$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97d80f39-e7d5-4a6b-aba1-3798e0c96546.roa File: 97d80f39-e7d5-4a6b-aba1-3798e0c96546.roa (raw, json) Hash identifier: 7S7DZjPScb1otJjOw6txfQsxB7CC5cx8qYnvkHpJJ/o= Subject key identifier: 2E:F3:BB:14:3F:EE:B0:A0:FD:F9:43:06:BA:2F:94:CA:A9:2B:2C:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21650CEF7B0EF18D4B5A4130172934D9D4C0D9F3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97d80f39-e7d5-4a6b-aba1-3798e0c96546.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:65:0c:ef:7b:0e:f1:8d:4b:5a:41:30:17:29:34:d9:d4:c0:d9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:25:15:6e:7e:de:33:c3:52:f1:96:11:41: f6:c8:7d:a9:11:8f:fa:f7:a1:3a:d5:3c:48:df:a3: 62:15:88:40:26:fd:d6:fa:da:1c:db:df:bd:8c:94: a9:77:97:dc:04:d1:25:8d:50:74:0b:2a:4a:78:a7: 9d:fd:ae:5d:fe:dc:3b:d7:a3:8d:4c:f6:41:27:16: 71:eb:50:45:89:1e:d4:77:da:61:59:49:16:22:db: 52:e7:47:cd:1b:eb:eb:c5:08:6d:ac:ce:a1:f6:da: 32:bc:ad:35:11:65:0f:0f:87:09:19:3c:ff:71:66: 1e:15:a2:7f:d1:82:ec:5d:6c:a2:df:ff:97:91:1b: 8f:67:2f:55:cf:6d:a1:37:64:3d:78:28:c2:e4:8c: 89:22:fa:d5:0c:58:9d:35:1d:9d:49:d6:2e:7f:2b: 4a:9b:b0:d6:22:13:46:49:cb:ed:3f:9d:d4:9c:cc: 68:c0:bd:3e:33:d3:d1:f0:ff:9f:14:f6:c9:44:7d: ac:c1:22:5c:a9:71:5a:6f:29:37:8e:6e:6d:16:56: ad:55:59:e7:fa:65:80:c7:cc:5c:39:28:a6:01:0b: bb:1c:f4:9e:ef:f8:0d:ad:99:78:45:ae:39:38:21: c4:50:93:16:01:81:bc:d4:10:3c:c4:b4:8c:a4:eb: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F3:BB:14:3F:EE:B0:A0:FD:F9:43:06:BA:2F:94:CA:A9:2B:2C:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97d80f39-e7d5-4a6b-aba1-3798e0c96546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:f080::/48 Signature Algorithm: sha256WithRSAEncryption 5b:16:cc:90:01:c2:23:6f:bc:6f:0c:5e:1c:2d:35:62:ba:f3: c0:1a:05:2b:8e:83:17:24:f0:fe:56:9a:d8:4b:98:54:e5:5f: c5:d7:17:7d:d0:4d:46:0b:c9:ea:4a:4d:ff:f1:af:be:8e:92: 24:bc:6d:2e:aa:36:1f:da:32:e7:1d:16:2e:e8:ab:ad:03:84: c0:9e:2c:79:6c:1c:4e:ba:f7:ff:cf:ca:af:65:b8:87:af:8c: cc:9c:c7:89:62:1e:ea:87:7f:36:25:18:ed:e7:81:97:6d:0b: bb:a2:70:c7:51:09:6e:08:87:7e:1e:e4:c1:77:a9:84:f7:05: c7:8c:0c:7f:61:e4:1c:47:36:8f:ab:78:97:12:c3:6c:70:61: 98:51:76:8c:33:4b:51:32:8f:ac:ba:ac:41:a7:cf:d9:e6:3d: 1e:65:8e:75:3b:e8:54:f1:02:58:8c:52:6f:5e:fa:89:5b:55: 7d:6f:7f:14:60:18:b6:02:b6:dd:13:9c:3e:f5:bf:c4:39:10: db:cf:f3:f0:47:70:20:09:12:46:29:b5:6e:50:2d:6d:5f:f1: ef:b5:e4:02:3e:da:d3:bc:5a:e5:f8:f1:e1:ed:ad:97:88:66: 78:97:e1:17:c9:8e:af:c8:8d:b9:d1:6d:a9:1c:55:10:6f:fe: 26:1d:67:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIWUM73sO8Y1LWkEwFyk02dTA2fMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAOWNlNTg5MDNlZTg0ZDM5NDBjOGM5 M2M4NDE2Mjg1OTU1YTZlODJkNDlkMDYwZWIyMGRjMjkwMDMyMzI0MGNkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbslFW5+3jPDUvGWEUH2yH2pEY/6 96E61TxI36NiFYhAJv3W+toc29+9jJSpd5fcBNEljVB0CypKeKed/a5d/tw716ON TPZBJxZx61BFiR7Ud9phWUkWIttS50fNG+vrxQhtrM6h9toyvK01EWUPD4cJGTz/ cWYeFaJ/0YLsXWyi3/+XkRuPZy9Vz22hN2Q9eCjC5IyJIvrVDFidNR2dSdYufytK m7DWIhNGScvtP53UnMxowL0+M9PR8P+fFPbJRH2swSJcqXFabyk3jm5tFlatVVnn +mWAx8xcOSimAQu7HPSe7/gNrZl4Ra45OCHEUJMWAYG81BA8xLSMpOu/7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC7zuxQ/7rCg/flDBrovlMqpKyxlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3ZDgwZjM5LWU3ZDUtNGE2Yi1hYmExLTM3OThlMGM5NjU0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba//CAMA0GCSqGSIb3DQEBCwUAA4IBAQBbFsyQAcIjb7xvDF4c LTViuvPAGgUrjoMXJPD+VprYS5hU5V/F1xd90E1GC8nqSk3/8a++jpIkvG0uqjYf 2jLnHRYu6KutA4TAnix5bBxOuvf/z8qvZbiHr4zMnMeJYh7qh382JRjt54GXbQu7 onDHUQluCId+HuTBd6mE9wXHjAx/YeQcRzaPq3iXEsNscGGYUXaMM0tRMo+suqxB p8/Z5j0eZY51O+hU8QJYjFJvXvqJW1V9b38UYBi2ArbdE5w+9b/EORDbz/PwR3Ag CRJGKbVuUC1tX/HvteQCPtrTvFrl+PHh7a2XiGZ4l+EXyY6vyI250W2pHFUQb/4m HWdC -----END CERTIFICATE-----Generated at Wed Feb 5 04:06:39 2025 by rpki-client