$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa File: 5637e746-68a9-4187-b79d-5e4d4b5c348e.roa (raw, json) Hash identifier: 31me/HoQAnPxDvAbyyWxroR92lYcwYwsbZm/7QFump0= Subject key identifier: 7C:C3:D6:0B:82:0A:4F:83:9C:51:1E:C0:F8:D6:28:ED:BF:34:77:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7EB5B329C559B4C7D6F5E968C2BA4CF407C2FC86 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa Signing time: Tue 25 Mar 2025 16:50:20 +0000 ROA not before: Tue 25 Mar 2025 16:50:20 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2c:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b5:b3:29:c5:59:b4:c7:d6:f5:e9:68:c2:ba:4c:f4:07:c2:fc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:20 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ce98519475bedac759f6e41431b3d0921fcb33d1b0b1eb3e183d430efb68314a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:32:75:4e:f7:d1:be:40:4e:83:70:37:30: fc:ad:ef:93:3a:99:39:3e:1a:6e:49:6b:41:0c:4e: e1:34:af:e9:88:79:4b:c4:b7:7a:5c:40:2f:93:d4: 1f:af:37:f5:64:5f:f9:9c:6d:4d:aa:ca:98:a6:55: df:d9:b0:6d:a0:84:8f:59:1e:c0:80:03:45:c6:a4: c0:3b:32:6f:28:89:a5:97:06:c3:a6:5e:bf:c8:30: 4d:85:09:bd:e6:b5:80:c3:d4:f8:bf:24:1c:cd:1d: 6c:9c:bf:fe:57:0c:0c:e7:39:73:43:52:12:ad:fa: a1:b0:05:1c:78:d1:a3:b6:f8:12:38:40:61:5f:50: 4b:9e:48:45:70:fe:98:5b:4f:a5:d9:0c:a2:87:d2: cf:93:ed:0f:33:27:0e:c1:23:2a:63:21:57:33:6a: 9d:cc:e4:1e:95:94:4e:1c:30:24:ea:df:c1:c9:56: 6a:56:1e:4a:f8:46:82:19:d9:b4:a8:9c:a7:ec:5c: 47:62:eb:62:d0:1e:8a:b9:00:31:83:6c:f1:45:7e: c1:1b:47:33:f2:0c:60:ed:06:c1:55:b4:68:f6:8a: 93:26:16:bc:43:1a:7e:a6:93:ed:97:ce:d7:f0:ce: 45:a0:74:b7:16:07:e3:71:bb:5a:d8:0b:c9:1b:4c: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:D6:0B:82:0A:4F:83:9C:51:1E:C0:F8:D6:28:ED:BF:34:77:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c:8000::/36 Signature Algorithm: sha256WithRSAEncryption 0c:3a:89:57:66:a0:eb:66:04:dc:7d:ea:33:14:f4:6d:24:51: 76:0d:3c:26:92:f1:d7:5d:f5:c1:29:39:02:68:9a:b9:60:3c: 4a:17:26:be:a1:bb:be:f2:0d:d6:3e:5c:bc:0e:22:5d:4f:56: b2:f3:52:a3:b3:ed:d6:4f:44:f6:76:dc:c4:64:c6:d3:d8:4f: d8:e3:e5:92:44:d8:f0:64:d1:7a:0a:9f:9f:db:83:28:e6:19: cf:a2:a8:a8:66:69:f6:dc:76:71:fa:50:db:03:c7:9d:28:6a: 2b:a5:06:ba:ae:39:02:df:68:9a:03:f8:80:1f:c4:19:64:be: ab:1d:cf:a4:ab:fd:70:ad:8a:a2:09:94:9d:fb:cd:84:af:bd: 51:18:fe:cf:51:bc:b5:30:ad:a4:d0:3a:e8:64:4b:6d:09:8f: f3:45:3b:1d:2a:72:13:48:0f:99:f8:ed:3e:72:c6:85:3c:84: c1:3f:82:51:ee:0a:6f:8a:d8:a8:b0:c8:c5:f6:42:5c:f1:6c: 55:73:ec:be:68:ec:1f:e1:96:4c:c7:d7:f4:29:c6:20:7c:e8: 08:ed:f5:7b:92:df:fc:5b:82:86:53:f3:07:8d:52:62:8a:e1: 52:eb:60:cc:91:a1:be:b3:83:ec:a1:97:89:f9:53:d8:a1:d4: a9:da:0c:89 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfrWzKcVZtMfW9elowrpM9AfC/IYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTAyMFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAY2U5ODUxOTQ3NWJlZGFjNzU5ZjZl NDE0MzFiM2QwOTIxZmNiMzNkMWIwYjFlYjNlMTgzZDQzMGVmYjY4MzE0YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmEydU730b5AToNwNzD8re+TOpk5 PhpuSWtBDE7hNK/piHlLxLd6XEAvk9Qfrzf1ZF/5nG1NqsqYplXf2bBtoISPWR7A gANFxqTAOzJvKImllwbDpl6/yDBNhQm95rWAw9T4vyQczR1snL/+VwwM5zlzQ1IS rfqhsAUceNGjtvgSOEBhX1BLnkhFcP6YW0+l2Qyih9LPk+0PMycOwSMqYyFXM2qd zOQelZROHDAk6t/ByVZqVh5K+EaCGdm0qJyn7FxHYuti0B6KuQAxg2zxRX7BG0cz 8gxg7QbBVbRo9oqTJha8Qxp+ppPtl87X8M5FoHS3Fgfjcbta2AvJG0x6MwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHzD1guCCk+DnFEewPjWKO2/NHeUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MzdlNzQ2LTY4YTktNDE4Ny1iNzlkLTVlNGQ0YjVjMzQ4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLIAwDQYJKoZIhvcNAQELBQADggEBAAw6iVdmoOtmBNx96jMU 9G0kUXYNPCaS8ddd9cEpOQJomrlgPEoXJr6hu77yDdY+XLwOIl1PVrLzUqOz7dZP RPZ23MRkxtPYT9jj5ZJE2PBk0XoKn5/bgyjmGc+iqKhmafbcdnH6UNsDx50oaiul BrquOQLfaJoD+IAfxBlkvqsdz6Sr/XCtiqIJlJ37zYSvvVEY/s9RvLUwraTQOuhk S20Jj/NFOx0qchNID5n47T5yxoU8hME/glHuCm+K2KiwyMX2QlzxbFVz7L5o7B/h lkzH1/QpxiB86Ajt9XuS3/xbgoZT8weNUmKK4VLrYMyRob6zg+yhl4n5U9ih1Kna DIk= -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:43 2025 by rpki-client