$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa File: 727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa (raw, json) Hash identifier: z2klZauJ41JmJbfFO2EVJX8NweIk1hPqsHSpNjMzlow= Subject key identifier: A2:98:5D:59:F4:59:10:13:B5:A0:96:59:6A:4D:FC:34:34:A6:E8:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 022E3620D9CB42F11CE4FB493BC1945A50FA801F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa Signing time: Mon 24 Mar 2025 15:00:12 +0000 ROA not before: Mon 24 Mar 2025 15:00:12 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2e:36:20:d9:cb:42:f1:1c:e4:fb:49:3b:c1:94:5a:50:fa:80:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:00:12 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=8ae149f05bab18d10008463a7f0e8b587b9f9007b9e5158380a2514cf9ea572f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:0b:49:19:a4:d2:bd:59:97:4d:42:3b:41: d9:18:9d:9b:67:2a:76:21:2c:c1:8b:a5:ad:84:41: d2:89:d9:72:1d:55:11:a1:08:cf:5f:5d:28:db:ed: 6b:b4:c0:dd:0e:05:b4:17:e6:97:1e:f7:33:e2:4b: f3:48:f7:a8:62:b3:74:41:c5:9c:90:20:e2:34:a5: 8b:23:7a:82:c8:c9:13:dd:75:fa:ab:a6:18:25:d8: 64:39:88:46:59:8d:45:a4:2d:10:cc:33:46:55:e1: 89:2e:17:1d:6a:be:a9:96:c4:f1:e2:41:20:43:34: 03:c6:35:8e:e1:ee:fe:e3:82:f0:7a:12:ae:d0:9b: fe:93:e3:bd:a6:e1:c5:0b:89:aa:8c:86:30:5b:9c: bc:d2:6f:9f:a0:0d:45:4b:b8:78:61:ae:b9:05:40: 82:45:e8:91:9a:9d:18:63:81:7a:03:01:aa:fd:fb: 07:4c:6a:45:cf:08:c3:ca:e8:e2:c4:a4:65:8d:be: df:2e:a2:6c:bd:9d:a5:61:29:65:51:77:ab:2d:22: 04:ed:fb:b9:8e:06:d2:cf:b4:c0:ae:d2:f8:34:cc: 8b:67:d2:a3:80:72:01:15:a1:f1:51:21:72:f7:2f: 03:9b:00:cd:24:be:4e:2a:73:04:52:ee:44:96:cc: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:5D:59:F4:59:10:13:B5:A0:96:59:6A:4D:FC:34:34:A6:E8:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7080::/48 Signature Algorithm: sha256WithRSAEncryption 21:25:6a:27:dc:7f:00:cb:fe:33:bb:cd:fd:a8:f8:d8:ea:17: 38:ac:6e:69:44:fd:45:ba:5d:44:9b:8d:2a:cc:27:0f:f9:fe: 12:38:55:4b:75:6f:f1:bb:86:37:de:04:37:57:23:0b:51:fc: b6:b8:55:1f:4f:12:54:99:a7:7d:e2:c5:e5:5c:77:d4:f5:c8: c5:63:77:2a:24:d9:99:d2:70:2c:dd:9e:cc:2a:d7:fc:b9:15: 4f:4e:74:a8:5b:dc:a5:3b:0e:0e:79:7f:3f:3b:d9:6a:a3:f9: 23:8e:22:6f:33:26:59:ff:83:8b:02:84:8e:52:e9:57:a0:81: ab:11:d5:65:a8:31:04:ac:5d:63:62:58:8b:72:f4:0c:9a:42: f4:59:8b:49:4d:10:d8:49:a6:a9:a6:3b:e5:7d:b4:dc:a9:a0: 78:3b:b1:1e:82:52:ad:c2:ff:15:91:f3:37:da:31:57:a7:6b: cd:ef:03:22:b8:f9:c7:3d:95:39:0b:a4:31:6a:aa:a9:e7:88: e1:5e:eb:1e:0b:39:c8:a1:7d:1e:35:d5:ad:77:86:90:b4:4c: 9e:a9:bd:58:8d:7f:6a:d7:5e:66:97:c9:20:9b:75:e1:08:b7: 07:34:03:27:d8:10:60:9a:a5:6f:4c:8a:37:7a:73:0b:33:97: ce:77:3d:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAi42INnLQvEc5PtJO8GUWlD6gB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDAxMloX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAOGFlMTQ5ZjA1YmFiMThkMTAwMDg0 NjNhN2YwZThiNTg3YjlmOTAwN2I5ZTUxNTgzODBhMjUxNGNmOWVhNTcyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPgLSRmk0r1Zl01CO0HZGJ2bZyp2 ISzBi6WthEHSidlyHVURoQjPX10o2+1rtMDdDgW0F+aXHvcz4kvzSPeoYrN0QcWc kCDiNKWLI3qCyMkT3XX6q6YYJdhkOYhGWY1FpC0QzDNGVeGJLhcdar6plsTx4kEg QzQDxjWO4e7+44LwehKu0Jv+k+O9puHFC4mqjIYwW5y80m+foA1FS7h4Ya65BUCC ReiRmp0YY4F6AwGq/fsHTGpFzwjDyujixKRljb7fLqJsvZ2lYSllUXerLSIE7fu5 jgbSz7TArtL4NMyLZ9KjgHIBFaHxUSFy9y8DmwDNJL5OKnMEUu5ElsxTWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKKYXVn0WRATtaCWWWpN/DQ0pujiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyN2M4OTZiLTQ0NWMtNGZlNC1hZjBmLTljMGM5ZDdhZTNiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/3CAMA0GCSqGSIb3DQEBCwUAA4IBAQAhJWon3H8Ay/4zu839 qPjY6hc4rG5pRP1Ful1Em40qzCcP+f4SOFVLdW/xu4Y33gQ3VyMLUfy2uFUfTxJU mad94sXlXHfU9cjFY3cqJNmZ0nAs3Z7MKtf8uRVPTnSoW9ylOw4OeX8/O9lqo/kj jiJvMyZZ/4OLAoSOUulXoIGrEdVlqDEErF1jYliLcvQMmkL0WYtJTRDYSaappjvl fbTcqaB4O7EeglKtwv8VkfM32jFXp2vN7wMiuPnHPZU5C6Qxaqqp54jhXuseCznI oX0eNdWtd4aQtEyeqb1YjX9q115ml8kgm3XhCLcHNAMn2BBgmqVvTIo3enMLM5fO dz1r -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:52 2025 by rpki-client