$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa File: ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa (raw, json) Hash identifier: lNUE3e4eLBJtFqf/yjR7Oh1T8Tg/0rqZZzC0wIce1Wk= Subject key identifier: 27:BB:90:10:F7:77:6B:EF:67:E4:81:92:49:DF:45:97:FC:68:3E:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 742830A65B6A02FB80D906BCE950484EA3CA2056 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:28:30:a6:5b:6a:02:fb:80:d9:06:bc:e9:50:48:4e:a3:ca:20:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:24:fb:e9:8d:bc:83:09:53:b4:2c:66:b2: e3:46:be:e6:50:be:ce:ad:1e:a4:86:a5:18:b2:aa: b1:75:9d:cb:9e:b4:79:6f:2a:5f:9a:60:56:34:44: 21:25:b4:ed:e6:14:ae:62:8d:b6:d5:35:63:ce:00: 3d:eb:2d:00:c2:4f:9c:b6:12:55:26:a0:e5:d9:fe: 13:fb:de:3d:c9:3a:70:73:28:06:be:3d:07:67:82: ba:ca:0d:6b:c2:66:d8:1d:a8:07:31:82:91:71:d4: 15:38:9a:3a:af:bb:22:1d:98:fe:af:53:f5:36:a2: a8:56:d6:e7:d1:ba:5c:b1:e1:72:55:0e:7e:df:d5: e7:09:d5:8d:9d:e0:35:cd:73:00:b1:5c:fa:c7:69: c0:be:d0:da:7a:a8:32:3c:0a:0f:ce:88:e1:75:80: 91:39:4a:95:75:77:50:39:04:4a:d4:d5:de:27:f0: 7c:87:c1:04:0d:3a:6a:04:e8:bd:b2:c9:5d:6e:be: 04:3c:0a:80:0b:0a:3c:e7:9f:1d:ba:65:41:c6:e8: 7c:04:18:36:58:9a:52:42:df:f9:8e:83:13:3e:fe: c6:5d:ed:ed:ae:a4:72:eb:97:63:74:61:35:1f:62: 26:1b:2e:ea:a7:81:fc:ea:e7:16:f8:e3:2d:76:08: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:90:10:F7:77:6B:EF:67:E4:81:92:49:DF:45:97:FC:68:3E:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2840::/46 Signature Algorithm: sha256WithRSAEncryption 09:e9:b1:c2:71:33:48:b9:d6:ba:79:44:8c:4a:93:46:ff:ad: 75:09:1e:fa:b4:bd:32:d7:62:f4:0a:6a:c3:22:2a:b8:1e:ce: df:e4:6d:0a:b0:bb:a0:e1:15:f1:df:23:9f:35:ec:ab:87:95: 58:98:70:76:e2:92:04:95:bf:e9:d0:df:3c:b6:09:e8:ff:5f: 5d:dd:e6:d2:f4:ea:2c:2e:72:7d:9c:a0:e9:be:d8:25:72:b0: c0:33:78:c5:5a:db:68:f3:2f:3e:3e:f8:9e:41:7d:81:19:25: 95:e2:44:74:53:ea:f2:05:5f:a5:90:21:48:87:91:36:ec:21: c1:3b:ed:4f:67:79:e3:15:79:b6:1b:ad:57:6c:82:8e:c9:b6: ec:a5:39:09:64:55:c8:57:fd:8b:d1:cc:0f:a4:0a:12:bb:9a: 7e:f2:7a:6c:62:e1:d1:6f:80:ed:61:0d:58:a1:5c:38:61:1a: 77:ad:8c:fd:90:4a:69:6a:18:a2:93:3e:a4:3b:67:22:9b:03: 20:3c:b5:0d:1d:0c:72:d4:49:fa:e6:7f:69:10:89:49:33:6d: 6a:cf:75:02:48:e0:f0:4d:0d:f7:bd:c0:fa:7e:bf:a9:0b:d5: 38:9d:7e:bb:21:5f:3c:e4:ea:34:09:dc:12:5a:ad:4b:01:35: 93:93:62:9c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdCgwpltqAvuA2Qa86VBITqPKIFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMjVmZmQyOTJiOTEzMjM3OWU3ZjQ5 NzZkYTdjY2ZkNGVkNGIzY2IwMzFjZDFjMDQ3N2ViYTVjNjdlZDdhNzM1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplIk++mNvIMJU7QsZrLjRr7mUL7O rR6khqUYsqqxdZ3LnrR5bypfmmBWNEQhJbTt5hSuYo221TVjzgA96y0Awk+cthJV JqDl2f4T+949yTpwcygGvj0HZ4K6yg1rwmbYHagHMYKRcdQVOJo6r7siHZj+r1P1 NqKoVtbn0bpcseFyVQ5+39XnCdWNneA1zXMAsVz6x2nAvtDaeqgyPAoPzojhdYCR OUqVdXdQOQRK1NXeJ/B8h8EEDTpqBOi9ssldbr4EPAqACwo8558dumVBxuh8BBg2 WJpSQt/5joMTPv7GXe3trqRy65djdGE1H2ImGy7qp4H86ucW+OMtdggbDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCe7kBD3d2vvZ+SBkknfRZf8aD7JMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhNjBmMGQ4LWI4YjAtNDZhMC1iMThjLTM2NGI1OWYyOTBhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9yhAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ6bHCcTNIuda6eUSM SpNG/611CR76tL0y12L0CmrDIiq4Hs7f5G0KsLug4RXx3yOfNeyrh5VYmHB24pIE lb/p0N88tgno/19d3ebS9OosLnJ9nKDpvtglcrDAM3jFWtto8y8+PvieQX2BGSWV 4kR0U+ryBV+lkCFIh5E27CHBO+1PZ3njFXm2G61XbIKOybbspTkJZFXIV/2L0cwP pAoSu5p+8npsYuHRb4DtYQ1YoVw4YRp3rYz9kEppahiikz6kO2cimwMgPLUNHQxy 1En65n9pEIlJM21qz3UCSODwTQ33vcD6fr+pC9U4nX67IV885Oo0CdwSWq1LATWT k2Kc -----END CERTIFICATE-----Generated at Wed Feb 5 04:04:52 2025 by rpki-client