$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa File: 6863d6e5-517f-4f3b-8358-e9965de82700.roa (raw, json) Hash identifier: YjDmHd+cjRSk3bVNLa8QYBCeRd59cMH4oYQTWlfLrQA= Subject key identifier: 69:5D:BF:B8:7F:20:0F:B4:DC:D0:38:07:8B:9F:E0:1D:86:67:9E:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69FAFD1F20A59266FF37DA7EE5DBDEAC1AFD7815 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa Signing time: Tue 25 Mar 2025 00:00:59 +0000 ROA not before: Tue 25 Mar 2025 00:00:59 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:fd:1f:20:a5:92:66:ff:37:da:7e:e5:db:de:ac:1a:fd:78:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:00:59 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=8dc32fa59242781f00e554bfce9dfb6d6f9a2f2aa869003a4209a61e6b40355d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:f8:b3:8f:36:3f:b0:a9:39:25:85:ce:ab: ad:4e:b0:8d:a2:4b:41:6f:7b:65:5b:7b:0d:d6:c7: 66:1e:23:19:84:40:cb:a2:77:a2:fd:c2:3f:6d:f6: 14:09:21:ff:8a:69:23:82:98:be:a8:70:9b:f4:b8: 1b:fb:f8:af:9e:4c:e2:d0:6b:b7:ee:5e:11:26:b1: a2:be:1e:3c:16:49:7b:4f:62:c0:bd:ec:dd:d1:44: a6:eb:6b:ec:24:16:58:ad:3c:35:4b:11:56:8a:00: fb:67:a6:71:16:21:7a:40:50:d3:b2:71:8e:59:c9: 15:8c:61:d2:97:98:ba:5a:4e:98:07:da:a2:a3:ad: f8:85:75:42:66:81:e2:14:80:e1:f3:b9:9c:80:bb: 42:43:ba:10:6b:dc:2c:fd:b0:5d:54:01:e5:a0:e7: bf:b9:fc:86:3f:49:fd:43:60:4e:9c:e1:c5:30:b4: 85:d0:8a:ca:7f:d1:69:52:a6:3e:80:b7:36:c6:74: 6d:72:0e:95:33:7d:1f:d2:09:fc:33:7d:e0:65:32: e8:b5:d2:ee:a8:02:3f:98:58:38:42:00:5c:78:5a: d4:27:4c:74:a9:21:1a:32:4f:4a:a6:67:a3:52:ca: fd:82:af:19:43:79:35:69:a6:07:17:69:cb:e3:ae: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:BF:B8:7F:20:0F:B4:DC:D0:38:07:8B:9F:E0:1D:86:67:9E:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 65:a7:e1:aa:75:31:21:f6:44:ea:ce:07:84:f5:5d:91:ee:3e: 8e:01:b5:3f:ab:e4:ba:85:86:75:79:e0:9e:8c:41:a6:85:b8: 3a:61:25:ab:90:e7:2b:7d:04:f2:85:cb:bd:cf:df:a2:7d:04: ae:f8:c3:e4:7b:ad:dd:61:a8:8f:e1:a7:4a:1d:25:8f:1e:aa: a0:e9:72:90:54:e0:33:0e:31:63:71:27:2c:9b:7d:d6:78:ab: fe:77:3b:8b:e9:da:20:98:01:1a:d5:36:e3:10:e6:15:13:c6: 9b:94:23:b2:55:4d:99:98:d2:de:f4:02:d5:a4:65:cd:61:98: d1:8f:4d:1d:29:c9:04:12:da:0d:a8:66:11:c1:92:c5:b3:42: 92:ec:43:50:ca:20:7a:9e:2b:c4:78:57:28:c7:8c:94:bf:22: b3:21:19:e4:ea:b9:ee:3a:94:cc:91:ef:da:ea:95:d7:af:5d: 84:69:0d:62:1e:af:ce:73:1d:58:32:41:56:f0:e1:8c:b2:aa: 96:46:88:a2:69:7a:b8:09:4a:b8:d3:e7:d6:17:95:3f:52:1c: 2a:5b:68:cb:11:8a:43:db:7e:f6:4b:2d:ba:fe:d3:3a:99:dc: 87:0f:ce:a1:53:e7:80:1e:73:69:10:8a:04:2f:49:26:e8:98: a6:43:c5:1c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUafr9HyClkmb/N9p+5dverBr9eBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMDA1OVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOGRjMzJmYTU5MjQyNzgxZjAwZTU1 NGJmY2U5ZGZiNmQ2ZjlhMmYyYWE4NjkwMDNhNDIwOWE2MWU2YjQwMzU1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqen4s482P7CpOSWFzqutTrCNoktB b3tlW3sN1sdmHiMZhEDLonei/cI/bfYUCSH/imkjgpi+qHCb9Lgb+/ivnkzi0Gu3 7l4RJrGivh48Fkl7T2LAvezd0USm62vsJBZYrTw1SxFWigD7Z6ZxFiF6QFDTsnGO WckVjGHSl5i6Wk6YB9qio634hXVCZoHiFIDh87mcgLtCQ7oQa9ws/bBdVAHloOe/ ufyGP0n9Q2BOnOHFMLSF0IrKf9FpUqY+gLc2xnRtcg6VM30f0gn8M33gZTLotdLu qAI/mFg4QgBceFrUJ0x0qSEaMk9KpmejUsr9gq8ZQ3k1aaYHF2nL465ZKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGldv7h/IA+03NA4B4uf4B2GZ56vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4NjNkNmU1LTUxN2YtNGYzYi04MzU4LWU5OTY1ZGU4MjcwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8sjAMA0GCSqGSIb3DQEBCwUAA4IBAQBlp+GqdTEh9kTqzgeE 9V2R7j6OAbU/q+S6hYZ1eeCejEGmhbg6YSWrkOcrfQTyhcu9z9+ifQSu+MPke63d YaiP4adKHSWPHqqg6XKQVOAzDjFjcScsm33WeKv+dzuL6dogmAEa1TbjEOYVE8ab lCOyVU2ZmNLe9ALVpGXNYZjRj00dKckEEtoNqGYRwZLFs0KS7ENQyiB6nivEeFco x4yUvyKzIRnk6rnuOpTMke/a6pXXr12EaQ1iHq/Ocx1YMkFW8OGMsqqWRoiiaXq4 CUq40+fWF5U/UhwqW2jLEYpD2372Sy26/tM6mdyHD86hU+eAHnNpEIoEL0km6Jim Q8Uc -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:11 2025 by rpki-client