$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa File: 53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa (raw, json) Hash identifier: Fmoo3VR76P2MpPYEcd8FcCVqB1hfhlxuSccW4gnmtGM= Subject key identifier: C5:90:80:A9:1D:E0:9F:0E:FD:62:E4:B4:6E:F1:53:5F:78:18:F5:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45B843688969E915AE947041C365A4D5E2066A15 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa Signing time: Tue 25 Mar 2025 15:02:11 +0000 ROA not before: Tue 25 Mar 2025 15:02:11 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b8:43:68:89:69:e9:15:ae:94:70:41:c3:65:a4:d5:e2:06:6a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:02:11 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=2b205b004319087c2fdfaf248a1a665c2471c4f5f37915f6ce1287740e778390, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:16:cd:c5:9f:d1:f0:05:04:7f:39:94:05: e4:13:e0:b8:a1:57:3f:bd:66:e8:49:59:ff:88:46: 8b:7f:33:89:1b:69:3e:4e:46:87:a2:46:32:aa:5d: 52:de:3d:ad:6b:3c:35:c7:fd:89:ff:b4:24:cd:43: 03:1e:0a:bd:9b:cc:87:9b:00:e9:c2:6b:63:ee:55: 91:48:2a:8d:42:a8:d5:d6:45:33:9b:fa:8b:4a:c8: 31:d1:78:18:ff:4b:90:c4:93:9a:37:17:19:be:f4: e0:3a:14:80:2e:17:37:08:b7:ef:3f:da:e2:5e:fa: 36:3b:57:df:fe:8e:25:83:ce:b0:d2:ae:c1:38:c5: 43:c7:00:62:8c:ac:db:85:0c:4a:49:ae:0e:f5:bc: 6a:fd:51:c8:52:0a:6c:30:47:bf:79:69:a0:f3:e7: 87:99:9d:c7:20:d9:3b:72:ae:32:9d:d1:a2:70:2b: a7:9a:45:cd:00:27:8b:f6:ba:e8:d9:c1:53:57:6a: 8c:b3:da:90:4a:55:23:e1:e8:56:4c:ee:e0:8c:d4: a8:05:53:d1:b7:29:62:49:17:fb:b8:df:8f:76:bf: 9c:77:44:bb:cf:49:08:46:2a:c8:03:91:b7:b3:d4: de:18:5a:fb:2e:83:0c:1f:a7:7a:4a:f7:9b:a4:14: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:90:80:A9:1D:E0:9F:0E:FD:62:E4:B4:6E:F1:53:5F:78:18:F5:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7f:51:e5:2e:77:c5:67:af:29:3a:ad:b7:20:6c:99:c9:00:31: 57:75:42:ba:d8:27:f7:59:27:e7:4e:85:38:52:2d:b1:7b:7a: 9b:23:ad:80:23:fe:ea:aa:42:1a:3a:fb:b8:19:a3:42:49:bf: bd:f4:c8:9c:1f:54:20:0f:31:d3:63:f0:c2:d9:10:95:c4:e0: 54:d5:34:81:4b:2f:21:0d:51:f0:6b:69:3a:67:71:1e:0e:89: c1:d8:b8:01:4b:56:c5:6a:0d:ef:ef:28:28:f6:33:45:cf:b0: 78:bf:48:f9:50:94:ba:dc:66:e7:5c:5b:aa:bf:e0:5a:2f:b1: f1:c5:c7:ce:09:fc:8d:d0:57:b2:3e:3c:93:f1:57:f1:54:af: 9f:9a:a9:64:80:83:d3:e1:12:d7:5f:73:61:08:0f:4c:63:d8: 7e:74:bc:8a:b3:fd:97:94:dd:7d:82:46:b6:91:ca:9a:12:e3: 98:53:fd:0c:75:ed:1b:50:94:46:29:b7:cd:72:ab:a6:94:42: 52:cb:e9:45:b6:e2:d7:75:37:75:c3:4f:2a:5c:dd:52:d4:d9: 7c:6a:b9:b5:5a:e0:fa:84:dc:fe:28:06:b6:7f:d2:bb:6d:4d: e7:68:e2:f3:fd:2c:8f:56:29:e3:3d:19:82:98:b4:c8:1e:b5: 93:eb:e6:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURbhDaIlp6RWulHBBw2Wk1eIGahUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDIxMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMmIyMDViMDA0MzE5MDg3YzJmZGZh ZjI0OGExYTY2NWMyNDcxYzRmNWYzNzkxNWY2Y2UxMjg3NzQwZTc3ODM5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhkWzcWf0fAFBH85lAXkE+C4oVc/ vWboSVn/iEaLfzOJG2k+TkaHokYyql1S3j2tazw1x/2J/7QkzUMDHgq9m8yHmwDp wmtj7lWRSCqNQqjV1kUzm/qLSsgx0XgY/0uQxJOaNxcZvvTgOhSALhc3CLfvP9ri Xvo2O1ff/o4lg86w0q7BOMVDxwBijKzbhQxKSa4O9bxq/VHIUgpsMEe/eWmg8+eH mZ3HINk7cq4yndGicCunmkXNACeL9rro2cFTV2qMs9qQSlUj4ehWTO7gjNSoBVPR tyliSRf7uN+Pdr+cd0S7z0kIRirIA5G3s9TeGFr7LoMMH6d6SvebpBTBmwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMWQgKkd4J8O/WLktG7xU194GPWCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzZGM4YWNjLTBjMzAtNDJkMy1hYmZhLTU3OTJlYTViZjdkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/yAwDQYJKoZIhvcNAQELBQADggEBAH9R5S53xWevKTqttyBs mckAMVd1QrrYJ/dZJ+dOhThSLbF7epsjrYAj/uqqQho6+7gZo0JJv730yJwfVCAP MdNj8MLZEJXE4FTVNIFLLyENUfBraTpncR4OicHYuAFLVsVqDe/vKCj2M0XPsHi/ SPlQlLrcZudcW6q/4FovsfHFx84J/I3QV7I+PJPxV/FUr5+aqWSAg9PhEtdfc2EI D0xj2H50vIqz/ZeU3X2CRraRypoS45hT/Qx17RtQlEYpt81yq6aUQlLL6UW24td1 N3XDTypc3VLU2XxqubVa4PqE3P4oBrZ/0rttTedo4vP9LI9WKeM9GYKYtMgetZPr 5iM= -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:43 2025 by rpki-client