$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa File: 1aaf6328-08de-4735-8d71-2cf6b53109d4.roa (raw, json) Hash identifier: m7sa8zyQZnJSPNlYMTW0/rCoSCuoof9R11G8KIgy6MQ= Subject key identifier: EF:8D:02:96:66:30:96:8E:69:CE:43:02:25:13:15:7A:91:F1:17:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2480D7C991E376CCF445BA2591C8987860164F1B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa Signing time: Tue 25 Mar 2025 00:41:27 +0000 ROA not before: Tue 25 Mar 2025 00:41:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:80:d7:c9:91:e3:76:cc:f4:45:ba:25:91:c8:98:78:60:16:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:41:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=37133867fb88c9143a1a1d9d2dc795981d4c7994ea8c6b1128882cccbbfc925f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:02:0b:65:8b:d6:59:7a:2d:0c:79:38:df: 80:9c:67:75:07:db:8a:c7:29:38:97:69:0e:7a:e3: ec:15:68:1c:c3:03:d6:6b:02:de:e7:4a:7e:e8:19: 93:a3:8c:ce:ac:ae:cb:72:c5:34:7b:47:77:8c:da: b6:b0:05:ed:11:9f:96:1e:20:ba:b2:37:21:ad:3e: eb:a1:c8:6e:96:e4:da:af:47:b3:a1:86:ad:06:72: aa:a7:52:c0:8d:90:ed:fc:64:06:43:86:47:9c:d7: cc:de:3b:a7:5f:ce:17:ef:2e:db:01:e9:08:cb:fb: 04:80:d1:43:7a:ba:23:40:5f:4e:ee:85:83:9f:a4: 1a:cd:32:e2:73:97:b2:40:d5:ae:e0:05:5b:1c:99: 53:ed:21:19:8f:26:8f:80:46:bc:ce:b7:32:af:5c: 56:fe:8a:54:8b:ab:71:3c:57:fc:4e:bf:57:fe:5f: 1d:b0:18:3b:53:e3:4f:e9:b5:3c:8c:6c:13:90:77: d9:12:cc:e9:21:bc:b4:c4:4f:3e:ff:38:46:b2:e0: 36:20:fa:38:c5:97:b4:2a:41:2f:cc:d1:24:7e:b5: d7:5c:3e:2e:ed:b7:5c:c4:62:6f:e0:be:58:72:a5: 7a:b8:ec:3f:04:7b:2d:d1:2b:87:4d:7a:44:cb:08: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:02:96:66:30:96:8E:69:CE:43:02:25:13:15:7A:91:F1:17:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2080::/48 Signature Algorithm: sha256WithRSAEncryption 91:04:c8:63:e5:02:c5:3d:d4:23:eb:e9:7e:12:cb:ba:98:79: 04:5c:aa:f5:93:0f:e1:52:9a:f9:07:5f:e5:4b:ef:b4:35:c7: de:90:8e:db:64:d6:36:f4:46:06:0e:aa:1e:1e:bf:fa:95:c6: 3b:7f:e2:46:1d:cb:18:d8:25:a4:7d:5a:e3:d7:12:cc:48:c7: 45:2b:a7:fa:c3:db:37:5b:c2:9a:5a:c4:29:25:7f:9a:51:66: 34:cb:43:32:92:ca:39:36:4b:21:0a:7c:0e:88:74:68:67:43: 84:47:68:18:91:81:56:d2:fb:be:08:46:30:ae:8d:56:b7:62: 80:15:93:83:54:fa:56:74:f2:d3:d2:34:3a:5e:b6:96:67:2e: ab:53:53:f0:26:ba:d5:27:ed:27:4c:bb:82:fb:f9:20:58:ea: bc:25:2b:e4:52:1b:5b:08:cf:42:6d:8e:f7:c5:7b:da:94:fc: 24:05:1c:ac:12:d9:12:c3:5d:ba:9b:15:cd:5b:bf:5f:65:e6: 37:ae:61:5f:af:3e:90:48:2d:b1:6b:80:b8:2d:9c:8d:7b:25: dd:2c:53:f0:39:c3:62:ca:49:3e:81:c5:25:78:8a:6c:f0:4d: 2b:9b:5f:10:75:67:3a:a1:c8:3a:05:cb:74:1b:93:cb:2c:56: 43:08:58:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJIDXyZHjdsz0RbolkciYeGAWTxswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNDEyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMzcxMzM4NjdmYjg4YzkxNDNhMWEx ZDlkMmRjNzk1OTgxZDRjNzk5NGVhOGM2YjExMjg4ODJjY2NiYmZjOTI1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbQCC2WL1ll6LQx5ON+AnGd1B9uK xyk4l2kOeuPsFWgcwwPWawLe50p+6BmTo4zOrK7LcsU0e0d3jNq2sAXtEZ+WHiC6 sjchrT7rochuluTar0ezoYatBnKqp1LAjZDt/GQGQ4ZHnNfM3junX84X7y7bAekI y/sEgNFDerojQF9O7oWDn6QazTLic5eyQNWu4AVbHJlT7SEZjyaPgEa8zrcyr1xW /opUi6txPFf8Tr9X/l8dsBg7U+NP6bU8jGwTkHfZEszpIby0xE8+/zhGsuA2IPo4 xZe0KkEvzNEkfrXXXD4u7bdcxGJv4L5YcqV6uOw/BHst0SuHTXpEywhFxwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO+NApZmMJaOac5DAiUTFXqR8ReOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFhYWY2MzI4LTA4ZGUtNDczNS04ZDcxLTJjZjZiNTMxMDlkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACCAMA0GCSqGSIb3DQEBCwUAA4IBAQCRBMhj5QLFPdQj6+l+ Esu6mHkEXKr1kw/hUpr5B1/lS++0NcfekI7bZNY29EYGDqoeHr/6lcY7f+JGHcsY 2CWkfVrj1xLMSMdFK6f6w9s3W8KaWsQpJX+aUWY0y0Mykso5NkshCnwOiHRoZ0OE R2gYkYFW0vu+CEYwro1Wt2KAFZODVPpWdPLT0jQ6XraWZy6rU1PwJrrVJ+0nTLuC +/kgWOq8JSvkUhtbCM9CbY73xXvalPwkBRysEtkSw126mxXNW79fZeY3rmFfrz6Q SC2xa4C4LZyNeyXdLFPwOcNiykk+gcUleIps8E0rm18QdWc6ocg6Bct0G5PLLFZD CFhb -----END CERTIFICATE-----Generated at Thu Apr 17 18:19:24 2025 by rpki-client