$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb6fb749-738a-45f9-8df3-b428dffee98a.roa File: fb6fb749-738a-45f9-8df3-b428dffee98a.roa (raw, json) Hash identifier: dkhUSMWcTYokd1jKf5C/haSeDGo1+QvvOwuXufg3cpk= Subject key identifier: 96:16:62:29:E5:77:E4:41:B2:D1:32:F3:7B:19:18:EC:48:E0:C8:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 137AFC6E8B3A1A88405CC8E1E8A99B6F9329AECB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb6fb749-738a-45f9-8df3-b428dffee98a.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7a:fc:6e:8b:3a:1a:88:40:5c:c8:e1:e8:a9:9b:6f:93:29:ae:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:fc:2e:67:9b:89:be:30:41:5d:80:00:e9: 05:56:68:c3:e7:5a:94:ae:28:68:e0:fa:09:86:33: d4:1e:ae:89:a1:48:63:c8:46:eb:31:1d:bf:db:de: 66:d0:53:a3:78:b7:1f:fb:14:2e:1b:a1:00:d3:e8: c7:9e:23:5c:73:7d:61:6c:42:fb:cb:c8:ae:b6:5e: 65:4c:3c:89:e5:d3:73:6e:2b:dc:37:5d:34:ab:b7: f2:a2:3c:76:8d:13:3a:dd:f1:51:eb:a2:4e:37:32: 73:9b:ab:7a:84:f5:89:e6:03:15:1c:32:f9:d4:f8: db:b6:04:01:c0:db:c9:72:32:d4:4c:45:31:93:a8: 46:f2:0e:a4:d7:e8:de:11:90:a5:b1:9f:0d:19:4b: b1:16:86:10:0f:98:b7:48:e8:77:95:03:d6:ba:9b: 92:88:06:41:64:4a:f9:37:ab:2f:a0:e2:a3:51:c9: c4:64:97:01:cc:20:05:7e:90:0d:89:92:e4:94:fc: 54:5f:ef:d7:b3:47:f6:8b:16:b4:e1:98:ec:3f:53: d8:f6:63:ed:0e:f9:b2:60:5d:da:85:3d:31:56:a1: 1d:13:1c:cf:c5:b7:7d:17:40:92:ee:a6:0f:ba:70: 90:40:c4:1b:90:63:20:04:7c:be:33:1d:e4:1c:42: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:62:29:E5:77:E4:41:B2:D1:32:F3:7B:19:18:EC:48:E0:C8:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb6fb749-738a-45f9-8df3-b428dffee98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:a080::/48 Signature Algorithm: sha256WithRSAEncryption 4c:0a:93:98:23:50:4c:41:f1:e8:e3:43:6d:bb:fa:69:a9:ea: f2:1e:c4:bf:ee:a2:64:0a:10:88:e2:69:08:5a:2d:82:48:93: 8f:fa:a9:1b:50:45:d2:96:40:85:e0:26:6f:ab:23:bf:e2:f3: 2a:f1:da:34:c3:01:6a:34:1c:ff:00:03:ea:f1:e1:6c:57:0c: dd:b1:d7:e8:e9:8c:73:bb:fd:8c:91:56:1b:97:b6:be:51:d3: a7:67:b2:e4:07:8b:9d:38:41:64:fb:1d:a0:84:a8:c9:6f:06: f9:45:88:84:03:14:0c:58:99:b5:b3:3b:e5:f0:75:74:41:94: 17:59:7d:4f:e0:b5:60:9a:c2:15:5b:a8:75:21:ca:07:9f:5b: f1:5c:72:7f:1f:47:21:43:a8:04:3f:d1:0b:1c:04:99:a8:e3: 4c:6d:5c:74:75:56:d0:d3:cd:8e:ac:8d:6e:1d:99:58:a8:ba: ad:d8:3b:b1:bf:48:02:79:d0:80:4c:9c:df:76:c0:68:13:fb: 9c:7b:2b:d3:d4:b7:72:f1:9c:ff:be:b1:ad:84:da:76:20:44: 53:99:23:ae:f3:74:4f:2f:cd:ac:bd:2c:a9:40:5c:64:5a:f2: 73:f6:07:da:d1:b1:ec:e0:88:7e:5d:cc:84:aa:88:5d:fd:eb: f9:b0:c1:5d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUE3r8bos6GohAXMjh6Kmbb5MprsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAYTNlNGRjMDQ4ZDU4N2E0OTlmYjQx MDcyODQ1NDJhNTJhODdmNTYwYzAyYjJkM2JhOWM3ZDI4NmZhMjMwMWEyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1/8Lmebib4wQV2AAOkFVmjD51qU riho4PoJhjPUHq6JoUhjyEbrMR2/295m0FOjeLcf+xQuG6EA0+jHniNcc31hbEL7 y8iutl5lTDyJ5dNzbivcN100q7fyojx2jRM63fFR66JONzJzm6t6hPWJ5gMVHDL5 1PjbtgQBwNvJcjLUTEUxk6hG8g6k1+jeEZClsZ8NGUuxFoYQD5i3SOh3lQPWupuS iAZBZEr5N6svoOKjUcnEZJcBzCAFfpANiZLklPxUX+/Xs0f2ixa04ZjsP1PY9mPt DvmyYF3ahT0xVqEdExzPxbd9F0CS7qYPunCQQMQbkGMgBHy+Mx3kHEKJbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJYWYinld+RBstEy83sZGOxI4MjQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiNmZiNzQ5LTczOGEtNDVmOS04ZGYzLWI0MjhkZmZlZTk4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOKCAMA0GCSqGSIb3DQEBCwUAA4IBAQBMCpOYI1BMQfHo40Nt u/ppqeryHsS/7qJkChCI4mkIWi2CSJOP+qkbUEXSlkCF4CZvqyO/4vMq8do0wwFq NBz/AAPq8eFsVwzdsdfo6Yxzu/2MkVYbl7a+UdOnZ7LkB4udOEFk+x2ghKjJbwb5 RYiEAxQMWJm1szvl8HV0QZQXWX1P4LVgmsIVW6h1IcoHn1vxXHJ/H0chQ6gEP9EL HASZqONMbVx0dVbQ082OrI1uHZlYqLqt2Duxv0gCedCATJzfdsBoE/uceyvT1Ldy 8Zz/vrGthNp2IERTmSOu83RPL82svSypQFxkWvJz9gfa0bHs4Ih+XcyEqohd/ev5 sMFd -----END CERTIFICATE-----Generated at Wed Feb 5 03:55:40 2025 by rpki-client