$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa File: 909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa (raw, json) Hash identifier: hS5TzB9sWg2gN4TcSgP25at9qy/vn6Gl6D5VJNJA8/k= Subject key identifier: 59:B4:37:24:AF:FF:C9:32:72:4B:DC:04:09:E4:3F:E6:52:51:E5:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01F4E5CAB01EBA9D1023178F1693D16628D6A5BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f4:e5:ca:b0:1e:ba:9d:10:23:17:8f:16:93:d1:66:28:d6:a5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:5f:0b:0e:25:46:6e:7d:82:3a:8f:c0:cd: 9e:ab:66:27:a5:52:c2:06:6d:3d:f7:22:bd:e7:e6: 91:af:37:06:d5:df:e8:8d:be:46:30:bb:64:3b:82: d0:05:ea:5c:45:07:06:e0:aa:72:26:b3:0f:84:a2: 51:06:32:97:c2:fb:ca:1c:53:e0:8f:a6:48:f2:5b: 8e:3e:9b:ce:68:1c:e8:07:42:59:78:f4:0e:a7:24: 3d:36:25:31:53:8b:31:d6:9c:13:6c:af:3c:97:35: 3b:87:93:17:60:bc:07:5e:0f:4a:61:8c:7e:e0:93: 97:fc:15:87:2b:be:f8:7f:b3:e9:e5:93:3b:06:29: a4:99:a7:0e:97:29:d0:92:9f:23:9c:76:ad:7c:4b: 02:ae:42:50:de:3c:62:9d:f7:7e:cf:ed:db:82:d2: 50:1b:13:70:60:9d:54:98:1c:00:c6:3f:30:14:26: 92:0d:46:c9:1d:09:16:5e:5c:22:26:e9:5c:03:ef: 36:a3:aa:f1:21:40:92:b6:d7:41:fa:0a:1d:77:93: 2a:6b:ff:2b:14:e3:7d:2c:b0:73:6e:23:5c:5b:b7: 06:d2:7d:b6:ab:b7:9a:d1:2b:c8:bb:04:b6:ba:b6: fc:c1:46:de:bf:a8:ba:96:64:1d:12:57:f5:b4:c4: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B4:37:24:AF:FF:C9:32:72:4B:DC:04:09:E4:3F:E6:52:51:E5:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:90c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:ba:3e:d9:9a:06:d1:c2:b3:a6:09:77:15:89:28:9f:e5:59: 2f:d2:53:cd:b2:09:44:05:97:c0:6e:ee:56:f2:9e:55:c6:ba: a7:4b:6f:c2:ef:f9:83:80:90:0e:df:09:cd:70:34:ee:69:35: 0f:84:92:db:9c:a3:45:1e:54:7b:88:15:2f:e3:41:fa:e4:d7: f6:00:f1:e9:06:a9:37:6d:8c:ac:6b:ca:08:ea:22:b3:24:2a: 47:d0:48:8e:ee:d4:36:5b:8f:ac:aa:66:3e:28:7d:bc:91:5e: 9a:00:76:0a:16:b9:32:5c:d9:44:ba:ba:84:c4:63:65:31:c7: 20:76:67:e2:5f:9c:6c:bd:3d:e6:4f:8a:70:20:30:e4:93:31: d1:41:db:cc:1f:6d:6a:b5:44:7a:07:98:11:0d:63:56:f5:fa: fc:66:89:35:5d:eb:87:ab:13:42:1f:aa:cf:a2:42:a7:d3:c1: a9:72:56:36:19:ed:0c:3e:34:c4:27:ed:26:8d:6b:28:f0:73: 55:65:7b:eb:cc:af:78:f9:48:eb:4f:92:e9:f7:d5:42:4f:39: b3:f1:68:55:fe:b0:68:b8:52:4f:18:70:72:f5:55:06:f3:ab: de:1f:1f:62:db:4a:b8:9b:1d:67:3e:fd:a8:fd:ab:3d:68:21: 4d:74:f9:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAfTlyrAeup0QIxePFpPRZijWpb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZmI5NTYyOTk3NzcwODUzYTZiYjY4 NWE4YTUyYTJlNDgyYjFiN2M5ZDI3ZDg5MzcwZDA0MDQ5ZWIwMTc3YjA5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85fCw4lRm59gjqPwM2eq2YnpVLC Bm099yK95+aRrzcG1d/ojb5GMLtkO4LQBepcRQcG4KpyJrMPhKJRBjKXwvvKHFPg j6ZI8luOPpvOaBzoB0JZePQOpyQ9NiUxU4sx1pwTbK88lzU7h5MXYLwHXg9KYYx+ 4JOX/BWHK774f7Pp5ZM7BimkmacOlynQkp8jnHatfEsCrkJQ3jxinfd+z+3bgtJQ GxNwYJ1UmBwAxj8wFCaSDUbJHQkWXlwiJulcA+82o6rxIUCSttdB+godd5Mqa/8r FON9LLBzbiNcW7cG0n22q7ea0SvIuwS2urb8wUbev6i6lmQdElf1tMSXTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFm0NySv/8kyckvcBAnkP+ZSUeXyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwOWJiNWQwLTFhNGYtNDM0My1iYzRhLWMyM2E2YTg4NWMxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8pDAMA0GCSqGSIb3DQEBCwUAA4IBAQCluj7ZmgbRwrOmCXcV iSif5Vkv0lPNsglEBZfAbu5W8p5VxrqnS2/C7/mDgJAO3wnNcDTuaTUPhJLbnKNF HlR7iBUv40H65Nf2APHpBqk3bYysa8oI6iKzJCpH0EiO7tQ2W4+sqmY+KH28kV6a AHYKFrkyXNlEurqExGNlMccgdmfiX5xsvT3mT4pwIDDkkzHRQdvMH21qtUR6B5gR DWNW9fr8Zok1XeuHqxNCH6rPokKn08GpclY2Ge0MPjTEJ+0mjWso8HNVZXvrzK94 +UjrT5Lp99VCTzmz8WhV/rBouFJPGHBy9VUG86veHx9i20q4mx1nPv2o/as9aCFN dPlb -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:41 2025 by rpki-client