$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa File: 3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa (raw, json) Hash identifier: +L8AJqQ9vLonZO3aBUBcmLicz/LODmo1kCe/q9p5asA= Subject key identifier: EC:7F:1D:FE:5B:3D:FC:04:94:FB:4D:C1:40:CE:DC:D9:08:1E:46:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1432F9540772DFE9400D7B6F4CA6FD0446709CD7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa Signing time: Tue 25 Mar 2025 00:50:53 +0000 ROA not before: Tue 25 Mar 2025 00:50:53 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:32:f9:54:07:72:df:e9:40:0d:7b:6f:4c:a6:fd:04:46:70:9c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:50:53 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=b677fe3956a1294eef845c8120224df147834628a7891d91a45d0c6d8114cbc1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:ca:5a:af:55:81:61:6f:be:af:b8:d0:71: 3b:a3:23:c5:93:2e:96:e1:11:8f:bf:0d:9f:31:0b: 55:c5:1c:37:9f:64:f3:12:bb:8d:36:9b:3c:1a:a8: 32:82:08:a7:e4:8b:b3:4c:98:08:e5:2a:a4:59:04: 26:37:57:4a:c8:13:b6:33:86:77:b5:04:f3:fc:f7: bb:44:70:2e:86:79:f5:c6:0d:c7:37:91:b8:c1:be: 29:66:4f:06:d5:59:1e:ae:65:13:76:29:69:c2:e4: c7:8a:19:81:55:cd:a3:09:c1:42:be:ba:b5:a6:1f: 65:b6:47:dc:3a:73:5c:ab:98:40:5e:ae:50:83:73: 1a:3b:9b:5c:a2:4f:52:c1:14:26:0e:b4:f3:a4:c1: 1d:60:cd:de:d4:ea:57:32:d8:35:40:a0:03:25:8a: 8b:09:3c:d1:4c:dc:16:1e:49:f9:2f:40:f8:21:77: 66:f0:da:c5:86:e1:57:08:9c:8d:69:79:20:0d:9a: 5a:07:5a:9e:bc:6e:2c:53:9b:6f:c0:6a:cb:c1:d8: 04:0b:bd:5b:e7:43:b8:72:a7:12:46:76:8f:c8:ab: e9:6c:6f:fe:c9:5c:25:52:42:0c:37:0e:0c:db:06: 65:3f:ae:ac:6a:80:70:02:05:ec:95:3e:72:9e:51: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7F:1D:FE:5B:3D:FC:04:94:FB:4D:C1:40:CE:DC:D9:08:1E:46:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8000::/40 Signature Algorithm: sha256WithRSAEncryption a0:26:e5:6c:f7:d5:d0:45:8e:7d:3e:2c:80:df:b0:a6:d2:0c: c6:6f:8f:6f:ad:38:f4:9a:b7:b1:33:ec:6d:7a:8f:e8:7d:4e: 0d:eb:bb:61:c9:61:c1:a7:71:e0:45:7e:e9:6e:96:f5:0a:8a: 3c:4f:bb:54:25:79:c8:04:e7:89:d8:2f:55:b3:16:7b:6b:ba: ee:8f:10:23:d2:6a:d2:bb:37:70:91:61:91:41:20:83:61:79: 88:55:86:e5:94:9e:72:ae:ab:43:d8:f5:ed:9a:7b:2a:87:37: 75:bb:1c:a8:96:67:be:0d:6f:f1:af:6b:ba:34:ea:6e:55:37: b4:37:c0:e0:67:30:80:b9:f8:08:ac:d3:8f:d5:79:d7:df:19: 8f:c0:af:16:d8:64:f5:e1:7f:4d:a3:66:7b:06:75:87:e2:34: 48:c9:3a:d7:05:55:97:1e:27:0d:55:96:f8:63:ad:13:34:8e: ca:45:07:72:0b:f6:78:34:d8:c8:31:15:13:cc:3b:42:77:12: fc:8d:39:fc:cf:0a:8d:a9:cc:0c:80:1a:ff:56:61:7b:be:9f: ad:09:22:8e:09:27:76:22:32:df:8c:a7:b2:34:05:30:4f:3c: 16:83:3f:35:d2:72:4b:91:41:e6:0e:e4:6f:d0:fd:5c:1a:7a: 29:b9:d0:39 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFDL5VAdy3+lADXtvTKb9BEZwnNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTA1M1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYjY3N2ZlMzk1NmExMjk0ZWVmODQ1 YzgxMjAyMjRkZjE0NzgzNDYyOGE3ODkxZDkxYTQ1ZDBjNmQ4MTE0Y2JjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J7KWq9VgWFvvq+40HE7oyPFky6W 4RGPvw2fMQtVxRw3n2TzEruNNps8Gqgyggin5IuzTJgI5SqkWQQmN1dKyBO2M4Z3 tQTz/Pe7RHAuhnn1xg3HN5G4wb4pZk8G1VkermUTdilpwuTHihmBVc2jCcFCvrq1 ph9ltkfcOnNcq5hAXq5Qg3MaO5tcok9SwRQmDrTzpMEdYM3e1OpXMtg1QKADJYqL CTzRTNwWHkn5L0D4IXdm8NrFhuFXCJyNaXkgDZpaB1qevG4sU5tvwGrLwdgEC71b 50O4cqcSRnaPyKvpbG/+yVwlUkIMNw4M2wZlP66saoBwAgXslT5ynlELaQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOx/Hf5bPfwElPtNwUDO3NkIHkZwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNjMmZkMjg0LWE3MWMtNDNjYy1hMGFiLWEyNmMwYjY0ZjQ3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/4AwDQYJKoZIhvcNAQELBQADggEBAKAm5Wz31dBFjn0+LIDf sKbSDMZvj2+tOPSat7Ez7G16j+h9Tg3ru2HJYcGnceBFfululvUKijxPu1QlecgE 54nYL1WzFntruu6PECPSatK7N3CRYZFBIINheYhVhuWUnnKuq0PY9e2aeyqHN3W7 HKiWZ74Nb/Gva7o06m5VN7Q3wOBnMIC5+Ais04/VedffGY/ArxbYZPXhf02jZnsG dYfiNEjJOtcFVZceJw1VlvhjrRM0jspFB3IL9ng02MgxFRPMO0J3EvyNOfzPCo2p zAyAGv9WYXu+n60JIo4JJ3YiMt+Mp7I0BTBPPBaDPzXSckuRQeYO5G/Q/Vwaeim5 0Dk= -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:16 2025 by rpki-client