$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43f142a4-ac6c-46ed-a6c9-21998974ec83.roa File: 43f142a4-ac6c-46ed-a6c9-21998974ec83.roa (raw, json) Hash identifier: 9looY/2WKG85DlZekbWATivw33wAsk5WDn8o8RNaI10= Subject key identifier: 9E:5C:26:D3:D4:C1:0D:E7:22:B1:7C:0A:5B:DE:CA:7F:B9:17:0F:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 440E60468BC7BD0E2FC5F6969D6E52BA7E3DF317 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43f142a4-ac6c-46ed-a6c9-21998974ec83.roa Signing time: Tue 25 Mar 2025 16:01:07 +0000 ROA not before: Tue 25 Mar 2025 16:01:07 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0e:60:46:8b:c7:bd:0e:2f:c5:f6:96:9d:6e:52:ba:7e:3d:f3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:07 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=4aa865d5dfe3ec5e8969b64d8fb5d037f41ca87fbac71e1ad687dba35e02fd38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:d1:31:bc:38:a3:e9:0e:5a:b0:b4:37:66: 69:ad:25:cc:7b:07:7e:d0:0b:05:86:ea:f3:05:d5: eb:5e:8d:6f:90:cf:51:4a:be:55:ae:43:f5:6d:63: 20:3b:9e:a6:5a:06:bf:37:75:dd:38:cd:fd:a4:1a: 4a:be:f5:4d:58:94:cf:f6:1c:d3:6c:af:61:c8:31: 2d:80:bb:41:2e:21:19:7a:e2:6d:27:ca:7f:16:a2: c9:76:32:49:51:ba:79:b8:c7:87:68:4a:0e:6a:1c: f4:c4:c7:04:6b:41:cd:90:2c:5e:54:74:fd:c4:d3: 62:12:64:b2:4b:13:f8:b1:65:2e:a8:ed:e8:2b:44: fe:d2:c9:38:cb:ec:44:39:78:d9:73:0b:b3:ce:56: 3b:d6:81:c2:29:38:ac:07:15:29:e3:15:d6:22:a4: c5:c2:52:36:3c:bf:19:90:18:c9:8c:b2:bd:33:96: 54:7a:cf:fa:03:1d:ec:4f:9e:8f:26:5d:b1:36:88: 7c:bd:81:14:cc:27:0a:0c:0b:dc:43:93:cf:65:ab: 35:a8:e8:46:00:e7:82:02:a7:18:bc:01:2f:28:d6: 68:cf:1e:ce:83:1b:40:62:07:ac:7c:9a:28:65:16: a4:d3:22:7e:2b:a7:dc:f4:35:b9:fd:68:aa:72:fb: b5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5C:26:D3:D4:C1:0D:E7:22:B1:7C:0A:5B:DE:CA:7F:B9:17:0F:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43f142a4-ac6c-46ed-a6c9-21998974ec83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c080::/46 Signature Algorithm: sha256WithRSAEncryption c7:3f:64:23:22:ed:c5:b8:c2:80:49:67:72:0c:90:d0:b5:c1: e0:8d:1f:d5:02:5b:06:31:43:77:81:09:da:69:08:fa:78:bc: b4:0f:0d:5e:ec:05:f8:dd:de:4e:d9:be:e5:46:fe:cf:94:84: 18:82:0d:17:fc:35:93:ab:47:61:9a:df:18:af:7a:c3:5d:12: e6:85:78:c9:7e:9e:dd:cc:c2:50:4c:9c:1c:c0:dd:94:ae:f5: e9:27:82:d3:c6:bb:34:e7:c7:8c:ae:c1:5b:1c:64:dc:c5:ec: 3d:44:c1:6b:66:d4:ec:fb:4d:c2:61:90:81:20:ed:4c:72:84: 91:e2:e4:c2:25:da:8d:2c:1c:d1:63:9e:1d:bf:35:50:6f:99: 89:39:81:26:20:b6:5d:cf:b4:f9:70:80:a5:3f:05:47:47:e5: 57:eb:e0:20:f1:18:1e:7f:62:7c:90:56:d9:71:f0:f7:e8:09: a1:4d:9c:b4:1e:0e:71:11:be:1c:96:9d:d2:3c:ce:1b:e7:b2: 7b:3c:5c:91:a0:a2:84:30:c2:b1:cf:01:b5:b5:00:00:1a:ed: bf:bc:92:07:3a:3f:11:7b:58:6e:c0:59:9f:1e:e3:8f:b4:5a: a2:92:5a:e8:87:1c:c9:f0:f3:02:78:3f:b8:7d:96:85:1f:52: 89:3b:8d:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURA5gRovHvQ4vxfaWnW5Sun498xcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDEwN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANGFhODY1ZDVkZmUzZWM1ZTg5Njli NjRkOGZiNWQwMzdmNDFjYTg3ZmJhYzcxZTFhZDY4N2RiYTM1ZTAyZmQzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJPRMbw4o+kOWrC0N2ZprSXMewd+ 0AsFhurzBdXrXo1vkM9RSr5VrkP1bWMgO56mWga/N3XdOM39pBpKvvVNWJTP9hzT bK9hyDEtgLtBLiEZeuJtJ8p/FqLJdjJJUbp5uMeHaEoOahz0xMcEa0HNkCxeVHT9 xNNiEmSySxP4sWUuqO3oK0T+0sk4y+xEOXjZcwuzzlY71oHCKTisBxUp4xXWIqTF wlI2PL8ZkBjJjLK9M5ZUes/6Ax3sT56PJl2xNoh8vYEUzCcKDAvcQ5PPZas1qOhG AOeCAqcYvAEvKNZozx7OgxtAYgesfJooZRak0yJ+K6fc9DW5/Wiqcvu1DQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ5cJtPUwQ3nIrF8Clveyn+5Fw+vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzZjE0MmE0LWFjNmMtNDZlZC1hNmM5LTIxOTk4OTc0ZWM4My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaacCAMA0GCSqGSIb3DQEBCwUAA4IBAQDHP2QjIu3FuMKASWdy DJDQtcHgjR/VAlsGMUN3gQnaaQj6eLy0Dw1e7AX43d5O2b7lRv7PlIQYgg0X/DWT q0dhmt8Yr3rDXRLmhXjJfp7dzMJQTJwcwN2UrvXpJ4LTxrs058eMrsFbHGTcxew9 RMFrZtTs+03CYZCBIO1McoSR4uTCJdqNLBzRY54dvzVQb5mJOYEmILZdz7T5cICl PwVHR+VX6+Ag8Rgef2J8kFbZcfD36AmhTZy0Hg5xEb4clp3SPM4b57J7PFyRoKKE MMKxzwG1tQAAGu2/vJIHOj8Re1huwFmfHuOPtFqiklrohxzJ8PMCeD+4fZaFH1KJ O42y -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:03 2025 by rpki-client