$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52492709-13d7-43b7-9adc-acc005f9da81.roa File: 52492709-13d7-43b7-9adc-acc005f9da81.roa (raw, json) Hash identifier: OFnHn0mK2B73xeeKje8C9d+7fRzynpC0tNKh7Yh/C38= Subject key identifier: 1A:83:E6:3B:C7:48:BE:D3:4D:DF:15:21:55:0C:CF:C0:E5:85:86:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44548437F447E28CE6DA09D8F366C0C2DAE39177 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52492709-13d7-43b7-9adc-acc005f9da81.roa Signing time: Tue 25 Mar 2025 16:50:06 +0000 ROA not before: Tue 25 Mar 2025 16:50:06 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:54:84:37:f4:47:e2:8c:e6:da:09:d8:f3:66:c0:c2:da:e3:91:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:06 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=43aa5dec776406447f1a363299e4fe8786cf990d087588aadde03f3df95f9f6e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:a1:85:db:2e:14:0e:a0:29:ac:a0:2e:a6: 57:b8:94:92:34:ad:78:2e:25:9e:f0:a6:a4:86:bd: 90:7a:29:a3:59:38:fc:7e:87:db:d5:6b:1e:e2:32: ef:e6:d1:1a:da:7a:5a:90:39:3e:b3:df:88:6b:70: 18:32:71:7f:12:5d:4b:a7:e2:0c:4a:c7:2f:4a:42: e4:80:c6:79:af:89:3c:6d:66:cb:83:fc:3a:22:30: cb:52:6b:d6:df:47:d7:80:12:ba:26:92:06:4e:e9: b4:a1:62:eb:20:29:72:ab:83:e9:00:12:c0:da:c2: 18:b2:57:ed:94:2d:a8:57:1f:74:a6:17:72:47:b9: 8d:93:8e:c8:45:d6:a8:92:bf:b9:02:e3:d3:ef:2c: 0f:83:28:37:93:c8:7b:f1:1a:0c:14:d0:78:5d:55: 53:6f:28:80:26:b8:0d:e7:68:ca:42:09:35:58:79: 95:f2:e1:33:be:18:13:c1:87:a3:46:2d:d0:30:6b: b7:dd:75:54:db:1a:73:d1:af:f5:86:96:dd:8e:ba: e0:d8:1d:c4:93:09:2f:57:ac:0e:40:27:75:26:b2: 99:f3:38:fb:2d:4b:80:fa:33:ba:69:aa:00:2e:ba: 1d:3c:85:98:e6:61:f7:83:0a:e7:66:07:1a:43:5d: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:E6:3B:C7:48:BE:D3:4D:DF:15:21:55:0C:CF:C0:E5:85:86:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52492709-13d7-43b7-9adc-acc005f9da81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:c00::/38 Signature Algorithm: sha256WithRSAEncryption 14:d8:39:1a:ad:7a:2f:c2:db:a0:d2:73:b6:32:c1:ef:61:f1: 14:0b:e9:7b:4f:e4:b7:49:91:e2:33:fa:1d:a1:d1:47:13:29: 25:fc:2d:e9:e4:7e:eb:39:2a:d3:58:00:fe:80:4a:8c:60:21: 2c:22:7a:37:3c:8a:ac:1f:c2:c6:3a:86:92:d5:4f:cc:c7:b0: 55:da:ba:ca:15:17:22:fe:57:c7:95:90:1d:08:ce:02:7a:c3: 41:04:d9:67:8d:47:fd:5f:e5:75:63:cd:45:f4:f0:40:6b:63: 2a:f8:de:af:d6:13:aa:22:c3:b9:bd:f5:77:55:1a:9b:af:40: 2f:83:cf:fb:96:75:96:c3:1c:eb:8d:df:ee:f6:a5:8c:59:e3: 37:13:41:30:8b:49:39:fe:06:44:f4:17:ff:dd:1a:6e:6e:5a: 7b:c1:6b:59:a8:b4:49:8b:5d:17:4a:7b:02:e2:c5:0c:3b:24: 6a:d8:c1:06:f9:81:10:97:e0:e4:8b:7b:73:59:e8:39:d0:b6: 16:a5:09:bf:c5:01:05:3b:78:e3:35:4e:b2:40:2d:c6:6c:52: 22:78:11:44:28:eb:39:c9:8f:2c:03:b9:b6:77:fb:4d:7d:8c: 92:c6:50:e7:a8:82:8e:ef:51:7c:91:80:90:c7:16:40:84:e2: 3d:a9:16:9a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURFSEN/RH4ozm2gnY82bAwtrjkXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTAwNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANDNhYTVkZWM3NzY0MDY0NDdmMWEz NjMyOTllNGZlODc4NmNmOTkwZDA4NzU4OGFhZGRlMDNmM2RmOTVmOWY2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/+hhdsuFA6gKaygLqZXuJSSNK14 LiWe8Kakhr2QeimjWTj8fofb1Wse4jLv5tEa2npakDk+s9+Ia3AYMnF/El1Lp+IM SscvSkLkgMZ5r4k8bWbLg/w6IjDLUmvW30fXgBK6JpIGTum0oWLrIClyq4PpABLA 2sIYslftlC2oVx90phdyR7mNk47IRdaokr+5AuPT7ywPgyg3k8h78RoMFNB4XVVT byiAJrgN52jKQgk1WHmV8uEzvhgTwYejRi3QMGu33XVU2xpz0a/1hpbdjrrg2B3E kwkvV6wOQCd1JrKZ8zj7LUuA+jO6aaoALrodPIWY5mH3gwrnZgcaQ111swIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBqD5jvHSL7TTd8VIVUMz8DlhYakMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNDkyNzA5LTEzZDctNDNiNy05YWRjLWFjYzAwNWY5ZGE4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgwwDQYJKoZIhvcNAQELBQADggEBABTYORqtei/C26DSc7Yy we9h8RQL6XtP5LdJkeIz+h2h0UcTKSX8Lenkfus5KtNYAP6ASoxgISwiejc8iqwf wsY6hpLVT8zHsFXausoVFyL+V8eVkB0IzgJ6w0EE2WeNR/1f5XVjzUX08EBrYyr4 3q/WE6oiw7m99XdVGpuvQC+Dz/uWdZbDHOuN3+72pYxZ4zcTQTCLSTn+BkT0F//d Gm5uWnvBa1motEmLXRdKewLixQw7JGrYwQb5gRCX4OSLe3NZ6DnQthalCb/FAQU7 eOM1TrJALcZsUiJ4EUQo6znJjywDubZ3+019jJLGUOeogo7vUXyRgJDHFkCE4j2p Fpo= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:39 2025 by rpki-client