$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f8ef70-920a-440e-a219-43a73747b272.roa File: 95f8ef70-920a-440e-a219-43a73747b272.roa (raw, json) Hash identifier: QlGZdUIbnwWHLsQ4VMryRQn+d8lHZez5IhN0tKJQAjc= Subject key identifier: 4D:61:83:5A:7A:5D:E2:24:0E:FD:80:21:70:FB:D3:14:F2:40:C7:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F78A5F61D4E023EBF392C0DC2DA0B0E4403FA1B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f8ef70-920a-440e-a219-43a73747b272.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:f040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:78:a5:f6:1d:4e:02:3e:bf:39:2c:0d:c2:da:0b:0e:44:03:fa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:5e:c3:21:42:1a:ab:86:1c:ca:63:e0:67: e3:99:f3:13:5c:aa:9e:f5:33:46:66:37:d1:3b:29: 18:30:d4:bd:39:ad:4e:70:dd:16:84:5b:59:45:17: 90:c9:d3:a1:d4:31:bb:8b:c1:9b:80:06:b1:ee:50: 72:ea:ff:c4:33:eb:22:c9:e2:f9:81:f4:f4:96:0f: d4:b0:a7:5d:ce:df:30:af:4f:34:05:43:40:f8:a9: 55:11:8f:32:26:46:a5:6d:a3:6b:28:c3:1d:11:54: a5:8c:24:2d:13:e4:d0:c8:b2:6a:72:b0:23:87:a6: 33:e5:15:9d:92:d7:88:c3:d4:7e:7c:bb:14:de:96: 44:cd:1f:d7:7c:25:b3:97:f7:19:3a:2a:8d:09:45: 98:ed:f4:16:d0:72:96:36:94:2f:b7:8e:d8:e8:09: ec:9d:4d:ac:f5:00:ef:36:37:84:ff:45:8b:6d:c4: 23:02:71:01:24:a6:0d:bd:18:bb:c7:88:04:98:66: e6:8c:00:bb:54:d7:60:aa:0b:34:2c:76:6f:c5:b8: 8a:69:e6:b2:cf:b5:88:30:a0:e8:6a:1d:08:d4:f2: d0:1b:ee:16:02:55:12:a4:47:00:38:5f:28:18:c1: 47:e3:e2:a9:60:6d:d4:d2:40:18:e1:c3:f3:1d:fb: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:61:83:5A:7A:5D:E2:24:0E:FD:80:21:70:FB:D3:14:F2:40:C7:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f8ef70-920a-440e-a219-43a73747b272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:f040::/46 Signature Algorithm: sha256WithRSAEncryption 64:6a:76:7b:37:03:7a:d6:69:a6:42:21:6c:90:64:49:c4:6a: 33:50:5c:cb:12:d9:bf:6a:24:8c:a5:b8:13:80:a8:27:87:75: f4:3c:a3:13:5e:87:86:d2:0f:61:24:5e:39:8c:ea:26:94:82: 82:96:c2:85:03:e2:f5:0d:3f:35:5d:05:51:03:bc:71:a5:d8: 87:66:25:a3:7a:5f:7f:68:27:d6:a7:e1:ea:7f:98:e3:28:9a: 0b:de:52:94:f7:b1:bc:2b:c9:d9:1c:26:50:6b:5e:ff:08:c5: 67:b5:01:6a:0d:44:d8:70:ac:87:5e:0b:5a:36:19:74:cf:46: 8c:ef:88:fe:7e:dd:66:ec:5b:c4:05:94:0b:1b:e2:04:4a:67: dc:bf:39:f2:64:14:c9:6a:57:69:df:55:e9:59:f6:18:f8:d5: a0:dc:aa:ee:c9:46:48:f2:93:98:c8:80:95:6c:d1:f6:b7:53: ba:19:ad:bb:3b:49:15:e3:60:11:10:29:90:a6:df:ee:f9:fd: f7:fb:22:d9:5b:4e:69:b0:4e:f1:f7:82:5b:18:f9:8c:33:e2: bf:c0:89:53:82:90:12:10:99:15:df:11:52:ce:66:65:88:54: 68:d9:08:60:90:94:9d:1e:47:f9:25:62:fe:db:10:b8:43:e9: da:52:63:7f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUP3il9h1OAj6/OSwNwtoLDkQD+hswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZTE2NzhmNjhjNGZiZTM4ZjNiOWM2 MGM1ODIwMTNhYzllM2Q0MjFhOGJiYWUyYTUxNjFhMjc3YmJhZDE5NTkzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+FewyFCGquGHMpj4GfjmfMTXKqe 9TNGZjfROykYMNS9Oa1OcN0WhFtZRReQydOh1DG7i8GbgAax7lBy6v/EM+siyeL5 gfT0lg/UsKddzt8wr080BUNA+KlVEY8yJkalbaNrKMMdEVSljCQtE+TQyLJqcrAj h6Yz5RWdkteIw9R+fLsU3pZEzR/XfCWzl/cZOiqNCUWY7fQW0HKWNpQvt47Y6Ans nU2s9QDvNjeE/0WLbcQjAnEBJKYNvRi7x4gEmGbmjAC7VNdgqgs0LHZvxbiKaeay z7WIMKDoah0I1PLQG+4WAlUSpEcAOF8oGMFH4+KpYG3U0kAY4cPzHfupgQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE1hg1p6XeIkDv2AIXD70xTyQMdgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1ZjhlZjcwLTkyMGEtNDQwZS1hMjE5LTQzYTczNzQ3YjI3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+/BAMA0GCSqGSIb3DQEBCwUAA4IBAQBkanZ7NwN61mmmQiFs kGRJxGozUFzLEtm/aiSMpbgTgKgnh3X0PKMTXoeG0g9hJF45jOomlIKClsKFA+L1 DT81XQVRA7xxpdiHZiWjel9/aCfWp+Hqf5jjKJoL3lKU97G8K8nZHCZQa17/CMVn tQFqDUTYcKyHXgtaNhl0z0aM74j+ft1m7FvEBZQLG+IESmfcvznyZBTJaldp31Xp WfYY+NWg3KruyUZI8pOYyICVbNH2t1O6Ga27O0kV42ARECmQpt/u+f33+yLZW05p sE7x94JbGPmMM+K/wIlTgpASEJkV3xFSzmZliFRo2QhgkJSdHkf5JWL+2xC4Q+na UmN/ -----END CERTIFICATE-----Generated at Wed Feb 5 03:55:08 2025 by rpki-client