$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa File: b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa (raw, json) Hash identifier: yGxFwEPEhaqd0Vuyd0aRN5MuxwTht5lBnXdpZPEwgbY= Subject key identifier: 7B:40:6D:D0:1C:AB:08:40:AB:36:08:EB:60:F3:93:03:79:30:CA:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 467C6379B6251C11EACF6C68335AFBD5FC8291E7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7c:63:79:b6:25:1c:11:ea:cf:6c:68:33:5a:fb:d5:fc:82:91:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:7b:c0:bc:22:7d:98:e3:b7:f0:50:32:f0: 43:32:b3:b8:51:33:6b:96:b3:93:a4:fc:c0:9d:12: 10:c8:ef:17:54:31:9b:7e:39:e6:04:d0:37:0d:75: 23:d5:d4:85:63:04:2d:cd:65:98:90:a8:76:31:29: 5e:13:2c:db:a0:44:bf:f3:8c:47:97:90:73:bf:af: b8:d9:5b:67:e8:d2:44:ae:e7:b9:56:62:e5:48:7d: 4c:00:92:1c:3c:7d:79:d1:81:c9:9e:be:5b:86:46: 69:74:d0:f2:58:53:55:f7:1a:d2:e2:03:b0:06:ca: ba:41:a9:d0:de:c2:fc:01:12:fd:b6:0e:42:68:e4: e5:1b:b0:76:f0:f2:ff:57:90:f2:1d:ff:5a:a5:7d: e9:57:bb:88:6f:85:44:10:3a:1b:c2:7d:e4:f7:b2: a5:df:a9:6e:f1:cf:6b:b2:4f:fe:7c:ac:b5:97:06: c3:0e:da:5d:2c:26:62:7c:b1:04:ad:41:4b:4c:ed: cf:b6:96:89:97:c0:b0:4a:dc:2a:d0:a6:1a:6a:2d: 98:e0:e1:6e:f9:ef:27:b2:3b:5e:6f:08:8c:d3:04: dc:d2:b1:a3:3a:e4:81:c8:fc:d8:4e:55:7c:73:05: 32:1d:4c:b5:78:0f:15:e7:ef:a7:aa:4f:ee:39:fc: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:40:6D:D0:1C:AB:08:40:AB:36:08:EB:60:F3:93:03:79:30:CA:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:b000::/40 Signature Algorithm: sha256WithRSAEncryption bb:81:4a:66:f4:5a:d5:58:1c:26:90:95:96:ba:1e:00:09:6c: d1:01:8a:eb:ae:f8:12:23:8b:20:3e:d9:ec:8b:cf:9c:f2:6c: e5:c3:9a:0e:4c:03:53:08:25:a7:72:38:e5:f4:89:a5:9d:c2: 5d:31:3f:5e:4d:99:80:9a:af:d3:93:94:64:2e:44:bf:53:6b: 62:d5:07:60:a2:53:55:bb:01:7f:d5:04:bd:e1:82:13:eb:74: e2:ab:8c:1f:29:da:a7:ba:6a:d9:68:f8:93:82:25:aa:07:d6: ae:bd:4a:24:af:63:76:87:0d:1f:05:5a:c6:9f:be:1e:de:83: 17:e9:bd:35:46:93:76:65:f4:de:8f:b5:07:81:d7:bb:66:0b: 9b:73:d8:de:07:ff:40:76:96:db:b2:e2:1e:75:81:9c:bd:57: 11:84:c8:1a:5b:68:25:fc:9f:02:b2:5e:ed:cb:1b:85:3c:e8: cc:8a:29:29:d3:40:d6:87:bd:aa:8c:75:53:41:a2:19:90:6d: 01:ee:31:b9:0c:8a:4b:b4:9c:b4:0d:fe:94:50:26:3c:34:37: 1b:a0:b0:da:46:5f:a0:90:83:22:17:ab:99:1c:a0:2d:19:27: 72:6f:bb:db:f8:29:f4:cc:85:c5:90:c3:d2:c6:66:74:9e:1e: d4:c4:8e:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURnxjebYlHBHqz2xoM1r71fyCkecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZDMyMGNkYWVhZmI5ZDE5OWNkNTA1 YmM3ODg5ZWY5OTc3MDY4MjcwMGQ4ZGY4MGI1YjE0ZjY0NjZlMjk4YmJjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6N7wLwifZjjt/BQMvBDMrO4UTNr lrOTpPzAnRIQyO8XVDGbfjnmBNA3DXUj1dSFYwQtzWWYkKh2MSleEyzboES/84xH l5Bzv6+42Vtn6NJErue5VmLlSH1MAJIcPH150YHJnr5bhkZpdNDyWFNV9xrS4gOw Bsq6QanQ3sL8ARL9tg5CaOTlG7B28PL/V5DyHf9apX3pV7uIb4VEEDobwn3k97Kl 36lu8c9rsk/+fKy1lwbDDtpdLCZifLEErUFLTO3PtpaJl8CwStwq0KYaai2Y4OFu +e8nsjtebwiM0wTc0rGjOuSByPzYTlV8cwUyHUy1eA8V5++nqk/uOfzCyQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHtAbdAcqwhAqzYI62DzkwN5MMpRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MTQ4YTFhLTRiMmQtNDA0NS1hZTc0LTFhZTIwMWRkY2FjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaLAwDQYJKoZIhvcNAQELBQADggEBALuBSmb0WtVYHCaQlZa6 HgAJbNEBiuuu+BIjiyA+2eyLz5zybOXDmg5MA1MIJadyOOX0iaWdwl0xP15NmYCa r9OTlGQuRL9Ta2LVB2CiU1W7AX/VBL3hghPrdOKrjB8p2qe6atlo+JOCJaoH1q69 SiSvY3aHDR8FWsafvh7egxfpvTVGk3Zl9N6PtQeB17tmC5tz2N4H/0B2ltuy4h51 gZy9VxGEyBpbaCX8nwKyXu3LG4U86MyKKSnTQNaHvaqMdVNBohmQbQHuMbkMiku0 nLQN/pRQJjw0NxugsNpGX6CQgyIXq5kcoC0ZJ3Jvu9v4KfTMhcWQw9LGZnSeHtTE jrk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:51 2025 by rpki-client