$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1cffefdd-d289-4367-a9c5-7734875b73b3.roa File: 1cffefdd-d289-4367-a9c5-7734875b73b3.roa (raw, json) Hash identifier: R8+L/DJT9CuGHVL66/mRj1bUUlvjUnVukF0hGkBtaV8= Subject key identifier: 17:F1:59:83:F1:1B:E0:DA:8E:96:4D:73:2F:4D:0A:F3:99:24:45:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F19D8F8B72CBBEBB0DA5FE17FA5125018BB1017 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1cffefdd-d289-4367-a9c5-7734875b73b3.roa Signing time: Tue 25 Mar 2025 00:40:44 +0000 ROA not before: Tue 25 Mar 2025 00:40:44 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:19:d8:f8:b7:2c:bb:eb:b0:da:5f:e1:7f:a5:12:50:18:bb:10:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:40:44 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=cef3b28ae53efac455a3c3890cb5cf53f64e689d97fa413c70b7fb4be71cfdf5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:82:f4:5f:f6:79:87:01:f4:d4:67:5c:89: 76:49:3b:52:f1:bb:f2:b4:de:19:82:54:eb:f0:25: e3:4f:70:6d:eb:bb:97:95:08:9f:35:fb:16:d6:c5: 80:45:94:d4:08:bd:c5:b7:e4:69:41:c7:08:af:05: 7f:1c:4c:48:bb:a4:ef:a4:07:2b:fe:d3:f0:fc:45: 16:01:71:a6:65:05:47:00:ae:4d:0f:4d:3f:5c:61: 88:c9:32:ec:c4:18:62:6c:48:19:03:73:31:f8:58: d0:b6:01:76:8c:ae:08:d2:6f:82:38:53:84:b8:5f: 6c:81:7f:5b:e8:17:51:52:90:87:95:93:f4:78:99: f2:c7:33:16:88:bc:50:6b:83:e5:58:50:34:6b:cf: 3b:e2:ff:18:fd:0a:a3:e0:7d:47:2b:c2:07:df:3c: 07:ce:3c:a3:5e:69:9e:67:5f:df:7f:87:f1:32:04: 16:f8:8c:da:99:c0:bd:7c:9a:b3:1e:97:83:96:ee: df:13:98:d5:da:e2:2f:5c:40:9b:27:e0:00:09:f9: 8c:58:92:f7:41:2d:07:02:17:2b:1c:8b:d0:ae:8c: 85:d9:ef:6d:e6:11:44:38:f5:f6:c1:7f:a8:7f:12: 13:79:95:f0:db:78:f5:5c:42:65:ce:e2:fb:96:d4: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:59:83:F1:1B:E0:DA:8E:96:4D:73:2F:4D:0A:F3:99:24:45:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1cffefdd-d289-4367-a9c5-7734875b73b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 42:a8:9e:16:fb:04:9b:8b:af:8b:67:01:a6:c6:07:dd:d0:70: d4:77:2a:9c:eb:b3:13:24:a8:18:19:0f:fa:5e:75:0d:cf:d1: 74:a7:e0:06:02:80:69:f6:b9:86:06:f2:1e:bc:42:60:02:bf: b2:90:68:6d:56:3f:27:d9:8f:2a:e9:0b:2b:3a:23:1b:e0:36: eb:67:aa:3a:5f:bf:59:37:5e:1a:1a:2e:bf:63:cd:44:24:28: 8f:18:74:66:30:6e:90:91:96:34:e9:5f:1c:51:3d:21:c0:79: 95:a6:57:a4:af:da:06:b6:8f:6e:46:49:9a:5f:52:33:1b:bb: c2:6e:91:c4:f8:01:5d:ba:62:43:a8:e6:87:5b:60:ee:cd:6f: 75:5a:8e:72:25:60:1a:44:e8:89:83:83:a9:74:95:4e:4a:f3: 5f:73:9b:1d:a5:12:4a:cd:ad:db:16:8f:5c:af:cb:87:1b:f6: 09:fd:ef:cb:41:7d:95:c2:60:af:60:2c:ea:8e:4e:19:8b:a8: 30:da:23:89:77:45:58:cd:c1:38:84:a2:75:3f:0b:b7:c5:69: 75:39:15:6c:23:be:7a:31:3c:df:25:2e:d8:3d:bf:1a:91:84: 7b:95:49:0a:b7:3d:6d:f3:39:82:bf:3c:9d:7c:e9:7e:6b:fb: 8f:5f:97:10 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHxnY+Lcsu+uw2l/hf6USUBi7EBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNDA0NFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAY2VmM2IyOGFlNTNlZmFjNDU1YTNj Mzg5MGNiNWNmNTNmNjRlNjg5ZDk3ZmE0MTNjNzBiN2ZiNGJlNzFjZmRmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH2C9F/2eYcB9NRnXIl2STtS8bvy tN4ZglTr8CXjT3Bt67uXlQifNfsW1sWARZTUCL3Ft+RpQccIrwV/HExIu6TvpAcr /tPw/EUWAXGmZQVHAK5ND00/XGGIyTLsxBhibEgZA3Mx+FjQtgF2jK4I0m+COFOE uF9sgX9b6BdRUpCHlZP0eJnyxzMWiLxQa4PlWFA0a8874v8Y/Qqj4H1HK8IH3zwH zjyjXmmeZ1/ff4fxMgQW+IzamcC9fJqzHpeDlu7fE5jV2uIvXECbJ+AACfmMWJL3 QS0HAhcrHIvQroyF2e9t5hFEOPX2wX+ofxITeZXw23j1XEJlzuL7ltRrNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBfxWYPxG+DajpZNcy9NCvOZJEWaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjZmZlZmRkLWQyODktNDM2Ny1hOWM1LTc3MzQ4NzViNzNiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9HDAMA0GCSqGSIb3DQEBCwUAA4IBAQBCqJ4W+wSbi6+LZwGm xgfd0HDUdyqc67MTJKgYGQ/6XnUNz9F0p+AGAoBp9rmGBvIevEJgAr+ykGhtVj8n 2Y8q6QsrOiMb4DbrZ6o6X79ZN14aGi6/Y81EJCiPGHRmMG6QkZY06V8cUT0hwHmV plekr9oGto9uRkmaX1IzG7vCbpHE+AFdumJDqOaHW2DuzW91Wo5yJWAaROiJg4Op dJVOSvNfc5sdpRJKza3bFo9cr8uHG/YJ/e/LQX2VwmCvYCzqjk4Zi6gw2iOJd0VY zcE4hKJ1Pwu3xWl1ORVsI756MTzfJS7YPb8akYR7lUkKtz1t8zmCvzydfOl+a/uP X5cQ -----END CERTIFICATE-----Generated at Thu Apr 17 17:48:19 2025 by rpki-client