$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa File: 13126cec-b0b1-4417-bf14-3d918163685c.roa (raw, json) Hash identifier: 1r2M8sCornWKJMA/CbWYGyZTb64zIc20mcL9P3Rp0s8= Subject key identifier: 83:E5:05:D6:1A:06:A1:83:4C:D3:36:23:17:7D:25:A7:BF:E0:42:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 572AEC17D369502DD4C2C8DDAC894C6CE07974D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa Signing time: Mon 24 Mar 2025 15:21:30 +0000 ROA not before: Mon 24 Mar 2025 15:21:30 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2a:ec:17:d3:69:50:2d:d4:c2:c8:dd:ac:89:4c:6c:e0:79:74:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:21:30 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=bc7df86deb68710780857c3fa9884567eed6d667b09b9a019afde1ed12eef3f1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:b8:6a:37:b9:53:4d:e6:52:db:b4:02:ee: 08:85:24:a6:82:d5:eb:32:7d:6e:7c:55:04:b2:15: 3f:a1:25:d8:1c:c8:84:da:5f:86:87:1f:62:0c:3c: 11:a5:3b:d2:b9:85:a3:a6:c7:92:17:38:2d:ee:b1: 2f:29:97:02:5f:23:9b:4e:99:1c:b7:1d:33:d6:18: 79:38:40:bb:df:a3:ca:be:5c:bd:9e:6d:1f:ca:88: ef:cd:a4:a1:a5:95:83:bd:a9:50:4d:e5:91:e9:9a: 2f:39:6b:67:92:37:1e:07:20:3c:8b:ac:69:20:17: 52:4c:92:51:fd:f2:7b:ea:8f:fa:b5:76:3a:45:fd: d7:94:c0:5d:61:f4:ea:ac:c5:82:5b:c5:e2:66:0b: 93:7d:92:cc:ab:36:e5:b3:ca:a0:cb:6f:4f:f7:8b: 3e:26:a2:ac:2a:42:61:11:e4:a4:cb:7a:64:9a:76: c9:84:a1:08:f8:ec:30:16:64:5f:00:24:e3:86:47: 07:82:6b:a7:d0:c6:26:46:2f:22:a3:f7:a1:99:a3: 9a:2b:4b:5f:f6:10:9e:de:7a:d7:98:a6:a6:88:f0: 59:81:cb:49:9b:9a:bf:fb:bb:7b:f4:46:19:a5:3a: 1e:57:d5:62:23:6e:36:7c:e2:2c:84:c8:e6:aa:c4: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E5:05:D6:1A:06:A1:83:4C:D3:36:23:17:7D:25:A7:BF:E0:42:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e040::/48 Signature Algorithm: sha256WithRSAEncryption ab:02:33:37:f3:15:a9:68:4b:39:15:c3:26:f0:fb:bf:59:4f: 36:3c:b2:ea:3a:21:52:cb:62:f0:08:2d:07:04:0f:f6:0f:5c: c6:c1:52:e3:ff:29:29:ed:12:fe:0c:e6:c1:6f:aa:d4:6b:f6: 5f:9f:66:61:c1:89:b9:8b:fd:65:ab:4d:cc:28:ac:46:34:fd: 22:46:51:12:fc:8c:92:a6:ad:15:78:13:67:f9:8a:bd:12:25: 1d:33:fb:d9:2b:44:c5:88:b6:34:80:c1:28:1c:fb:a1:87:34: 70:5e:0e:a0:f5:04:ff:24:bf:ca:3c:d6:11:2a:23:29:22:61: 98:cf:86:a6:a6:7b:70:28:a0:8b:a8:eb:51:41:96:ad:18:3e: 30:0a:d6:9f:a1:77:44:35:f1:3a:46:cd:91:fc:98:19:55:e4: d5:b1:1e:4e:45:b7:17:e9:67:4a:97:06:e1:40:16:dd:8b:d5: c0:ce:9c:ff:c6:cb:46:60:23:29:e1:a8:f8:92:4d:78:55:25: 7f:33:2c:ce:18:38:55:41:00:28:b7:e3:70:44:8d:77:e4:bf: ef:83:a6:eb:a4:6a:d0:3b:1e:b9:54:20:e1:56:c3:20:3d:ff: 9f:8d:d5:1a:a6:c0:df:9b:33:fe:dc:b7:cc:e8:c8:f4:59:4e: 6f:af:e5:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVyrsF9NpUC3UwsjdrIlMbOB5dNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MjEzMFoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAYmM3ZGY4NmRlYjY4NzEwNzgwODU3 YzNmYTk4ODQ1NjdlZWQ2ZDY2N2IwOWI5YTAxOWFmZGUxZWQxMmVlZjNmMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwam4aje5U03mUtu0Au4IhSSmgtXr Mn1ufFUEshU/oSXYHMiE2l+Ghx9iDDwRpTvSuYWjpseSFzgt7rEvKZcCXyObTpkc tx0z1hh5OEC736PKvly9nm0fyojvzaShpZWDvalQTeWR6ZovOWtnkjceByA8i6xp IBdSTJJR/fJ76o/6tXY6Rf3XlMBdYfTqrMWCW8XiZguTfZLMqzbls8qgy29P94s+ JqKsKkJhEeSky3pkmnbJhKEI+OwwFmRfACTjhkcHgmun0MYmRi8io/ehmaOaK0tf 9hCe3nrXmKamiPBZgctJm5q/+7t79EYZpToeV9ViI242fOIshMjmqsQX/QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIPlBdYaBqGDTNM2Ixd9Jae/4EIzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTI2Y2VjLWIwYjEtNDQxNy1iZjE0LTNkOTE4MTYzNjg1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uBAMA0GCSqGSIb3DQEBCwUAA4IBAQCrAjM38xWpaEs5FcMm 8Pu/WU82PLLqOiFSy2LwCC0HBA/2D1zGwVLj/ykp7RL+DObBb6rUa/Zfn2ZhwYm5 i/1lq03MKKxGNP0iRlES/IySpq0VeBNn+Yq9EiUdM/vZK0TFiLY0gMEoHPuhhzRw Xg6g9QT/JL/KPNYRKiMpImGYz4ampntwKKCLqOtRQZatGD4wCtafoXdENfE6Rs2R /JgZVeTVsR5ORbcX6WdKlwbhQBbdi9XAzpz/xstGYCMp4aj4kk14VSV/MyzOGDhV QQAot+NwRI135L/vg6brpGrQOx65VCDhVsMgPf+fjdUapsDfmzP+3LfM6Mj0WU5v r+V3 -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:04 2025 by rpki-client