$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa File: b722e8e8-9dc4-4578-b939-252603f62da2.roa (raw, json) Hash identifier: Q7hAmIeqWd+3V9zjDbO9uPKe0vbNBr8M+gyQroiMgD4= Subject key identifier: 7B:5B:68:A4:91:BE:BA:14:32:F9:06:D7:05:D4:0A:DA:FE:84:C2:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3AF9A7FFD042A53BB946CCF2D42FD090A8A68DD1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:9080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f9:a7:ff:d0:42:a5:3b:b9:46:cc:f2:d4:2f:d0:90:a8:a6:8d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:98:34:79:3f:50:0c:3c:81:37:bb:e3:31: 82:eb:f0:65:b0:5a:0e:46:96:17:78:c0:34:3f:74: c0:43:db:53:af:27:2f:ed:d6:eb:c1:8e:3e:d0:d9: 7d:65:58:17:de:41:a8:e4:c6:68:ae:85:96:79:c3: e1:7d:12:85:0c:8c:9d:b6:aa:94:1a:56:d7:8d:35: 5d:44:1a:b3:97:ba:71:9e:2d:f2:b1:ee:6b:dc:00: 89:d1:32:9f:99:8c:c6:a5:6d:4a:65:c3:4f:1f:36: 1d:45:a3:e9:47:15:1a:cb:28:31:f1:1d:98:c8:7b: 38:14:84:02:03:70:e7:c6:48:7f:3d:4c:08:2a:e6: 4c:2c:4a:29:54:1d:16:2c:da:c8:4d:04:11:23:60: 59:9f:79:8c:fa:b4:f1:33:15:7a:9e:cd:5c:1c:31: 49:bb:7b:d5:7c:68:1f:cd:49:ee:30:f9:01:01:47: e9:57:b0:a1:ae:b9:1a:e6:e7:e9:90:23:61:bf:ad: 61:59:09:5c:b6:a9:99:49:ce:c9:6f:2e:15:83:40: c7:0f:c0:ff:3c:0a:36:94:58:ce:6d:cb:11:50:d0: 0e:a0:ba:0e:24:99:ef:1e:41:9c:7f:d6:d3:85:03: ce:c8:5e:7e:59:4f:5f:3a:3a:01:e3:57:d5:52:53: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5B:68:A4:91:BE:BA:14:32:F9:06:D7:05:D4:0A:DA:FE:84:C2:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:9080::/46 Signature Algorithm: sha256WithRSAEncryption 26:eb:d3:72:06:c9:41:0d:95:25:d8:0c:36:5d:37:ad:fb:b6: f8:a9:65:0c:b6:58:b8:16:03:5e:c2:2a:cb:4c:4a:3a:f0:6a: 16:9f:2a:f2:d0:6b:c4:1a:f6:eb:68:a0:8d:ba:d5:6e:7b:46: 37:6d:12:16:93:b4:c7:28:6a:da:11:cd:c0:28:df:c9:fe:4b: 55:23:a2:76:87:ef:ac:34:57:0e:01:07:3c:b8:f8:be:74:7e: aa:24:44:86:de:85:02:1a:5f:82:03:5c:dc:b0:d2:44:79:3a: 5c:00:4b:4f:f9:67:87:be:e0:66:20:40:24:ae:0c:43:8d:4d: 5f:2f:48:82:93:ae:91:29:1d:a2:c4:a6:e4:a5:40:89:80:9c: c2:dc:84:75:f1:da:e7:a0:f0:37:15:f3:fe:dc:fa:de:8f:e8: 7b:84:53:a7:a4:2e:92:d7:59:22:8a:76:97:2f:b4:c3:40:55: 4d:9a:7a:eb:e9:0f:f9:ad:d4:ce:3b:41:a6:af:a3:c8:42:80: bc:d8:ea:b0:52:ba:0f:2d:c0:68:48:fd:84:13:f8:f6:69:b4: 9f:3f:b4:63:7a:53:79:b6:69:0e:6c:8e:fe:05:c6:fd:11:c4: 37:d6:0b:ad:72:f2:06:56:5d:7c:2e:69:db:66:1c:61:38:08: b7:60:b9:e3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOvmn/9BCpTu5Rszy1C/QkKimjdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzljNTU1OGRmNzY1YWQ1YzJjYTcy MTRmOTg2YjNjZDE2ZDUyZjAzMzZhNDc4MjMwZGUxNTZmNDNlYTA0MDU2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro2YNHk/UAw8gTe74zGC6/BlsFoO RpYXeMA0P3TAQ9tTrycv7dbrwY4+0Nl9ZVgX3kGo5MZoroWWecPhfRKFDIydtqqU GlbXjTVdRBqzl7pxni3yse5r3ACJ0TKfmYzGpW1KZcNPHzYdRaPpRxUayygx8R2Y yHs4FIQCA3Dnxkh/PUwIKuZMLEopVB0WLNrITQQRI2BZn3mM+rTxMxV6ns1cHDFJ u3vVfGgfzUnuMPkBAUfpV7Chrrka5ufpkCNhv61hWQlctqmZSc7Jby4Vg0DHD8D/ PAo2lFjObcsRUNAOoLoOJJnvHkGcf9bThQPOyF5+WU9fOjoB41fVUlP0tQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHtbaKSRvroUMvkG1wXUCtr+hMIbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MjJlOGU4LTlkYzQtNDU3OC1iOTM5LTI1MjYwM2Y2MmRhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaZCAMA0GCSqGSIb3DQEBCwUAA4IBAQAm69NyBslBDZUl2Aw2 XTet+7b4qWUMtli4FgNewirLTEo68GoWnyry0GvEGvbraKCNutVue0Y3bRIWk7TH KGraEc3AKN/J/ktVI6J2h++sNFcOAQc8uPi+dH6qJESG3oUCGl+CA1zcsNJEeTpc AEtP+WeHvuBmIEAkrgxDjU1fL0iCk66RKR2ixKbkpUCJgJzC3IR18drnoPA3FfP+ 3Prej+h7hFOnpC6S11kiinaXL7TDQFVNmnrr6Q/5rdTOO0Gmr6PIQoC82OqwUroP LcBoSP2EE/j2abSfP7RjelN5tmkObI7+Bcb9EcQ31gutcvIGVl18LmnbZhxhOAi3 YLnj -----END CERTIFICATE-----Generated at Wed Feb 5 04:02:16 2025 by rpki-client