$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa File: b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa (raw, json) Hash identifier: +QaiU2rKhexGD+T6MXeMGRW82slEKijBaiec29fDF/0= Subject key identifier: 93:F2:A2:4C:56:E6:A7:82:A7:5C:52:4C:2E:D5:8F:99:63:58:CE:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BA00C60AC45C409682FFE48F6FC5714E3C35DD7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:0c:60:ac:45:c4:09:68:2f:fe:48:f6:fc:57:14:e3:c3:5d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bb:66:ef:a0:cd:9b:a2:e6:9d:80:5e:ce:c1: 90:c8:df:03:f0:57:f8:f2:5b:f9:13:ac:1e:3d:4f: 1d:2c:c1:ce:ad:c9:b0:f4:6c:50:ab:86:3f:d1:84: a2:7c:70:b5:80:a5:1d:ba:02:f8:c4:4f:c2:fb:07: 9f:d2:5b:8d:3c:f1:fb:6a:06:c7:36:97:b7:64:7a: 56:47:fc:20:7b:83:0b:36:ca:8d:c5:a1:f6:75:d6: a5:0e:d5:dc:ff:7b:99:da:b0:93:58:0a:21:26:84: ac:53:a4:e0:ef:d4:18:de:6f:05:a4:fa:05:55:d6: fe:be:ac:15:46:ac:b6:3e:8a:9f:13:fa:51:f5:7a: 3f:c8:68:b2:69:47:24:e0:c9:6d:13:6f:3b:b7:5c: 8e:9a:e5:1c:28:64:1e:4e:14:17:fa:58:9e:f8:36: a6:b1:75:79:19:ae:14:92:27:c9:29:12:4c:1b:40: 2a:2a:de:02:4f:e4:1e:a4:fa:83:3b:07:6d:a7:e9: 19:23:0c:0d:79:36:4a:be:8d:81:d9:f3:63:b9:78: e6:50:ae:97:f5:e2:23:b9:5d:e5:d5:42:36:35:8a: 83:9b:ff:5a:dc:eb:b2:49:d4:de:b2:ca:34:09:80: e4:33:81:19:e9:ff:5e:80:fa:73:08:a4:36:84:b3: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F2:A2:4C:56:E6:A7:82:A7:5C:52:4C:2E:D5:8F:99:63:58:CE:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8040::/48 Signature Algorithm: sha256WithRSAEncryption 86:e8:c0:6d:04:c2:dd:4f:76:99:c7:e8:f7:69:82:c8:f1:b8: e9:bf:76:bd:5a:a0:a1:73:92:ca:9d:08:36:e6:b7:ef:b8:6e: 43:3d:b9:cd:62:00:1d:89:b1:96:02:0e:f9:65:fe:e6:95:2f: 67:e3:70:e1:a2:d1:f8:9f:22:20:47:5b:99:12:47:f2:1e:89: 12:de:18:5e:b2:55:d4:47:30:af:d1:f3:94:64:83:d7:6b:7e: ce:80:f6:2d:d3:ce:27:da:75:47:db:51:e6:1b:e9:61:0c:3a: c4:0e:d9:93:c3:ab:77:74:8c:7e:58:98:b0:cd:f9:a1:55:f5: 64:c0:93:8a:60:37:48:0e:7a:ff:34:9e:af:11:3a:27:06:1c: 00:1f:13:2b:a3:be:d6:46:19:00:28:3c:07:c3:f3:bb:bb:29: 04:5b:a4:5e:96:fb:41:35:78:a1:1c:5f:c7:bc:7e:93:30:bc: 2c:6b:f3:95:00:f0:c5:9f:3a:c6:56:c1:92:8c:a3:f1:ef:8a: ff:fb:25:c6:30:09:4a:49:b5:e7:f3:d4:f0:17:d8:30:68:7b: 5d:e7:7b:e1:e7:0d:cd:49:e5:cc:a2:33:9e:1a:9f:f8:ae:9b: 91:79:3a:47:c7:3a:fb:db:4c:de:21:9c:b4:21:3d:f2:18:e8: 04:b1:8d:e1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa6AMYKxFxAloL/5I9vxXFOPDXdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANDQ5MGI4YTk4NTliZWI4ZTBhNzIy MmQyMmIyZjJjYWY4NDEyNTZhYTc4YWQ2MGZkNDE1ZjIxNzNjMjgxYTRjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrtm76DNm6LmnYBezsGQyN8D8Ff4 8lv5E6wePU8dLMHOrcmw9GxQq4Y/0YSifHC1gKUdugL4xE/C+wef0luNPPH7agbH Npe3ZHpWR/wge4MLNsqNxaH2ddalDtXc/3uZ2rCTWAohJoSsU6Tg79QY3m8FpPoF Vdb+vqwVRqy2PoqfE/pR9Xo/yGiyaUck4MltE287t1yOmuUcKGQeThQX+lie+Dam sXV5Ga4UkifJKRJMG0AqKt4CT+QepPqDOwdtp+kZIwwNeTZKvo2B2fNjuXjmUK6X 9eIjuV3l1UI2NYqDm/9a3OuySdTesso0CYDkM4EZ6f9egPpzCKQ2hLMA0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJPyokxW5qeCp1xSTC7Vj5ljWM4OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MTZkNmQwLTBlNzQtNDcxZi1hODAyLTNmMjJiY2VlYWE1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIBAMA0GCSqGSIb3DQEBCwUAA4IBAQCG6MBtBMLdT3aZx+j3 aYLI8bjpv3a9WqChc5LKnQg25rfvuG5DPbnNYgAdibGWAg75Zf7mlS9n43DhotH4 nyIgR1uZEkfyHokS3hheslXURzCv0fOUZIPXa37OgPYt084n2nVH21HmG+lhDDrE DtmTw6t3dIx+WJiwzfmhVfVkwJOKYDdIDnr/NJ6vETonBhwAHxMro77WRhkAKDwH w/O7uykEW6RelvtBNXihHF/HvH6TMLwsa/OVAPDFnzrGVsGSjKPx74r/+yXGMAlK SbXn89TwF9gwaHtd53vh5w3NSeXMojOeGp/4rpuReTpHxzr720zeIZy0IT3yGOgE sY3h -----END CERTIFICATE-----Generated at Wed Feb 5 03:50:01 2025 by rpki-client