$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddbad04a-dae4-464c-9a60-1e4c91340af1.roa File: ddbad04a-dae4-464c-9a60-1e4c91340af1.roa (raw, json) Hash identifier: C2x/g2w4H9E75u10TJ3A/t2XxcdVkE1MZ0kcrJm+le8= Subject key identifier: 8F:6F:08:2A:3A:4C:A1:1C:16:0E:96:16:46:26:45:09:FA:87:D2:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D04834CDD17BEBB8C663369B0B46FFB30DBF190 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddbad04a-dae4-464c-9a60-1e4c91340af1.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:04:83:4c:dd:17:be:bb:8c:66:33:69:b0:b4:6f:fb:30:db:f1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:35:73:56:cb:d5:b7:74:08:f6:a8:50:6a: 03:27:2f:ac:a2:52:52:f3:52:35:ba:53:c7:eb:f9: f7:1a:b5:f7:6b:a6:26:e3:e7:5b:97:c6:2f:aa:d2: 2c:25:7f:a3:8e:56:28:1b:77:3c:4a:a5:7b:13:eb: 84:a9:3f:89:0a:a9:32:df:a3:78:70:74:ea:47:9d: 29:2a:e1:df:29:ef:48:2f:52:87:57:13:a6:cc:ba: b4:8c:21:4f:13:c0:6c:2e:bd:d2:0b:79:5c:9d:dd: 3e:05:ba:02:ac:be:13:83:92:04:5b:d0:5b:84:0e: 30:11:a9:a0:e6:07:d9:52:f6:b9:5f:a6:51:85:33: 6f:95:6a:b2:ac:f6:85:1c:ef:13:29:af:83:8a:83: 61:f7:bf:e7:28:7c:3c:9f:87:74:72:30:78:f2:87: a4:da:55:aa:e7:27:80:6b:9e:db:53:a6:fe:9d:d5: 47:e3:62:21:3a:5f:cf:35:62:2b:e0:19:75:c5:ee: ef:12:55:8f:5b:cc:78:e3:4f:40:3f:42:f4:ef:1f: 6a:da:0a:37:a2:b7:e5:a2:78:eb:94:24:9e:d4:00: a8:14:10:40:7f:a7:9e:14:fa:52:2a:75:ed:29:8e: 02:bc:d8:ca:af:06:27:41:c6:a6:8a:ae:88:86:2f: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:08:2A:3A:4C:A1:1C:16:0E:96:16:46:26:45:09:FA:87:D2:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddbad04a-dae4-464c-9a60-1e4c91340af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:a000::/40 Signature Algorithm: sha256WithRSAEncryption 4c:f8:03:23:5a:d5:12:9b:1e:7f:8e:6a:b7:ee:8e:6b:8c:bd: 7e:b5:4b:a0:85:91:46:f4:82:02:df:f2:23:ba:80:60:09:31: 79:42:6d:e3:e7:7a:7f:22:51:0d:6f:4d:ae:ed:4b:fe:40:ff: 62:c2:00:f0:ac:9e:a8:1b:69:97:20:6f:3b:20:84:31:08:91: 99:cb:c5:6b:68:6d:d2:df:56:39:19:06:1c:c9:dc:2a:92:22: ff:08:7f:36:a6:b9:61:d9:79:b0:ee:78:ae:2a:23:97:b3:72: e5:bc:bb:c2:89:10:db:3a:d3:d3:09:a3:7e:7c:b7:1e:5d:5c: 19:03:10:0a:e8:da:a1:35:95:9f:19:04:15:10:6d:15:8d:b2: 1f:bf:11:82:b0:82:ac:f2:7f:79:72:b3:bb:2c:6b:25:98:bf: 73:f1:d8:d5:17:56:25:40:73:9e:2e:5d:95:27:1e:28:de:21: 5a:8e:3c:1e:6b:6b:6f:15:0c:d6:c7:02:8e:12:6c:14:84:44: 64:f0:68:fc:1c:7d:a0:05:f3:0a:15:6d:6b:db:0c:f3:ee:2a: 0d:b9:36:6a:bb:d1:e0:a6:dc:92:db:30:2d:1a:47:35:38:97: 07:90:d0:93:24:69:c4:a2:6f:6e:63:13:b9:d0:3e:6a:9f:db: 03:ec:55:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbQSDTN0XvruMZjNpsLRv+zDb8ZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMmE0MzhhNDU2Zjg2YjU2OGI5ZTI5 NWNjMDE4ZmUyOWI3OWNiMGRhNTVmOTNhZDkyZjhmZDdlMGFmNWU2MDdkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVY1c1bL1bd0CPaoUGoDJy+solJS 81I1ulPH6/n3GrX3a6Ym4+dbl8YvqtIsJX+jjlYoG3c8SqV7E+uEqT+JCqky36N4 cHTqR50pKuHfKe9IL1KHVxOmzLq0jCFPE8BsLr3SC3lcnd0+BboCrL4Tg5IEW9Bb hA4wEamg5gfZUva5X6ZRhTNvlWqyrPaFHO8TKa+DioNh97/nKHw8n4d0cjB48oek 2lWq5yeAa57bU6b+ndVH42IhOl/PNWIr4Bl1xe7vElWPW8x4409AP0L07x9q2go3 orflonjrlCSe1ACoFBBAf6eeFPpSKnXtKY4CvNjKrwYnQcamiq6Ihi/dHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI9vCCo6TKEcFg6WFkYmRQn6h9LzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkYmFkMDRhLWRhZTQtNDY0Yy05YTYwLTFlNGM5MTM0MGFmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYaAwDQYJKoZIhvcNAQELBQADggEBAEz4AyNa1RKbHn+Oarfu jmuMvX61S6CFkUb0ggLf8iO6gGAJMXlCbePnen8iUQ1vTa7tS/5A/2LCAPCsnqgb aZcgbzsghDEIkZnLxWtobdLfVjkZBhzJ3CqSIv8IfzamuWHZebDueK4qI5ezcuW8 u8KJENs609MJo358tx5dXBkDEAro2qE1lZ8ZBBUQbRWNsh+/EYKwgqzyf3lys7ss ayWYv3Px2NUXViVAc54uXZUnHijeIVqOPB5ra28VDNbHAo4SbBSERGTwaPwcfaAF 8woVbWvbDPPuKg25Nmq70eCm3JLbMC0aRzU4lweQ0JMkacSib25jE7nQPmqf2wPs VVc= -----END CERTIFICATE-----Generated at Wed Feb 5 04:04:26 2025 by rpki-client