$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e11bacb-927f-4615-8522-aca792db506c.roa File: 7e11bacb-927f-4615-8522-aca792db506c.roa (raw, json) Hash identifier: trrrIUZGrXkQTWQ+FIJBd3sBOo7hM4BwcfKtZSAl2WA= Subject key identifier: 54:77:D9:BB:D7:EE:BF:FF:C5:68:BE:A1:A5:61:72:EE:41:BC:ED:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7516DB4E9980B5F60166A465E5795E5C90892766 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e11bacb-927f-4615-8522-aca792db506c.roa Signing time: Tue 25 Mar 2025 15:21:10 +0000 ROA not before: Tue 25 Mar 2025 15:21:10 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:16:db:4e:99:80:b5:f6:01:66:a4:65:e5:79:5e:5c:90:89:27:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:21:10 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=7b4c1d0339e4db21b9c73feef385545994ae9b18e23a053db5b78589d3b92869, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:56:d1:2c:bb:af:d6:62:fa:24:8b:62:4b: a6:cc:7f:3b:fe:1f:8f:e8:c8:d0:03:95:37:bc:78: dc:bc:04:a6:b6:b0:4b:ed:46:14:c7:1f:87:d1:94: 24:46:e3:99:9f:33:62:49:38:43:e4:7f:25:85:a5: a1:6c:65:21:40:73:87:b5:9d:a9:b9:d7:47:1e:75: bc:1e:0f:e4:dc:58:a0:4f:98:1d:e2:73:8f:26:73: f5:90:b1:07:68:07:a1:51:dc:26:86:15:df:56:67: 71:72:20:07:b3:67:20:39:ba:08:86:67:ca:99:5e: c9:87:6c:05:46:86:d2:fe:24:a6:08:b6:eb:63:6f: 86:f9:09:ae:04:30:ce:00:40:b3:5b:e7:d6:05:24: 27:4d:ac:8e:63:02:ef:4f:70:4f:42:2e:3c:49:87: 07:26:6a:20:52:0d:57:a9:3c:de:f8:08:83:6e:51: c5:75:a6:b1:b5:ca:94:8b:8d:12:2d:c7:6f:47:d7: 1a:7a:02:ce:d6:64:6e:35:8d:b8:4d:c8:b4:65:09: 80:35:69:2e:1a:94:6f:0b:d4:f1:f4:2d:ec:35:6d: 4a:e5:d9:89:24:fb:65:c9:03:0e:e0:1c:45:86:15: fc:f4:be:9e:91:6e:85:e8:c8:ac:8f:0f:b3:b7:c4: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:77:D9:BB:D7:EE:BF:FF:C5:68:BE:A1:A5:61:72:EE:41:BC:ED:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e11bacb-927f-4615-8522-aca792db506c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:9040::/48 Signature Algorithm: sha256WithRSAEncryption b3:d3:bc:5d:9c:31:a7:67:c6:a7:f6:db:3d:1c:d8:48:5d:be: 7f:47:31:74:0e:c8:37:3b:db:f0:70:46:3a:fa:3d:d4:5b:b5: 2b:00:7d:e0:90:d4:38:17:ae:0e:a2:55:28:d4:c2:6f:ed:69: 27:42:84:cf:a3:b8:b5:81:9c:cb:7b:c5:59:20:f2:2c:8d:0b: 24:48:37:a5:41:eb:48:d1:74:a9:b1:ad:dc:39:e5:3c:9b:27: 58:84:1f:26:39:8d:01:f3:5b:49:6d:64:7c:33:27:35:e3:a2: 77:bf:d2:3a:5b:d9:3f:96:2c:5a:48:e8:5a:a1:be:3c:b9:a2: 8a:8b:88:db:6b:d0:17:e3:1e:c2:f9:72:c6:53:ec:4e:3c:51: 7b:cb:25:af:79:1b:23:87:02:4a:bc:8e:60:76:6c:96:89:2c: 16:11:22:65:c2:9e:f3:6c:db:b1:db:b2:c3:bc:14:c6:b3:61: fd:5b:3e:b7:be:92:31:87:5c:ef:44:9c:d9:64:01:e2:d3:01: 94:49:1a:a6:7d:1f:e1:8e:78:c7:ec:0f:14:a7:9c:54:59:67: 6e:31:e2:cd:80:bb:f2:55:69:18:92:0f:e0:e7:f1:85:3a:5a: 2c:11:fb:32:b5:c8:30:e0:02:53:f5:95:ff:3a:c4:6e:3c:93: d1:7c:23:b3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdRbbTpmAtfYBZqRl5XleXJCJJ2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MjExMFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAN2I0YzFkMDMzOWU0ZGIyMWI5Yzcz ZmVlZjM4NTU0NTk5NGFlOWIxOGUyM2EwNTNkYjViNzg1ODlkM2I5Mjg2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVlW0Sy7r9Zi+iSLYkumzH87/h+P 6MjQA5U3vHjcvASmtrBL7UYUxx+H0ZQkRuOZnzNiSThD5H8lhaWhbGUhQHOHtZ2p uddHHnW8Hg/k3FigT5gd4nOPJnP1kLEHaAehUdwmhhXfVmdxciAHs2cgOboIhmfK mV7Jh2wFRobS/iSmCLbrY2+G+QmuBDDOAECzW+fWBSQnTayOYwLvT3BPQi48SYcH JmogUg1XqTze+AiDblHFdaaxtcqUi40SLcdvR9caegLO1mRuNY24Tci0ZQmANWku GpRvC9Tx9C3sNW1K5dmJJPtlyQMO4BxFhhX89L6ekW6F6Misjw+zt8Q11wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFR32bvX7r//xWi+oaVhcu5BvO2aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlMTFiYWNiLTkyN2YtNDYxNS04NTIyLWFjYTc5MmRiNTA2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYZBAMA0GCSqGSIb3DQEBCwUAA4IBAQCz07xdnDGnZ8an9ts9 HNhIXb5/RzF0Dsg3O9vwcEY6+j3UW7UrAH3gkNQ4F64OolUo1MJv7WknQoTPo7i1 gZzLe8VZIPIsjQskSDelQetI0XSpsa3cOeU8mydYhB8mOY0B81tJbWR8Myc146J3 v9I6W9k/lixaSOhaob48uaKKi4jba9AX4x7C+XLGU+xOPFF7yyWveRsjhwJKvI5g dmyWiSwWESJlwp7zbNux27LDvBTGs2H9Wz63vpIxh1zvRJzZZAHi0wGUSRqmfR/h jnjH7A8Up5xUWWduMeLNgLvyVWkYkg/g5/GFOlosEfsytcgw4AJT9ZX/OsRuPJPR fCOz -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:43 2025 by rpki-client