$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa File: bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa (raw, json) Hash identifier: ud9tO1Frsc665683FuIcC3RMNMOSpItvttpgGnzprjU= Subject key identifier: 65:2B:E8:BC:8A:A7:35:A1:7B:6D:12:21:70:BE:5E:33:E4:D6:A5:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 145049BAC8C823152060019920128E5E0D0C049B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:50:49:ba:c8:c8:23:15:20:60:01:99:20:12:8e:5e:0d:0c:04:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:9f:91:d3:75:eb:98:2d:4d:ba:76:9d:7c: 54:ae:af:37:6e:db:1e:f0:97:91:2e:4a:61:c6:31: de:b9:d4:98:af:73:12:e7:56:a4:99:fc:28:ae:75: be:11:b5:93:56:b2:ee:95:67:a8:ce:95:82:e4:54: dc:c7:8a:66:17:86:d3:db:ce:0d:57:10:51:d6:05: d1:95:f1:35:9c:17:93:ee:3a:40:0f:b9:8b:27:5d: 31:5d:07:7a:a1:a0:c1:7d:1a:2f:17:af:5b:1d:99: 40:69:89:c6:6c:1e:46:b2:7f:6f:c1:8a:de:19:b3: fe:a2:ab:4e:95:1b:0b:ea:6b:be:5e:d4:56:85:82: 70:56:bd:70:68:41:6c:c1:d7:84:94:c5:d2:d9:13: b1:98:74:28:cf:08:2b:55:60:f8:a4:df:2b:61:9f: 4b:5e:a3:84:83:69:91:a5:ac:72:dc:b4:a2:b5:d1: f4:ac:a6:af:88:f9:d5:aa:a8:94:c3:c2:78:9c:f4: 9c:ef:80:0d:2e:cb:e7:cd:c7:33:62:16:cc:0d:76: 9e:5b:b9:57:99:1c:d1:35:63:27:e9:90:ab:84:c8: 13:62:4c:9e:69:5c:e8:74:07:e8:53:05:f5:cc:11: b7:de:53:c6:3e:d8:fa:93:fe:8f:7d:70:e2:52:21: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2B:E8:BC:8A:A7:35:A1:7B:6D:12:21:70:BE:5E:33:E4:D6:A5:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4840::/48 Signature Algorithm: sha256WithRSAEncryption b5:68:0a:08:1d:54:ae:80:7f:8f:a9:39:3c:9c:fc:a3:63:ed: d9:96:1a:31:a4:88:12:c1:ab:9c:5c:81:93:19:b1:8f:c8:5d: 6e:31:3d:6f:91:7d:56:9a:3d:d5:50:ab:8d:05:f5:7e:bb:93: 89:be:69:21:ec:ee:96:4f:1b:61:d7:97:43:ee:bc:9d:83:96: d3:f0:01:d7:00:1c:6e:49:68:de:ad:93:9b:fa:84:90:10:d7: eb:6c:2d:39:b0:e1:39:85:3c:4d:1a:47:82:d8:48:0a:a1:88: d5:ba:04:0d:61:90:00:c1:4b:d1:40:a3:7d:47:32:f2:f2:37: e3:28:37:d4:49:1f:c5:51:2c:bc:18:83:c2:fb:19:e0:17:97: 79:65:84:d5:a9:06:0e:9d:ee:fe:56:6c:4c:0f:d2:cc:4b:4c: 16:47:68:39:e1:b9:7e:08:ab:c8:f7:d4:97:e8:ac:84:12:2c: f4:26:18:bc:e6:dc:08:09:76:4f:e2:5a:a1:0c:3e:63:a7:d4: a2:67:b4:96:28:7f:16:11:cd:30:6f:82:5e:3f:1e:0f:5f:10: bd:e5:9d:ac:18:39:3a:2d:0f:47:d6:26:a2:42:29:df:d4:d8: 95:a4:ea:3d:75:57:3a:2a:db:90:84:12:82:dc:14:8b:3c:cb: 9b:cc:fb:6c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFFBJusjIIxUgYAGZIBKOXg0MBJswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNANTUyNGVhMjM4MTE1N2YwZDY5ZTE1 ZDY3NDljOTg2ZDMwMjRiYTBlMTdjNDViOGM1MGY3YzYzZDMzM2UxM2MyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlOfkdN165gtTbp2nXxUrq83btse 8JeRLkphxjHeudSYr3MS51akmfwornW+EbWTVrLulWeozpWC5FTcx4pmF4bT284N VxBR1gXRlfE1nBeT7jpAD7mLJ10xXQd6oaDBfRovF69bHZlAaYnGbB5Gsn9vwYre GbP+oqtOlRsL6mu+XtRWhYJwVr1waEFswdeElMXS2ROxmHQozwgrVWD4pN8rYZ9L XqOEg2mRpaxy3LSitdH0rKaviPnVqqiUw8J4nPSc74ANLsvnzcczYhbMDXaeW7lX mRzRNWMn6ZCrhMgTYkyeaVzodAfoUwX1zBG33lPGPtj6k/6PfXDiUiE49wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGUr6LyKpzWhe20SIXC+XjPk1qUxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JkMjhjY2NkLWRhYjktNDYxZS05YzZlLTA3ZjJlNzEzMmFmYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUhAMA0GCSqGSIb3DQEBCwUAA4IBAQC1aAoIHVSugH+PqTk8 nPyjY+3ZlhoxpIgSwaucXIGTGbGPyF1uMT1vkX1Wmj3VUKuNBfV+u5OJvmkh7O6W Txth15dD7rydg5bT8AHXABxuSWjerZOb+oSQENfrbC05sOE5hTxNGkeC2EgKoYjV ugQNYZAAwUvRQKN9RzLy8jfjKDfUSR/FUSy8GIPC+xngF5d5ZYTVqQYOne7+VmxM D9LMS0wWR2g54bl+CKvI99SX6KyEEiz0Jhi85twICXZP4lqhDD5jp9SiZ7SWKH8W Ec0wb4JePx4PXxC95Z2sGDk6LQ9H1iaiQinf1NiVpOo9dVc6KtuQhBKC3BSLPMub zPts -----END CERTIFICATE-----Generated at Wed Feb 5 03:54:40 2025 by rpki-client