$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa File: 1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa (raw, json) Hash identifier: gRIuy2oDLfyN7amFbJB58kq1gqYXrhIGzs8OADQel+g= Subject key identifier: F9:9D:80:29:FA:AF:F6:8E:86:BE:A8:84:19:E2:60:62:BA:61:A7:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1734475758C9D27C39BFA18A346B0A61058F5BDA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa Signing time: Tue 25 Mar 2025 00:40:21 +0000 ROA not before: Tue 25 Mar 2025 00:40:21 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:47:57:58:c9:d2:7c:39:bf:a1:8a:34:6b:0a:61:05:8f:5b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:40:21 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=c2ac9641900daa33f6f6be1cdc40d314f17df5a53874a4f6a1960fd9744c20a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:dd:a6:9e:3a:91:73:ae:92:2a:ee:7f:31: 2e:a1:52:fd:37:30:09:d9:be:d8:0e:4d:4a:11:85: 97:b4:12:14:3a:f4:4d:98:84:f2:0b:5a:03:fd:90: 8e:29:d1:49:9d:67:2f:cf:42:64:5f:d9:7e:b4:3e: 60:43:65:9b:b2:35:65:a2:b8:ca:48:e9:58:f7:cf: 05:30:91:bb:e7:23:cc:08:d2:d3:0e:d6:85:bf:8c: e8:2d:47:c9:95:5f:da:e4:e1:91:1c:69:57:38:c8: 20:37:47:bf:23:e6:91:c4:6b:37:ea:d0:02:91:6f: 1e:a5:18:8d:cf:2e:ce:e4:09:68:28:6f:e6:27:c1: 0e:a7:3b:f7:94:39:c9:ac:6a:e6:75:f9:f5:aa:b8: 22:6f:2e:c7:88:4f:6a:22:fc:69:fc:22:a7:04:e3: e0:71:d3:a3:9c:3e:cc:f4:da:1e:ca:5a:c5:07:85: 0b:52:45:4e:b3:c8:02:2b:35:ef:d6:c7:9f:96:7d: 3c:ad:c2:40:20:a8:71:1d:c1:a5:37:cc:f7:e3:8d: 2f:ed:5a:6a:6f:5a:3b:83:61:e4:7f:8e:8f:dc:25: 08:52:15:f3:1e:f6:e3:95:95:0a:c5:e5:f8:30:2e: 86:30:48:98:6c:4e:3a:85:bc:8a:6b:b9:13:98:62: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9D:80:29:FA:AF:F6:8E:86:BE:A8:84:19:E2:60:62:BA:61:A7:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c880::/48 Signature Algorithm: sha256WithRSAEncryption 37:a5:ba:7c:e0:6c:3a:3f:94:8e:73:83:b5:19:a9:cb:a4:7a: 3c:5a:cb:3c:81:dc:f9:e4:9c:d0:e6:aa:b0:6d:77:97:34:25: f5:a4:94:39:83:5e:29:69:37:b9:65:36:a5:4e:22:11:36:93: e1:3f:52:59:9f:86:5c:c0:e3:0f:50:1e:e9:72:ac:b9:d8:1d: b2:aa:29:fc:3d:83:cb:3a:8b:d4:61:81:87:e8:e8:0c:c3:84: 00:74:83:e9:7a:e9:7f:55:8d:ec:74:a8:3a:a1:59:bc:02:bc: 69:58:d7:15:c8:1e:20:c3:82:db:1a:07:84:4d:d8:ec:25:2b: a1:aa:6e:79:2f:be:3d:f2:ac:92:68:2a:2e:80:fd:37:60:15: b4:33:64:50:63:40:a0:e6:f2:88:5c:6d:74:a9:89:9d:21:a8: 14:cf:b0:9a:6b:33:84:00:34:1f:7f:65:af:04:12:f7:19:2d: 34:16:84:ba:9c:4b:6a:12:bc:95:51:85:91:a2:6f:15:15:28: 41:dc:34:10:24:bd:5f:33:2c:26:83:c1:11:c5:cc:df:7e:7c: a8:27:af:c5:7c:a6:60:e0:3f:f7:3f:d4:09:3b:eb:ad:6a:cb: 6d:96:0a:dd:94:39:2b:f9:07:9d:d4:7a:59:17:27:1f:87:d0: 91:57:32:55 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFzRHV1jJ0nw5v6GKNGsKYQWPW9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNDAyMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYzJhYzk2NDE5MDBkYWEzM2Y2ZjZi ZTFjZGM0MGQzMTRmMTdkZjVhNTM4NzRhNGY2YTE5NjBmZDk3NDRjMjBhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGbdpp46kXOukirufzEuoVL9NzAJ 2b7YDk1KEYWXtBIUOvRNmITyC1oD/ZCOKdFJnWcvz0JkX9l+tD5gQ2WbsjVlorjK SOlY988FMJG75yPMCNLTDtaFv4zoLUfJlV/a5OGRHGlXOMggN0e/I+aRxGs36tAC kW8epRiNzy7O5AloKG/mJ8EOpzv3lDnJrGrmdfn1qrgiby7HiE9qIvxp/CKnBOPg cdOjnD7M9NoeylrFB4ULUkVOs8gCKzXv1sefln08rcJAIKhxHcGlN8z3440v7Vpq b1o7g2Hkf46P3CUIUhXzHvbjlZUKxeX4MC6GMEiYbE46hbyKa7kTmGLsiQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPmdgCn6r/aOhr6ohBniYGK6YafOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjYTUyZDJmLTFhNzMtNGVhMS05YmI1LTZkOTgzMzE5MzA1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMiAMA0GCSqGSIb3DQEBCwUAA4IBAQA3pbp84Gw6P5SOc4O1 GanLpHo8Wss8gdz55JzQ5qqwbXeXNCX1pJQ5g14paTe5ZTalTiIRNpPhP1JZn4Zc wOMPUB7pcqy52B2yqin8PYPLOovUYYGH6OgMw4QAdIPpeul/VY3sdKg6oVm8Arxp WNcVyB4gw4LbGgeETdjsJSuhqm55L7498qySaCougP03YBW0M2RQY0Cg5vKIXG10 qYmdIagUz7CaazOEADQff2WvBBL3GS00FoS6nEtqEryVUYWRom8VFShB3DQQJL1f Mywmg8ERxczffnyoJ6/FfKZg4D/3P9QJO+utasttlgrdlDkr+Qed1HpZFycfh9CR VzJV -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:37 2025 by rpki-client