$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/542149ac-13e8-419c-b3c9-46274c8943df.roa File: 542149ac-13e8-419c-b3c9-46274c8943df.roa (raw, json) Hash identifier: ly0hjmBtQWJ3I6h1dDurOdFo2+pTUcV7QF3VcLTJAsE= Subject key identifier: 77:F3:7F:EE:01:25:20:44:C8:97:F7:CC:5E:55:C4:C0:9A:26:C8:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 047028217342DEBA36C1A060A5AC6F15471D825C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/542149ac-13e8-419c-b3c9-46274c8943df.roa Signing time: Tue 25 Mar 2025 16:01:48 +0000 ROA not before: Tue 25 Mar 2025 16:01:48 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:70:28:21:73:42:de:ba:36:c1:a0:60:a5:ac:6f:15:47:1d:82:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:48 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ee7c2091f998283bee191c251d121f413817652813bf85b84515820b29dad42e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:aa:45:8c:96:10:89:61:15:05:d0:17:29: d8:94:75:e3:a5:91:7d:03:28:f7:c6:1e:27:0b:40: d0:c2:e9:bb:4d:ce:3d:56:6e:22:d3:3e:00:be:c9: 78:66:1d:45:8b:09:78:61:10:28:de:9c:d8:38:16: 57:1d:60:56:e4:c0:0b:c4:ae:79:81:15:69:f2:9a: 8b:58:ef:0c:a1:8b:67:98:9f:77:cd:95:48:b4:21: 73:bc:41:46:51:ef:97:0d:88:4a:0a:c8:21:25:4a: f2:90:82:a7:cf:1d:d5:fd:a5:4c:66:ed:ad:80:ad: b6:7f:00:0e:61:29:e8:f2:01:a0:6c:98:b4:33:eb: 66:f5:66:e4:95:ad:c7:8b:c7:23:77:17:92:d2:3d: 13:d6:e7:b3:3d:0a:7c:3b:ab:4f:2f:ed:c0:d1:68: 88:4c:5a:d6:fe:d6:35:5b:ad:f5:54:9a:bd:93:26: a8:1e:d9:98:af:9d:9d:90:8d:ae:39:af:9f:8a:8f: ad:83:3d:6b:03:0e:06:5e:9e:68:69:7a:8c:a2:4f: 48:26:f1:02:f9:35:45:e9:b9:46:c9:05:29:82:d1: ae:69:86:c6:47:e8:40:18:26:ec:8f:d2:79:ac:2f: e4:17:4b:9b:ff:c9:c5:c9:08:d9:2c:e0:e8:25:7b: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:7F:EE:01:25:20:44:C8:97:F7:CC:5E:55:C4:C0:9A:26:C8:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/542149ac-13e8-419c-b3c9-46274c8943df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8c0::/46 Signature Algorithm: sha256WithRSAEncryption 44:7e:a9:d0:82:44:2c:37:e4:c1:5f:df:17:62:38:d6:91:8f: 0d:df:c2:9e:ca:ca:1b:2f:c1:3a:d2:ae:2d:14:70:d9:2f:6a: 2e:38:a6:19:e0:31:fd:35:de:03:2c:63:3e:ad:3b:11:29:22: df:e8:01:c2:95:c0:d9:2c:01:02:46:a8:33:ae:28:54:3c:27: da:95:e8:1e:6d:0f:d3:c1:8c:55:91:14:e1:bc:c9:cf:2f:54: 22:c8:05:78:54:33:33:f8:d9:98:e1:a0:bd:16:0e:e1:fc:11: 3d:57:c8:8d:55:6e:aa:9f:be:01:31:78:ba:3b:36:3a:43:05: 3a:8e:f5:71:3b:29:bb:88:57:de:e7:22:3e:4e:31:49:31:a4: c9:53:59:d1:93:e7:8a:97:a6:11:68:4b:7e:9f:9b:e3:9a:bf: 3f:5b:a2:34:13:07:dc:28:4d:c0:6e:80:8c:a6:71:0c:48:c1: 1d:aa:cf:05:ab:f0:4e:a7:bb:c9:7d:e8:e0:15:d7:81:e0:d8: ab:b2:5f:af:cd:25:52:a1:e3:53:56:15:db:fd:87:f3:2e:48: 10:f8:cc:c8:3c:58:be:15:b5:f2:cf:35:7d:0b:71:ce:d9:25: e8:4d:9f:81:da:f1:aa:67:f0:c4:24:2e:8a:58:d9:68:08:81: cb:47:7a:ea -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBHAoIXNC3ro2waBgpaxvFUcdglwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDE0OFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZWU3YzIwOTFmOTk4MjgzYmVlMTkx YzI1MWQxMjFmNDEzODE3NjUyODEzYmY4NWI4NDUxNTgyMGIyOWRhZDQyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2qRYyWEIlhFQXQFynYlHXjpZF9 Ayj3xh4nC0DQwum7Tc49Vm4i0z4Avsl4Zh1Fiwl4YRAo3pzYOBZXHWBW5MALxK55 gRVp8pqLWO8MoYtnmJ93zZVItCFzvEFGUe+XDYhKCsghJUrykIKnzx3V/aVMZu2t gK22fwAOYSno8gGgbJi0M+tm9Wbkla3Hi8cjdxeS0j0T1uezPQp8O6tPL+3A0WiI TFrW/tY1W631VJq9kyaoHtmYr52dkI2uOa+fio+tgz1rAw4GXp5oaXqMok9IJvEC +TVF6blGyQUpgtGuaYbGR+hAGCbsj9J5rC/kF0ub/8nFyQjZLODoJXt7GwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHfzf+4BJSBEyJf3zF5VxMCaJshuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0MjE0OWFjLTEzZTgtNDE5Yy1iM2M5LTQ2Mjc0Yzg5NDNkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaQjAMA0GCSqGSIb3DQEBCwUAA4IBAQBEfqnQgkQsN+TBX98X YjjWkY8N38KeysobL8E60q4tFHDZL2ouOKYZ4DH9Nd4DLGM+rTsRKSLf6AHClcDZ LAECRqgzrihUPCfalegebQ/TwYxVkRThvMnPL1QiyAV4VDMz+NmY4aC9Fg7h/BE9 V8iNVW6qn74BMXi6OzY6QwU6jvVxOym7iFfe5yI+TjFJMaTJU1nRk+eKl6YRaEt+ n5vjmr8/W6I0EwfcKE3AboCMpnEMSMEdqs8Fq/BOp7vJfejgFdeB4Nirsl+vzSVS oeNTVhXb/YfzLkgQ+MzIPFi+FbXyzzV9C3HO2SXoTZ+B2vGqZ/DEJC6KWNloCIHL R3rq -----END CERTIFICATE-----Generated at Thu Apr 17 18:00:09 2025 by rpki-client