$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa File: 56aba584-e6fd-42ac-9d3c-f747713e6c50.roa (raw, json) Hash identifier: +ntXzEpBpCEY3Mo+folKMBAlD7JCodlvFj2Gr6VakWU= Subject key identifier: E9:41:85:23:ED:A0:24:C6:74:49:ED:A8:FE:5C:BF:5C:7C:14:D9:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64497E27A5086F34F8079434AB1665049DCA5C8D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa Signing time: Mon 24 Mar 2025 15:01:24 +0000 ROA not before: Mon 24 Mar 2025 15:01:24 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:49:7e:27:a5:08:6f:34:f8:07:94:34:ab:16:65:04:9d:ca:5c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:01:24 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=cd32ab54cb17d1e6bc9bf729ca45020857067958ced7393ab969e0763a780eda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:94:47:e5:9f:3e:00:48:bd:dc:4b:a2:eb: 5a:c6:a3:6d:2d:58:77:92:c8:d4:62:3b:d4:94:44: cf:3e:2e:b3:fd:69:10:18:32:35:b8:5e:82:bb:93: d7:be:52:99:ce:2f:f3:90:d5:7d:e3:e6:eb:b6:68: db:50:f5:12:d7:5d:56:19:56:e0:20:c8:07:78:63: 8b:9f:68:5a:ad:32:61:e6:6c:38:74:f2:8b:33:62: e6:b4:bd:63:99:58:99:80:f3:f9:92:15:2e:be:35: 1c:f2:19:26:ab:ca:7d:9d:d0:a9:2f:7b:86:6a:6c: 71:e6:96:77:88:1e:a1:29:6f:e8:53:b1:34:94:35: 69:43:ad:17:a6:1a:1d:98:8c:95:0a:39:1b:2a:e9: 04:04:53:bb:eb:5e:8b:53:05:f3:4b:9e:d0:91:3f: 89:d6:6b:4d:3d:18:1c:2e:66:2c:6d:45:00:04:96: 3d:d0:18:c7:e8:e1:76:4a:81:28:65:71:d7:41:28: b7:9a:b7:e1:bc:70:2f:59:35:fc:11:52:88:3f:3c: 09:26:73:b2:5f:99:e8:20:8f:3c:10:8b:da:0d:c8: 9b:8c:fb:f0:9f:57:f7:e4:d7:8a:14:d3:ab:46:31: 38:56:44:18:8f:28:a4:5a:03:c8:71:74:76:0f:12: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:41:85:23:ED:A0:24:C6:74:49:ED:A8:FE:5C:BF:5C:7C:14:D9:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c840::/48 Signature Algorithm: sha256WithRSAEncryption 63:e5:12:0d:d9:a3:0e:80:b3:5d:c2:2c:f2:73:1f:a8:cc:b7: 2e:b2:64:7b:07:eb:b7:60:83:4e:e2:1f:ed:04:54:20:9f:f7: c6:f5:51:5e:6a:f9:e0:f6:83:9a:2e:a2:b6:5c:e2:46:45:2a: 4e:1c:49:95:7d:d1:6c:df:5f:f6:c2:ea:b7:8d:cd:82:fd:11: e7:9b:68:0d:2f:56:de:9b:0c:89:72:c8:ac:e8:8e:9d:6a:6d: 6a:49:36:03:2e:8c:ed:04:a1:d9:bf:a5:ca:a9:06:10:b9:8b: 2c:0a:24:21:bd:92:63:ab:53:21:0f:4a:d9:27:68:b8:82:ff: f1:2b:73:c5:46:89:3a:3c:0a:2f:af:be:6a:d4:d9:ea:b1:d7: 14:0d:44:1f:d0:85:f1:ee:b6:de:82:3f:96:6d:8f:d6:83:de: a3:37:bb:45:da:a6:18:46:e7:d2:75:dd:8e:a0:3b:eb:ff:1a: a0:2c:51:40:00:38:4c:59:ee:67:d7:85:6b:b5:d7:23:a8:6b: 21:6b:76:c6:6a:77:33:54:9b:d8:56:71:6a:12:3a:84:c4:4a: b5:f4:3a:c0:7d:c6:c3:98:dc:07:8f:fb:e9:cb:29:86:60:60: 47:f4:78:da:0e:94:9c:ae:d8:ba:75:fd:8f:59:c9:4b:9e:58: 3f:09:ba:9f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZEl+J6UIbzT4B5Q0qxZlBJ3KXI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDEyNFoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAY2QzMmFiNTRjYjE3ZDFlNmJjOWJm NzI5Y2E0NTAyMDg1NzA2Nzk1OGNlZDczOTNhYjk2OWUwNzYzYTc4MGVkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4mUR+WfPgBIvdxLoutaxqNtLVh3 ksjUYjvUlETPPi6z/WkQGDI1uF6Cu5PXvlKZzi/zkNV94+brtmjbUPUS111WGVbg IMgHeGOLn2harTJh5mw4dPKLM2LmtL1jmViZgPP5khUuvjUc8hkmq8p9ndCpL3uG amxx5pZ3iB6hKW/oU7E0lDVpQ60XphodmIyVCjkbKukEBFO7616LUwXzS57QkT+J 1mtNPRgcLmYsbUUABJY90BjH6OF2SoEoZXHXQSi3mrfhvHAvWTX8EVKIPzwJJnOy X5noII88EIvaDcibjPvwn1f35NeKFNOrRjE4VkQYjyikWgPIcXR2DxLGgQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOlBhSPtoCTGdEntqP5cv1x8FNkfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2YWJhNTg0LWU2ZmQtNDJhYy05ZDNjLWY3NDc3MTNlNmM1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMhAMA0GCSqGSIb3DQEBCwUAA4IBAQBj5RIN2aMOgLNdwizy cx+ozLcusmR7B+u3YINO4h/tBFQgn/fG9VFeavng9oOaLqK2XOJGRSpOHEmVfdFs 31/2wuq3jc2C/RHnm2gNL1bemwyJcsis6I6dam1qSTYDLoztBKHZv6XKqQYQuYss CiQhvZJjq1MhD0rZJ2i4gv/xK3PFRok6PAovr75q1NnqsdcUDUQf0IXx7rbegj+W bY/Wg96jN7tF2qYYRufSdd2OoDvr/xqgLFFAADhMWe5n14VrtdcjqGsha3bGancz VJvYVnFqEjqExEq19DrAfcbDmNwHj/vpyymGYGBH9HjaDpScrti6df2PWclLnlg/ Cbqf -----END CERTIFICATE-----Generated at Thu Apr 17 18:00:10 2025 by rpki-client