$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d133b977-c49b-432a-8569-45863d4ffd73.roa File: d133b977-c49b-432a-8569-45863d4ffd73.roa (raw, json) Hash identifier: 3ULXqZ4UnUrMV4nx7sInLxqUlrVoEuNE3ip0942lK7g= Subject key identifier: 96:53:07:DB:B9:29:4A:79:E3:A6:10:0A:DA:AF:2E:8D:68:17:76:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C9117A5F5677BAB24546D604E3575CEADF0A690 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d133b977-c49b-432a-8569-45863d4ffd73.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:91:17:a5:f5:67:7b:ab:24:54:6d:60:4e:35:75:ce:ad:f0:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:af:a1:28:96:85:0c:88:c4:3b:e6:2a:3c: ea:55:74:eb:40:5b:91:16:87:34:4f:cc:e4:26:8c: 2c:c7:da:ab:8e:3d:c6:35:5e:c7:9c:db:55:64:c3: 1a:df:ed:b8:57:60:bc:e3:69:8f:64:e5:59:fc:44: 18:25:d0:ea:97:41:00:74:73:b1:6f:1f:9c:ad:a5: d3:df:03:5f:43:51:67:bb:21:34:4f:ee:2c:e5:7d: fc:e8:5f:04:e4:dc:b2:d5:1b:7c:70:08:3f:32:4b: 44:ec:08:57:ed:9d:7c:d8:c4:54:99:c4:a1:d3:9e: d3:c3:38:cc:80:80:b4:65:db:87:ea:bb:13:dd:e9: 93:09:8b:dd:79:e2:ee:b3:05:63:26:b3:94:8d:e3: ab:d1:5b:86:dc:64:f1:9a:10:3c:98:96:6d:c2:e0: e0:d5:38:0f:2b:bc:44:17:e7:fc:c7:ee:1f:1b:13: 67:6e:03:8c:42:15:9a:5a:87:4e:bc:41:e3:52:0c: 46:f0:86:37:14:93:99:2a:20:13:4d:4b:58:a2:b8: 04:f1:10:b1:96:31:f1:66:42:41:0f:ff:10:66:d5: 2f:e8:cc:63:16:89:dc:b9:eb:5a:01:55:f7:ec:5d: a4:c5:e6:79:e0:45:87:b7:be:12:63:23:b0:72:85: 89:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:07:DB:B9:29:4A:79:E3:A6:10:0A:DA:AF:2E:8D:68:17:76:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d133b977-c49b-432a-8569-45863d4ffd73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption b5:ef:f8:0a:12:d9:44:e1:bb:8b:ca:48:f1:8e:da:5e:21:99: c2:33:c4:b7:de:70:59:c0:77:45:99:5d:7c:3b:8a:13:e5:e5: 60:97:f6:0b:72:cd:a9:f8:bc:4d:96:4e:c1:8d:97:e4:c7:21: da:fc:6d:04:11:1c:15:fa:b1:58:41:47:fd:c3:0d:fc:4f:b4: d0:d7:14:26:bc:7e:01:e1:0f:8e:6f:1b:f8:be:5b:a8:de:31: 48:11:6e:55:90:47:5e:4e:de:1e:a8:16:07:23:4c:1a:fa:1d: 2e:d9:59:27:49:f2:19:0a:e4:0a:8f:f6:88:af:77:1f:c3:46: eb:f2:5f:22:bd:e9:63:f7:92:2e:9a:8f:76:1e:3f:3e:dd:67: c5:13:c9:69:08:e9:5e:ca:2a:9a:84:c4:08:9d:21:cb:d5:82: 81:32:d6:b6:cd:69:fc:ac:f0:23:87:78:94:3b:ec:b0:19:f1: 3a:7b:13:05:ad:b0:9c:da:6c:a2:25:07:e3:15:89:e1:74:b4: 72:7b:b2:a2:96:15:c6:70:e1:ad:c1:07:2f:dc:7d:b9:4e:bf: 38:64:02:b3:04:8d:79:b2:2c:0b:75:e4:84:e2:34:d3:0a:99: 1b:a3:b4:8f:ad:15:b0:fa:eb:d2:a8:37:dd:fe:c5:43:54:7c: ed:c6:8b:f6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfJEXpfVne6skVG1gTjV1zq3wppAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMmM1OTZkMTA5ZjFhMjRlYzUzNDNi YWZiYjg2OTJmMjJmOTg5ZGY1ZTAwOGRiY2U2M2RkYTg5YzAyNjlhNjc1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRSvoSiWhQyIxDvmKjzqVXTrQFuR Foc0T8zkJowsx9qrjj3GNV7HnNtVZMMa3+24V2C842mPZOVZ/EQYJdDql0EAdHOx bx+craXT3wNfQ1FnuyE0T+4s5X386F8E5Nyy1Rt8cAg/MktE7AhX7Z182MRUmcSh 057TwzjMgIC0ZduH6rsT3emTCYvdeeLuswVjJrOUjeOr0VuG3GTxmhA8mJZtwuDg 1TgPK7xEF+f8x+4fGxNnbgOMQhWaWodOvEHjUgxG8IY3FJOZKiATTUtYorgE8RCx ljHxZkJBD/8QZtUv6MxjFoncuetaAVX37F2kxeZ54EWHt74SYyOwcoWJTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJZTB9u5KUp546YQCtqvLo1oF3bbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxMzNiOTc3LWM0OWItNDMyYS04NTY5LTQ1ODYzZDRmZmQ3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAODAMA0GCSqGSIb3DQEBCwUAA4IBAQC17/gKEtlE4buLykjx jtpeIZnCM8S33nBZwHdFmV18O4oT5eVgl/YLcs2p+LxNlk7BjZfkxyHa/G0EERwV +rFYQUf9ww38T7TQ1xQmvH4B4Q+Obxv4vluo3jFIEW5VkEdeTt4eqBYHI0wa+h0u 2VknSfIZCuQKj/aIr3cfw0br8l8ivelj95Iumo92Hj8+3WfFE8lpCOleyiqahMQI nSHL1YKBMta2zWn8rPAjh3iUO+ywGfE6exMFrbCc2myiJQfjFYnhdLRye7KilhXG cOGtwQcv3H25Tr84ZAKzBI15siwLdeSE4jTTCpkbo7SPrRWw+uvSqDfd/sVDVHzt xov2 -----END CERTIFICATE-----Generated at Wed Feb 5 04:03:18 2025 by rpki-client