$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa File: f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa (raw, json) Hash identifier: xca125LuVWI6nOasaQPD+u2+jof1G1951TQFZrwFSlo= Subject key identifier: A9:2E:F9:C0:14:48:86:FC:1A:F1:AF:CF:83:A0:B1:99:99:D0:72:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E47EFD95CA9075131C87D7C8DC81E70D3395E4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:7080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:47:ef:d9:5c:a9:07:51:31:c8:7d:7c:8d:c8:1e:70:d3:39:5e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:7e:87:ce:03:8f:fe:2f:02:8b:68:cd:f3: 82:e5:92:e9:49:8c:fb:54:5b:2c:72:b6:84:19:ce: ea:39:69:91:bd:9c:5d:91:9b:8f:41:ce:83:f5:a3: 7f:35:b7:d2:af:84:56:4e:4b:6b:cf:a3:e5:96:b1: d0:f1:26:bd:74:14:db:40:45:4b:da:f0:d6:84:d7: 47:b9:73:47:4b:8a:eb:af:45:20:fb:b1:b4:14:e9: a1:06:cc:d0:c8:ce:61:59:9a:59:f4:b0:85:9b:f0: dc:85:3f:f0:75:73:06:fc:72:a3:73:5d:05:74:a9: d7:b6:9d:a5:7a:50:0f:eb:d8:55:70:39:3f:8c:a8: bd:81:3a:88:93:5f:fb:8a:7c:73:c6:3e:44:db:fe: 94:0b:22:71:3e:8a:45:b2:12:c4:ce:15:2b:69:f1: a5:b3:31:50:15:50:b4:7d:c4:ee:0f:58:a3:aa:3f: af:fc:c2:9e:85:4f:01:d0:26:2d:33:a9:d7:0c:40: 50:e3:69:a9:ca:dc:0c:da:f9:00:21:9f:31:11:f2: 32:fd:02:bb:88:57:1c:94:7a:38:73:97:81:b9:7f: 66:63:59:51:f0:d7:61:11:56:7a:2e:c2:15:75:25: e0:cd:3e:64:a2:4c:3a:7d:c4:15:96:79:52:95:bb: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:F9:C0:14:48:86:FC:1A:F1:AF:CF:83:A0:B1:99:99:D0:72:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:7080::/46 Signature Algorithm: sha256WithRSAEncryption 69:99:fd:13:fe:cd:c7:cc:b3:97:65:94:95:c8:e7:61:d7:f3: b6:e8:89:ae:bf:a2:1c:1b:74:b0:83:39:e8:a0:ea:aa:55:10: 11:1c:80:a4:d3:10:91:6f:fb:2d:ca:d8:c7:6d:c1:78:c0:8f: 83:92:d7:56:8e:4e:62:31:19:0f:03:81:42:07:1d:4e:28:ed: 85:ca:b2:5f:e1:98:6b:d5:32:47:d2:19:4a:ef:58:a0:73:a1: 7d:7e:96:f5:2e:5a:47:dc:bc:be:aa:2e:48:c1:da:9f:f8:39: e9:8c:4d:43:bf:a6:42:7d:ba:d7:6d:0a:93:11:71:79:75:41: 6d:ef:bd:0d:75:b8:e4:81:97:55:b2:be:32:44:54:0e:88:ac: 9d:69:5a:fc:3d:74:d6:46:78:99:15:e8:51:ab:9c:95:00:19: 11:66:cd:26:ae:97:bc:8a:22:21:a7:f5:a5:48:2c:1d:ae:7f: 4c:65:2b:38:60:33:88:2c:92:8e:d4:d5:5b:36:8a:34:5c:5a: d8:88:97:69:fa:2e:3d:ab:9b:7d:5c:ce:9b:bb:a3:2a:81:0b: 5b:25:0b:a0:7e:a2:ac:44:db:6f:ed:5a:9a:28:58:d1:0c:77: a3:6a:e9:55:b7:d5:57:9b:f5:bf:b9:42:53:6f:bd:61:6e:d1: 40:ab:66:4f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbkfv2VypB1ExyH18jcgecNM5Xk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANmYyYzUxOWJmZmU0YWVhOWQwZGNh YjA2YWU2MWM4ZTM4OTUwODRlZTE5YzZjMGYwNTJmM2EzYzdjMGQ1N2Q0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhN+h84Dj/4vAotozfOC5ZLpSYz7 VFsscraEGc7qOWmRvZxdkZuPQc6D9aN/NbfSr4RWTktrz6PllrHQ8Sa9dBTbQEVL 2vDWhNdHuXNHS4rrr0Ug+7G0FOmhBszQyM5hWZpZ9LCFm/DchT/wdXMG/HKjc10F dKnXtp2lelAP69hVcDk/jKi9gTqIk1/7inxzxj5E2/6UCyJxPopFshLEzhUrafGl szFQFVC0fcTuD1ijqj+v/MKehU8B0CYtM6nXDEBQ42mpytwM2vkAIZ8xEfIy/QK7 iFcclHo4c5eBuX9mY1lR8NdhEVZ6LsIVdSXgzT5kokw6fcQVlnlSlbttsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKku+cAUSIb8GvGvz4OgsZmZ0HIUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2MDI4ODc1LTJmZTMtNGRkZi05NTc3LWFhM2NjODNkZmM3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba93CAMA0GCSqGSIb3DQEBCwUAA4IBAQBpmf0T/s3HzLOXZZSV yOdh1/O26Imuv6IcG3SwgznooOqqVRARHICk0xCRb/stytjHbcF4wI+DktdWjk5i MRkPA4FCBx1OKO2FyrJf4Zhr1TJH0hlK71igc6F9fpb1LlpH3Ly+qi5Iwdqf+Dnp jE1Dv6ZCfbrXbQqTEXF5dUFt770NdbjkgZdVsr4yRFQOiKydaVr8PXTWRniZFehR q5yVABkRZs0mrpe8iiIhp/WlSCwdrn9MZSs4YDOILJKO1NVbNoo0XFrYiJdp+i49 q5t9XM6bu6MqgQtbJQugfqKsRNtv7VqaKFjRDHejaulVt9VXm/W/uUJTb71hbtFA q2ZP -----END CERTIFICATE-----Generated at Wed Feb 5 03:56:30 2025 by rpki-client