK4yHsWSiiiLTRJFiIL9RjeC+B7G0dJJzbqBMcRLYuKzaJj/CibjmwJiN Uq9V/1YdKT/gJbIDvo7zKOT3WcVsn08YOQkgGUuDQBD93ZrYBDJ/umHGxTStN0Oy 4g0mq7pc4r1rYqDPR+r5z4lX/JNh3FofWzdLEmQ/GDU5ecBS5mDFtWDg0DKmKXuV oM6wwtms3cJqznkec178PREZL5CdSZpHXhAINuT3+dP2WA0RvDLjkEXwvqbySmPW EE0= -----END CERTIFICATE-----Generated at Wed Feb 5 04:11:05 2025 by rpki-client