$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa File: a894812d-493e-43f7-8c3a-76a64ad96de7.roa (raw, json) Hash identifier: IP5zEqy8oRMMjKRm5NBDhT/Ek4lScxgwabwNW14SSH0= Subject key identifier: 62:EB:DA:A5:72:5E:08:DA:E7:0A:D8:D0:25:07:64:59:55:9D:39:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BC42E76B889D023873B4E0FAC6CDFF43C55C787 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c4:2e:76:b8:89:d0:23:87:3b:4e:0f:ac:6c:df:f4:3c:55:c7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:4b:ac:27:e8:1b:c9:79:06:8d:44:dd:49: 5c:58:81:ba:92:58:58:dc:e8:10:fe:7d:14:d3:7f: 23:a2:8b:d2:2a:55:f1:19:eb:e2:97:16:55:97:75: 89:e0:d0:df:69:71:4a:d3:66:69:58:32:be:d2:1e: 73:e1:e7:74:1e:a5:62:d1:55:b5:e6:35:bb:94:5c: 3e:eb:74:ff:a6:20:b8:63:69:43:92:ba:5e:39:02: 07:c4:31:01:01:6a:bd:27:41:67:23:a6:fb:9f:32: 38:bc:50:73:00:09:30:c4:04:e2:59:c7:6d:8a:30: 00:14:ab:bf:62:16:c1:c4:90:14:6e:3a:fb:f1:eb: 1b:0e:13:c1:aa:a8:33:c9:c4:37:31:02:20:33:da: 41:0e:d1:e3:67:29:0a:70:2d:a8:da:2c:12:3b:66: 62:79:93:c5:59:4b:82:fd:7d:33:a1:00:fc:b7:04: 3e:df:29:b3:90:f6:0a:86:13:ab:7c:80:9b:24:ea: d8:90:b4:10:33:25:61:45:e3:24:73:74:22:9c:19: 9f:a9:2c:f3:78:35:2d:d6:57:4c:b4:04:0c:b0:74: 42:0e:fa:36:c2:6a:d0:f4:ba:e3:61:35:49:8e:a8: 53:69:50:f2:d5:19:f1:98:df:97:03:fe:57:0e:f8: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EB:DA:A5:72:5E:08:DA:E7:0A:D8:D0:25:07:64:59:55:9D:39:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4040::/48 Signature Algorithm: sha256WithRSAEncryption 74:3b:48:b2:95:bf:6c:0d:f9:67:91:8e:a0:97:f6:d5:44:e0: 81:65:39:3c:f1:ba:98:13:3a:54:57:22:56:d7:b9:de:ec:bd: f1:39:2f:22:fa:63:16:ca:12:d4:40:49:45:00:81:5d:64:3a: e8:a0:33:2c:ab:31:78:6f:9a:2b:34:7f:0e:b1:40:f7:75:45: 4d:a4:82:f7:11:f1:50:31:08:ae:8f:46:ff:0e:d2:03:43:17: 64:23:4b:a4:29:7a:d5:73:6c:cd:fe:02:a4:4b:0b:e9:7a:59: ee:b6:70:4c:8d:24:9a:12:f3:50:a1:e4:17:38:b4:05:e5:57: a4:1a:41:b0:cf:30:2b:f6:e0:a8:64:ef:00:2d:a4:75:9c:4b: 65:d0:48:37:70:16:39:e9:20:c4:26:12:8b:19:df:ab:35:28: a5:72:57:a8:d9:2e:f5:18:46:08:4c:4f:de:7b:99:74:54:25: 90:8f:93:f6:28:2a:fe:7c:4c:9c:c8:d6:b4:77:cb:4e:c3:e8: 8c:68:2e:8e:67:5b:ac:a7:63:5d:8c:8f:08:f1:e9:21:e1:ca: d1:9e:7c:b8:0f:5c:1a:09:77:3c:6b:40:f5:de:8c:cf:ec:2d: b0:5b:2b:dc:17:09:2b:1c:c3:8f:0e:c0:47:05:68:5a:cd:e9: 4b:5c:67:98 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa8QudriJ0COHO04PrGzf9DxVx4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAMjUyMDc4NjA5YTI5NDFhMGFlOWIz OTM1MzRiYmE1Yjc3OTk4NWNmZWZmZmMyM2JjYTZjZDkyNmU5ZjA3YjJkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW1LrCfoG8l5Bo1E3UlcWIG6klhY 3OgQ/n0U038joovSKlXxGevilxZVl3WJ4NDfaXFK02ZpWDK+0h5z4ed0HqVi0VW1 5jW7lFw+63T/piC4Y2lDkrpeOQIHxDEBAWq9J0FnI6b7nzI4vFBzAAkwxATiWcdt ijAAFKu/YhbBxJAUbjr78esbDhPBqqgzycQ3MQIgM9pBDtHjZykKcC2o2iwSO2Zi eZPFWUuC/X0zoQD8twQ+3ymzkPYKhhOrfICbJOrYkLQQMyVhReMkc3QinBmfqSzz eDUt1ldMtAQMsHRCDvo2wmrQ9LrjYTVJjqhTaVDy1RnxmN+XA/5XDvhX+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGLr2qVyXgja5wrY0CUHZFlVnTlHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E4OTQ4MTJkLTQ5M2UtNDNmNy04YzNhLTc2YTY0YWQ5NmRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUBAMA0GCSqGSIb3DQEBCwUAA4IBAQB0O0iylb9sDflnkY6g l/bVROCBZTk88bqYEzpUVyJW17ne7L3xOS8i+mMWyhLUQElFAIFdZDrooDMsqzF4 b5orNH8OsUD3dUVNpIL3EfFQMQiuj0b/DtIDQxdkI0ukKXrVc2zN/gKkSwvpelnu tnBMjSSaEvNQoeQXOLQF5VekGkGwzzAr9uCoZO8ALaR1nEtl0Eg3cBY56SDEJhKL Gd+rNSilcleo2S71GEYITE/ee5l0VCWQj5P2KCr+fEycyNa0d8tOw+iMaC6OZ1us p2NdjI8I8ekh4crRnny4D1waCXc8a0D13ozP7C2wWyvcFwkrHMOPDsBHBWhazelL XGeY -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:22 2025 by rpki-client