$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa File: bbc222e6-116f-4448-906c-f1f4faecf1a2.roa (raw, json) Hash identifier: V1UyBmutSVX9N5JHJHmwNmzUtapl8R+zrwflaVy9jNs= Subject key identifier: 25:1A:0F:2D:EF:05:F1:87:4F:23:65:67:26:EC:7B:3B:E6:C1:6C:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29A319F79991916340FEFEAC0293C1772344EEFB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a3:19:f7:99:91:91:63:40:fe:fe:ac:02:93:c1:77:23:44:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:76:87:3e:44:05:f2:a2:f2:30:ef:56:bf: ac:80:63:4b:36:d5:13:c0:04:c8:ce:f9:1f:15:a3: a4:61:94:52:1c:f7:f3:72:15:a9:1a:34:81:34:c3: 19:28:05:91:0d:b9:39:ed:95:7d:c9:80:e9:99:25: 1f:5b:0d:2a:a8:37:47:65:07:38:1e:7f:e2:9c:ba: e5:1a:a9:96:9d:26:e3:ca:fb:0d:85:5b:55:06:4d: e0:b2:c3:da:12:25:81:f4:b0:75:68:9c:fe:3e:32: d2:ea:c6:b9:11:be:62:ea:02:b1:c6:ab:c0:9f:db: af:9f:e3:cf:ba:10:9b:e3:0e:7b:36:b1:2e:6d:cb: df:84:3a:51:61:a7:b6:16:9a:14:17:ff:6c:8e:24: 0f:91:a7:87:24:92:ee:5b:32:5e:b5:16:60:c4:f2: c3:a9:06:60:6b:67:90:a5:81:7a:40:44:84:94:5f: 5e:b2:a5:b1:65:0e:e2:ef:29:d8:2d:1e:a8:33:4d: 8f:ca:bc:92:7b:62:ff:73:dd:06:89:be:af:5a:65: 7a:be:fe:0b:2a:e1:7d:be:94:bf:7f:b5:87:c3:f1: 88:d3:5a:3d:2d:85:2d:a1:67:1e:6f:a5:af:6f:15: 94:94:42:39:6f:99:71:68:c3:8b:f7:1d:e7:a6:a4: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1A:0F:2D:EF:05:F1:87:4F:23:65:67:26:EC:7B:3B:E6:C1:6C:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:80c0::/46 Signature Algorithm: sha256WithRSAEncryption 08:e2:07:c2:fa:bb:4f:0c:91:d4:53:3e:0b:e3:f3:1a:df:fa: b1:e4:43:01:2c:41:72:41:8a:5f:b1:a2:86:9a:1c:6d:85:02: 6a:ca:67:e2:63:3f:e8:a0:f2:58:36:09:20:e9:dd:81:07:85: a5:75:00:32:41:06:d4:8b:5c:6b:49:15:30:86:95:ae:61:df: c8:c8:75:9c:53:d0:4f:99:bf:21:87:b4:33:02:74:76:2e:9a: c2:39:c4:8b:e5:80:25:e2:18:85:36:2e:16:60:c0:95:7e:dc: ee:a1:30:14:af:d9:53:80:03:37:e8:0e:74:27:51:f9:0b:e4: 35:53:74:44:ca:14:0c:b3:ce:8b:52:78:07:96:63:22:4c:59: b1:69:7a:b8:b0:8d:76:42:15:18:34:68:3b:0d:20:60:ac:03: ea:d1:99:1a:9c:50:ac:8c:c8:2f:4c:a0:3c:7a:cb:14:35:e7: 38:86:73:10:65:aa:9f:4c:5c:a5:7c:f6:3d:dc:0b:96:10:cf: 39:b4:5b:c3:71:d1:40:e3:c6:66:23:7f:f7:24:70:17:86:68: 37:39:09:19:a8:4e:af:b6:d3:05:69:0f:cf:b8:24:d7:d9:05: 9e:a2:c2:d2:97:fe:8c:52:7f:92:96:4d:c4:22:ba:d1:b2:dc: d2:ac:3c:c0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKaMZ95mRkWNA/v6sApPBdyNE7vswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMTY4MGVmMDY0Y2YxZDBkOWZiMTk0 ODM5MDY5ZmI1NjU1YTg5ZTZhNzgwZDM3OTRiZGE5ZmUyNTUwZTNmMTE5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8V2hz5EBfKi8jDvVr+sgGNLNtUT wATIzvkfFaOkYZRSHPfzchWpGjSBNMMZKAWRDbk57ZV9yYDpmSUfWw0qqDdHZQc4 Hn/inLrlGqmWnSbjyvsNhVtVBk3gssPaEiWB9LB1aJz+PjLS6sa5Eb5i6gKxxqvA n9uvn+PPuhCb4w57NrEubcvfhDpRYae2FpoUF/9sjiQPkaeHJJLuWzJetRZgxPLD qQZga2eQpYF6QESElF9esqWxZQ7i7ynYLR6oM02PyrySe2L/c90Gib6vWmV6vv4L KuF9vpS/f7WHw/GI01o9LYUtoWceb6WvbxWUlEI5b5lxaMOL9x3npqSHgQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCUaDy3vBfGHTyNlZybsezvmwWz7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiYzIyMmU2LTExNmYtNDQ0OC05MDZjLWYxZjRmYWVjZjFhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaYDAMA0GCSqGSIb3DQEBCwUAA4IBAQAI4gfC+rtPDJHUUz4L 4/Ma3/qx5EMBLEFyQYpfsaKGmhxthQJqymfiYz/ooPJYNgkg6d2BB4WldQAyQQbU i1xrSRUwhpWuYd/IyHWcU9BPmb8hh7QzAnR2LprCOcSL5YAl4hiFNi4WYMCVftzu oTAUr9lTgAM36A50J1H5C+Q1U3REyhQMs86LUngHlmMiTFmxaXq4sI12QhUYNGg7 DSBgrAPq0ZkanFCsjMgvTKA8essUNec4hnMQZaqfTFylfPY93AuWEM85tFvDcdFA 48ZmI3/3JHAXhmg3OQkZqE6vttMFaQ/PuCTX2QWeosLSl/6MUn+Slk3EIrrRstzS rDzA -----END CERTIFICATE-----Generated at Wed Feb 5 03:53:53 2025 by rpki-client