$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa File: a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa (raw, json) Hash identifier: 8skm8UDxsZeZ4nG5DDK+5AssIXhvRbj0o+eS4FPTfJk= Subject key identifier: EE:9F:C5:28:27:3F:95:7E:82:34:89:52:F3:86:81:5C:CC:E1:7E:7A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F2530ECBB0E74D5F6CE5130041858B2C4BDCB4B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:25:30:ec:bb:0e:74:d5:f6:ce:51:30:04:18:58:b2:c4:bd:cb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:8c:89:66:d6:8c:e3:5d:de:5c:6d:21:7a: de:cd:5d:f1:34:b4:60:64:fa:95:49:4e:26:bd:be: 3d:72:3b:43:e7:98:7f:73:7e:e8:45:e3:d5:bc:78: ab:b0:dd:b1:af:6a:68:3b:88:7d:04:98:0a:ba:1a: ce:91:13:56:34:b3:d4:5e:d6:21:c5:71:83:c2:4d: b3:c6:ed:3e:50:ed:71:24:66:45:3f:bb:57:5c:12: d4:ba:bc:bc:32:be:28:f7:52:8f:05:a4:bd:da:66: c9:f7:cf:73:6c:43:b8:ed:ec:61:24:33:b5:36:b1: dd:a1:f4:b2:9a:f0:20:35:06:22:d4:64:fd:45:7b: cc:1a:c7:2e:ea:42:ea:7a:4f:a4:70:c3:3c:db:0e: 46:0c:60:81:a1:4e:32:1e:a2:bf:2e:a5:52:ac:2a: 14:9d:75:f5:79:e1:bf:99:dc:ff:43:fc:4f:d0:4e: 40:58:0b:9a:bd:a0:f7:38:b7:ef:72:dc:06:0c:0b: 46:45:5f:54:3b:df:4a:12:26:bb:e6:b9:94:e7:98: f3:93:e6:10:e8:7e:66:35:ef:57:3a:47:06:56:ef: 1f:f2:a3:bf:df:1a:fd:73:74:a3:10:0a:5b:2e:03: d2:61:8a:e2:f7:da:71:e7:75:b1:83:f5:ad:2b:ae: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9F:C5:28:27:3F:95:7E:82:34:89:52:F3:86:81:5C:CC:E1:7E:7A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 73:06:00:a2:69:c8:83:d0:3b:da:1d:bd:71:7f:69:de:d4:fc: d7:82:0f:c4:d4:1f:81:d0:e8:b3:39:53:c0:da:e4:bc:27:50: 7d:4b:18:c3:69:c5:ed:55:7e:9d:95:1f:c7:72:52:20:65:e4: b7:25:52:f2:5e:75:d4:ca:ca:cc:fa:b8:8e:19:9a:f2:33:44: 8d:9a:21:36:e1:7b:90:a7:bb:84:4f:54:fd:21:ce:33:3f:c2: 30:95:a4:c5:f6:bc:46:07:a8:40:b8:97:1a:fa:f6:9e:fe:e6: cb:9f:9b:5a:5d:d4:a9:54:4e:f8:d0:61:10:af:0e:5e:88:b1: 10:91:f7:6e:f6:ad:24:12:ee:a6:56:b5:2b:f5:15:07:73:13: 73:f6:72:8c:fc:9d:bc:f5:51:37:72:88:03:f3:6b:43:73:5f: d0:36:ce:58:60:1d:37:15:a2:5d:3c:2f:5d:41:04:28:27:59: 3a:fd:7e:6b:0e:a7:ab:2b:b9:d0:e6:1e:9f:4d:9c:de:9b:a5: 78:e4:0f:ee:07:6b:d0:da:f3:71:57:92:3f:60:92:9a:3e:3c: a4:eb:b9:42:a6:0a:7b:b4:45:93:e1:a2:53:06:9c:8e:38:55: fe:89:0b:b2:3d:7e:36:41:3a:7e:16:44:cb:cd:99:69:27:d8: 12:75:1b:31 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbyUw7LsOdNX2zlEwBBhYssS9y0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNANjRjNmM5ODA0MGI1M2NhMTAxNjNj OTRiMjRkMDRhZmExNTE4MmQwMmM3NDhlYTYyNmU5M2QyNzAwOTVmMWExNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKaMiWbWjONd3lxtIXrezV3xNLRg ZPqVSU4mvb49cjtD55h/c37oRePVvHirsN2xr2poO4h9BJgKuhrOkRNWNLPUXtYh xXGDwk2zxu0+UO1xJGZFP7tXXBLUury8Mr4o91KPBaS92mbJ989zbEO47exhJDO1 NrHdofSymvAgNQYi1GT9RXvMGscu6kLqek+kcMM82w5GDGCBoU4yHqK/LqVSrCoU nXX1eeG/mdz/Q/xP0E5AWAuavaD3OLfvctwGDAtGRV9UO99KEia75rmU55jzk+YQ 6H5mNe9XOkcGVu8f8qO/3xr9c3SjEApbLgPSYYri99px53Wxg/WtK66seQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO6fxSgnP5V+gjSJUvOGgVzM4X56MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ZDE2OWU3LWNhOTctNGM0Yy1hZTA3LTI0ZjgwZDJjYjMxYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9EjAMA0GCSqGSIb3DQEBCwUAA4IBAQBzBgCiaciD0DvaHb1x f2ne1PzXgg/E1B+B0OizOVPA2uS8J1B9SxjDacXtVX6dlR/HclIgZeS3JVLyXnXU ysrM+riOGZryM0SNmiE24XuQp7uET1T9Ic4zP8IwlaTF9rxGB6hAuJca+vae/ubL n5taXdSpVE740GEQrw5eiLEQkfdu9q0kEu6mVrUr9RUHcxNz9nKM/J289VE3cogD 82tDc1/QNs5YYB03FaJdPC9dQQQoJ1k6/X5rDqerK7nQ5h6fTZzem6V45A/uB2vQ 2vNxV5I/YJKaPjyk67lCpgp7tEWT4aJTBpyOOFX+iQuyPX42QTp+FkTLzZlpJ9gS dRsx -----END CERTIFICATE-----Generated at Wed Feb 5 03:59:56 2025 by rpki-client