$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa File: 5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa (raw, json) Hash identifier: 9w91f9JmLYYTcpK42CVF3jKnXwpGyjYvtxwwamtu0mw= Subject key identifier: 38:41:9F:CE:D0:16:81:E8:D7:D1:B3:33:7A:22:CB:37:0A:D1:42:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31AFCDEF1179F0986BAE821F4B64F93BBA8F071E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa Signing time: Tue 25 Mar 2025 16:01:00 +0000 ROA not before: Tue 25 Mar 2025 16:01:00 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:af:cd:ef:11:79:f0:98:6b:ae:82:1f:4b:64:f9:3b:ba:8f:07:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:00 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=6c8e245e17d5be1d6b039f526ffe556e86087e4918f0a00a1118e32ceae8c3f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:19:85:33:e9:77:d3:aa:c9:99:0a:6e:fd: cb:fd:b0:ba:9f:1e:bb:8d:b4:ef:be:25:26:57:a7: bc:e3:dd:44:ce:70:e5:4c:52:59:e0:a9:af:e4:13: 2b:6b:29:da:26:e8:e5:a7:fc:b8:e8:f6:e7:43:04: c3:6f:4d:f8:ca:1a:cf:4d:55:84:db:87:82:3c:d7: f0:fe:59:63:c0:c6:48:7e:9b:5d:28:71:e5:33:59: 84:2d:35:6b:56:1d:6a:c6:20:65:f2:c0:7d:f2:e7: 05:00:ea:e8:48:de:a3:58:33:9e:ab:8a:d5:a3:66: f9:34:c0:e1:21:72:ad:4e:d3:ba:35:72:f4:94:5c: 12:ba:60:e4:4c:76:6d:12:5d:1d:65:73:44:aa:aa: 0c:a8:76:f0:2b:a7:3e:64:44:ad:41:2f:85:b5:ea: 22:6b:60:f2:9f:ad:d7:d2:aa:17:24:d9:52:d0:63: 49:77:b8:96:6f:a9:56:e4:e7:c0:ff:ba:b1:1d:96: 8c:23:46:18:6c:be:17:9a:73:7b:b5:44:c2:6e:f3: 94:35:4d:f9:11:42:b0:b5:be:4a:2f:e4:6a:e6:43: 86:a5:fa:d5:f7:02:3b:72:35:9a:48:fe:d2:8c:47: fc:4b:19:58:d4:b0:85:3c:26:5f:ab:23:b2:c5:10: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:9F:CE:D0:16:81:E8:D7:D1:B3:33:7A:22:CB:37:0A:D1:42:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:840::/46 Signature Algorithm: sha256WithRSAEncryption 6a:bb:00:5e:89:3c:3d:2a:36:78:14:f4:ae:d5:15:b0:23:4d: 27:0e:77:3d:bf:d3:26:bd:5b:49:c0:b0:8a:90:e7:8f:bc:ee: 7b:6e:54:87:6d:3d:31:96:05:85:fd:a3:63:25:f7:ec:45:d3: 2e:b5:77:6c:99:bd:6d:af:1c:5f:80:85:09:90:47:55:99:8e: 09:b6:db:d9:f8:e1:63:6a:d3:21:9d:5f:20:4b:f5:8a:a9:1f: 34:9b:3d:fc:34:d7:62:8c:74:02:4e:ce:78:61:f8:df:24:f4: 2d:66:2b:d0:34:22:7c:88:df:2b:9e:2b:4c:1b:4f:c3:4e:b8: 7a:7a:fc:67:bf:28:2b:48:55:df:22:06:cd:da:52:81:b3:1d: 03:59:82:1d:f4:22:f4:e6:93:1b:a6:25:f0:e1:29:e7:7c:3e: 15:eb:9b:ee:84:39:86:90:fb:21:d1:a2:5a:a5:a3:34:62:8c: ce:75:12:3e:a2:f9:54:92:fc:31:cb:0c:e6:19:39:17:ea:90: 32:90:00:1e:59:3b:d4:23:c3:2e:7c:fa:8a:d2:bd:69:37:fa: ae:d3:38:f8:8a:bf:4f:15:c5:d8:f9:65:d4:f5:5c:a9:49:6c: fe:40:99:eb:be:e9:97:b5:04:e7:99:62:42:2d:55:03:8f:7a: 44:07:5e:6c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMa/N7xF58JhrroIfS2T5O7qPBx4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDEwMFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANmM4ZTI0NWUxN2Q1YmUxZDZiMDM5 ZjUyNmZmZTU1NmU4NjA4N2U0OTE4ZjBhMDBhMTExOGUzMmNlYWU4YzNmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMQZhTPpd9OqyZkKbv3L/bC6nx67 jbTvviUmV6e8491EznDlTFJZ4Kmv5BMraynaJujlp/y46PbnQwTDb034yhrPTVWE 24eCPNfw/lljwMZIfptdKHHlM1mELTVrVh1qxiBl8sB98ucFAOroSN6jWDOeq4rV o2b5NMDhIXKtTtO6NXL0lFwSumDkTHZtEl0dZXNEqqoMqHbwK6c+ZEStQS+Fteoi a2Dyn63X0qoXJNlS0GNJd7iWb6lW5OfA/7qxHZaMI0YYbL4XmnN7tUTCbvOUNU35 EUKwtb5KL+Rq5kOGpfrV9wI7cjWaSP7SjEf8SxlY1LCFPCZfqyOyxRAJKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDhBn87QFoHo19GzM3oiyzcK0UKLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkNWFmYmQ2LThkOGMtNDlhOS1iZWE2LThlOGY2YjgwODgyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+whAMA0GCSqGSIb3DQEBCwUAA4IBAQBquwBeiTw9KjZ4FPSu 1RWwI00nDnc9v9MmvVtJwLCKkOePvO57blSHbT0xlgWF/aNjJffsRdMutXdsmb1t rxxfgIUJkEdVmY4JttvZ+OFjatMhnV8gS/WKqR80mz38NNdijHQCTs54YfjfJPQt ZivQNCJ8iN8rnitMG0/DTrh6evxnvygrSFXfIgbN2lKBsx0DWYId9CL05pMbpiXw 4SnnfD4V65vuhDmGkPsh0aJapaM0YozOdRI+ovlUkvwxywzmGTkX6pAykAAeWTvU I8MufPqK0r1pN/qu0zj4ir9PFcXY+WXU9VypSWz+QJnrvumXtQTnmWJCLVUDj3pE B15s -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:32 2025 by rpki-client