$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa File: 7c72c9cc-5e02-4b29-84f1-24b580f20438.roa (raw, json) Hash identifier: /fcYiSiRjfsGvRqR4Msn3NMMQrFYbTMmu6X8gDrVnhw= Subject key identifier: 6B:DF:25:DE:1E:E4:52:C1:B8:1F:8F:14:B0:05:92:31:E9:FA:1E:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5778C1389D75CE30F7227F0EC4ED933C63705A9E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa Signing time: Tue 25 Mar 2025 16:31:37 +0000 ROA not before: Tue 25 Mar 2025 16:31:37 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:78:c1:38:9d:75:ce:30:f7:22:7f:0e:c4:ed:93:3c:63:70:5a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:31:37 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=cb08d670e421814da73872f151e5746e50c9b6a8bcfc8d7e9a42a627c8c7b4d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:7d:20:1d:3e:10:fa:9c:ee:d6:33:15:7d: 74:66:16:71:0e:2e:5d:a4:69:8e:8d:22:d1:b2:bd: 7f:25:c2:b8:67:cc:69:8f:b8:59:29:be:b2:21:d5: 08:ee:1e:cc:4c:27:1e:aa:da:e2:c8:73:9f:12:22: e2:64:aa:40:1e:6f:8e:a0:c1:18:c5:d3:98:4d:47: ce:3c:7b:ff:61:b1:6f:ed:96:21:c3:19:66:20:b7: 0c:68:3a:44:40:eb:ea:40:5a:77:25:0d:e2:de:65: 4f:3c:f0:3f:0c:f2:2a:a1:06:3d:b1:12:ae:80:18: 5a:ff:4f:45:de:bf:5b:bb:48:8e:90:7d:ec:c2:4c: da:2d:dc:2b:48:89:12:ca:88:64:1a:1b:5b:79:29: 75:61:db:d5:db:40:ca:6a:05:0c:0b:8b:f9:96:62: 44:99:a3:17:95:53:c0:ad:e8:e3:1c:d7:3c:5c:53: 6a:d3:cc:4e:67:76:3d:dd:01:59:ae:28:89:c3:5a: 49:0b:91:43:78:2f:aa:2c:89:df:3f:b5:ff:61:93: 46:95:b6:3f:14:aa:22:73:56:d8:49:91:e3:91:46: e7:38:c8:05:98:75:52:bf:bd:d8:2b:65:f4:74:35: 3c:67:2c:4d:c9:99:98:54:78:45:83:e7:c9:a2:6e: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DF:25:DE:1E:E4:52:C1:B8:1F:8F:14:B0:05:92:31:E9:FA:1E:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b:c00::/38 Signature Algorithm: sha256WithRSAEncryption 46:9c:8c:b0:68:83:47:d6:d6:0b:78:e6:09:48:cd:49:61:94: 6f:bc:0d:88:23:f1:52:08:3e:6f:60:55:73:c5:48:7d:63:a2: 50:3d:11:27:81:80:8c:87:60:83:95:48:b6:15:84:66:09:f5: 3f:2c:1d:a6:99:80:79:13:e9:f2:cb:d3:86:55:d4:e1:73:f1: f5:a3:01:8c:5e:0c:ca:1b:f1:6f:6f:88:ca:72:a4:f0:10:a1: 9f:29:4d:29:d5:4a:95:37:3f:50:95:f0:85:13:a7:5e:a3:c2: d9:f0:a6:6e:7d:06:56:e0:e0:80:4f:ee:3d:31:51:23:82:ba: ae:d2:3e:6a:4a:3a:9e:67:c8:0a:99:d4:95:c7:33:c3:11:b3: 84:dd:b3:f0:cf:5d:dc:42:c0:c0:a7:ce:b3:84:0d:cf:ea:54: cd:5f:67:80:4a:37:19:f4:cf:da:4e:ac:f6:ea:8f:50:f8:93: 78:c6:e3:c4:30:05:61:0b:11:7e:e1:48:be:f8:48:a6:5a:34: 21:33:d8:ba:8c:c0:eb:41:33:ed:13:26:ef:37:29:cb:40:6a: 08:b4:07:c3:1b:4e:14:d3:fe:4d:42:cd:5f:02:8c:b7:43:09: 2a:77:48:4d:54:15:05:31:f5:dd:5e:08:d8:bd:70:4c:8a:94: 73:7c:a3:d0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUV3jBOJ11zjD3In8OxO2TPGNwWp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MzEzN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAY2IwOGQ2NzBlNDIxODE0ZGE3Mzg3 MmYxNTFlNTc0NmU1MGM5YjZhOGJjZmM4ZDdlOWE0MmE2MjdjOGM3YjRkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNt9IB0+EPqc7tYzFX10ZhZxDi5d pGmOjSLRsr1/JcK4Z8xpj7hZKb6yIdUI7h7MTCceqtriyHOfEiLiZKpAHm+OoMEY xdOYTUfOPHv/YbFv7ZYhwxlmILcMaDpEQOvqQFp3JQ3i3mVPPPA/DPIqoQY9sRKu gBha/09F3r9bu0iOkH3swkzaLdwrSIkSyohkGhtbeSl1YdvV20DKagUMC4v5lmJE maMXlVPArejjHNc8XFNq08xOZ3Y93QFZriiJw1pJC5FDeC+qLInfP7X/YZNGlbY/ FKoic1bYSZHjkUbnOMgFmHVSv73YK2X0dDU8ZyxNyZmYVHhFg+fJom4sswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGvfJd4e5FLBuB+PFLAFkjHp+h4fMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjNzJjOWNjLTVlMDItNGIyOS04NGYxLTI0YjU4MGYyMDQzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwwwDQYJKoZIhvcNAQELBQADggEBAEacjLBog0fW1gt45glI zUlhlG+8DYgj8VIIPm9gVXPFSH1jolA9ESeBgIyHYIOVSLYVhGYJ9T8sHaaZgHkT 6fLL04ZV1OFz8fWjAYxeDMob8W9viMpypPAQoZ8pTSnVSpU3P1CV8IUTp16jwtnw pm59Blbg4IBP7j0xUSOCuq7SPmpKOp5nyAqZ1JXHM8MRs4Tds/DPXdxCwMCnzrOE Dc/qVM1fZ4BKNxn0z9pOrPbqj1D4k3jG48QwBWELEX7hSL74SKZaNCEz2LqMwOtB M+0TJu83KctAagi0B8MbThTT/k1CzV8CjLdDCSp3SE1UFQUx9d1eCNi9cEyKlHN8 o9A= -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:51 2025 by rpki-client