$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eed26bd-7480-4595-9b44-41f73d0d43d9.roa File: 8eed26bd-7480-4595-9b44-41f73d0d43d9.roa (raw, json) Hash identifier: x/dVA+vUaVNBgwGrXb8RMiXcWHtC7Mi/piMwDGtffyc= Subject key identifier: 08:C7:D6:DA:F8:DA:86:9C:CC:33:F1:0D:B0:BC:29:3F:11:84:3E:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13DB1E882C40D61C2BC94A9D5CA43CD548BE2534 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eed26bd-7480-4595-9b44-41f73d0d43d9.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:db:1e:88:2c:40:d6:1c:2b:c9:4a:9d:5c:a4:3c:d5:48:be:25:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:fa:85:5b:60:5c:9c:81:32:71:53:ee:fe: 96:34:48:7a:c1:8d:0f:b7:53:99:f7:a3:a9:5b:12: 91:9a:c0:19:8d:18:72:7c:62:46:46:36:52:07:26: 5d:55:34:7b:25:d7:20:31:6f:f6:aa:14:67:bd:01: ec:fa:77:ce:07:6b:3e:b9:4e:0d:54:63:b7:cd:d4: 9b:13:97:40:a3:c0:1e:70:d2:dd:08:6b:28:b8:eb: d0:b6:ef:5c:6f:7e:d9:e4:83:9d:74:c1:25:10:3c: a9:df:db:98:be:d8:ff:f1:ed:a3:88:ed:ed:ae:fc: 07:7a:28:d7:1d:3e:bd:8b:66:63:f2:26:8c:a5:af: c9:ce:4e:fe:05:9a:63:70:de:20:2e:3f:f1:6c:8b: fa:58:94:d3:e5:0b:8f:00:c2:0a:93:e9:c5:f0:23: 0d:97:ac:45:4e:b8:df:3e:b9:d5:2a:74:23:0e:61: a9:f2:45:26:c8:7c:12:af:d4:a5:67:14:fe:26:b6: fe:71:fe:d9:ea:b8:a0:48:72:30:ea:66:60:48:36: c7:5e:b6:56:be:f3:23:2f:c4:4a:97:b2:56:3e:b7: 96:ca:77:65:1e:9e:2f:1b:d0:7d:b6:3e:87:05:3b: c1:37:54:ee:1f:07:63:0e:4c:fa:10:ee:00:c0:fc: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:D6:DA:F8:DA:86:9C:CC:33:F1:0D:B0:BC:29:3F:11:84:3E:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eed26bd-7480-4595-9b44-41f73d0d43d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6040::/46 Signature Algorithm: sha256WithRSAEncryption 53:73:db:68:30:76:7d:37:51:a5:c1:2e:c1:7b:78:bb:e0:cf: 8e:84:45:bb:71:70:d8:4a:14:bf:cc:9c:33:fe:58:45:76:59: f9:31:0c:e1:38:72:dc:95:78:51:aa:da:23:90:1e:51:eb:88: 82:fa:2f:bd:6a:ba:c7:97:aa:1f:7d:f2:43:fd:56:06:09:9b: b3:a3:59:57:08:0c:37:05:1e:ef:2a:c2:08:50:58:f1:88:a3: 38:b2:ae:f1:59:cc:55:e5:c7:8d:34:3a:2b:bd:d4:a5:75:53: f0:1a:b4:3b:d9:54:9a:f8:96:eb:26:6e:c6:9f:63:56:ba:74: 7f:f6:9a:ee:38:57:8a:98:7f:31:a9:8b:9f:0e:12:b6:e1:62: 47:5a:df:59:93:1d:d8:79:77:43:5c:ae:ee:61:6f:d7:9c:b5: ba:47:1e:70:63:69:a5:04:20:a1:28:b8:5a:76:ab:34:42:53: 43:82:1f:cd:6a:99:a4:6f:42:a1:05:b8:d3:00:9f:32:9b:83: 8b:09:4b:14:6c:44:36:e9:93:ad:d2:3c:c3:45:6b:e2:3f:68: 03:d7:d1:4c:35:dd:b8:9b:78:1f:ef:ef:6b:b2:2f:f1:ac:a3: 0e:81:e8:f9:16:52:82:a4:81:61:5a:42:69:4e:60:90:19:e9: 93:54:ba:01 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUE9seiCxA1hwryUqdXKQ81Ui+JTQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYjRmMWVkYWFmM2Q3YWFhMmM1NzAz OTdiYTUwMDlmYjRlYWExY2U0ZTU4ZGJjY2RkNWQ1YTgyMDk4ZTk0ODViNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBf6hVtgXJyBMnFT7v6WNEh6wY0P t1OZ96OpWxKRmsAZjRhyfGJGRjZSByZdVTR7JdcgMW/2qhRnvQHs+nfOB2s+uU4N VGO3zdSbE5dAo8AecNLdCGsouOvQtu9cb37Z5IOddMElEDyp39uYvtj/8e2jiO3t rvwHeijXHT69i2Zj8iaMpa/Jzk7+BZpjcN4gLj/xbIv6WJTT5QuPAMIKk+nF8CMN l6xFTrjfPrnVKnQjDmGp8kUmyHwSr9SlZxT+Jrb+cf7Z6rigSHIw6mZgSDbHXrZW vvMjL8RKl7JWPreWyndlHp4vG9B9tj6HBTvBN1TuHwdjDkz6EO4AwPxnHwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAjH1tr42oaczDPxDbC8KT8RhD5nMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlZWQyNmJkLTc0ODAtNDU5NS05YjQ0LTQxZjczZDBkNDNkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaWBAMA0GCSqGSIb3DQEBCwUAA4IBAQBTc9toMHZ9N1GlwS7B e3i74M+OhEW7cXDYShS/zJwz/lhFdln5MQzhOHLclXhRqtojkB5R64iC+i+9arrH l6offfJD/VYGCZuzo1lXCAw3BR7vKsIIUFjxiKM4sq7xWcxV5ceNNDorvdSldVPw GrQ72VSa+JbrJm7Gn2NWunR/9pruOFeKmH8xqYufDhK24WJHWt9Zkx3YeXdDXK7u YW/XnLW6Rx5wY2mlBCChKLhadqs0QlNDgh/Napmkb0KhBbjTAJ8ym4OLCUsUbEQ2 6ZOt0jzDRWviP2gD19FMNd24m3gf7+9rsi/xrKMOgej5FlKCpIFhWkJpTmCQGemT VLoB -----END CERTIFICATE-----Generated at Wed Feb 5 03:50:53 2025 by rpki-client