$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa File: ab84696e-cfeb-4324-b2ed-e1db1e409253.roa (raw, json) Hash identifier: yRexryj1ovFPnS0EHkdFvsA6kmrkKOcRIH3Ddquyo1U= Subject key identifier: 8E:1A:3C:D0:D6:C4:A4:EC:3F:16:0A:37:FD:1D:2E:08:66:11:18:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 59114AFC4A087518C7D6B2CCA18014C92D65BD06 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:11:4a:fc:4a:08:75:18:c7:d6:b2:cc:a1:80:14:c9:2d:65:bd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:5e:0a:b9:39:5f:91:53:d3:86:9d:35:4a: 12:1f:05:a6:79:42:dc:93:3a:7b:59:80:d1:e4:aa: 30:ea:4e:f9:09:ce:cb:3e:48:f5:45:dc:98:f3:3d: 97:1b:d7:c0:4d:37:f4:fe:f0:62:a4:36:a1:a1:81: 9a:55:11:67:c5:d1:38:59:9a:bd:4a:1f:6e:0a:05: 34:87:5a:7e:7c:e0:bd:6b:72:8c:06:32:a9:cc:d1: 38:b1:d8:82:75:c1:09:ec:cb:78:49:da:06:8e:df: 31:10:4c:08:80:6a:47:be:8c:9c:c8:cc:4e:87:3d: 76:ad:d2:44:f2:17:a0:d9:c9:0e:ec:b1:01:76:33: d5:e4:4d:1b:b9:1b:f6:3e:a8:65:f6:d8:9a:fd:35: de:e6:68:d7:32:b3:4b:61:a9:61:4f:78:89:c2:a7: 57:ef:5c:24:11:33:63:70:70:17:de:1e:a9:b9:ad: fd:82:a3:ba:ec:65:8f:dc:60:5d:ff:92:0c:3e:e8: e5:74:7e:0b:99:a7:cf:96:4d:9a:c3:e6:45:10:d4: 8c:84:29:e3:07:a5:59:39:df:ae:e2:22:c1:ea:ba: ea:4e:7b:f1:c0:f1:02:d4:42:61:0c:a8:7f:57:65: 1c:41:a7:0c:47:bd:f1:34:5c:37:53:6c:1d:e0:5e: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:3C:D0:D6:C4:A4:EC:3F:16:0A:37:FD:1D:2E:08:66:11:18:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 58:f0:d2:4a:28:9c:e6:5b:6a:06:57:96:56:00:17:07:23:4e: 9e:1d:b3:d7:5f:86:7c:c7:af:e8:c2:3e:33:d1:94:8c:c6:f7: 2a:83:fe:e0:3a:96:a4:84:96:9c:8d:7a:69:b4:64:0e:24:b1: 47:c1:61:a5:5b:93:f6:cc:fe:c2:d1:56:f1:5a:3b:fd:1f:cf: 22:df:26:04:e7:2c:fe:2b:0f:cf:7e:18:59:95:c9:50:5a:2e: f0:38:79:db:06:5c:2a:d3:17:36:7a:f4:ff:27:ae:cc:ac:4c: 6f:6b:dc:7d:96:42:40:7d:37:0b:b4:10:c7:42:f3:fd:49:ac: c8:b0:c0:0c:26:95:f6:17:fa:9c:90:e1:e7:9a:77:cd:6f:9c: ab:9b:78:21:5f:a5:47:c1:43:a1:75:03:a9:91:7c:2e:13:89: 6f:9a:a9:49:72:43:b2:2e:ca:37:9f:bf:b7:9a:4b:52:93:6d: 83:7c:dd:1b:3b:a7:d3:62:73:96:39:f5:ab:b5:39:02:5a:0d: 71:88:24:2e:3b:ce:e1:3a:03:d6:a3:3d:4d:71:e7:69:8f:37: 6f:42:92:d5:dc:b7:5a:f3:25:88:26:c9:05:4c:76:2d:f6:4c: d1:e2:da:86:3b:cd:22:e5:55:e2:13:b7:c0:76:87:14:d0:3b: 9d:f5:12:08 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWRFK/EoIdRjH1rLMoYAUyS1lvQYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMzZkY2RlYTQ5ZmQ3NGYxM2RkOTgy Y2MzY2Y0ODk1MWJjMzc2NTRjNDhlMWI1NjMxNDU5ZTk0ZGRkYmFiN2U5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/heCrk5X5FT04adNUoSHwWmeULc kzp7WYDR5Kow6k75Cc7LPkj1RdyY8z2XG9fATTf0/vBipDahoYGaVRFnxdE4WZq9 Sh9uCgU0h1p+fOC9a3KMBjKpzNE4sdiCdcEJ7Mt4SdoGjt8xEEwIgGpHvoycyMxO hz12rdJE8heg2ckO7LEBdjPV5E0buRv2Pqhl9tia/TXe5mjXMrNLYalhT3iJwqdX 71wkETNjcHAX3h6pua39gqO67GWP3GBd/5IMPujldH4LmafPlk2aw+ZFENSMhCnj B6VZOd+u4iLB6rrqTnvxwPEC1EJhDKh/V2UcQacMR73xNFw3U2wd4F5n0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI4aPNDWxKTsPxYKN/0dLghmERjTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiODQ2OTZlLWNmZWItNDMyNC1iMmVkLWUxZGIxZTQwOTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+8DAMA0GCSqGSIb3DQEBCwUAA4IBAQBY8NJKKJzmW2oGV5ZW ABcHI06eHbPXX4Z8x6/owj4z0ZSMxvcqg/7gOpakhJacjXpptGQOJLFHwWGlW5P2 zP7C0VbxWjv9H88i3yYE5yz+Kw/PfhhZlclQWi7wOHnbBlwq0xc2evT/J67MrExv a9x9lkJAfTcLtBDHQvP9SazIsMAMJpX2F/qckOHnmnfNb5yrm3ghX6VHwUOhdQOp kXwuE4lvmqlJckOyLso3n7+3mktSk22DfN0bO6fTYnOWOfWrtTkCWg1xiCQuO87h OgPWoz1NcedpjzdvQpLV3Lda8yWIJskFTHYt9kzR4tqGO80i5VXiE7fAdocU0Dud 9RII -----END CERTIFICATE-----Generated at Wed Feb 5 03:51:49 2025 by rpki-client