$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d45390-c4cb-45b7-a2d0-183f37c05776.roa File: 44d45390-c4cb-45b7-a2d0-183f37c05776.roa (raw, json) Hash identifier: oVQzDFo7cTLDhhar1SzatV9bnD9YZ9wvY5mUR97GmiM= Subject key identifier: 64:78:C3:D5:5D:96:77:D5:D9:74:DE:4D:46:6C:E1:AB:BA:E4:C9:D4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20E36854D8DE9A3F85378A43BDE90EFFC2A40E71 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d45390-c4cb-45b7-a2d0-183f37c05776.roa Signing time: Tue 25 Mar 2025 15:31:35 +0000 ROA not before: Tue 25 Mar 2025 15:31:35 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e3:68:54:d8:de:9a:3f:85:37:8a:43:bd:e9:0e:ff:c2:a4:0e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:31:35 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ae4ad0545385862d64e216cc8313f2aff9a642dcdacda339d99c1654283622a4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:54:c6:e7:f1:c8:24:3d:92:99:19:bb:10: 11:cd:d8:2b:5a:37:1b:70:a4:29:81:8e:f7:5c:8f: 4c:b2:a4:16:c0:ac:ea:cc:18:60:98:47:42:42:b7: f4:73:25:3c:92:64:56:0e:02:22:14:b7:36:f7:d4: 0b:56:98:7d:fe:23:59:5e:33:7e:0c:8b:61:37:3a: d3:a5:1e:eb:8d:49:48:39:dc:88:1f:9d:f6:50:67: 73:82:d1:c2:a4:7a:1b:74:3b:b6:0a:2e:cc:ef:f4: ac:5b:e0:fb:71:e9:fb:a6:40:90:c4:cb:ab:5b:18: 2d:8e:fa:19:46:34:1a:45:1b:58:f1:31:25:55:0e: 48:f6:98:f6:d4:75:1e:99:58:3a:51:93:4a:70:cf: 5d:cb:52:5a:ec:8c:2a:db:ce:1e:76:fd:e0:9b:2b: bb:2a:db:4b:e4:93:94:74:5b:82:71:19:d7:26:d9: da:7c:6c:f1:d9:5a:b9:73:a9:37:99:ff:08:d3:36: 1d:68:ac:e5:df:2a:fc:b6:84:88:5a:88:f6:0d:72: 56:49:d3:24:52:83:4e:7b:4b:e5:d0:01:78:75:47: ec:dd:47:61:d7:c9:c6:f9:d8:97:3a:a7:3b:c1:d8: 34:ff:8f:6d:ed:81:cb:3a:f3:59:f1:b3:97:1f:78: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:C3:D5:5D:96:77:D5:D9:74:DE:4D:46:6C:E1:AB:BA:E4:C9:D4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d45390-c4cb-45b7-a2d0-183f37c05776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c840::/46 Signature Algorithm: sha256WithRSAEncryption 4d:42:47:bd:0b:02:18:51:57:dd:38:d0:80:ca:8e:22:a7:5f: b1:0e:ef:c9:53:0a:d4:0e:cc:a4:90:38:d0:d8:fe:ab:09:c1: 1d:18:df:65:e3:03:83:df:a6:7f:b3:f2:d5:cb:82:bd:44:9f: 90:f3:f3:ad:b7:9b:bb:3d:38:d6:10:f4:48:0a:b9:56:aa:5d: 63:1f:92:26:50:59:a8:74:72:2d:e1:e1:51:28:17:21:d8:97: bf:1b:ee:a6:df:77:b0:7a:b1:0b:e4:62:6f:19:70:10:74:b9: 04:ee:f9:f0:bc:88:f1:77:f4:4f:ab:8d:1d:90:38:5f:3e:cb: eb:4b:87:4a:77:ec:ad:42:b9:c8:6d:31:f7:20:c0:42:98:54: a7:f7:6a:4b:8e:b8:c8:7d:41:b6:ec:6d:ef:cd:da:3b:4a:ce: b1:f1:46:94:2b:64:57:b3:0d:ef:84:02:f5:64:fe:07:43:0d: b3:3d:9b:7a:22:dd:05:ab:fc:50:62:08:0f:36:77:59:4a:7c: b3:25:67:8a:04:bb:49:29:60:25:6b:43:f4:b8:b7:1e:8f:5a: 0b:6a:63:4b:04:a7:9b:b3:56:2d:54:f7:63:53:6e:cc:b3:34: 81:e5:08:a5:56:91:b0:fa:f7:f7:3d:66:41:9b:a2:a1:af:74: 1f:9e:07:f8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIONoVNjemj+FN4pDvekO/8KkDnEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MzEzNVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYWU0YWQwNTQ1Mzg1ODYyZDY0ZTIx NmNjODMxM2YyYWZmOWE2NDJkY2RhY2RhMzM5ZDk5YzE2NTQyODM2MjJhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y5UxufxyCQ9kpkZuxARzdgrWjcb cKQpgY73XI9MsqQWwKzqzBhgmEdCQrf0cyU8kmRWDgIiFLc299QLVph9/iNZXjN+ DIthNzrTpR7rjUlIOdyIH532UGdzgtHCpHobdDu2Ci7M7/SsW+D7cen7pkCQxMur WxgtjvoZRjQaRRtY8TElVQ5I9pj21HUemVg6UZNKcM9dy1Ja7Iwq284edv3gmyu7 KttL5JOUdFuCcRnXJtnafGzx2Vq5c6k3mf8I0zYdaKzl3yr8toSIWoj2DXJWSdMk UoNOe0vl0AF4dUfs3Udh18nG+diXOqc7wdg0/49t7YHLOvNZ8bOXH3jbLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGR4w9VdlnfV2XTeTUZs4au65MnUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0ZDQ1MzkwLWM0Y2ItNDViNy1hMmQwLTE4M2YzN2MwNTc3Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+8hAMA0GCSqGSIb3DQEBCwUAA4IBAQBNQke9CwIYUVfdONCA yo4ip1+xDu/JUwrUDsykkDjQ2P6rCcEdGN9l4wOD36Z/s/LVy4K9RJ+Q8/Ott5u7 PTjWEPRICrlWql1jH5ImUFmodHIt4eFRKBch2Je/G+6m33ewerEL5GJvGXAQdLkE 7vnwvIjxd/RPq40dkDhfPsvrS4dKd+ytQrnIbTH3IMBCmFSn92pLjrjIfUG27G3v zdo7Ss6x8UaUK2RXsw3vhAL1ZP4HQw2zPZt6It0Fq/xQYggPNndZSnyzJWeKBLtJ KWAla0P0uLcej1oLamNLBKebs1YtVPdjU27MszSB5QilVpGw+vf3PWZBm6Khr3Qf ngf4 -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:49 2025 by rpki-client