$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa File: e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa (raw, json) Hash identifier: HMwnrdXQ/o39VSskQZDYCc10EDoItTWWeWg2ix1O0V4= Subject key identifier: 61:80:FD:E8:E6:8A:53:C9:5E:11:E5:C1:25:C5:7D:78:A0:82:68:64 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2478DD6FE02F38225BBD5A3614ED63E41A393A3F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:78:dd:6f:e0:2f:38:22:5b:bd:5a:36:14:ed:63:e4:1a:39:3a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:56:31:13:6c:57:45:2f:d5:95:ae:15:fb: ba:a6:6c:b0:20:0e:41:c8:70:e0:cc:0f:18:b9:b4: 2d:82:58:cb:dc:94:cf:e1:24:59:00:1c:6d:46:5d: c4:af:24:ad:36:27:f3:21:a5:fc:8e:8e:2c:69:2e: 3d:d4:79:7f:c4:58:ed:c8:31:87:87:cc:24:35:d1: b4:ee:6c:5a:05:6c:02:97:bd:c5:d4:28:c3:e3:bb: 65:af:3c:c9:2b:00:e7:87:5e:d2:fc:34:8b:91:4d: e1:0e:eb:bf:15:ab:b8:37:f5:c9:7d:c6:21:8d:89: bd:88:cb:71:28:be:5a:b9:f0:b9:4c:6e:e2:41:ac: 08:10:23:c6:7b:3a:4d:f0:8a:c0:7f:2e:08:d5:03: 86:f8:f8:b4:9d:97:c3:5d:8a:72:f9:1d:a7:02:9a: 3a:57:9c:27:7a:5e:8e:cc:5a:e9:04:54:ff:e5:09: 68:84:b6:20:aa:f1:f8:e6:15:2a:ac:54:d4:e8:76: eb:9b:75:b4:27:ef:f6:b2:df:c8:fc:8f:ed:13:d4: 38:f7:89:d6:fe:e1:1e:56:83:6e:fd:8f:52:d7:f3: ae:17:b3:89:d7:a0:b8:dc:56:82:4c:18:b4:24:a9: 7b:24:39:44:34:a9:60:74:ff:7d:9d:72:83:98:63: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:80:FD:E8:E6:8A:53:C9:5E:11:E5:C1:25:C5:7D:78:A0:82:68:64 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6040::/48 Signature Algorithm: sha256WithRSAEncryption 99:62:a7:67:2c:54:a2:6f:0d:83:45:ca:06:db:e7:80:8c:a5: d0:0c:bc:1d:b4:47:c8:a9:0b:86:60:25:fe:a6:15:16:28:ec: 8f:3a:e4:07:21:1c:a6:7d:d5:a7:b3:f9:f0:bb:d4:14:62:55: e2:e9:02:4e:34:d4:d7:e7:99:49:69:1d:9c:7b:15:51:b3:d3: b0:27:ec:39:e5:b3:ad:62:6f:9a:3e:40:b7:4e:34:e5:51:08: f0:9f:94:d5:d5:cb:af:b3:e9:94:d6:d0:e8:b9:49:90:03:73: 47:d4:0f:10:bc:a4:32:0a:fd:a6:93:ec:4b:2d:64:3f:a9:85: 5a:65:80:60:8e:23:ff:10:f7:4c:8a:c5:0c:4e:89:25:3d:50: 3f:9a:de:3b:f0:4d:5c:1f:9d:c3:a2:27:eb:31:a6:ce:bf:0d: 68:37:7e:9a:f8:2d:47:1d:65:ed:66:96:61:9a:7e:80:bb:fa: c9:51:79:0b:e1:3b:f1:00:f2:30:ce:37:05:38:00:4b:26:2d: 50:22:d5:ee:8f:92:ff:a4:4d:f4:aa:70:5b:57:6f:e2:13:b9: 54:2a:7f:a4:b4:0f:6e:b8:60:13:51:4d:17:4b:3c:16:88:42: 73:10:92:16:db:66:70:6f:8a:36:09:96:e9:b2:79:52:88:53: c8:cd:83:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJHjdb+AvOCJbvVo2FO1j5Bo5Oj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMmVlOWExOGRiYjI0YmY3YWIzMmQ0 NmFmMzBhNDBiYWJkZTJkNmU3MjhkMDg3NWFjZDlhZTEyYzEyZjJjOWY2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ipWMRNsV0Uv1ZWuFfu6pmywIA5B yHDgzA8YubQtgljL3JTP4SRZABxtRl3EryStNifzIaX8jo4saS491Hl/xFjtyDGH h8wkNdG07mxaBWwCl73F1CjD47tlrzzJKwDnh17S/DSLkU3hDuu/Fau4N/XJfcYh jYm9iMtxKL5aufC5TG7iQawIECPGezpN8IrAfy4I1QOG+Pi0nZfDXYpy+R2nApo6 V5wnel6OzFrpBFT/5QlohLYgqvH45hUqrFTU6Hbrm3W0J+/2st/I/I/tE9Q494nW /uEeVoNu/Y9S1/OuF7OJ16C43FaCTBi0JKl7JDlENKlgdP99nXKDmGO1EQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGGA/ejmilPJXhHlwSXFfXiggmhkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwM2RmYWMzLWY3ODUtNGM5OC1hZjQ5LTJkNGUzYThjMDllNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2BAMA0GCSqGSIb3DQEBCwUAA4IBAQCZYqdnLFSibw2DRcoG 2+eAjKXQDLwdtEfIqQuGYCX+phUWKOyPOuQHIRymfdWns/nwu9QUYlXi6QJONNTX 55lJaR2cexVRs9OwJ+w55bOtYm+aPkC3TjTlUQjwn5TV1cuvs+mU1tDouUmQA3NH 1A8QvKQyCv2mk+xLLWQ/qYVaZYBgjiP/EPdMisUMToklPVA/mt478E1cH53Doifr MabOvw1oN36a+C1HHWXtZpZhmn6Au/rJUXkL4TvxAPIwzjcFOABLJi1QItXuj5L/ pE30qnBbV2/iE7lUKn+ktA9uuGATUU0XSzwWiEJzEJIW22Zwb4o2CZbpsnlSiFPI zYPy -----END CERTIFICATE-----Generated at Wed Feb 5 04:04:33 2025 by rpki-client