$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa File: 5bbba35a-ebdf-420c-9fbe-831fe4124982.roa (raw, json) Hash identifier: tBXwsC/lJzfXqaX0Hczy+IPVnlIjHghhUCm2JcHa2kc= Subject key identifier: C1:F0:69:D9:23:80:72:79:95:52:F1:8D:D7:81:AE:A7:88:96:FC:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 16D8072A9CF2F58FEA56E0B8C81B6902EDE61CD6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa Signing time: Tue 25 Mar 2025 16:00:15 +0000 ROA not before: Tue 25 Mar 2025 16:00:15 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d8:07:2a:9c:f2:f5:8f:ea:56:e0:b8:c8:1b:69:02:ed:e6:1c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:00:15 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=3e7d4abf96687e279550af72ded590abfa011a39721daedd0b78e8cc79df016b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:df:e0:93:e8:a2:11:8f:29:4d:b1:b7:da: a8:6a:92:8e:0b:8f:5a:b9:9c:94:6b:96:00:29:63: b8:30:43:7f:44:b2:9f:10:ff:46:f2:29:fa:f6:c0: c1:03:58:41:96:02:4d:4b:81:94:97:dd:fe:7b:d3: 6d:f0:7e:2d:92:66:b0:c7:97:0c:d6:58:56:87:d2: 49:42:89:6a:da:de:3f:6c:62:0d:74:c8:38:4f:8c: 25:f7:b6:fd:bb:52:bf:2d:0a:fc:1b:f5:e4:7a:7a: 17:ca:bf:47:4f:7d:ee:6a:ff:07:67:f1:27:29:23: f8:9c:a0:53:e2:72:70:55:fd:0a:41:2a:e6:ce:9a: 36:f9:06:c1:07:39:0e:00:5b:e0:b8:6e:04:63:35: 30:5a:c9:71:6e:97:f4:37:7b:6e:e4:ba:c3:50:86: 51:37:46:24:ff:06:06:12:55:90:07:d0:bb:a7:29: 3c:25:66:a5:55:30:67:1c:e3:d2:69:3e:ee:a8:10: e1:14:31:b0:b4:fe:46:ca:e8:fe:4a:54:33:70:59: a4:09:42:11:6a:1a:e9:55:db:36:d3:e9:a6:64:f8: 53:aa:b8:e9:60:12:50:82:bd:e6:85:f0:43:99:9f: 7c:09:e0:2d:30:6b:ea:98:f0:ea:a1:e2:f8:07:12: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:69:D9:23:80:72:79:95:52:F1:8D:D7:81:AE:A7:88:96:FC:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:6040::/46 Signature Algorithm: sha256WithRSAEncryption 86:8d:b5:60:d1:15:6a:87:14:3e:dc:85:2a:3e:19:16:1b:c5: fb:c9:81:84:38:80:15:c6:94:90:c3:a7:bd:58:de:89:ed:82: 07:69:14:e3:ab:26:0d:bb:75:58:ce:64:6b:f3:5d:6b:3f:b5: 6e:82:13:25:6f:8d:8c:3f:d6:1d:e3:31:9d:2e:86:29:41:9b: a5:11:68:01:6f:3a:59:a2:1d:bf:86:d5:ad:ac:5f:60:21:6c: c6:f2:0c:cb:99:9c:b7:67:74:68:b2:95:0f:01:77:37:a7:15: 0b:4d:63:98:59:51:ff:92:a7:0c:f2:0c:4b:de:dd:67:e7:63: 7f:e1:b5:5b:0f:ce:43:e3:fc:aa:82:c2:df:5d:2e:50:4b:40: 7d:85:89:d9:a8:d7:9d:70:6a:51:7f:8b:3a:02:f1:6d:cd:4a: d0:9d:1e:79:12:a7:85:8f:b8:02:8b:4d:5f:b2:a3:be:1b:0e: 1e:76:e6:8b:3f:bd:0a:9e:47:5a:9a:fd:ba:3c:a6:e3:01:e0: af:2e:c6:9a:d7:d9:2a:ae:40:ff:68:f1:d5:7d:4c:dc:f6:54: 0e:4e:5d:ec:a9:22:58:d1:26:bb:75:93:85:f9:61:48:73:c4: 58:13:fc:6b:54:fc:ab:41:09:35:7b:3f:83:76:0c:c6:50:77: 74:a5:00:fd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFtgHKpzy9Y/qVuC4yBtpAu3mHNYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDAxNVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAM2U3ZDRhYmY5NjY4N2UyNzk1NTBh ZjcyZGVkNTkwYWJmYTAxMWEzOTcyMWRhZWRkMGI3OGU4Y2M3OWRmMDE2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcXf4JPoohGPKU2xt9qoapKOC49a uZyUa5YAKWO4MEN/RLKfEP9G8in69sDBA1hBlgJNS4GUl93+e9Nt8H4tkmawx5cM 1lhWh9JJQolq2t4/bGINdMg4T4wl97b9u1K/LQr8G/XkenoXyr9HT33uav8HZ/En KSP4nKBT4nJwVf0KQSrmzpo2+QbBBzkOAFvguG4EYzUwWslxbpf0N3tu5LrDUIZR N0Yk/wYGElWQB9C7pyk8JWalVTBnHOPSaT7uqBDhFDGwtP5Gyuj+SlQzcFmkCUIR ahrpVds20+mmZPhTqrjpYBJQgr3mhfBDmZ98CeAtMGvqmPDqoeL4BxJ8NQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMHwadkjgHJ5lVLxjdeBrqeIlvxrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViYmJhMzVhLWViZGYtNDIwYy05ZmJlLTgzMWZlNDEyNDk4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+2BAMA0GCSqGSIb3DQEBCwUAA4IBAQCGjbVg0RVqhxQ+3IUq PhkWG8X7yYGEOIAVxpSQw6e9WN6J7YIHaRTjqyYNu3VYzmRr811rP7VughMlb42M P9Yd4zGdLoYpQZulEWgBbzpZoh2/htWtrF9gIWzG8gzLmZy3Z3RospUPAXc3pxUL TWOYWVH/kqcM8gxL3t1n52N/4bVbD85D4/yqgsLfXS5QS0B9hYnZqNedcGpRf4s6 AvFtzUrQnR55EqeFj7gCi01fsqO+Gw4eduaLP70Knkdamv26PKbjAeCvLsaa19kq rkD/aPHVfUzc9lQOTl3sqSJY0Sa7dZOF+WFIc8RYE/xrVPyrQQk1ez+DdgzGUHd0 pQD9 -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:31 2025 by rpki-client