$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa File: 8b68ae6b-07d9-4faf-96d3-0ed316306385.roa (raw, json) Hash identifier: /DV5D42C1EAkJXPuGf4LBMI/WoKisg/8/KIpDuLuRGc= Subject key identifier: 9E:A0:6E:01:2F:14:E0:2A:4C:17:39:21:56:73:C7:B6:E7:96:06:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 8FC93D936AB1B1435BAF8A105C71DE80E0CA4A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8f:c9:3d:93:6a:b1:b1:43:5b:af:8a:10:5c:71:de:80:e0:ca:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:1a:10:05:b2:ca:41:2c:86:5b:3e:5c:1b: 45:ff:55:f4:6d:ca:79:7e:5d:b5:ca:be:e6:2f:5d: 90:5f:2f:56:15:2d:bc:65:e3:17:28:87:a6:58:b0: e2:b1:cb:d7:a4:92:40:e8:fb:bb:3d:78:94:6f:d4: 57:b7:b8:8c:6a:8d:cc:72:96:46:16:37:a9:55:3f: de:9c:1b:46:9a:69:93:d3:43:91:37:b2:d9:4a:0c: 9b:04:3d:50:01:14:39:b0:b6:24:33:f5:8b:ef:dd: 7f:c0:a4:a0:75:e8:5b:e3:79:69:c4:13:46:69:4b: aa:43:5a:d6:c9:d6:0e:db:6c:b9:d6:6c:ae:e8:9a: d3:98:7a:77:b2:9e:8f:d1:44:d0:a5:3a:5e:6f:83: 2c:6e:29:3f:87:25:3d:b4:01:82:2b:39:b8:5f:bc: fc:0a:27:c8:23:d7:da:49:b1:39:34:7a:fd:90:9a: e4:a0:6a:ff:5d:c3:43:60:82:f3:d6:61:63:cc:16: 28:5e:df:bf:32:9d:c5:a6:11:3c:97:52:1c:a4:ac: 23:1e:84:5e:42:d5:f8:5f:35:57:e3:4b:36:48:7e: f6:c2:62:f8:49:97:1f:c6:04:3b:7a:6b:52:b1:ee: 7a:80:26:2d:51:22:ca:d3:13:e2:d2:5a:eb:19:be: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A0:6E:01:2F:14:E0:2A:4C:17:39:21:56:73:C7:B6:E7:96:06:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:78:d7:f9:4f:48:24:6b:aa:2d:36:22:45:30:35:c9:97:5c: b0:6a:36:3f:55:5b:c1:54:9d:4b:9a:be:94:e5:b3:55:d0:d1: 0e:3d:7e:f4:30:92:8a:f8:9d:66:aa:08:f4:2a:c5:33:b0:60: b7:d4:00:f8:c9:bf:f7:2a:15:d2:2e:03:02:f4:98:2a:e6:2a: 04:f4:70:c5:b9:65:47:7b:25:2c:19:3a:e7:85:78:dd:d1:5c: 4c:f4:0d:e6:f0:eb:89:b5:e9:30:f6:e5:f1:25:2a:8c:39:c9: 64:4e:4b:10:64:af:0f:c1:de:d5:cf:57:7c:78:a0:d3:81:6c: d9:40:67:80:72:8e:fa:2e:55:17:ba:4c:53:e2:8d:2e:69:13: a0:75:73:5d:c1:2f:f7:40:9e:8d:bc:16:0a:80:70:a7:43:f5: da:75:d6:2a:ee:a3:4c:a8:21:02:92:8a:7b:74:c8:1f:30:4e: 69:f3:da:ef:f8:39:9f:a3:53:c8:e5:fa:41:14:d7:81:e9:98: 2a:02:31:e3:ae:d7:68:03:89:43:a5:71:0f:95:d5:0b:55:66: 08:75:49:90:34:ff:96:7b:e5:8f:47:5d:10:cb:4c:2c:b7:ed: cb:b6:be:9b:5e:e6:88:94:7d:27:79:7b:f5:f0:91:3a:ca:c0: 1f:08:35:cf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAI/JPZNqsbFDW6+KEFxx3oDgykowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANDI0Y2U0NTAzMjZhYWFlY2VjYWQy NTAzMDExMDFiZWM5OTkxZGExMzdlNTUzZGY3ZTZkOWZhYmVkYWY5MTMyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EaEAWyykEshls+XBtF/1X0bcp5 fl21yr7mL12QXy9WFS28ZeMXKIemWLDiscvXpJJA6Pu7PXiUb9RXt7iMao3McpZG FjepVT/enBtGmmmT00ORN7LZSgybBD1QARQ5sLYkM/WL791/wKSgdehb43lpxBNG aUuqQ1rWydYO22y51myu6JrTmHp3sp6P0UTQpTpeb4Msbik/hyU9tAGCKzm4X7z8 CifII9faSbE5NHr9kJrkoGr/XcNDYILz1mFjzBYoXt+/Mp3FphE8l1IcpKwjHoRe QtX4XzVX40s2SH72wmL4SZcfxgQ7emtSse56gCYtUSLK0xPi0lrrGb54gwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ6gbgEvFOAqTBc5IVZzx7bnlgYQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiNjhhZTZiLTA3ZDktNGZhZi05NmQzLTBlZDMxNjMwNjM4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXDAMA0GCSqGSIb3DQEBCwUAA4IBAQA0eNf5T0gka6otNiJF MDXJl1ywajY/VVvBVJ1Lmr6U5bNV0NEOPX70MJKK+J1mqgj0KsUzsGC31AD4yb/3 KhXSLgMC9Jgq5ioE9HDFuWVHeyUsGTrnhXjd0VxM9A3m8OuJtekw9uXxJSqMOclk TksQZK8Pwd7Vz1d8eKDTgWzZQGeAco76LlUXukxT4o0uaROgdXNdwS/3QJ6NvBYK gHCnQ/XaddYq7qNMqCECkop7dMgfME5p89rv+Dmfo1PI5fpBFNeB6ZgqAjHjrtdo A4lDpXEPldULVWYIdUmQNP+We+WPR10Qy0wst+3Ltr6bXuaIlH0neXv18JE6ysAf CDXP -----END CERTIFICATE-----Generated at Wed Feb 5 03:55:57 2025 by rpki-client