$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa File: 16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa (raw, json) Hash identifier: O0ES5Sup2WE6HroBUsoZYaCclaDFf8IB4n9QsygDlMA= Subject key identifier: DE:8C:07:2B:1C:CF:3F:72:95:6A:10:DC:AE:BB:75:B0:64:B3:96:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C7C7F15C8B5D09F9F00B190363816EB03F1DC27 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa Signing time: Tue 25 Mar 2025 15:21:09 +0000 ROA not before: Tue 25 Mar 2025 15:21:09 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7c:7f:15:c8:b5:d0:9f:9f:00:b1:90:36:38:16:eb:03:f1:dc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:21:09 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=bcf0e356630d345d0ca29e874518fd53d006795c13f7028daf838a08df4310bd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:20:2a:cc:d0:c7:8b:37:f6:df:51:8d:45: 74:23:0d:87:19:9d:25:40:62:d3:34:26:1a:03:96: f4:dc:dc:05:6a:53:b9:1a:89:df:ab:45:59:c9:b0: 6c:0c:f3:47:10:c6:aa:95:07:d0:4d:f2:af:f8:89: f7:c4:76:44:79:72:ba:40:f8:d1:9c:2d:24:a5:ae: d2:0a:6b:9c:78:c6:21:06:73:15:ef:dc:b3:2a:a5: f1:bf:88:e2:32:9e:62:9d:c9:b9:43:ec:1d:f8:1f: 21:85:ad:74:ab:4c:5f:ff:42:fa:97:8e:74:51:5a: de:19:78:6c:ba:9c:2a:e0:ed:95:f6:ea:cb:fa:65: 60:84:90:f8:fb:b8:00:df:f5:20:a6:24:c1:c1:47: 48:c3:c2:6c:22:33:3b:dc:e6:c5:f9:cf:8e:64:0a: ee:44:59:7a:9b:ea:7d:1a:c0:49:eb:5a:c8:75:de: cc:09:16:f9:71:f2:70:e3:d1:9f:ce:38:0c:39:2c: c8:d3:c8:1c:dc:b4:e4:f3:57:e2:09:f8:33:4c:9c: d5:45:93:75:51:5e:1c:1c:97:9b:67:8b:0c:06:4a: 8a:76:77:b3:14:2c:6a:09:f2:b1:4d:58:4d:f2:4e: cb:b5:01:a0:f6:0f:2c:14:15:20:3d:54:2a:70:d8: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8C:07:2B:1C:CF:3F:72:95:6A:10:DC:AE:BB:75:B0:64:B3:96:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:c800::/40 Signature Algorithm: sha256WithRSAEncryption 87:66:f2:83:e5:e5:3e:3a:1b:f0:1a:95:9c:b6:d5:ec:e2:6f: d0:70:ca:c0:4b:1b:7b:e7:d8:5f:d8:56:bf:39:17:b3:b5:2c: a3:c8:f2:62:8d:16:24:21:6e:9b:31:f2:83:86:d9:01:59:5b: 9f:cf:48:92:72:34:3f:7d:fd:8e:fc:ef:7f:b1:78:05:f5:f4: 43:8e:bf:36:7a:81:6d:23:44:67:e3:0e:fe:48:b5:9b:3a:a2: 41:b1:f5:78:d4:f6:ff:1b:87:91:c5:8b:2d:7d:57:d7:0b:ea: 6c:d8:b4:ec:4d:fd:bf:a1:76:23:06:c4:f1:01:e1:14:39:79: a9:ce:5b:fb:10:cd:2b:69:30:a2:a1:4e:7e:49:5f:3c:bd:5b: a4:d9:03:1d:9c:8a:af:c8:9d:ed:34:5a:c7:f1:7a:2b:ba:9b: f8:88:8f:b7:2e:ee:d4:e1:bd:c7:38:97:71:1c:64:20:24:4a: 14:d8:b2:76:7d:51:26:9c:59:e8:8c:18:ed:72:23:7a:f4:85: 23:59:b2:b6:b0:c5:eb:88:1a:1d:59:9f:c3:94:2c:a8:1b:87: b4:a8:33:fd:cb:eb:37:94:1e:de:d6:3c:5d:2b:87:25:aa:0b: dc:09:9e:0f:a6:36:8f:0f:56:76:78:bf:82:d0:8f:26:15:be: f0:a0:80:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPHx/Fci10J+fALGQNjgW6wPx3CcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MjEwOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYmNmMGUzNTY2MzBkMzQ1ZDBjYTI5 ZTg3NDUxOGZkNTNkMDA2Nzk1YzEzZjcwMjhkYWY4MzhhMDhkZjQzMTBiZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6kgKszQx4s39t9RjUV0Iw2HGZ0l QGLTNCYaA5b03NwFalO5Gonfq0VZybBsDPNHEMaqlQfQTfKv+In3xHZEeXK6QPjR nC0kpa7SCmuceMYhBnMV79yzKqXxv4jiMp5incm5Q+wd+B8hha10q0xf/0L6l450 UVreGXhsupwq4O2V9urL+mVghJD4+7gA3/UgpiTBwUdIw8JsIjM73ObF+c+OZAru RFl6m+p9GsBJ61rIdd7MCRb5cfJw49GfzjgMOSzI08gc3LTk81fiCfgzTJzVRZN1 UV4cHJebZ4sMBkqKdnezFCxqCfKxTVhN8k7LtQGg9g8sFBUgPVQqcNiHHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN6MBysczz9ylWoQ3K67dbBks5YKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE2ZmE1Y2Q2LWQ2MjAtNGVlYS04MmUwLWM4NzA4YjM1ZmEzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9MgwDQYJKoZIhvcNAQELBQADggEBAIdm8oPl5T46G/AalZy2 1ezib9BwysBLG3vn2F/YVr85F7O1LKPI8mKNFiQhbpsx8oOG2QFZW5/PSJJyND99 /Y7873+xeAX19EOOvzZ6gW0jRGfjDv5ItZs6okGx9XjU9v8bh5HFiy19V9cL6mzY tOxN/b+hdiMGxPEB4RQ5eanOW/sQzStpMKKhTn5JXzy9W6TZAx2ciq/Ine00Wsfx eiu6m/iIj7cu7tThvcc4l3EcZCAkShTYsnZ9USacWeiMGO1yI3r0hSNZsrawxeuI Gh1Zn8OULKgbh7SoM/3L6zeUHt7WPF0rhyWqC9wJng+mNo8PVnZ4v4LQjyYVvvCg gAM= -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:28 2025 by rpki-client