$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa File: 9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa (raw, json) Hash identifier: 8aciN3SHzD31qFDQ+yvszQsJIITVrEj3UrrTgWN7LxU= Subject key identifier: C8:37:E1:78:B2:24:75:EC:F4:F3:69:D5:E7:78:18:5B:6E:D4:E9:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 282DC5454B12DB7DA66424E5EBECE8C0DAC4443B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2d:c5:45:4b:12:db:7d:a6:64:24:e5:eb:ec:e8:c0:da:c4:44:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:bf:11:97:d0:ef:29:83:f2:43:f7:5f:0d: da:da:08:a0:cb:1b:be:50:c6:65:09:84:c7:71:e8: 4f:43:ea:67:94:1d:51:5d:0f:38:e5:20:40:dc:cf: 6b:19:d5:50:4f:92:e5:f1:f8:07:94:ae:df:73:f7: c8:54:40:75:ef:52:f6:25:db:0b:df:1e:d3:90:04: 5f:97:f7:2b:d6:c7:05:ba:51:63:d8:2e:7b:9e:4d: fb:92:a1:04:07:93:83:28:6d:d9:87:11:47:85:e8: e1:48:fe:f3:89:a1:fc:75:0a:bc:cb:c6:8d:fc:8d: 3f:93:1f:82:8d:8f:d6:2a:a8:d3:21:2e:49:49:47: 6b:ef:24:af:f8:f6:8f:5c:9e:2a:93:fc:6a:25:35: f0:76:ce:5b:1a:ec:38:cc:3d:b3:c3:c3:88:91:86: f4:f5:31:e5:c0:1a:d9:a5:9f:b8:fb:90:f2:70:88: 42:4e:0b:4e:da:7a:9f:01:99:85:04:bd:73:e2:e0: 84:42:b8:c0:d9:03:5a:9d:77:75:07:d9:2a:2a:56: 48:1b:e9:fa:b9:42:89:e7:7e:e3:9e:46:c2:84:c5: 41:e0:7f:80:49:30:43:8d:0c:a1:ad:3e:c5:24:05: 51:d8:55:6a:5e:da:48:ad:97:59:97:dd:d9:e7:76: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:37:E1:78:B2:24:75:EC:F4:F3:69:D5:E7:78:18:5B:6E:D4:E9:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:b000::/40 Signature Algorithm: sha256WithRSAEncryption 3b:8d:de:88:0a:f0:d4:30:af:7d:81:08:b9:ed:f3:c8:f9:e1: 30:fe:70:44:13:22:f2:9c:d6:d1:47:d6:1b:c2:02:9e:24:30: e6:25:c6:a1:77:45:92:44:09:b8:94:ab:8c:73:9b:ba:5a:5a: ad:d4:84:06:ca:51:4e:f7:cf:31:3a:10:40:3e:fb:b1:18:c8: e4:e0:ad:09:a0:a9:cb:b1:fb:9a:f4:7e:84:83:23:0c:f4:29: 4c:45:83:38:60:36:94:47:67:df:5e:0f:d6:b7:99:ed:ca:10: 71:83:1b:3c:74:0c:fe:96:fb:bc:1e:d2:cf:74:a0:d5:fd:5a: 98:a5:59:5d:67:d0:b4:c7:8d:1d:25:31:2f:30:81:47:17:6a: e0:9b:28:98:14:da:dc:03:7f:04:8a:1d:e4:19:1d:48:ac:70: 65:2f:1e:28:4b:b3:1c:33:b7:ca:b0:af:64:b2:fb:63:8a:79: 19:5c:37:96:4f:0a:22:ac:ba:b3:bf:34:f9:68:f5:26:37:36: 16:47:7c:7f:87:99:c7:cc:44:83:2b:fc:38:ff:db:89:37:91: e4:d3:82:91:6e:e8:83:0c:14:a3:cf:9e:f7:bb:61:ee:83:9e: c4:f8:53:9c:d1:c6:dd:d7:94:18:f0:b4:bc:39:42:8a:18:fc: 34:2c:94:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKC3FRUsS232mZCTl6+zowNrERDswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANmZiMGMyNWRkMjRjMTU5Y2Q0ZGFi NzUwMmI1ODVkZTdlOWUxMGRlMGFlZmJlYjA3NWZjZjFmMDZlNmQ3ZjAxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8+/EZfQ7ymD8kP3Xw3a2gigyxu+ UMZlCYTHcehPQ+pnlB1RXQ845SBA3M9rGdVQT5Ll8fgHlK7fc/fIVEB171L2JdsL 3x7TkARfl/cr1scFulFj2C57nk37kqEEB5ODKG3ZhxFHhejhSP7ziaH8dQq8y8aN /I0/kx+CjY/WKqjTIS5JSUdr7ySv+PaPXJ4qk/xqJTXwds5bGuw4zD2zw8OIkYb0 9THlwBrZpZ+4+5DycIhCTgtO2nqfAZmFBL1z4uCEQrjA2QNanXd1B9kqKlZIG+n6 uUKJ537jnkbChMVB4H+ASTBDjQyhrT7FJAVR2FVqXtpIrZdZl93Z53Y5dwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMg34XiyJHXs9PNp1ed4GFtu1OnsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhZWYyZDdjLTEzYWQtNDVjMS1iNWI3LWFhNTM1ZGZiZjE3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaubAwDQYJKoZIhvcNAQELBQADggEBADuN3ogK8NQwr32BCLnt 88j54TD+cEQTIvKc1tFH1hvCAp4kMOYlxqF3RZJECbiUq4xzm7paWq3UhAbKUU73 zzE6EEA++7EYyOTgrQmgqcux+5r0foSDIwz0KUxFgzhgNpRHZ99eD9a3me3KEHGD Gzx0DP6W+7we0s90oNX9WpilWV1n0LTHjR0lMS8wgUcXauCbKJgU2twDfwSKHeQZ HUiscGUvHihLsxwzt8qwr2Sy+2OKeRlcN5ZPCiKsurO/NPlo9SY3NhZHfH+HmcfM RIMr/Dj/24k3keTTgpFu6IMMFKPPnve7Ye6DnsT4U5zRxt3XlBjwtLw5QooY/DQs lGQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:56 2025 by rpki-client