$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff76adae-04fc-4180-843c-fb130c4b72ea.roa File: ff76adae-04fc-4180-843c-fb130c4b72ea.roa (raw, json) Hash identifier: 6HtQLZshH8qOzn09Flcd76TcrMas1s64sP5WGldeCoI= Subject key identifier: 47:C7:8C:88:92:42:23:10:F2:94:EC:DC:E2:A9:25:1D:8F:B9:11:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AE69D2219A633F19E9CF14E52D2101B46F42A4F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff76adae-04fc-4180-843c-fb130c4b72ea.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:7040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e6:9d:22:19:a6:33:f1:9e:9c:f1:4e:52:d2:10:1b:46:f4:2a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:ec:f3:df:8d:eb:e8:18:fd:fd:0c:a0:5c: ef:e6:78:3c:c8:64:80:ae:62:a0:90:8f:a1:7b:33: e4:22:01:8d:97:4b:af:ce:f7:61:cc:9a:6e:46:1a: 30:3f:9f:4a:e4:85:1d:40:1c:dc:a0:63:e3:78:5f: 6c:73:91:9e:cc:c3:e6:ec:5b:a8:83:5e:48:c9:23: cf:65:3d:6f:b3:27:c3:ba:d1:7e:56:42:94:ea:e8: 66:54:c8:0b:4e:17:d5:a2:2c:38:f0:ca:90:23:76: 0e:a3:5e:6b:f8:3a:ba:aa:6b:f3:b8:ff:d0:29:70: 81:f4:4b:b1:28:67:32:ad:db:d3:ce:3c:68:35:c6: 4e:bc:fe:3d:49:92:f2:ca:9c:b9:29:a1:25:59:e2: ea:2f:99:06:18:10:b3:17:46:fd:fb:51:77:f8:63: e5:8d:96:8b:d9:e8:21:48:2d:6e:41:5f:8a:bb:50: 00:57:4e:86:d7:61:ff:09:14:26:ca:8d:93:a8:be: f1:c8:f4:e4:34:f6:15:dd:98:62:f5:a6:93:be:cb: dc:52:2d:7c:3a:e6:6a:fc:7d:6a:b8:c7:16:b7:75: e8:b1:2c:80:bb:22:be:cb:1f:63:14:cf:4a:64:df: 87:06:63:51:73:20:0c:f1:c5:e3:24:cb:8f:95:71: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C7:8C:88:92:42:23:10:F2:94:EC:DC:E2:A9:25:1D:8F:B9:11:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff76adae-04fc-4180-843c-fb130c4b72ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:7040::/46 Signature Algorithm: sha256WithRSAEncryption a2:bb:93:45:e7:95:41:b5:da:e8:dc:78:c8:92:da:e8:a4:1e: af:40:f4:b5:35:be:ec:ca:e1:66:e5:46:25:29:43:71:26:33: ce:d8:fe:4f:d0:eb:5a:f8:0c:6b:87:6d:8d:15:69:bb:f6:e7: c8:35:8d:03:c2:59:b4:02:f4:d8:59:d1:44:d1:4b:ab:a0:b9: 4e:5c:93:69:1c:cb:fe:94:dd:b0:7f:36:0b:bf:48:0d:f0:4c: 59:1a:10:90:91:45:c6:4e:c6:07:b0:e0:a0:11:ae:ca:f8:d6: 14:a2:90:2f:35:c5:37:fc:62:e8:2c:cc:c3:6c:0d:3f:02:10: fd:2b:2d:38:e3:c8:d9:63:04:1f:c1:0c:24:25:5a:6c:99:ad: 45:3c:49:57:cf:20:64:2c:82:65:53:da:e3:c5:61:b5:0b:eb: eb:c0:dd:d0:44:36:37:1a:51:9a:61:06:be:75:70:48:32:d1: e4:f7:c8:fc:36:1d:1c:34:48:7d:61:ff:e9:25:c5:05:bd:12: 20:79:41:ad:e5:03:43:8e:53:1c:0a:0f:10:0f:5b:23:76:39: ae:0d:16:64:6b:c8:10:20:40:1c:ce:aa:f6:8f:3f:cc:8e:a9: b7:bc:69:74:cd:5e:ed:d2:1a:8f:ed:b7:56:59:3b:a8:0a:52: f0:bd:e0:aa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUauadIhmmM/GenPFOUtIQG0b0Kk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZjZmNmQxMDg5YWYyYzg5ZDhiYTM5 NjM4ZmQzOTMxNjY4OTFlMTViODE2NTliMTA1ODRmZDk1MGNiYzJiMzI3MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBrs89+N6+gY/f0MoFzv5ng8yGSA rmKgkI+hezPkIgGNl0uvzvdhzJpuRhowP59K5IUdQBzcoGPjeF9sc5GezMPm7Fuo g15IySPPZT1vsyfDutF+VkKU6uhmVMgLThfVoiw48MqQI3YOo15r+Dq6qmvzuP/Q KXCB9EuxKGcyrdvTzjxoNcZOvP49SZLyypy5KaElWeLqL5kGGBCzF0b9+1F3+GPl jZaL2eghSC1uQV+Ku1AAV06G12H/CRQmyo2TqL7xyPTkNPYV3Zhi9aaTvsvcUi18 OuZq/H1quMcWt3XosSyAuyK+yx9jFM9KZN+HBmNRcyAM8cXjJMuPlXGh6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEfHjIiSQiMQ8pTs3OKpJR2PuRHlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmNzZhZGFlLTA0ZmMtNDE4MC04NDNjLWZiMTMwYzRiNzJlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaXBAMA0GCSqGSIb3DQEBCwUAA4IBAQCiu5NF55VBtdro3HjI ktropB6vQPS1Nb7syuFm5UYlKUNxJjPO2P5P0Ota+Axrh22NFWm79ufINY0Dwlm0 AvTYWdFE0UuroLlOXJNpHMv+lN2wfzYLv0gN8ExZGhCQkUXGTsYHsOCgEa7K+NYU opAvNcU3/GLoLMzDbA0/AhD9Ky0448jZYwQfwQwkJVpsma1FPElXzyBkLIJlU9rj xWG1C+vrwN3QRDY3GlGaYQa+dXBIMtHk98j8Nh0cNEh9Yf/pJcUFvRIgeUGt5QND jlMcCg8QD1sjdjmuDRZka8gQIEAczqr2jz/Mjqm3vGl0zV7t0hqP7bdWWTuoClLw veCq -----END CERTIFICATE-----Generated at Wed Feb 5 04:01:35 2025 by rpki-client