$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/191ccdc3-51c8-4489-9abe-90b3e791b963.roa File: 191ccdc3-51c8-4489-9abe-90b3e791b963.roa (raw, json) Hash identifier: X3ik7XStXAt73v+W+PPIqVOPu7sGkCPJTNHnLnvTotA= Subject key identifier: A5:3B:0B:97:E7:D0:C5:B3:96:3D:96:E7:89:1B:86:75:22:6B:01:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B07C86C2765E7CE40452551FFC6C05E5DA521B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/191ccdc3-51c8-4489-9abe-90b3e791b963.roa Signing time: Tue 25 Mar 2025 15:31:09 +0000 ROA not before: Tue 25 Mar 2025 15:31:09 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:07:c8:6c:27:65:e7:ce:40:45:25:51:ff:c6:c0:5e:5d:a5:21:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:31:09 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=f0502562cdbe7597315019d23c081080330fe36e0484395d8e1288d39264566f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:7d:7d:e7:da:28:f1:1d:07:94:4e:be:0b: c2:d2:51:0f:6f:43:51:0c:12:da:ca:2a:94:2f:98: 4e:7c:4e:db:27:c6:5a:1c:72:58:10:12:4d:b8:12: 2f:58:17:00:aa:17:31:cf:8e:4c:4d:13:3b:ac:e3: ee:51:12:0c:97:06:89:b3:c5:aa:1e:d0:4f:a5:77: 11:fb:e6:ab:e3:26:a0:f2:62:7f:7b:60:56:bc:1e: 9b:9d:00:a3:22:c0:c7:5f:47:75:d7:6a:ed:24:19: 2e:42:0d:b5:a1:c2:54:1d:dc:47:8c:05:ab:67:f6: ff:3e:3e:6a:0e:5d:2d:40:93:5d:e2:6b:12:17:8d: 79:6b:a8:5b:8e:65:17:e0:52:09:f4:fe:cd:0b:34: 47:ec:e5:ab:8b:51:b8:f0:e6:b3:5b:ec:28:c6:a6: 98:e8:a3:e5:77:cb:83:6b:05:0b:3c:a0:ce:22:e1: e2:e8:f3:f8:82:7e:03:ca:87:2c:34:b1:f3:82:52: 53:e5:11:00:fa:e6:f8:55:a1:f2:3d:b5:28:17:1f: 19:ae:03:74:16:9d:70:e9:5d:d7:ff:cc:08:97:67: 49:8a:22:47:fa:0c:08:eb:dd:47:5a:71:7b:d7:d6: 51:d0:6c:d1:12:17:d7:e2:7c:5b:32:29:47:be:f0: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:0B:97:E7:D0:C5:B3:96:3D:96:E7:89:1B:86:75:22:6B:01:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/191ccdc3-51c8-4489-9abe-90b3e791b963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c040::/46 Signature Algorithm: sha256WithRSAEncryption 37:1f:67:21:d9:40:ad:b3:8c:07:81:b0:33:68:93:77:d6:4f: d3:77:86:74:28:29:9f:34:5e:64:54:c6:91:d6:76:20:d9:5f: 37:08:a8:db:94:4f:92:28:85:54:c6:4b:98:ca:81:5f:35:7d: 12:9d:3a:8a:c7:55:62:30:82:e6:19:14:75:b9:51:04:41:b4: d7:d9:25:a7:ad:71:1e:d1:dd:be:34:e3:2d:c3:11:80:90:b5: 03:f7:f8:27:d7:d4:96:e0:a7:66:df:df:2f:83:df:ee:1d:3c: 1f:48:47:6a:40:84:9e:c3:9b:c8:24:79:33:f4:b3:0b:21:9e: c7:36:39:e1:a7:da:c9:b5:f1:82:b5:4b:ad:b5:03:4a:e3:15: 07:9c:3e:a0:65:f0:2a:c3:0f:45:e9:c0:14:26:ca:dd:76:73: 0f:9e:87:ae:ab:5c:4f:72:76:6f:b6:a2:57:d6:f2:c1:dc:7d: d6:43:37:f2:7d:75:d4:da:78:81:c3:1f:41:21:3b:1a:79:a8: 00:60:34:2a:9f:94:b4:e7:0b:97:12:6e:18:c4:3e:df:e7:12: 61:4e:d0:fc:ff:fb:de:0c:9d:08:bd:d9:c5:8d:66:82:5f:dc: c3:44:5f:6e:32:bd:56:30:d6:4c:36:48:14:d9:35:9d:06:4b: 92:63:7a:39 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGwfIbCdl585ARSVR/8bAXl2lIbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MzEwOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjA1MDI1NjJjZGJlNzU5NzMxNTAx OWQyM2MwODEwODAzMzBmZTM2ZTA0ODQzOTVkOGUxMjg4ZDM5MjY0NTY2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHR9fefaKPEdB5ROvgvC0lEPb0NR DBLayiqUL5hOfE7bJ8ZaHHJYEBJNuBIvWBcAqhcxz45MTRM7rOPuURIMlwaJs8Wq HtBPpXcR++ar4yag8mJ/e2BWvB6bnQCjIsDHX0d112rtJBkuQg21ocJUHdxHjAWr Z/b/Pj5qDl0tQJNd4msSF415a6hbjmUX4FIJ9P7NCzRH7OWri1G48OazW+woxqaY 6KPld8uDawULPKDOIuHi6PP4gn4DyocsNLHzglJT5REA+ub4VaHyPbUoFx8ZrgN0 Fp1w6V3X/8wIl2dJiiJH+gwI691HWnF719ZR0GzREhfX4nxbMilHvvBtKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKU7C5fn0MWzlj2W54kbhnUiawGwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5MWNjZGMzLTUxYzgtNDQ4OS05YWJlLTkwYjNlNzkxYjk2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98BAMA0GCSqGSIb3DQEBCwUAA4IBAQA3H2ch2UCts4wHgbAz aJN31k/Td4Z0KCmfNF5kVMaR1nYg2V83CKjblE+SKIVUxkuYyoFfNX0SnTqKx1Vi MILmGRR1uVEEQbTX2SWnrXEe0d2+NOMtwxGAkLUD9/gn19SW4Kdm398vg9/uHTwf SEdqQISew5vIJHkz9LMLIZ7HNjnhp9rJtfGCtUuttQNK4xUHnD6gZfAqww9F6cAU JsrddnMPnoeuq1xPcnZvtqJX1vLB3H3WQzfyfXXU2niBwx9BITsaeagAYDQqn5S0 5wuXEm4YxD7f5xJhTtD8//veDJ0IvdnFjWaCX9zDRF9uMr1WMNZMNkgU2TWdBkuS Y3o5 -----END CERTIFICATE-----Generated at Thu Apr 17 18:09:25 2025 by rpki-client