$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa File: 2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa (raw, json) Hash identifier: 82GieScKldKeYZujGWUNMIlHIOVXh1+unZRMTGKaU7g= Subject key identifier: A0:FD:0F:C5:C2:AF:1A:20:2F:09:E2:58:49:82:6B:80:F9:A5:D7:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6529A3D026F8FFBEB9A736A0209047272AA9769E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa Signing time: Tue 25 Mar 2025 16:50:39 +0000 ROA not before: Tue 25 Mar 2025 16:50:39 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:29:a3:d0:26:f8:ff:be:b9:a7:36:a0:20:90:47:27:2a:a9:76:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:39 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=f779133e0c09d8f3e4bfbafee07cb23e42337fe572cab6ca720ce7b33424b41f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:a7:b7:33:38:34:ea:38:0f:74:d2:42:56: c9:40:b6:94:fb:d6:a5:c2:52:88:e0:21:d1:12:0d: ef:75:46:16:b2:bc:1d:ff:e1:f8:c2:6b:39:ba:e4: 44:e8:14:c4:b4:cf:65:1b:b7:a2:50:40:ea:09:c7: 8f:dd:d0:ce:1b:80:69:25:9f:06:e5:e6:a0:bc:e4: 3a:23:82:0c:24:64:4a:f7:21:f9:67:83:0c:7b:3a: e6:99:fc:cb:b7:72:c4:74:4c:22:61:06:09:46:fc: 39:08:e8:52:01:71:58:6b:61:be:6b:3c:98:a5:ae: 57:ff:39:a6:d0:d1:c4:e5:50:81:f8:4c:53:76:08: f1:2f:a1:15:19:4f:c4:3c:6b:17:86:67:31:08:3e: 10:f0:ad:e7:fc:ed:f4:e5:c6:13:9e:d8:1c:a3:3e: b2:3c:5a:c5:2c:23:6e:10:85:59:e8:01:11:5e:d6: f1:88:93:bf:19:a1:42:29:eb:4c:b9:35:58:c3:0d: cc:be:29:ee:d2:f3:60:e0:66:f7:cd:72:f2:7b:34: a7:d2:01:45:dd:4c:af:48:78:81:64:12:47:95:31: fa:2a:97:8d:a1:55:fd:79:11:f6:2e:16:82:67:b0: a1:e3:c5:84:d2:8b:50:64:12:26:dd:d5:fb:7a:0f: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FD:0F:C5:C2:AF:1A:20:2F:09:E2:58:49:82:6B:80:F9:A5:D7:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:800::/38 Signature Algorithm: sha256WithRSAEncryption 94:e7:ad:e1:97:16:8c:a2:ec:2a:36:8c:63:60:0d:a9:91:3f: b7:be:52:80:d0:cc:86:de:3b:8c:ff:f3:49:ae:c9:ca:eb:6e: 8e:63:5d:d4:39:71:f6:6c:ae:ba:75:ee:ea:c6:8f:c0:d1:b2: b1:2f:7f:fd:69:31:de:51:9e:c0:f0:76:31:41:33:1c:3d:7f: 82:82:f1:7d:76:75:b3:4e:f4:23:e8:68:65:7d:2f:02:ea:2f: 2b:7d:eb:3f:81:da:52:ef:3b:35:ab:ec:67:f6:76:83:9d:6e: 2f:ac:36:72:32:f0:fa:44:9d:07:d0:4e:1c:8c:b1:c8:f5:a8: 9c:82:02:74:2a:32:02:42:f4:00:f1:af:54:38:37:9c:14:28: c9:58:a9:b3:0e:ba:40:f5:7f:4b:f2:93:8a:8c:b1:0f:d3:94: 3b:57:62:ec:ab:b0:df:38:a0:47:76:a6:f6:ce:32:5d:33:d5: ce:d1:69:e1:2c:e6:29:49:1d:ca:eb:8c:c2:68:f2:70:48:8f: 82:4a:d3:c1:35:c6:09:ee:ba:7f:2f:42:3d:40:c8:8c:95:f0: 73:30:69:61:64:15:0b:f2:26:b1:22:20:2c:f2:48:4c:76:d2: 4b:cf:ad:a1:da:0f:2f:b9:9e:11:e6:3c:b5:fa:a0:21:80:a2: e3:e1:8c:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZSmj0Cb4/765pzagIJBHJyqpdp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTAzOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjc3OTEzM2UwYzA5ZDhmM2U0YmZi YWZlZTA3Y2IyM2U0MjMzN2ZlNTcyY2FiNmNhNzIwY2U3YjMzNDI0YjQxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRqntzM4NOo4D3TSQlbJQLaU+9al wlKI4CHREg3vdUYWsrwd/+H4wms5uuRE6BTEtM9lG7eiUEDqCceP3dDOG4BpJZ8G 5eagvOQ6I4IMJGRK9yH5Z4MMezrmmfzLt3LEdEwiYQYJRvw5COhSAXFYa2G+azyY pa5X/zmm0NHE5VCB+ExTdgjxL6EVGU/EPGsXhmcxCD4Q8K3n/O305cYTntgcoz6y PFrFLCNuEIVZ6AERXtbxiJO/GaFCKetMuTVYww3Mvinu0vNg4Gb3zXLyezSn0gFF 3UyvSHiBZBJHlTH6KpeNoVX9eRH2LhaCZ7Ch48WE0otQZBIm3dX7eg83pQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKD9D8XCrxogLwniWEmCa4D5pddbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyMTg2NDRmLWJjMTEtNDkyZC1iOWE5LThkMThkNWJlYmQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQgwDQYJKoZIhvcNAQELBQADggEBAJTnreGXFoyi7Co2jGNg DamRP7e+UoDQzIbeO4z/80muycrrbo5jXdQ5cfZsrrp17urGj8DRsrEvf/1pMd5R nsDwdjFBMxw9f4KC8X12dbNO9CPoaGV9LwLqLyt96z+B2lLvOzWr7Gf2doOdbi+s NnIy8PpEnQfQThyMscj1qJyCAnQqMgJC9ADxr1Q4N5wUKMlYqbMOukD1f0vyk4qM sQ/TlDtXYuyrsN84oEd2pvbOMl0z1c7RaeEs5ilJHcrrjMJo8nBIj4JK08E1xgnu un8vQj1AyIyV8HMwaWFkFQvyJrEiICzySEx20kvPraHaDy+5nhHmPLX6oCGAouPh jDs= -----END CERTIFICATE-----Generated at Thu Apr 17 17:41:18 2025 by rpki-client