$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f63c109-3767-4ab1-9d83-4718a77c8903.roa File: 7f63c109-3767-4ab1-9d83-4718a77c8903.roa (raw, json) Hash identifier: uT5JvnHQkOPFHT3ag01PiUT0mfj8IwON3mJOcjN/xII= Subject key identifier: BA:8A:A7:72:A9:A5:F9:95:70:5F:36:AE:63:22:A6:B5:21:2F:58:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72FCFD7B0ADBA21F5EBFB223248E881794F459FB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f63c109-3767-4ab1-9d83-4718a77c8903.roa Signing time: Tue 25 Mar 2025 00:50:47 +0000 ROA not before: Tue 25 Mar 2025 00:50:47 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fc:fd:7b:0a:db:a2:1f:5e:bf:b2:23:24:8e:88:17:94:f4:59:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:50:47 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=0ef9d8e6874ae51182b46d4130987fb71c80abb8ee3607f98d36af04753a84e3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:44:91:c0:2c:2e:6a:71:59:fa:6c:98:8e: 2c:b0:27:3c:b6:b7:ce:03:52:86:b8:04:ca:04:c1: 85:1f:50:a7:7a:7d:a6:80:56:ac:d4:4f:ec:1a:23: 72:79:e3:06:f3:0a:9f:cc:78:ad:4e:67:83:32:a1: 15:17:a9:ef:5e:dd:0e:06:19:3f:7d:74:03:ef:87: 6d:f6:87:84:07:9d:a7:13:78:2d:fb:fe:ec:13:18: 66:22:10:f5:22:5a:77:ec:48:62:41:14:af:1d:e1: e8:05:e6:c5:a3:18:7c:c4:ef:99:b8:f3:3f:30:92: 83:22:9c:16:b6:12:49:53:55:08:59:c3:5b:79:a5: c2:08:42:74:be:d1:3f:62:c3:82:11:98:53:58:5f: ee:1b:fe:68:c7:37:13:ca:b5:ae:a4:a6:69:a2:be: 94:fe:18:67:5b:01:3a:74:97:3a:e5:65:84:c2:27: 80:21:dc:4c:e7:0b:e3:00:0d:44:52:0c:27:c8:3e: ab:64:ac:b6:a7:02:8a:75:b4:e2:60:ff:1b:e0:e0: f7:da:cf:79:da:dc:db:91:e0:c5:c6:69:e3:a0:95: af:cc:85:36:0d:9e:b0:0e:4e:a5:56:ad:7e:d3:55: 2e:aa:ca:55:1d:b4:75:75:a2:22:62:cf:af:86:b4: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:A7:72:A9:A5:F9:95:70:5F:36:AE:63:22:A6:B5:21:2F:58:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f63c109-3767-4ab1-9d83-4718a77c8903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:9080::/48 Signature Algorithm: sha256WithRSAEncryption 77:7e:d0:67:90:35:f9:ff:70:24:cc:35:cd:05:96:75:06:bf: c6:f4:25:fc:33:0e:da:79:f1:13:64:8f:98:37:b2:ee:4d:e8: 84:ed:43:c6:7d:f6:b6:35:fb:5e:b6:cc:de:e3:46:2a:c8:28: 0d:75:11:ea:14:d5:50:d6:15:58:4a:d3:3f:cd:31:05:61:4e: e7:41:35:b6:d5:af:97:a2:3c:e9:59:cc:e1:15:e1:a9:4f:85: 59:fc:84:d4:fe:e3:47:09:1a:5a:fd:4e:c3:af:eb:74:48:ad: 9e:5c:5e:4f:d1:d5:c6:45:8e:bc:54:b2:87:4f:ca:d2:7f:eb: 03:ac:c9:e8:05:43:80:42:de:50:40:d2:12:bb:27:65:8e:bc: bc:02:da:da:09:1c:3c:5d:ba:ef:6d:f6:80:cc:48:6a:88:af: 52:e1:3e:f6:ac:a7:fe:8a:02:e9:05:1a:c1:92:a1:25:1d:7f: 16:fb:98:ff:75:5f:93:60:53:9c:a2:18:99:12:0b:65:6c:95: 25:a3:66:79:56:b6:62:42:fd:c3:58:30:8c:c8:18:4e:a5:7c: 95:3b:08:8a:e7:59:99:d0:a9:f2:2f:18:fc:e0:af:a3:07:eb: 32:e0:23:90:2b:7c:21:d4:36:69:ab:27:d7:9e:bb:6c:39:43: 7d:ed:6e:15 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcvz9ewrboh9ev7IjJI6IF5T0WfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTA0N1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMGVmOWQ4ZTY4NzRhZTUxMTgyYjQ2 ZDQxMzA5ODdmYjcxYzgwYWJiOGVlMzYwN2Y5OGQzNmFmMDQ3NTNhODRlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj39EkcAsLmpxWfpsmI4ssCc8trfO A1KGuATKBMGFH1Cnen2mgFas1E/sGiNyeeMG8wqfzHitTmeDMqEVF6nvXt0OBhk/ fXQD74dt9oeEB52nE3gt+/7sExhmIhD1Ilp37EhiQRSvHeHoBebFoxh8xO+ZuPM/ MJKDIpwWthJJU1UIWcNbeaXCCEJ0vtE/YsOCEZhTWF/uG/5oxzcTyrWupKZpor6U /hhnWwE6dJc65WWEwieAIdxM5wvjAA1EUgwnyD6rZKy2pwKKdbTiYP8b4OD32s95 2tzbkeDFxmnjoJWvzIU2DZ6wDk6lVq1+01UuqspVHbR1daIiYs+vhrSPpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLqKp3KppfmVcF82rmMiprUhL1geMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmNjNjMTA5LTM3NjctNGFiMS05ZDgzLTQ3MThhNzdjODkwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYZCAMA0GCSqGSIb3DQEBCwUAA4IBAQB3ftBnkDX5/3AkzDXN BZZ1Br/G9CX8Mw7aefETZI+YN7LuTeiE7UPGffa2Nftetsze40YqyCgNdRHqFNVQ 1hVYStM/zTEFYU7nQTW21a+XojzpWczhFeGpT4VZ/ITU/uNHCRpa/U7Dr+t0SK2e XF5P0dXGRY68VLKHT8rSf+sDrMnoBUOAQt5QQNISuydljry8AtraCRw8XbrvbfaA zEhqiK9S4T72rKf+igLpBRrBkqElHX8W+5j/dV+TYFOcohiZEgtlbJUlo2Z5VrZi Qv3DWDCMyBhOpXyVOwiK51mZ0KnyLxj84K+jB+sy4COQK3wh1DZpqyfXnrtsOUN9 7W4V -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:34 2025 by rpki-client