$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa File: ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa (raw, json) Hash identifier: CNIqUKXteGc5xwnCGH83DPrHNWcJEeWIvlVVutu+03E= Subject key identifier: 2B:0E:11:B5:6D:50:90:AB:B3:D0:EF:C4:4A:1E:88:96:02:54:27:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E219FB41AFE2A78263004DD200137A807EFF0F3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:21:9f:b4:1a:fe:2a:78:26:30:04:dd:20:01:37:a8:07:ef:f0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:23:8c:37:1c:28:1e:1c:85:c9:de:d7:60: d7:5a:b1:ad:25:b3:ea:e9:5a:97:53:c5:37:cc:09: d1:d8:11:62:a6:75:45:e0:5a:bd:35:68:93:b9:1f: 28:a7:c8:c6:e6:9a:d3:89:67:bb:ec:0f:0a:84:77: 7a:3a:60:7f:7a:54:d6:79:50:81:9a:1d:57:35:09: eb:b7:5d:2f:db:75:ea:85:6f:ac:ec:bc:89:1f:b6: 75:3d:ce:a0:5b:cd:3c:b7:8f:ff:b5:fb:53:ee:bc: 0d:3c:46:a3:33:aa:6b:17:2e:0b:74:15:ea:9b:5d: 72:a2:61:84:3d:6c:94:0b:4b:39:c6:01:07:ef:99: 17:da:89:61:96:da:60:a5:48:77:39:56:c7:bf:d8: 18:eb:fd:4d:f8:d6:f9:73:cc:69:7c:1a:41:74:b7: 4a:36:9b:7d:72:2d:53:23:86:8c:f0:7d:b5:aa:9f: 6f:f3:3e:4f:db:2e:1c:df:71:dc:7c:6d:fc:07:0a: 64:35:e4:00:0b:6b:cf:9e:3b:ba:64:07:ed:3d:3b: c4:eb:8d:99:0d:6b:85:fb:0f:b5:34:c5:55:8d:30: 95:78:3c:ea:a0:53:3e:36:3a:ab:af:7e:ee:5b:11: e3:e9:8f:85:01:89:be:ce:82:03:fb:95:39:1c:37: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:11:B5:6D:50:90:AB:B3:D0:EF:C4:4A:1E:88:96:02:54:27:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption cb:4b:cf:2d:6e:3b:b8:02:c0:b8:8f:e7:ed:b6:fc:b3:bc:58: 58:da:c9:80:f5:82:62:b6:ad:c5:9d:a4:7f:b0:96:a1:be:4a: 7b:64:b4:9f:25:e0:9b:f4:56:c5:94:06:40:98:6e:c9:22:1d: 47:47:c4:59:f1:a5:c1:67:06:69:26:bf:b7:35:d0:39:ef:da: 65:4f:67:5f:ad:9a:95:67:fe:2a:77:96:86:61:3e:2a:e2:db: 1f:b0:25:ca:82:4e:ee:63:e4:4e:6e:87:ed:cb:94:0d:8a:fd: f0:22:ee:a0:3e:56:32:ab:7f:d2:4e:54:c2:b5:1b:c5:14:23: 54:70:8f:2d:91:47:3a:ed:4e:b4:6a:3a:f6:35:cf:e0:43:fb: e2:01:da:1a:01:55:94:3f:35:b3:a3:c5:8d:9e:78:04:ae:8c: dc:c1:29:76:52:5a:63:61:ce:8e:01:b3:b3:c6:f3:a2:8a:10: 3d:89:76:6b:11:fb:7a:c3:7d:c2:ea:51:95:2f:fc:9a:11:68: 29:72:8a:58:ff:64:a8:08:af:0b:6b:8f:0a:44:cd:79:85:9d: 3d:9b:85:20:2e:c7:b6:44:71:cc:f3:65:f9:8a:b0:5f:d7:f1: ea:2f:30:29:f0:3d:81:ad:10:ec:73:64:af:b6:75:4f:57:df: cd:4d:08:73 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXiGftBr+KngmMATdIAE3qAfv8PMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAM2Q0Y2Q4YjJlMzBkNGU1OGViNjky OTE4NGE0ZTMzNmRlMTgxMmViZGRlODEyZmFjNjMxZjE4ZmZkMjVhZmRmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz0jjDccKB4chcne12DXWrGtJbPq 6VqXU8U3zAnR2BFipnVF4Fq9NWiTuR8op8jG5prTiWe77A8KhHd6OmB/elTWeVCB mh1XNQnrt10v23XqhW+s7LyJH7Z1Pc6gW808t4//tftT7rwNPEajM6prFy4LdBXq m11yomGEPWyUC0s5xgEH75kX2olhltpgpUh3OVbHv9gY6/1N+Nb5c8xpfBpBdLdK Npt9ci1TI4aM8H21qp9v8z5P2y4c33HcfG38BwpkNeQAC2vPnju6ZAftPTvE642Z DWuF+w+1NMVVjTCVeDzqoFM+Njqrr37uWxHj6Y+FAYm+zoID+5U5HDcNeQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCsOEbVtUJCrs9DvxEoeiJYCVCdrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMWY2YmE3LWFlY2YtNDg3MS1hOWYyLTNlMjBmZjM1NzE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCAwDQYJKoZIhvcNAQELBQADggEBAMtLzy1uO7gCwLiP5+22 /LO8WFjayYD1gmK2rcWdpH+wlqG+SntktJ8l4Jv0VsWUBkCYbskiHUdHxFnxpcFn Bmkmv7c10Dnv2mVPZ1+tmpVn/ip3loZhPiri2x+wJcqCTu5j5E5uh+3LlA2K/fAi 7qA+VjKrf9JOVMK1G8UUI1Rwjy2RRzrtTrRqOvY1z+BD++IB2hoBVZQ/NbOjxY2e eASujNzBKXZSWmNhzo4Bs7PG86KKED2JdmsR+3rDfcLqUZUv/JoRaClyilj/ZKgI rwtrjwpEzXmFnT2bhSAux7ZEcczzZfmKsF/X8eovMCnwPYGtEOxzZK+2dU9X381N CHM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:31 2025 by rpki-client