$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa File: debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa (raw, json) Hash identifier: imjuMIcwqVb32dfFaZ+RdGaBFMSVRWUuSlJZx6Bt+ls= Subject key identifier: 71:E4:0E:3C:62:5F:B7:59:5C:DB:35:F2:7D:3F:ED:22:D8:E5:34:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 60C1CC69A3A8EFCAB903490A78EA20EA50AA64E7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c1:cc:69:a3:a8:ef:ca:b9:03:49:0a:78:ea:20:ea:50:aa:64:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:6b:08:ef:da:5c:83:99:26:f2:90:36:20: 81:07:70:29:09:56:1b:35:30:44:43:ef:2d:dd:38: 9e:94:60:b9:0f:f1:8d:23:8a:ca:ca:40:09:e6:fa: 9f:b4:6e:cf:f8:2c:9e:13:a0:02:21:84:62:f0:cc: 1b:30:50:f0:5f:96:97:24:37:2e:c4:e6:e3:b2:71: 9b:ef:b3:e8:20:2f:9c:4f:65:f6:18:f8:8e:5e:27: 48:90:9e:f8:59:8f:5e:43:ba:df:36:6d:ab:65:34: 95:f1:e3:e6:c1:38:4f:e0:9a:08:c6:98:04:03:c2: b8:31:8e:a8:cf:37:db:d9:5c:6c:c3:78:19:01:ad: 62:65:78:73:9f:07:8f:c9:a4:0d:24:4d:07:87:1c: 26:22:b5:68:7e:60:ad:db:a6:c0:f5:72:77:ed:08: d5:85:b9:34:e8:1a:6e:fa:82:3a:e0:f0:8c:bd:bc: 19:10:b9:7a:2d:38:7f:f0:cb:16:2f:20:1a:27:06: 42:c7:c7:86:aa:53:c7:a5:6b:f2:ca:6e:52:df:1d: 40:69:92:01:d3:99:e1:5f:99:3b:04:9f:32:79:e5: 97:89:0c:2c:c8:7b:ad:da:38:e2:cc:cc:e8:35:e1: bd:05:b8:b6:2f:01:13:18:54:03:af:17:95:b4:4e: ec:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:0E:3C:62:5F:B7:59:5C:DB:35:F2:7D:3F:ED:22:D8:E5:34:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:880::/46 Signature Algorithm: sha256WithRSAEncryption 53:4a:85:7f:eb:b8:79:f9:67:17:d5:c0:50:42:04:af:e0:33: 73:23:6a:46:9b:6a:48:1a:30:cb:a6:c0:09:fb:65:a0:e1:c8: c5:7d:5d:b2:20:07:e9:2a:11:d6:1c:0e:a3:70:ff:20:b7:7d: 98:4f:6d:f0:7d:42:a2:d3:fe:38:6a:d1:8c:cf:3d:85:7f:78: d4:c9:30:63:a0:26:88:4e:f9:92:59:1b:f8:90:cf:4c:8b:0c: c5:eb:c9:dd:18:2d:26:e1:db:2c:5f:4d:5e:95:f9:15:f7:8b: f9:cb:57:23:03:63:d4:42:5e:cc:0d:59:db:20:af:d2:c9:fb: f4:8c:6d:34:c9:2b:70:17:a7:34:a4:b5:17:01:5d:df:4f:1a: 1e:65:54:2f:2f:57:7d:20:a3:e5:a1:32:a9:ef:12:80:05:53: b3:e9:d5:64:9c:16:0c:98:e0:7d:19:e4:9e:b4:4a:62:8d:4c: d8:e0:c3:16:59:47:73:f3:25:25:90:fb:7b:19:0f:f0:f9:01: ef:24:a7:e1:7f:7c:e9:69:d2:00:0f:51:85:d7:3c:27:b6:79: ce:21:99:d9:63:a1:ea:64:43:54:c7:73:b6:c9:40:09:b1:09: d7:46:6d:87:da:25:03:19:8f:c7:d3:f3:3b:48:05:e9:72:4b: 62:42:bd:0c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYMHMaaOo78q5A0kKeOog6lCqZOcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZGFlZmQ3NGMwMjk4YTI1M2FhZDli MDg5MTRhYjI5ZjcxNTg4MmI5MzJmNjNiOWJmNjViMDJjOGVjNWM3ZTFmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnBrCO/aXIOZJvKQNiCBB3ApCVYb NTBEQ+8t3TielGC5D/GNI4rKykAJ5vqftG7P+CyeE6ACIYRi8MwbMFDwX5aXJDcu xObjsnGb77PoIC+cT2X2GPiOXidIkJ74WY9eQ7rfNm2rZTSV8ePmwThP4JoIxpgE A8K4MY6ozzfb2Vxsw3gZAa1iZXhznwePyaQNJE0HhxwmIrVofmCt26bA9XJ37QjV hbk06Bpu+oI64PCMvbwZELl6LTh/8MsWLyAaJwZCx8eGqlPHpWvyym5S3x1AaZIB 05nhX5k7BJ8yeeWXiQwsyHut2jjizMzoNeG9Bbi2LwETGFQDrxeVtE7sHwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHHkDjxiX7dZXNs18n0/7SLY5TQ2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlYmJiNWE4LWQwNmUtNDdjYi1iNjY4LTBlMzBiZjBhOTcwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+wiAMA0GCSqGSIb3DQEBCwUAA4IBAQBTSoV/67h5+WcX1cBQ QgSv4DNzI2pGm2pIGjDLpsAJ+2Wg4cjFfV2yIAfpKhHWHA6jcP8gt32YT23wfUKi 0/44atGMzz2Ff3jUyTBjoCaITvmSWRv4kM9MiwzF68ndGC0m4dssX01elfkV94v5 y1cjA2PUQl7MDVnbIK/Syfv0jG00yStwF6c0pLUXAV3fTxoeZVQvL1d9IKPloTKp 7xKABVOz6dVknBYMmOB9GeSetEpijUzY4MMWWUdz8yUlkPt7GQ/w+QHvJKfhf3zp adIAD1GF1zwntnnOIZnZY6HqZENUx3O2yUAJsQnXRm2H2iUDGY/H0/M7SAXpckti Qr0M -----END CERTIFICATE-----Generated at Wed Feb 5 03:58:13 2025 by rpki-client