$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa File: 4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa (raw, json) Hash identifier: RAmcqmmmLi9mwiAHh7APdI76EYaWLyOHblo/+F4YqM8= Subject key identifier: 45:E6:35:42:3B:EB:27:B1:81:51:9B:41:74:59:83:6B:FD:5F:E2:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 690AEA940BB3928E5E30DA9898C94D674FAC6CD5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa Signing time: Mon 24 Mar 2025 15:21:36 +0000 ROA not before: Mon 24 Mar 2025 15:21:36 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0a:ea:94:0b:b3:92:8e:5e:30:da:98:98:c9:4d:67:4f:ac:6c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:21:36 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=6135c741f4f53e63888064b693440e8e7b626b26fc70d464fadbb9417635b3cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:c0:3e:14:82:4c:6b:ff:bc:b5:04:86:76: 82:b6:fd:69:c2:71:e7:bb:ee:4b:63:a7:25:1f:d9: 60:6f:df:39:ee:7e:77:90:4b:05:a2:b4:99:39:9a: 32:4a:65:e3:f7:e9:b1:36:ec:6d:cc:e0:e4:d2:26: d2:78:d2:ef:38:b1:eb:7e:b7:61:ca:6f:63:90:ec: 6f:8f:fb:57:cd:22:00:22:af:d6:65:3f:3b:62:9a: e0:53:61:0c:36:1c:e6:4c:8c:8a:f9:6c:60:62:f2: 2d:8f:ea:bb:6d:05:e8:29:e6:ce:8f:3a:09:ca:7e: 4d:a0:81:08:0b:49:b8:b2:8b:d8:94:c1:be:ef:71: f3:c2:1e:46:8f:7d:54:d5:93:22:95:0d:c8:ea:4e: 96:ff:12:ba:a3:52:99:ce:33:2e:d1:12:04:17:28: 16:b0:cf:1f:14:2c:80:52:da:a1:ae:ff:c1:56:3e: ea:4e:94:68:3c:19:1e:eb:90:68:7b:73:19:0e:1b: 55:ab:ad:b1:e4:ba:c8:7d:02:c2:c5:96:8b:e3:55: 93:93:e1:a1:97:cb:8e:3b:37:6c:13:c5:84:8c:aa: 3c:d9:63:01:58:45:4a:92:75:05:cf:a7:41:ff:2d: e7:7a:0c:13:32:a3:d6:da:7d:2d:fc:8d:d5:51:6a: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E6:35:42:3B:EB:27:B1:81:51:9B:41:74:59:83:6B:FD:5F:E2:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:80a0::/48 Signature Algorithm: sha256WithRSAEncryption b8:ce:b4:96:89:1a:93:50:9c:c0:00:02:48:68:da:2c:3a:f4: db:02:84:5a:9f:c8:ef:fd:0d:bc:33:d0:79:fe:8b:93:c0:80: 34:7a:e7:99:ba:e7:0d:65:0e:ef:4c:cd:ed:92:7a:bb:b8:b0: 55:c7:ae:38:ab:56:60:57:d0:1e:c8:5a:8d:1b:a8:07:3c:d4: 1b:04:ad:24:75:fe:81:59:68:52:f0:16:2c:38:c1:d6:63:91: ce:6e:4b:96:a4:fb:a7:96:3b:50:4e:eb:61:bc:73:05:ed:a4: bf:b4:2f:3b:bd:f2:aa:3e:15:7f:d9:82:77:c2:52:ea:cb:c6: 0e:e9:e5:d9:ab:a8:b6:ab:c3:0f:54:a4:10:c6:4f:eb:0c:af: 54:b8:ec:22:87:6b:dc:16:d8:90:1c:72:9c:7a:55:cc:79:ce: 50:cb:ae:16:95:1b:92:f8:3a:ed:0d:c9:72:20:ec:e1:70:c8: 53:aa:21:8f:60:8d:9d:b1:1d:66:8d:86:5f:17:c4:02:fc:d0: 01:d4:85:26:96:23:2f:95:d5:53:a0:e2:3b:f2:5b:0d:5e:fc: f1:eb:2b:35:8d:52:e9:da:25:99:5d:44:02:2e:7a:bc:7e:7d: 6f:e3:dc:aa:eb:06:fa:2d:6d:e8:da:36:d1:78:7c:ec:5e:3b: 23:da:52:57 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaQrqlAuzko5eMNqYmMlNZ0+sbNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MjEzNloX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNANjEzNWM3NDFmNGY1M2U2Mzg4ODA2 NGI2OTM0NDBlOGU3YjYyNmIyNmZjNzBkNDY0ZmFkYmI5NDE3NjM1YjNjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjAPhSCTGv/vLUEhnaCtv1pwnHn u+5LY6clH9lgb9857n53kEsForSZOZoySmXj9+mxNuxtzODk0ibSeNLvOLHrfrdh ym9jkOxvj/tXzSIAIq/WZT87YprgU2EMNhzmTIyK+WxgYvItj+q7bQXoKebOjzoJ yn5NoIEIC0m4sovYlMG+73Hzwh5Gj31U1ZMilQ3I6k6W/xK6o1KZzjMu0RIEFygW sM8fFCyAUtqhrv/BVj7qTpRoPBke65Boe3MZDhtVq62x5LrIfQLCxZaL41WTk+Gh l8uOOzdsE8WEjKo82WMBWEVKknUFz6dB/y3negwTMqPW2n0t/I3VUWrk5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEXmNUI76yexgVGbQXRZg2v9X+J3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiOTVlM2I0LTMwNDktNGVhMC1hMzljLTc1MjJjYzBiZWEwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAICgMA0GCSqGSIb3DQEBCwUAA4IBAQC4zrSWiRqTUJzAAAJI aNosOvTbAoRan8jv/Q28M9B5/ouTwIA0eueZuucNZQ7vTM3tknq7uLBVx644q1Zg V9AeyFqNG6gHPNQbBK0kdf6BWWhS8BYsOMHWY5HObkuWpPunljtQTuthvHMF7aS/ tC87vfKqPhV/2YJ3wlLqy8YO6eXZq6i2q8MPVKQQxk/rDK9UuOwih2vcFtiQHHKc elXMec5Qy64WlRuS+DrtDclyIOzhcMhTqiGPYI2dsR1mjYZfF8QC/NAB1IUmliMv ldVToOI78lsNXvzx6ys1jVLp2iWZXUQCLnq8fn1v49yq6wb6LW3o2jbReHzsXjsj 2lJX -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:31 2025 by rpki-client