$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa File: 1b56d794-06a2-4803-b98b-e9a84d35ff73.roa (raw, json) Hash identifier: XegnFn4Z8xvp/sGPeNfBf/3nGINeoxiHR2sdVWCE8/g= Subject key identifier: 3D:7B:C6:E9:7A:45:65:74:75:24:A7:4C:48:F2:19:99:42:BB:8D:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4246FE2B63BAC4B99567CA81147C131436D2F4CC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa Signing time: Tue 25 Mar 2025 00:51:26 +0000 ROA not before: Tue 25 Mar 2025 00:51:26 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:46:fe:2b:63:ba:c4:b9:95:67:ca:81:14:7c:13:14:36:d2:f4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:51:26 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=750d2688e67bb271a60b6f7d8bce1a0eb536f8a2ab2ce7f78cbada72617afcbb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:df:35:11:ce:3e:4b:9d:6a:a0:8e:96:e6: 41:48:f8:ed:c1:92:3b:7a:4b:ad:b4:cf:a5:8b:8f: 89:34:1d:46:31:c4:8d:61:ee:28:5c:d7:34:6b:55: 2e:17:21:74:54:19:24:ac:d3:ac:cf:d7:c1:eb:00: f5:f7:b1:c9:44:66:18:33:29:2d:4f:eb:99:8f:a5: b9:4c:92:d3:2d:ef:07:fd:94:0c:79:c4:c1:24:8e: 5a:83:df:8d:2e:ec:f7:c2:1e:4b:b2:50:7f:bb:e0: 9c:89:d1:ef:ab:83:b1:68:34:9a:2f:5e:20:36:f1: 76:ec:b3:98:a2:76:0f:0d:dd:06:a7:0b:2e:98:81: 45:23:8d:fb:c2:ed:b9:88:5d:78:86:3a:01:42:aa: fe:b4:d6:e0:22:9e:50:d9:68:e7:7d:40:80:78:dd: 8b:4a:fe:53:5b:e1:bb:e2:46:7f:47:38:bd:6a:c7: a8:96:6e:18:29:c4:b8:7c:fd:d9:82:c0:27:dd:d6: dd:be:25:5e:68:27:58:07:df:9f:25:d2:9d:d6:03: 06:87:d5:42:8b:51:db:3e:25:43:68:da:d8:92:d0: 51:48:27:4a:e0:b7:0a:9c:4d:10:9f:10:f4:43:df: 4f:c5:09:7f:55:f7:f0:b8:21:f6:9e:a8:b8:61:6d: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7B:C6:E9:7A:45:65:74:75:24:A7:4C:48:F2:19:99:42:BB:8D:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8840::/48 Signature Algorithm: sha256WithRSAEncryption 87:21:91:15:e9:ed:8a:b4:7a:29:c1:7e:50:73:9d:2f:c3:03: 0b:1d:4b:1d:18:5b:1b:eb:b3:05:34:06:f6:53:f7:45:99:bb: 2f:15:5c:01:10:00:62:14:a0:e3:fe:de:64:a4:3e:e5:c9:35: 04:55:b4:1d:5c:6f:f0:2e:95:8b:a0:69:d0:43:e1:2b:ee:36: c5:fd:d7:18:78:c5:5a:b9:c5:67:83:cb:c7:3f:85:35:7d:2b: fa:68:a0:0e:e2:6b:51:68:b9:a4:43:b3:c5:d4:62:95:10:39: 9e:34:a0:55:79:7c:3b:4b:38:0a:e0:31:f9:08:5b:24:97:a3: ef:b6:d2:e5:a7:43:c0:a0:07:0d:48:97:f4:57:53:65:d1:b6: 92:45:9e:42:6c:26:eb:07:27:00:21:6c:f0:cc:04:59:d9:50: 4c:62:21:3c:d0:d7:98:de:df:15:5e:84:f8:bf:20:39:99:04: 90:cb:76:67:6b:85:33:cb:cb:3f:8a:99:d1:2c:81:c7:a6:8a: 6c:d4:dc:b6:32:e8:f4:5d:c5:2e:8f:09:cb:b6:cb:94:ac:c7: b5:57:41:06:4b:b5:ee:e8:2f:06:6e:c4:37:05:9b:45:bd:19: 4c:51:9e:c5:8b:ea:7f:1d:6b:a1:87:f0:f2:65:2f:c7:81:2b: 27:c4:95:7f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQkb+K2O6xLmVZ8qBFHwTFDbS9MwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTEyNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANzUwZDI2ODhlNjdiYjI3MWE2MGI2 ZjdkOGJjZTFhMGViNTM2ZjhhMmFiMmNlN2Y3OGNiYWRhNzI2MTdhZmNiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHbfNRHOPkudaqCOluZBSPjtwZI7 ekuttM+li4+JNB1GMcSNYe4oXNc0a1UuFyF0VBkkrNOsz9fB6wD197HJRGYYMykt T+uZj6W5TJLTLe8H/ZQMecTBJI5ag9+NLuz3wh5LslB/u+CcidHvq4OxaDSaL14g NvF27LOYonYPDd0GpwsumIFFI437wu25iF14hjoBQqr+tNbgIp5Q2WjnfUCAeN2L Sv5TW+G74kZ/Rzi9aseolm4YKcS4fP3ZgsAn3dbdviVeaCdYB9+fJdKd1gMGh9VC i1HbPiVDaNrYktBRSCdK4LcKnE0QnxD0Q99PxQl/VffwuCH2nqi4YW3WlQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD17xul6RWV0dSSnTEjyGZlCu40HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiNTZkNzk0LTA2YTItNDgwMy1iOThiLWU5YTg0ZDM1ZmY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4hAMA0GCSqGSIb3DQEBCwUAA4IBAQCHIZEV6e2KtHopwX5Q c50vwwMLHUsdGFsb67MFNAb2U/dFmbsvFVwBEABiFKDj/t5kpD7lyTUEVbQdXG/w LpWLoGnQQ+Er7jbF/dcYeMVaucVng8vHP4U1fSv6aKAO4mtRaLmkQ7PF1GKVEDme NKBVeXw7SzgK4DH5CFskl6PvttLlp0PAoAcNSJf0V1Nl0baSRZ5CbCbrBycAIWzw zARZ2VBMYiE80NeY3t8VXoT4vyA5mQSQy3Zna4Uzy8s/ipnRLIHHpops1Ny2Muj0 XcUujwnLtsuUrMe1V0EGS7Xu6C8GbsQ3BZtFvRlMUZ7Fi+p/HWuhh/DyZS/HgSsn xJV/ -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:44 2025 by rpki-client