$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e80caea-8844-429b-9344-5e99f4990e79.roa File: 1e80caea-8844-429b-9344-5e99f4990e79.roa (raw, json) Hash identifier: gZiNBM7r89nInMBujC9g6Vx828eZSFbfKi4u05ho2m4= Subject key identifier: BF:51:74:08:53:26:74:2B:EF:A2:BB:C3:81:FB:10:C2:21:14:CC:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A383B4794573A0C08FE9548E11A76C6CE7F74BA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e80caea-8844-429b-9344-5e99f4990e79.roa Signing time: Tue 25 Mar 2025 00:50:56 +0000 ROA not before: Tue 25 Mar 2025 00:50:56 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:38:3b:47:94:57:3a:0c:08:fe:95:48:e1:1a:76:c6:ce:7f:74:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:50:56 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1a57f1b6377799d67200da4cd2afc1e9e3166012a55aeb49995ac5a2a62a06ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:0a:f0:ae:05:ee:76:1d:26:57:2e:4c:23: d5:aa:97:96:61:16:45:7c:b1:fb:ce:ed:3e:9d:d1: e0:91:b0:73:b9:cd:04:a0:ed:45:0d:41:a2:9e:6f: 9b:71:bd:a3:e0:c0:b9:c0:19:d8:c2:17:67:88:45: 1e:4e:a1:a9:ac:92:3e:ad:af:80:d4:5b:c3:10:c4: 01:8e:4c:ab:2f:07:43:32:c6:f9:24:dc:aa:ee:20: cf:56:54:3c:27:75:5d:38:cc:5c:06:7b:dc:10:9e: c0:95:ce:9a:43:d1:f0:0c:46:91:d5:98:0b:c6:71: 91:11:4d:6c:b8:81:66:e9:f4:9a:cb:a5:a6:dd:26: 5c:97:09:ea:9c:2e:52:42:35:a9:6a:7b:b0:78:82: c3:f4:7c:06:88:2a:6e:c8:69:56:4b:60:e5:46:04: d8:e8:a6:5f:ea:00:36:fe:86:9d:21:5a:3f:f8:d9: 19:58:55:40:c9:c8:d3:8f:7b:5e:5c:7d:3b:a7:06: 52:ce:43:96:43:93:a5:c8:ac:d8:94:ee:63:2b:05: 6f:32:00:62:bd:8e:16:70:0f:fc:d9:48:ee:80:5b: eb:73:63:85:05:e1:b8:8d:8f:1e:20:f6:e3:d3:17: f1:e2:a7:37:82:6e:a7:57:c9:43:ee:97:b6:75:f2: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:74:08:53:26:74:2B:EF:A2:BB:C3:81:FB:10:C2:21:14:CC:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e80caea-8844-429b-9344-5e99f4990e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4800::/40 Signature Algorithm: sha256WithRSAEncryption 12:fa:f0:5f:e0:80:f8:98:d2:57:aa:0d:f7:4d:e0:06:c9:d0: f7:d5:f0:5a:80:78:23:85:0b:51:3f:61:5d:70:94:b3:2f:03: 09:90:c9:bb:6c:38:45:21:99:ad:15:6e:03:37:c8:40:7e:21: 52:c6:15:a3:72:8a:52:51:35:b3:e8:11:0b:09:8e:40:12:32: 7f:b1:18:b3:b0:4e:c5:72:a3:64:2c:07:68:25:da:96:bc:7f: ea:9f:32:11:ff:b1:4d:d2:34:c9:48:0f:1b:a6:08:7a:78:3d: 01:cc:81:95:3e:52:9d:67:f7:0d:74:74:d1:ae:69:47:88:e4: e6:34:4c:24:f9:c8:d8:97:d7:91:a5:e0:1a:c5:b3:b3:0a:43: f2:26:ae:ec:ee:45:43:4e:63:17:df:44:1f:f2:f4:3c:26:31: fa:fa:61:0d:43:7b:d4:b9:9c:3f:f2:50:d6:36:94:27:0d:de: b3:62:3a:c4:93:20:8e:f9:46:50:e9:5b:f8:55:7d:3f:ca:ec: a8:d2:b8:45:36:a6:e8:60:0f:89:dc:82:85:97:c5:6c:d9:06: 8b:cd:29:ef:df:ca:9d:47:fd:3c:90:c7:fd:1b:d3:e5:32:8a: b0:e3:23:9a:33:ba:6c:27:3e:15:cb:9d:c8:90:97:d6:53:49: 76:6c:7e:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKjg7R5RXOgwI/pVI4Rp2xs5/dLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTA1NloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWE1N2YxYjYzNzc3OTlkNjcyMDBk YTRjZDJhZmMxZTllMzE2NjAxMmE1NWFlYjQ5OTk1YWM1YTJhNjJhMDZiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSIK8K4F7nYdJlcuTCPVqpeWYRZF fLH7zu0+ndHgkbBzuc0EoO1FDUGinm+bcb2j4MC5wBnYwhdniEUeTqGprJI+ra+A 1FvDEMQBjkyrLwdDMsb5JNyq7iDPVlQ8J3VdOMxcBnvcEJ7Alc6aQ9HwDEaR1ZgL xnGREU1suIFm6fSay6Wm3SZclwnqnC5SQjWpanuweILD9HwGiCpuyGlWS2DlRgTY 6KZf6gA2/oadIVo/+NkZWFVAycjTj3teXH07pwZSzkOWQ5OlyKzYlO5jKwVvMgBi vY4WcA/82UjugFvrc2OFBeG4jY8eIPbj0xfx4qc3gm6nV8lD7pe2dfKS9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL9RdAhTJnQr76K7w4H7EMIhFMzzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlODBjYWVhLTg4NDQtNDI5Yi05MzQ0LTVlOTlmNDk5MGU3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOEgwDQYJKoZIhvcNAQELBQADggEBABL68F/ggPiY0leqDfdN 4AbJ0PfV8FqAeCOFC1E/YV1wlLMvAwmQybtsOEUhma0VbgM3yEB+IVLGFaNyilJR NbPoEQsJjkASMn+xGLOwTsVyo2QsB2gl2pa8f+qfMhH/sU3SNMlIDxumCHp4PQHM gZU+Up1n9w10dNGuaUeI5OY0TCT5yNiX15Gl4BrFs7MKQ/ImruzuRUNOYxffRB/y 9DwmMfr6YQ1De9S5nD/yUNY2lCcN3rNiOsSTII75RlDpW/hVfT/K7KjSuEU2puhg D4ncgoWXxWzZBovNKe/fyp1H/TyQx/0b0+UyirDjI5ozumwnPhXLnciQl9ZTSXZs fjg= -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:50 2025 by rpki-client