$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0db776f4-2540-4b6f-997d-ca0a5392335b.roa File: 0db776f4-2540-4b6f-997d-ca0a5392335b.roa (raw, json) Hash identifier: FFZh0rtllwAL1j4d0zKkhDmHX2/9fABD5gE5lCZ0xZQ= Subject key identifier: B5:E5:08:F6:A7:EF:98:C2:F1:91:4C:17:3A:86:3B:9F:F9:EA:1C:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AAA64CB4B400F48937E49D02D4E53678D297E8C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0db776f4-2540-4b6f-997d-ca0a5392335b.roa Signing time: Tue 25 Mar 2025 16:50:47 +0000 ROA not before: Tue 25 Mar 2025 16:50:47 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:aa:64:cb:4b:40:0f:48:93:7e:49:d0:2d:4e:53:67:8d:29:7e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:47 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=909364fc2d69a098ca96276c0ada2f35816c455822a76167a8391227a3a2ea71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:f1:f0:ee:20:68:6e:b3:28:52:80:60:2f: 5f:ca:23:d5:92:df:38:4c:8b:90:e1:bc:d0:00:a1: f1:cd:76:c6:22:30:a6:ac:48:b9:ac:5b:29:60:87: ec:ba:0b:4f:98:f4:cf:f3:a8:3c:b3:c2:ae:3b:d0: 0d:ee:e7:c5:96:97:c7:bf:53:c9:85:96:85:4f:e8: a4:39:02:ff:53:cf:09:98:ce:cf:85:7e:58:7f:ba: 71:dd:b6:46:6b:f2:c3:ab:d3:91:f7:48:65:c1:9f: 49:2a:9e:9e:3e:3b:b4:04:c8:84:fc:d5:a6:2a:1f: 41:c8:92:17:55:cb:5e:46:bc:85:3c:ac:ed:1d:05: 88:c3:32:67:44:3e:a0:d8:d3:dd:5c:ef:3d:e3:90: 31:0c:fb:dc:95:de:9e:be:36:b9:91:04:50:e4:04: 3a:bd:46:8b:68:1f:fc:b5:84:e3:c2:66:85:f0:fa: a3:87:8e:7a:75:66:35:b5:e3:55:c0:84:d1:e1:c1: 3c:4d:f3:7c:e8:37:19:cf:6b:38:5f:aa:b0:b2:f6: b9:b1:2e:92:25:79:03:f8:8a:2d:5d:2f:ed:ae:1f: 24:0d:e0:05:98:2d:2b:0b:62:c0:a6:80:f2:e0:c1: 6d:5b:c1:bc:a5:2f:36:e5:7c:dd:7d:c8:46:9c:9d: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E5:08:F6:A7:EF:98:C2:F1:91:4C:17:3A:86:3B:9F:F9:EA:1C:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0db776f4-2540-4b6f-997d-ca0a5392335b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16::/36 Signature Algorithm: sha256WithRSAEncryption 92:2f:f6:96:c8:9a:c9:da:51:82:5f:76:67:7e:7c:52:39:b1: c7:49:42:26:7c:50:c0:e9:c2:5b:95:60:30:93:d6:6f:13:2a: 10:26:72:ef:59:eb:6f:ab:8a:e7:0e:2a:30:c5:73:2d:03:53: f5:8c:f1:5c:80:d4:f0:eb:d3:41:f4:63:bf:39:7f:e6:0b:b8: 90:2d:24:d9:01:69:c5:e4:81:63:23:10:bb:a1:66:35:54:23: a4:b3:16:ce:f6:53:b0:55:56:bf:49:e5:f8:0a:04:46:70:ef: f4:e0:17:94:44:b2:d0:d1:b7:8d:b5:c0:4b:1a:0d:6f:fa:25: 7b:f8:4d:90:b8:f6:67:06:51:7b:77:61:f8:6c:59:3a:f3:ad: 0d:f7:f5:ca:23:53:08:42:2d:a0:d2:02:75:ab:15:af:8a:b3: c0:1a:69:b1:d9:84:79:b7:c9:65:9c:cd:73:04:ba:cb:4a:43: 74:1c:f4:6a:26:64:6a:30:a2:da:b6:a7:0e:a6:96:3c:a6:d3: 24:b7:e9:d5:e7:6f:ac:ec:31:30:4b:a8:6d:3e:d2:2e:af:e2: 22:7a:72:e1:7c:51:d5:d0:2c:b7:c9:3f:3c:f4:aa:c7:b4:e5: 5d:43:1f:8f:63:51:4b:f1:4a:fe:d3:a1:53:7b:f1:9b:19:0f: 2b:fd:3c:21 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGqpky0tAD0iTfknQLU5TZ40pfowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTA0N1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOTA5MzY0ZmMyZDY5YTA5OGNhOTYy NzZjMGFkYTJmMzU4MTZjNDU1ODIyYTc2MTY3YTgzOTEyMjdhM2EyZWE3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV7x8O4gaG6zKFKAYC9fyiPVkt84 TIuQ4bzQAKHxzXbGIjCmrEi5rFspYIfsugtPmPTP86g8s8KuO9AN7ufFlpfHv1PJ hZaFT+ikOQL/U88JmM7PhX5Yf7px3bZGa/LDq9OR90hlwZ9JKp6ePju0BMiE/NWm Kh9ByJIXVcteRryFPKztHQWIwzJnRD6g2NPdXO8945AxDPvcld6evja5kQRQ5AQ6 vUaLaB/8tYTjwmaF8Pqjh456dWY1teNVwITR4cE8TfN86DcZz2s4X6qwsva5sS6S JXkD+IotXS/trh8kDeAFmC0rC2LApoDy4MFtW8G8pS825XzdfchGnJ1vJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLXlCPan75jC8ZFMFzqGO5/56hyeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBkYjc3NmY0LTI1NDAtNGI2Zi05OTdkLWNhMGE1MzkyMzM1Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFgAwDQYJKoZIhvcNAQELBQADggEBAJIv9pbImsnaUYJfdmd+ fFI5scdJQiZ8UMDpwluVYDCT1m8TKhAmcu9Z62+riucOKjDFcy0DU/WM8VyA1PDr 00H0Y785f+YLuJAtJNkBacXkgWMjELuhZjVUI6SzFs72U7BVVr9J5fgKBEZw7/Tg F5REstDRt421wEsaDW/6JXv4TZC49mcGUXt3YfhsWTrzrQ339cojUwhCLaDSAnWr Fa+Ks8AaabHZhHm3yWWczXMEustKQ3Qc9GomZGowotq2pw6mljym0yS36dXnb6zs MTBLqG0+0i6v4iJ6cuF8UdXQLLfJPzz0qse05V1DH49jUUvxSv7ToVN78ZsZDyv9 PCE= -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:51 2025 by rpki-client