$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa File: 561b2653-251b-4a06-91e6-d8a55b1ccb18.roa (raw, json) Hash identifier: s+5V3GQnjLL/gNxRAnj/S8ObLmvNINd/mPfWn9kxJRg= Subject key identifier: 75:F0:D2:56:45:7B:2C:D8:7C:CF:C3:73:64:46:AF:CA:A5:BC:BC:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 078065B1F9758633FA2BFA159F806B6A6A68B9CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa Signing time: Tue 25 Mar 2025 16:10:16 +0000 ROA not before: Tue 25 Mar 2025 16:10:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:80:65:b1:f9:75:86:33:fa:2b:fa:15:9f:80:6b:6a:6a:68:b9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:10:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=24219dcd41eafd122803f430695100de51fe11a94ced098273b0365c1c51f36f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:46:53:97:32:df:fe:0a:58:12:57:c3:f4: da:40:c0:e4:46:1d:3b:59:df:79:b6:c5:fa:04:6a: 29:28:9f:4d:89:c8:ef:ac:8b:1d:9d:b1:be:78:9f: 68:6e:8a:d4:1e:18:a2:41:2a:ee:73:21:5e:6b:54: ff:f2:7f:e2:8e:f0:50:d9:53:d2:02:86:79:ec:e2: 0c:ec:d7:d4:3b:fa:1c:e0:d6:98:06:c3:ec:d4:b7: 5e:55:02:05:4d:7f:9a:65:b0:85:b3:b9:64:90:6b: a8:13:85:a8:29:0e:9c:15:b2:14:22:3f:84:0a:f7: 79:3f:ba:00:9d:c1:e5:a9:72:a9:7f:06:7e:84:aa: 95:23:ac:8b:3d:a4:51:70:10:cf:b1:80:08:7c:9e: 9b:f0:c3:53:3e:5f:26:79:01:83:c5:d9:e3:fe:00: 3d:46:8b:e2:34:cf:ab:11:54:3a:5b:8f:29:05:07: 2a:0e:89:50:d8:ab:5b:80:82:5d:68:89:ad:50:5d: a6:ff:cc:94:12:e8:21:95:df:bd:c3:f8:04:48:46: 61:c1:fd:df:9f:02:ab:bb:6b:44:ff:8d:69:21:8a: c2:ed:b1:46:f8:f8:00:5c:f8:7d:93:45:db:4a:c4: 1a:69:4c:8e:77:d4:3e:3f:9d:02:69:cf:44:58:b9: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F0:D2:56:45:7B:2C:D8:7C:CF:C3:73:64:46:AF:CA:A5:BC:BC:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:8800::/40 Signature Algorithm: sha256WithRSAEncryption 82:07:c7:cc:6c:27:a4:ca:1a:68:2c:e9:be:8d:b2:90:e9:09: c2:8d:7c:74:70:28:33:db:15:e9:77:27:ca:8e:88:bd:f0:93: 16:33:60:1e:4d:50:03:e0:0c:5f:60:90:8e:56:3a:ed:8d:df: b3:f4:6d:07:68:d2:8a:60:28:cf:2e:2d:6e:68:01:53:51:6f: 72:af:1f:ee:d2:b5:79:07:0e:e6:05:c2:00:6e:0b:fa:f1:f5: bb:58:13:51:b2:66:80:26:9e:9c:4d:09:15:7d:f7:f4:de:b7: e9:d9:5a:99:9f:3b:f5:f7:5d:81:d8:95:44:9e:8f:27:39:2e: 35:6d:b0:cb:48:73:73:43:6f:f8:0f:d0:2f:8c:a8:2b:45:cb: de:48:0e:ff:e0:58:a1:65:ed:c9:b8:6c:86:63:86:c3:c5:44: c4:d2:e8:8b:17:4c:f1:f7:01:f6:83:bd:8e:52:a0:90:23:8b: ef:2a:99:f9:bc:0a:fb:1e:15:16:93:c3:fe:56:0d:dc:c4:72: 6e:95:e6:6c:e4:8b:d9:84:e7:a2:61:56:9e:f8:cb:13:1d:24: 4e:20:4e:46:dd:a6:19:b6:c5:56:10:b8:b9:ec:de:db:cd:01: 0b:c0:74:7a:ae:d0:95:8a:57:09:14:fb:68:a6:32:42:9d:81: 62:f3:0d:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUB4Blsfl1hjP6K/oVn4BrampoucswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTAxNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMjQyMTlkY2Q0MWVhZmQxMjI4MDNm NDMwNjk1MTAwZGU1MWZlMTFhOTRjZWQwOTgyNzNiMDM2NWMxYzUxZjM2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCpGU5cy3/4KWBJXw/TaQMDkRh07 Wd95tsX6BGopKJ9NicjvrIsdnbG+eJ9oborUHhiiQSrucyFea1T/8n/ijvBQ2VPS AoZ57OIM7NfUO/oc4NaYBsPs1LdeVQIFTX+aZbCFs7lkkGuoE4WoKQ6cFbIUIj+E Cvd5P7oAncHlqXKpfwZ+hKqVI6yLPaRRcBDPsYAIfJ6b8MNTPl8meQGDxdnj/gA9 RoviNM+rEVQ6W48pBQcqDolQ2KtbgIJdaImtUF2m/8yUEughld+9w/gESEZhwf3f nwKru2tE/41pIYrC7bFG+PgAXPh9k0XbSsQaaUyOd9Q+P50Cac9EWLlndwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHXw0lZFeyzYfM/Dc2RGr8qlvLynMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MWIyNjUzLTI1MWItNGEwNi05MWU2LWQ4YTU1YjFjY2IxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMogwDQYJKoZIhvcNAQELBQADggEBAIIHx8xsJ6TKGmgs6b6N spDpCcKNfHRwKDPbFel3J8qOiL3wkxYzYB5NUAPgDF9gkI5WOu2N37P0bQdo0opg KM8uLW5oAVNRb3KvH+7StXkHDuYFwgBuC/rx9btYE1GyZoAmnpxNCRV99/Tet+nZ WpmfO/X3XYHYlUSejyc5LjVtsMtIc3NDb/gP0C+MqCtFy95IDv/gWKFl7cm4bIZj hsPFRMTS6IsXTPH3AfaDvY5SoJAji+8qmfm8CvseFRaTw/5WDdzEcm6V5mzki9mE 56JhVp74yxMdJE4gTkbdphm2xVYQuLns3tvNAQvAdHqu0JWKVwkU+2imMkKdgWLz Deg= -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:38 2025 by rpki-client