$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa File: 4f94d4be-2864-45c5-a16e-6384684a8060.roa (raw, json) Hash identifier: lkh+JoNlfY3p3Qg+ffiAxgDeExfKhep5RNLpjioa/to= Subject key identifier: F1:EE:76:A1:D4:59:33:01:46:D2:05:04:50:55:C6:CE:0A:78:31:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5913646239500B00F4BCFAF369058D2D7A53812B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa Signing time: Tue 25 Mar 2025 16:41:25 +0000 ROA not before: Tue 25 Mar 2025 16:41:25 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:13:64:62:39:50:0b:00:f4:bc:fa:f3:69:05:8d:2d:7a:53:81:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:41:25 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a81158d3fea7c2ce1c7db25000d3bc9e32d70351a6ff5eabd123ffee847dab05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:f1:79:96:50:ad:7a:6b:1d:6e:7d:6f:a0: 4c:11:72:0b:9b:57:4a:80:24:87:30:b5:dc:55:21: c4:65:7c:36:32:22:ca:14:d3:be:4d:e4:fa:50:02: d3:85:81:b5:12:c6:eb:66:db:9e:e9:02:99:37:1a: 1c:27:2e:0f:e2:93:06:bb:d2:5a:08:0f:82:bb:57: 34:eb:9f:51:79:85:85:55:45:88:3b:69:30:a6:62: 65:c5:9b:e4:6d:5e:b2:84:29:03:55:f3:e8:93:d3: 75:6f:98:cc:74:b9:ae:0e:58:2a:09:0d:1d:20:46: 20:f7:50:ee:a7:ad:7d:d3:b6:80:2a:91:03:2b:05: b7:76:a1:a6:91:7f:74:23:35:ef:86:0d:5c:a3:db: 02:ae:19:c9:13:e5:5d:ef:c9:52:5b:1b:5c:41:fa: 5c:00:f0:df:96:ff:98:61:5e:44:3a:fe:ba:ea:dc: 63:28:9f:c5:fd:ca:87:3c:17:b1:a8:ac:73:18:8d: a7:f3:9c:35:de:b3:f2:90:67:1b:06:84:1a:68:12: 54:6a:8b:ca:0c:62:bf:82:d0:0c:d3:c7:90:e1:1a: ec:28:81:fc:ea:b2:dd:07:3e:ec:53:d4:7b:cd:3f: 73:4a:17:6b:31:75:ad:e5:09:d2:83:c0:3a:8c:be: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:76:A1:D4:59:33:01:46:D2:05:04:50:55:C6:CE:0A:78:31:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16:400::/38 Signature Algorithm: sha256WithRSAEncryption 9c:a1:76:db:9c:0c:eb:d8:da:6d:17:76:2b:aa:55:cd:d5:21: a0:43:ec:13:75:e6:7d:04:f6:73:dd:ce:53:ef:f8:c0:76:9b: 31:8f:01:b0:e6:2a:dc:ad:b3:d6:30:f0:1d:9c:21:38:04:f8: 16:69:4a:97:a7:86:e2:69:f9:5e:78:8a:22:6b:f3:9a:92:50: 07:b9:37:cb:aa:57:0f:f6:82:b6:e5:ba:3c:cc:a6:e8:f2:5e: e5:85:0c:58:ae:6c:ab:d9:49:d4:18:94:6f:ca:97:d7:a1:ee: c1:4c:42:ca:83:26:ed:6c:b8:28:88:30:c7:8d:21:77:4e:42: e1:22:84:c4:8f:2d:4d:ab:f3:ae:72:ac:e8:25:c3:3a:36:85: 62:39:c2:75:63:7f:3a:49:b3:e4:4e:ee:8a:61:d7:15:fc:9d: 46:96:65:c7:5d:ce:e1:b4:f0:11:07:1d:66:86:f2:49:81:e4: dc:82:b6:47:20:69:02:0e:d1:26:7d:2a:7c:79:64:44:82:9e: f9:6b:ef:2a:5a:d8:18:75:f4:18:9f:fd:a0:5c:3d:e5:e2:ba: ab:b2:2c:95:f8:83:6e:e9:ac:2e:29:bd:90:06:67:b2:c4:15: 91:a8:96:0b:e0:fc:f2:3c:eb:e5:2d:a3:10:50:1e:c3:b8:17: 96:82:ac:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWRNkYjlQCwD0vPrzaQWNLXpTgSswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NDEyNVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTgxMTU4ZDNmZWE3YzJjZTFjN2Ri MjUwMDBkM2JjOWUzMmQ3MDM1MWE2ZmY1ZWFiZDEyM2ZmZWU4NDdkYWIwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvLxeZZQrXprHW59b6BMEXILm1dK gCSHMLXcVSHEZXw2MiLKFNO+TeT6UALThYG1EsbrZtue6QKZNxocJy4P4pMGu9Ja CA+Cu1c0659ReYWFVUWIO2kwpmJlxZvkbV6yhCkDVfPok9N1b5jMdLmuDlgqCQ0d IEYg91Dup61907aAKpEDKwW3dqGmkX90IzXvhg1co9sCrhnJE+Vd78lSWxtcQfpc APDflv+YYV5EOv666txjKJ/F/cqHPBexqKxzGI2n85w13rPykGcbBoQaaBJUaovK DGK/gtAM08eQ4RrsKIH86rLdBz7sU9R7zT9zShdrMXWt5QnSg8A6jL41PQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPHudqHUWTMBRtIFBFBVxs4KeDGsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmOTRkNGJlLTI4NjQtNDVjNS1hMTZlLTYzODQ2ODRhODA2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgQwDQYJKoZIhvcNAQELBQADggEBAJyhdtucDOvY2m0Xdiuq Vc3VIaBD7BN15n0E9nPdzlPv+MB2mzGPAbDmKtyts9Yw8B2cITgE+BZpSpenhuJp +V54iiJr85qSUAe5N8uqVw/2grblujzMpujyXuWFDFiubKvZSdQYlG/Kl9eh7sFM QsqDJu1suCiIMMeNIXdOQuEihMSPLU2r865yrOglwzo2hWI5wnVjfzpJs+RO7oph 1xX8nUaWZcddzuG08BEHHWaG8kmB5NyCtkcgaQIO0SZ9Knx5ZESCnvlr7ypa2Bh1 9Bif/aBcPeXiuquyLJX4g27prC4pvZAGZ7LEFZGolgvg/PI86+UtoxBQHsO4F5aC rLg= -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:33 2025 by rpki-client