$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/100dc422-4bdf-42ad-b997-95e95f89c2ff.roa File: 100dc422-4bdf-42ad-b997-95e95f89c2ff.roa (raw, json) Hash identifier: noFFSPrEKH3/hlgFn416OZLpvEsuobyu6GjZGtHKJ84= Subject key identifier: DB:C5:80:0D:30:E2:1E:79:A6:41:E7:7E:E7:70:79:6D:0B:49:AF:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DB7462261ECF135D26BA28E06BAB9F37CE7CFBF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/100dc422-4bdf-42ad-b997-95e95f89c2ff.roa Signing time: Tue 25 Mar 2025 16:01:42 +0000 ROA not before: Tue 25 Mar 2025 16:01:42 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b7:46:22:61:ec:f1:35:d2:6b:a2:8e:06:ba:b9:f3:7c:e7:cf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:42 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=f2ecacc9e8786d02e5c1ac9754c23d76cd433214a4be6b9b7d570e9cfbb4304d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:82:9d:39:fe:75:3f:ab:50:e8:11:e9:ad: e1:a5:92:d8:89:6d:cf:66:eb:23:36:e7:da:96:73: 71:5d:f5:f0:8d:b9:c0:1e:0d:1c:3e:d2:38:43:42: 98:25:2d:6d:d5:12:72:01:5c:ac:1f:23:7d:4c:fc: bb:7c:8f:68:a9:8e:8b:cb:5a:fb:9b:54:aa:27:0d: c5:ff:57:4a:85:b0:a5:10:bb:e6:62:a2:a6:88:b7: c8:71:99:bd:6e:1a:b8:14:98:58:e3:f9:12:20:4f: d5:64:97:44:a9:aa:1c:3d:7b:5a:68:e7:20:b7:80: b1:84:e5:f1:6a:55:a8:d6:3e:56:22:8a:22:5e:7a: e0:8c:95:7f:6f:db:4b:b6:04:38:2a:5c:ad:f1:97: 1c:b4:db:5f:77:8f:a4:2f:31:7f:e5:0e:7c:1d:58: 88:c8:70:a0:16:2b:7d:ef:70:e7:56:a8:d5:f0:36: 83:05:6f:82:b6:8f:ed:9e:ab:f9:71:e9:9c:63:58: 4d:d8:ee:38:23:26:c2:c9:66:02:2f:cb:4a:0f:6e: d8:39:b3:b4:0b:f5:00:49:26:89:4c:20:b0:06:fe: e3:99:99:a4:c7:e4:9e:19:24:f8:cf:b6:c8:51:4c: 9d:2b:1f:aa:e3:42:82:1d:9f:af:e8:c7:0d:7b:cd: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C5:80:0D:30:E2:1E:79:A6:41:E7:7E:E7:70:79:6D:0B:49:AF:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/100dc422-4bdf-42ad-b997-95e95f89c2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:7000::/40 Signature Algorithm: sha256WithRSAEncryption 5d:49:10:61:22:11:fc:eb:e6:ad:e3:4b:d1:24:26:07:5e:5a: af:83:12:f4:b1:19:63:be:11:67:bc:00:59:c5:e3:52:50:26: 47:9a:24:93:d3:0a:c0:1b:9b:79:ed:1a:2e:cb:8d:f0:d5:3a: da:50:6d:84:47:86:96:b8:22:31:c2:ee:fc:5d:35:df:d4:8d: 92:0d:1d:51:70:c5:eb:03:ad:08:f1:44:d7:0d:72:7d:18:2a: 28:e7:a4:2c:4c:a4:3a:64:90:76:b4:88:17:18:a2:0a:06:73: 61:50:cb:d4:1e:ef:6c:16:1e:f1:02:b9:1a:a9:9d:2d:78:ab: f4:54:d4:2f:b6:b0:e2:8f:ae:f4:43:ac:cf:63:2a:e8:f4:05: dc:9c:eb:79:16:56:0a:46:b5:97:16:8d:ab:f2:54:48:a3:7e: f9:34:5a:41:44:bb:db:70:b7:11:62:2e:53:c6:b1:ee:80:e8: 20:71:6d:df:82:a7:47:9f:89:bc:59:62:eb:84:71:65:4e:07: 84:69:b0:96:e5:3c:58:be:63:3d:7f:f3:8a:fd:cd:fe:58:f2: 25:bf:b1:9b:75:40:bc:df:33:ef:05:8d:72:4c:2a:aa:61:8b: f8:12:bc:41:5e:3b:7e:3c:c5:89:b8:8c:36:f4:a0:60:b6:90: ee:db:5e:34 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXbdGImHs8TXSa6KOBrq583znz78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDE0MloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjJlY2FjYzllODc4NmQwMmU1YzFh Yzk3NTRjMjNkNzZjZDQzMzIxNGE0YmU2YjliN2Q1NzBlOWNmYmI0MzA0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAOCnTn+dT+rUOgR6a3hpZLYiW3P ZusjNufalnNxXfXwjbnAHg0cPtI4Q0KYJS1t1RJyAVysHyN9TPy7fI9oqY6Ly1r7 m1SqJw3F/1dKhbClELvmYqKmiLfIcZm9bhq4FJhY4/kSIE/VZJdEqaocPXtaaOcg t4CxhOXxalWo1j5WIooiXnrgjJV/b9tLtgQ4Klyt8ZcctNtfd4+kLzF/5Q58HViI yHCgFit973DnVqjV8DaDBW+Cto/tnqv5cemcY1hN2O44IybCyWYCL8tKD27YObO0 C/UASSaJTCCwBv7jmZmkx+SeGST4z7bIUUydKx+q40KCHZ+v6McNe81FvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNvFgA0w4h55pkHnfudweW0LSa8iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwMGRjNDIyLTRiZGYtNDJhZC1iOTk3LTk1ZTk1Zjg5YzJmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+3AwDQYJKoZIhvcNAQELBQADggEBAF1JEGEiEfzr5q3jS9Ek JgdeWq+DEvSxGWO+EWe8AFnF41JQJkeaJJPTCsAbm3ntGi7LjfDVOtpQbYRHhpa4 IjHC7vxdNd/UjZINHVFwxesDrQjxRNcNcn0YKijnpCxMpDpkkHa0iBcYogoGc2FQ y9Qe72wWHvECuRqpnS14q/RU1C+2sOKPrvRDrM9jKuj0Bdyc63kWVgpGtZcWjavy VEijfvk0WkFEu9twtxFiLlPGse6A6CBxbd+Cp0efibxZYuuEcWVOB4RpsJblPFi+ Yz1/84r9zf5Y8iW/sZt1QLzfM+8FjXJMKqphi/gSvEFeO348xYm4jDb0oGC2kO7b XjQ= -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:11 2025 by rpki-client