$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa File: d27f281e-d864-4e2b-a72c-0bb082ea8455.roa (raw, json) Hash identifier: iUBUqsUw+D5Ipdul4YT3f8VCkjwNtcEtHkWLb3+64E4= Subject key identifier: 37:25:D4:F8:57:D4:B7:68:98:4D:23:B7:2D:FA:A3:E3:E2:51:10:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 53B798E10A3C2407B6994D3790D6EDBD924ECD9B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b7:98:e1:0a:3c:24:07:b6:99:4d:37:90:d6:ed:bd:92:4e:cd:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:3e:4d:c6:ac:77:4f:3c:d1:57:ec:26:a7: 90:d4:9e:bb:fb:ac:27:3a:a8:3a:6e:8c:a7:37:80: e2:78:94:02:a2:e7:17:f2:d8:ff:05:ac:f0:b5:8d: db:37:5d:85:02:df:72:c5:9d:ae:34:92:b5:44:a0: bd:8c:14:3d:00:12:8f:d6:89:0a:0a:92:07:b3:0a: e8:66:60:46:21:e5:23:77:a1:6c:55:8e:3c:34:ba: 10:ef:05:4f:8d:39:f6:ec:ad:14:19:6e:9d:de:bb: 30:f9:ad:f5:e0:61:d7:44:a6:16:1b:1c:2c:aa:5f: bb:ed:57:6f:a9:03:48:50:df:a8:86:90:a3:b1:c5: 7e:38:83:f4:64:4c:23:cc:df:59:91:4b:4a:cc:c6: 98:6d:f6:82:a4:26:82:13:d2:56:34:d4:af:a8:e1: 7c:8d:fe:40:db:ed:46:c7:a1:98:82:57:f5:fb:0a: 1c:7c:66:83:d9:3d:ec:52:dd:1c:93:c0:4f:91:28: c4:d3:78:f5:de:bc:20:5f:01:a2:71:6d:ef:c5:51: 2a:cd:51:4a:bb:79:2b:2b:6c:8b:5c:ba:1e:3d:4d: f6:67:8b:58:0c:e5:33:8d:bb:c0:68:d3:22:f2:91: df:c0:4b:6e:2f:14:d7:d1:5f:76:fc:f2:7b:4e:1c: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:25:D4:F8:57:D4:B7:68:98:4D:23:B7:2D:FA:A3:E3:E2:51:10:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c060::/48 Signature Algorithm: sha256WithRSAEncryption 14:f6:68:69:0e:50:c3:86:7e:f5:f6:26:15:29:d4:e1:3b:cb: 83:69:c4:6f:43:a4:d4:d0:ff:53:3c:10:c1:a9:39:40:bb:fa: 3c:16:c4:50:7f:19:e2:d8:fb:6b:30:78:b2:22:fd:2c:ba:0a: 29:87:3e:05:44:ec:3c:0a:29:f1:7f:47:14:54:e5:e3:1d:9c: f2:19:4f:67:21:71:41:42:67:94:b4:e3:6e:71:71:bf:2e:9d: 25:f4:d1:a8:64:0e:06:36:5c:db:11:89:7f:98:c3:37:c3:01: 19:c2:21:a0:0c:aa:6b:6b:c7:7b:19:d5:ca:06:91:a5:03:ac: e5:6f:84:66:6f:5f:37:25:81:24:23:ed:04:95:e7:3c:c4:ab: eb:2e:90:f0:f7:81:57:94:cc:2c:39:18:49:6e:e2:14:fd:29: 8a:f7:95:4c:30:91:2c:83:41:eb:51:2b:8e:f5:74:67:cd:ad: bd:39:aa:6a:d1:1f:06:f4:7f:f0:91:8b:61:a1:37:7e:bc:12: 9b:9b:c9:93:f6:2d:eb:a7:8b:f9:fc:ec:6f:0b:85:8f:da:1a: 97:90:99:ad:c1:33:66:7a:fe:d5:f6:16:5a:37:4a:a4:96:20: 3a:f4:8b:e2:c3:e9:32:19:27:08:22:42:37:5a:33:4c:68:ac: dc:aa:73:01 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUU7eY4Qo8JAe2mU03kNbtvZJOzZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAOGU0M2Q5ZTk2NWM0OWZmZDE0NTFh MmNiOWJmYWNiZTliMzg4ZGI5ODAyOWE4ODc1YTVjMTJmZmE3OTU2Mjc5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Q+Tcasd0880VfsJqeQ1J67+6wn Oqg6boynN4DieJQCoucX8tj/BazwtY3bN12FAt9yxZ2uNJK1RKC9jBQ9ABKP1okK CpIHswroZmBGIeUjd6FsVY48NLoQ7wVPjTn27K0UGW6d3rsw+a314GHXRKYWGxws ql+77VdvqQNIUN+ohpCjscV+OIP0ZEwjzN9ZkUtKzMaYbfaCpCaCE9JWNNSvqOF8 jf5A2+1Gx6GYglf1+wocfGaD2T3sUt0ck8BPkSjE03j13rwgXwGicW3vxVEqzVFK u3krK2yLXLoePU32Z4tYDOUzjbvAaNMi8pHfwEtuLxTX0V92/PJ7ThyjvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDcl1PhX1LdomE0jty36o+PiURBgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyN2YyODFlLWQ4NjQtNGUyYi1hNzJjLTBiYjA4MmVhODQ1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMBgMA0GCSqGSIb3DQEBCwUAA4IBAQAU9mhpDlDDhn719iYV KdThO8uDacRvQ6TU0P9TPBDBqTlAu/o8FsRQfxni2PtrMHiyIv0sugophz4FROw8 Cinxf0cUVOXjHZzyGU9nIXFBQmeUtONucXG/Lp0l9NGoZA4GNlzbEYl/mMM3wwEZ wiGgDKpra8d7GdXKBpGlA6zlb4Rmb183JYEkI+0Elec8xKvrLpDw94FXlMwsORhJ buIU/SmK95VMMJEsg0HrUSuO9XRnza29Oapq0R8G9H/wkYthoTd+vBKbm8mT9i3r p4v5/OxvC4WP2hqXkJmtwTNmev7V9hZaN0qkliA69Iviw+kyGScIIkI3WjNMaKzc qnMB -----END CERTIFICATE-----Generated at Wed Feb 5 04:03:29 2025 by rpki-client