$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa File: 11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa (raw, json) Hash identifier: 6sYZZBFb5MZCB/XjZCw5YPnTxPGEhiNn9wGDZHS6D5E= Subject key identifier: 0C:76:90:4E:2D:59:36:9B:71:09:6D:9C:AD:C1:74:7B:39:86:A4:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41E6421944E5E1FEBAE67E4A2818B64C188172EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa Signing time: Tue 25 Mar 2025 00:20:13 +0000 ROA not before: Tue 25 Mar 2025 00:20:13 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e6:42:19:44:e5:e1:fe:ba:e6:7e:4a:28:18:b6:4c:18:81:72:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:20:13 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ebf81f69baa257b681b9734b1d2fcf472f5beae8c11e69e6d91be87b10008498, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:d5:d5:b9:ae:d8:ea:62:14:62:7d:65:ec: 3c:c6:d5:6c:19:ed:f8:a1:ff:7c:d1:ff:60:00:d7: 4c:29:5c:0a:d8:80:af:63:e1:7e:58:84:76:d8:ce: a1:bb:1d:cd:ce:95:fe:d9:8c:bd:a7:f7:0c:28:df: 4d:4b:a2:53:dc:14:a9:d3:1c:4b:34:43:2a:70:44: 1b:f5:29:dc:a1:d2:09:36:a5:64:d5:c4:31:bb:87: b5:3d:b7:f8:a3:c9:6b:52:d4:43:6a:95:9c:a2:8b: 5e:91:e7:36:b2:e1:45:6f:22:5c:ab:68:74:6c:c4: 2b:84:6a:e9:d3:45:9f:3a:71:ae:bb:c0:87:4b:c3: 34:7f:82:21:5b:1b:43:fd:f2:85:cf:c7:dd:e7:cd: 08:ed:9d:6e:e9:5d:93:89:a3:5c:61:04:40:0d:88: ce:ab:6a:3f:99:f5:82:d7:18:d9:a1:99:83:c8:6e: 09:3b:b0:3c:aa:55:50:ce:62:54:5b:9d:ff:dd:0d: 85:c2:a1:c2:7c:b1:fd:cc:94:88:67:c6:ec:57:b0: 84:7b:93:3e:46:ba:f5:61:05:c9:bf:3f:e3:87:06: 60:11:b3:1c:4e:5e:7e:57:16:e0:73:f9:44:78:68: 98:14:9a:f6:75:86:4d:63:0a:ab:0b:a4:20:2c:64: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:76:90:4E:2D:59:36:9B:71:09:6D:9C:AD:C1:74:7B:39:86:A4:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:a040::/48 Signature Algorithm: sha256WithRSAEncryption 78:e3:18:40:cc:84:62:b3:32:bf:c1:2a:47:06:07:96:6a:bc: 2c:b3:93:5b:dd:d2:71:a0:a8:5e:91:7e:35:a7:7d:c4:7a:6e: 20:28:87:3e:e5:2b:47:57:16:49:7b:9d:15:ec:b3:bc:f0:79: 66:82:61:be:4d:0e:6b:c6:82:a4:09:33:48:81:b5:23:60:75: 8e:25:9f:bc:24:22:c1:1a:11:cd:17:99:61:af:63:aa:20:d2: dd:52:50:94:16:ec:c2:10:8b:75:c2:f8:74:b4:6b:28:4c:fb: 95:1d:f4:06:69:9e:1c:19:91:8c:84:c9:fa:44:06:6f:31:7f: f2:19:38:39:a3:71:d3:be:00:8c:28:e6:fc:7a:e8:3c:b2:ac: e2:16:f3:59:10:52:ef:2c:cc:ca:ad:fd:09:1e:ec:79:2c:a3: 81:0f:fc:f5:6f:10:0e:c2:cc:4a:07:a6:6f:7c:b7:c8:bf:30: d5:56:8e:31:c2:4f:fe:dd:b8:e3:52:2a:cd:56:3d:4d:f7:8c: f3:31:e7:f5:97:ba:4f:6b:9a:11:2c:e3:93:e5:2b:e1:1e:a3: b9:0e:e7:4f:15:32:34:d1:6f:82:86:b1:ee:72:77:df:2c:1e: 63:7d:a8:c4:8f:86:50:38:8b:23:10:d0:af:4a:ee:06:c5:9e: ad:69:0d:76 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQeZCGUTl4f665n5KKBi2TBiBcu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMjAxM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZWJmODFmNjliYWEyNTdiNjgxYjk3 MzRiMWQyZmNmNDcyZjViZWFlOGMxMWU2OWU2ZDkxYmU4N2IxMDAwODQ5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB/V1bmu2OpiFGJ9Zew8xtVsGe34 of980f9gANdMKVwK2ICvY+F+WIR22M6hux3NzpX+2Yy9p/cMKN9NS6JT3BSp0xxL NEMqcEQb9SncodIJNqVk1cQxu4e1Pbf4o8lrUtRDapWcootekec2suFFbyJcq2h0 bMQrhGrp00WfOnGuu8CHS8M0f4IhWxtD/fKFz8fd580I7Z1u6V2TiaNcYQRADYjO q2o/mfWC1xjZoZmDyG4JO7A8qlVQzmJUW53/3Q2FwqHCfLH9zJSIZ8bsV7CEe5M+ Rrr1YQXJvz/jhwZgEbMcTl5+Vxbgc/lEeGiYFJr2dYZNYwqrC6QgLGTakwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAx2kE4tWTabcQltnK3BdHs5hqQOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzExNjkxMzYyLWYyNDktNGZmMC1iYzA2LWNlNWJlNWI3YmJjNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOKBAMA0GCSqGSIb3DQEBCwUAA4IBAQB44xhAzIRiszK/wSpH BgeWarwss5Nb3dJxoKhekX41p33Eem4gKIc+5StHVxZJe50V7LO88HlmgmG+TQ5r xoKkCTNIgbUjYHWOJZ+8JCLBGhHNF5lhr2OqINLdUlCUFuzCEIt1wvh0tGsoTPuV HfQGaZ4cGZGMhMn6RAZvMX/yGTg5o3HTvgCMKOb8eug8sqziFvNZEFLvLMzKrf0J Hux5LKOBD/z1bxAOwsxKB6ZvfLfIvzDVVo4xwk/+3bjjUirNVj1N94zzMef1l7pP a5oRLOOT5SvhHqO5DudPFTI00W+ChrHucnffLB5jfajEj4ZQOIsjENCvSu4GxZ6t aQ12 -----END CERTIFICATE-----Generated at Thu Apr 17 18:09:25 2025 by rpki-client