$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa File: 503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa (raw, json) Hash identifier: rfonngjbDIP6rExavszadGSPopTS6i8Y3HRF/rPa1gY= Subject key identifier: 52:F7:1D:F5:91:77:13:F4:72:52:28:1B:D1:87:E1:4A:3D:FA:89:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63E8B326F0084807D918295D8F5E91CDC05D063F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa Signing time: Tue 25 Mar 2025 16:01:31 +0000 ROA not before: Tue 25 Mar 2025 16:01:31 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:b0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e8:b3:26:f0:08:48:07:d9:18:29:5d:8f:5e:91:cd:c0:5d:06:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:31 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=572a22fc57bfda111ceb0cd56af9020460cf34e4594dc187bf52c2134254e642, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:90:73:a3:16:6e:53:e2:40:29:8a:14:d9: d7:e9:2a:3a:a9:6d:d5:59:e3:de:a3:98:e4:9b:fb: 9b:b5:6b:2f:8c:d0:4b:13:4d:25:48:7c:e0:38:77: 89:f4:04:a0:d5:9f:8c:b8:f2:b3:91:a3:a5:a8:a4: 0a:14:f5:08:0b:87:93:f6:26:9c:67:27:92:cc:59: 09:df:dc:d8:34:ec:ce:34:96:7b:1e:c0:fa:bc:8b: f8:c3:0a:ea:10:5b:d9:6b:34:05:6b:0d:fa:10:f4: e3:25:55:59:20:92:65:ad:d3:da:1a:44:25:85:c7: 66:76:82:ef:d7:71:72:1a:44:f6:b2:c3:0b:00:36: e6:20:54:77:60:7c:e7:11:23:3f:5d:ba:cc:bf:c6: 51:9d:79:2c:94:44:a9:cb:f9:f8:7b:21:7d:0e:74: 85:fb:9c:85:b1:21:a0:f5:ab:ed:8d:d3:c5:6d:b1: 80:d6:82:46:25:e9:a0:65:2c:33:71:bc:00:ec:ce: e2:0a:96:35:cc:8c:a3:97:8d:2a:47:cf:52:bf:6d: 06:44:e5:37:5e:30:e2:d7:57:12:db:c3:e6:db:42: b4:9d:a9:ff:24:12:d2:82:f9:46:b8:bd:22:91:d2: ad:41:f9:07:b7:3d:14:f8:d0:41:91:a0:86:5f:17: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:1D:F5:91:77:13:F4:72:52:28:1B:D1:87:E1:4A:3D:FA:89:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:b0c0::/46 Signature Algorithm: sha256WithRSAEncryption 53:04:51:22:b4:f7:c9:d6:1b:b3:61:5a:90:0d:39:62:0a:39: 02:8c:9c:9f:88:ce:66:d7:c2:de:cb:2b:cb:ec:62:a4:25:f4: 4b:0e:9b:fd:cd:29:e7:6c:56:d4:ad:d7:53:52:6a:b8:db:e1: e9:b2:2b:37:8b:3f:3d:6c:44:a0:45:c3:f7:0f:cb:25:be:69: 01:b9:8d:3f:8e:a0:2d:59:bc:4e:cb:23:24:31:96:bc:81:c5: 5c:49:8a:01:77:1b:7c:38:3d:91:b4:49:bc:a6:17:13:c1:06: 83:19:8f:8c:c5:6d:65:00:1f:43:c8:65:ca:2b:fe:08:2e:e3: 0b:56:0d:1a:57:01:f6:8c:f0:fb:56:38:40:60:d1:b9:17:fd: f0:5d:c3:6c:77:96:a5:0f:5e:78:8a:ad:a8:89:73:a5:f0:e6: c5:9f:1c:6e:2e:f3:cc:ad:16:e8:0a:ba:3c:11:cf:74:db:1a: db:28:58:94:33:77:de:a8:f8:8c:2f:62:8d:db:40:87:9b:29: d1:6a:cb:88:38:e8:c9:da:38:74:bb:3f:d8:1f:0d:91:50:40: 30:2a:6d:d8:ae:f5:e8:8f:df:2c:a4:a4:6c:dd:e7:42:0a:41: 40:78:ac:62:63:b2:73:a5:ca:4f:2f:5d:82:82:fa:d8:e4:da: 98:60:23:ee -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY+izJvAISAfZGCldj16RzcBdBj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDEzMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANTcyYTIyZmM1N2JmZGExMTFjZWIw Y2Q1NmFmOTAyMDQ2MGNmMzRlNDU5NGRjMTg3YmY1MmMyMTM0MjU0ZTY0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKWQc6MWblPiQCmKFNnX6So6qW3V WePeo5jkm/ubtWsvjNBLE00lSHzgOHeJ9ASg1Z+MuPKzkaOlqKQKFPUIC4eT9iac ZyeSzFkJ39zYNOzONJZ7HsD6vIv4wwrqEFvZazQFaw36EPTjJVVZIJJlrdPaGkQl hcdmdoLv13FyGkT2ssMLADbmIFR3YHznESM/XbrMv8ZRnXkslESpy/n4eyF9DnSF +5yFsSGg9avtjdPFbbGA1oJGJemgZSwzcbwA7M7iCpY1zIyjl40qR89Sv20GROU3 XjDi11cS28Pm20K0nan/JBLSgvlGuL0ikdKtQfkHtz0U+NBBkaCGXxe+FwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFL3HfWRdxP0clIoG9GH4Uo9+okQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUwMzgwOGQ5LTE1YTgtNGQzZi04MWUwLWQwMzE0YWI5ZDM4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+7DAMA0GCSqGSIb3DQEBCwUAA4IBAQBTBFEitPfJ1huzYVqQ DTliCjkCjJyfiM5m18LeyyvL7GKkJfRLDpv9zSnnbFbUrddTUmq42+Hpsis3iz89 bESgRcP3D8slvmkBuY0/jqAtWbxOyyMkMZa8gcVcSYoBdxt8OD2RtEm8phcTwQaD GY+MxW1lAB9DyGXKK/4ILuMLVg0aVwH2jPD7VjhAYNG5F/3wXcNsd5alD154iq2o iXOl8ObFnxxuLvPMrRboCro8Ec902xrbKFiUM3feqPiML2KN20CHmynRasuIOOjJ 2jh0uz/YHw2RUEAwKm3YrvXoj98spKRs3edCCkFAeKxiY7JzpcpPL12CgvrY5NqY YCPu -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:50 2025 by rpki-client