$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e02e531-f45f-49be-9529-f33d23fae32e.roa File: 6e02e531-f45f-49be-9529-f33d23fae32e.roa (raw, json) Hash identifier: 8fhQ8PigOB4S9Kr28XGauae7t7pM3XEtSzGFo3opPb8= Subject key identifier: 6B:5B:6A:0B:4A:BF:EF:AD:DB:65:6A:49:AA:DA:0D:AE:AF:60:81:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 230004BF7548D35D5EB7FCC38A3E9C38ADEEC70B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e02e531-f45f-49be-9529-f33d23fae32e.roa Signing time: Tue 25 Mar 2025 15:51:51 +0000 ROA not before: Tue 25 Mar 2025 15:51:51 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:04:bf:75:48:d3:5d:5e:b7:fc:c3:8a:3e:9c:38:ad:ee:c7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:51:51 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=4550f1ea6f16672f53ee770e462cb4e4405710b13e34d551a3e97b9050994375, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:57:a2:f0:2a:11:c9:ee:9c:8a:b0:92:8a: e4:a6:36:40:3e:54:1c:2d:6c:fb:6d:02:3c:95:10: 9b:9c:13:5e:39:06:f5:41:c6:0e:66:9e:b0:dd:36: 37:98:f0:f1:dc:1d:7f:33:4d:fa:6f:87:39:60:61: 46:d8:14:58:4a:77:76:95:4d:50:df:d2:35:9f:03: 9f:d5:89:7a:79:da:da:8d:f3:76:6b:18:06:1a:d2: 61:bc:15:77:7d:e2:dd:aa:f9:c1:60:81:14:70:7c: 88:d7:f6:69:08:b6:34:b0:f9:80:57:1c:49:4d:6f: 06:86:06:d4:2b:c8:be:87:cb:7f:57:15:ca:97:b9: 46:4d:d4:6b:e6:c9:09:7a:3e:39:f8:6c:ab:a0:37: ef:8b:c0:bd:1d:af:f6:3f:26:6a:73:ac:92:33:6d: 13:01:55:d2:13:30:3b:c1:c9:b7:b9:a5:18:37:af: 2b:65:41:e9:21:89:af:37:b3:a0:10:f2:2e:4e:0c: 0a:59:f2:19:d9:72:28:7f:d8:a0:f7:68:ef:c3:ef: eb:4d:47:91:3d:62:d5:4c:14:d3:b2:76:9c:6b:5a: 94:9f:e4:d0:5c:ba:d6:c0:14:7b:16:23:4f:26:e3: 59:55:56:83:18:9a:89:ef:34:cc:c2:f1:35:66:23: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5B:6A:0B:4A:BF:EF:AD:DB:65:6A:49:AA:DA:0D:AE:AF:60:81:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e02e531-f45f-49be-9529-f33d23fae32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:80c0::/46 Signature Algorithm: sha256WithRSAEncryption 71:08:88:19:34:22:d7:8b:2d:ce:93:80:a1:2a:d6:16:0f:15: 12:14:8e:c6:87:9f:62:df:fd:6b:50:61:18:ae:08:6b:ec:fe: 9f:3a:3e:47:2c:7c:a9:cd:33:3b:21:14:67:b7:da:2c:9d:0a: cc:f0:61:23:55:c6:cf:1c:f8:05:28:5e:fe:06:82:dc:72:e9: c5:fa:4d:ed:e9:36:3c:d6:a0:55:a7:6d:f4:bf:f1:55:ff:1e: 94:bc:ef:2c:34:a3:e7:2b:4d:28:95:e0:32:1b:2c:c8:db:50: ef:d2:2e:2b:d0:f4:27:d9:ac:61:fb:4a:97:26:42:79:02:e5: b2:ea:5b:71:23:1b:ec:0a:44:dc:68:74:b2:ef:71:fe:2c:e0: ee:af:7c:80:16:d4:ff:f5:20:32:ef:07:75:46:33:05:c2:05: 8a:43:50:73:8d:ad:84:ce:c8:5e:0b:15:21:5a:4a:a1:e0:bb: ce:e7:28:08:c4:ae:b3:c4:1e:d1:5c:3a:28:40:7f:41:ee:70: b6:93:57:74:b6:5b:42:ea:56:bc:bc:a2:49:10:e1:42:59:2e: 17:ff:40:a4:ea:d2:d0:f1:17:6a:df:ae:08:3e:e7:45:15:99: c9:5e:75:03:6b:35:7c:f9:93:d7:cc:3d:30:f4:49:1e:af:07: 7a:5c:29:04 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIwAEv3VI011et/zDij6cOK3uxwswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NTE1MVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANDU1MGYxZWE2ZjE2NjcyZjUzZWU3 NzBlNDYyY2I0ZTQ0MDU3MTBiMTNlMzRkNTUxYTNlOTdiOTA1MDk5NDM3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsRXovAqEcnunIqwkorkpjZAPlQc LWz7bQI8lRCbnBNeOQb1QcYOZp6w3TY3mPDx3B1/M036b4c5YGFG2BRYSnd2lU1Q 39I1nwOf1Yl6edrajfN2axgGGtJhvBV3feLdqvnBYIEUcHyI1/ZpCLY0sPmAVxxJ TW8GhgbUK8i+h8t/VxXKl7lGTdRr5skJej45+GyroDfvi8C9Ha/2PyZqc6ySM20T AVXSEzA7wcm3uaUYN68rZUHpIYmvN7OgEPIuTgwKWfIZ2XIof9ig92jvw+/rTUeR PWLVTBTTsnaca1qUn+TQXLrWwBR7FiNPJuNZVVaDGJqJ7zTMwvE1ZiP+5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGtbagtKv++t22VqSaraDa6vYIHtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlMDJlNTMxLWY0NWYtNDliZS05NTI5LWYzM2QyM2ZhZTMyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba94DAMA0GCSqGSIb3DQEBCwUAA4IBAQBxCIgZNCLXiy3Ok4Ch KtYWDxUSFI7Gh59i3/1rUGEYrghr7P6fOj5HLHypzTM7IRRnt9osnQrM8GEjVcbP HPgFKF7+BoLccunF+k3t6TY81qBVp230v/FV/x6UvO8sNKPnK00oleAyGyzI21Dv 0i4r0PQn2axh+0qXJkJ5AuWy6ltxIxvsCkTcaHSy73H+LODur3yAFtT/9SAy7wd1 RjMFwgWKQ1Bzja2EzsheCxUhWkqh4LvO5ygIxK6zxB7RXDooQH9B7nC2k1d0tltC 6la8vKJJEOFCWS4X/0Ck6tLQ8Rdq364IPudFFZnJXnUDazV8+ZPXzD0w9Ekerwd6 XCkE -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:17 2025 by rpki-client