$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa File: 27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa (raw, json) Hash identifier: 0JwdTUUX35EXaA8dqAej5Ox398f8Xuup686VEXYwLzQ= Subject key identifier: AB:9E:94:AB:03:95:48:E0:3D:49:8D:D7:DF:49:02:7D:74:90:00:2D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D3528C1EA88A8F561784180FDB766F7D2E14711 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa Signing time: Tue 25 Mar 2025 15:00:16 +0000 ROA not before: Tue 25 Mar 2025 15:00:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:35:28:c1:ea:88:a8:f5:61:78:41:80:fd:b7:66:f7:d2:e1:47:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:00:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=e7048b4c1dbd8ee598d8bb0fd963f71c670d8462caa9d205164bc334d20fbc3f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:c4:82:3d:61:6b:72:ac:06:6a:14:5f:42: 92:44:3c:5c:1c:24:85:48:aa:3e:6b:18:5c:db:5e: 47:3e:3b:f4:85:5b:ee:49:47:41:b4:86:51:2c:72: 7b:4b:c6:4d:93:6e:2f:00:04:e2:be:eb:f9:20:67: 8c:63:81:f5:bb:04:a1:fe:54:b1:08:29:a1:5d:59: a1:62:b9:51:79:8a:87:a4:41:dc:0b:d3:d0:19:44: 0b:2b:a1:68:3f:6b:7c:0c:1a:14:c3:cf:c5:4b:94: 7c:98:16:7e:4b:f6:9a:57:4c:a8:eb:10:e2:a3:be: a2:84:22:0e:2c:b6:a5:6e:1a:31:70:e9:34:d7:4a: 46:6e:26:c0:1c:0e:dd:ce:25:1e:16:e9:2f:ac:2b: 5e:90:5b:8f:52:05:10:25:e7:e7:0a:e1:a3:79:66: c5:19:f4:67:6e:08:5d:54:be:a2:f8:b0:1b:84:d3: 31:b0:c7:35:b4:0f:53:60:da:ba:db:34:e4:a1:0a: 16:b4:45:d3:eb:88:c9:0a:39:86:08:75:83:28:44: e8:dc:fa:24:1f:4a:a9:67:11:a2:0f:23:39:2a:86: 65:83:88:29:26:60:5a:f0:61:d3:4f:6e:81:e5:78: b3:a9:80:b4:7d:a0:1d:a1:6b:bd:d6:f7:ef:77:e4: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9E:94:AB:03:95:48:E0:3D:49:8D:D7:DF:49:02:7D:74:90:00:2D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:a080::/46 Signature Algorithm: sha256WithRSAEncryption 7f:ae:45:70:4a:18:d8:76:54:3b:29:ea:6d:fc:1b:66:61:44: 55:a9:77:35:d4:a9:60:c0:e4:7c:c1:a1:fa:80:bd:0f:91:f8: da:20:0a:82:ac:ce:94:9f:75:ac:8f:9e:40:54:db:44:c3:09: 67:44:40:16:1b:7e:e5:74:fd:cc:a0:e5:59:b3:47:a9:a6:5d: 36:be:df:04:ba:ea:47:5e:47:e3:bd:4c:95:c4:6e:f2:c9:23: 8c:d3:65:58:af:e7:49:0a:9b:62:84:33:08:56:6a:b0:d7:52: 62:a1:0d:58:d3:79:03:88:2c:e6:f2:18:ce:d1:eb:00:61:ec: 0c:74:f9:29:36:d9:24:2b:84:9e:dd:b1:b5:cb:d7:d8:c5:eb: 72:c4:07:01:be:2c:a3:ca:19:70:e0:70:dc:67:87:bc:ec:8f: 6e:0b:24:5a:4c:e1:7d:c8:ce:e3:00:61:27:f0:a4:f3:2b:36: 48:c6:50:54:ea:c0:b5:a6:ad:21:5e:00:5b:1c:09:7c:76:f6: 51:00:af:1c:c9:c4:c6:5b:06:6b:af:15:ee:79:39:5a:6b:2c: ee:81:41:a9:80:28:06:cc:0b:95:94:fb:55:e3:7a:93:0c:81: d3:8f:61:14:d9:4b:4d:53:e6:6f:ca:be:a6:e2:56:22:bc:b8: 5a:76:fc:f4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULTUoweqIqPVheEGA/bdm99LhRxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDAxNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZTcwNDhiNGMxZGJkOGVlNTk4ZDhi YjBmZDk2M2Y3MWM2NzBkODQ2MmNhYTlkMjA1MTY0YmMzMzRkMjBmYmMzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr53Egj1ha3KsBmoUX0KSRDxcHCSF SKo+axhc215HPjv0hVvuSUdBtIZRLHJ7S8ZNk24vAATivuv5IGeMY4H1uwSh/lSx CCmhXVmhYrlReYqHpEHcC9PQGUQLK6FoP2t8DBoUw8/FS5R8mBZ+S/aaV0yo6xDi o76ihCIOLLalbhoxcOk010pGbibAHA7dziUeFukvrCtekFuPUgUQJefnCuGjeWbF GfRnbghdVL6i+LAbhNMxsMc1tA9TYNq62zTkoQoWtEXT64jJCjmGCHWDKETo3Pok H0qpZxGiDyM5KoZlg4gpJmBa8GHTT26B5XizqYC0faAdoWu91vfvd+QdYQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKuelKsDlUjgPUmN199JAn10kAAtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3YTIxOTE0LWVmNzgtNDFjZS1iMzlhLWMzNGZhYzNmNGZkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaaCAMA0GCSqGSIb3DQEBCwUAA4IBAQB/rkVwShjYdlQ7Kept /BtmYURVqXc11KlgwOR8waH6gL0PkfjaIAqCrM6Un3Wsj55AVNtEwwlnREAWG37l dP3MoOVZs0eppl02vt8EuupHXkfjvUyVxG7yySOM02VYr+dJCptihDMIVmqw11Ji oQ1Y03kDiCzm8hjO0esAYewMdPkpNtkkK4Se3bG1y9fYxetyxAcBviyjyhlw4HDc Z4e87I9uCyRaTOF9yM7jAGEn8KTzKzZIxlBU6sC1pq0hXgBbHAl8dvZRAK8cycTG WwZrrxXueTlaayzugUGpgCgGzAuVlPtV43qTDIHTj2EU2UtNU+Zvyr6m4lYivLha dvz0 -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:08 2025 by rpki-client