$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa File: 869e5c68-564f-4aa0-a84a-56dac3c414a5.roa (raw, json) Hash identifier: qBVv1Ia8LuuaRKpjPP1tczzfJBLO7fA6ign8IqBstOI= Subject key identifier: B3:8D:0B:42:A4:01:49:22:EC:01:C6:4D:38:92:7D:8B:9E:5C:AD:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D2BF0E851ACA928384AA8DBEA9AAE471B35D5FC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa Signing time: Tue 25 Mar 2025 15:20:24 +0000 ROA not before: Tue 25 Mar 2025 15:20:24 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:90c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:f0:e8:51:ac:a9:28:38:4a:a8:db:ea:9a:ae:47:1b:35:d5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:20:24 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=760a200e8ea4bafa8e99e4a79dc19a571a6b6377008585f93cb801cc761cf109, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:1b:0f:9f:81:e6:a0:3a:c2:cf:c4:a4:e0: f9:b8:ca:55:6a:ec:b6:c7:0c:ab:09:19:de:ab:79: f7:27:c9:55:27:61:a5:68:a7:73:68:7b:ac:2d:38: e3:f7:45:2b:d6:99:02:5f:04:50:3b:08:9b:25:e5: 20:50:a3:26:c0:45:de:62:bc:03:a5:7b:61:17:85: 56:73:d1:d2:ef:72:ad:46:c7:66:ed:1d:44:c7:e1: 61:3f:00:25:cb:99:86:c3:73:3a:4b:97:95:00:d6: 91:3b:ec:31:bd:f2:4f:b7:9a:69:f7:70:a3:07:a1: 07:bc:35:42:8a:78:23:ad:7d:2a:03:d6:2b:81:f4: 08:34:63:fe:38:b0:91:a9:f4:2f:f0:cf:51:73:9c: eb:05:ee:e1:e1:f5:80:56:ea:bf:8d:0e:cc:75:8c: 8e:d5:08:fc:07:4f:0e:14:05:82:82:89:8e:e6:19: 14:63:77:dd:40:14:96:7f:cc:b8:92:8a:a1:00:44: 99:b8:70:9a:e5:15:42:d0:11:c6:18:a2:f5:93:63: 8a:50:01:b0:c8:59:16:bb:d7:d6:0e:5a:d6:8b:4e: d9:43:ba:3f:ba:db:6c:4f:cf:31:bf:bb:62:fb:dd: 51:10:1e:7f:36:7a:81:94:4d:c2:34:e7:bd:df:7e: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8D:0B:42:A4:01:49:22:EC:01:C6:4D:38:92:7D:8B:9E:5C:AD:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:90c0::/46 Signature Algorithm: sha256WithRSAEncryption 10:d3:cb:16:70:e4:54:af:6d:a0:d3:90:f3:6d:2f:ab:b5:12: 32:db:89:d9:fe:14:db:cf:70:48:f2:5c:03:f2:19:07:f5:61: ac:19:f7:99:bc:73:10:74:a6:ce:ae:72:e8:32:1c:df:55:01: ea:04:99:7f:ec:37:5f:63:66:9b:6a:77:22:db:86:ea:a0:44: 6f:0e:b5:7b:8d:fc:96:8f:84:7b:68:07:96:b3:97:3f:df:da: b4:aa:dc:a9:6e:2c:c5:ac:9d:3c:8c:39:e5:0e:71:6a:04:a5: 91:93:02:08:b2:de:26:82:00:99:89:5f:05:98:79:12:ad:53: d3:f0:6d:04:dc:68:c2:3a:82:f5:6c:58:0d:de:19:de:76:83: 7f:bf:e9:b0:f2:b9:e0:3b:a4:a1:68:59:dc:d0:26:e8:f0:c2: 93:57:3e:95:e4:44:a2:31:45:15:83:14:2c:95:d0:52:8f:fc: 5f:8f:95:bb:03:c6:00:28:54:ca:f4:83:b0:8b:a9:b4:c2:24: 5b:eb:a0:54:3f:68:5b:de:21:e2:e6:49:65:17:c9:4d:f7:5f: 8e:08:af:17:de:d9:d2:01:fc:02:06:42:b8:a3:ed:9c:74:7c: 95:81:40:28:9b:fc:eb:6a:24:87:11:35:85:59:35:3e:66:63: d7:3d:37:ba -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXSvw6FGsqSg4Sqjb6pquRxs11fwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MjAyNFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANzYwYTIwMGU4ZWE0YmFmYThlOTll NGE3OWRjMTlhNTcxYTZiNjM3NzAwODU4NWY5M2NiODAxY2M3NjFjZjEwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9AbD5+B5qA6ws/EpOD5uMpVauy2 xwyrCRneq3n3J8lVJ2GlaKdzaHusLTjj90Ur1pkCXwRQOwibJeUgUKMmwEXeYrwD pXthF4VWc9HS73KtRsdm7R1Ex+FhPwAly5mGw3M6S5eVANaRO+wxvfJPt5pp93Cj B6EHvDVCingjrX0qA9YrgfQINGP+OLCRqfQv8M9Rc5zrBe7h4fWAVuq/jQ7MdYyO 1Qj8B08OFAWCgomO5hkUY3fdQBSWf8y4koqhAESZuHCa5RVC0BHGGKL1k2OKUAGw yFkWu9fWDlrWi07ZQ7o/uttsT88xv7ti+91REB5/NnqBlE3CNOe9336pgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLONC0KkAUki7AHGTTiSfYueXK0QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2OWU1YzY4LTU2NGYtNGFhMC1hODRhLTU2ZGFjM2M0MTRhNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaZDAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ08sWcORUr22g05Dz bS+rtRIy24nZ/hTbz3BI8lwD8hkH9WGsGfeZvHMQdKbOrnLoMhzfVQHqBJl/7Ddf Y2abanci24bqoERvDrV7jfyWj4R7aAeWs5c/39q0qtypbizFrJ08jDnlDnFqBKWR kwIIst4mggCZiV8FmHkSrVPT8G0E3GjCOoL1bFgN3hnedoN/v+mw8rngO6ShaFnc 0Cbo8MKTVz6V5ESiMUUVgxQsldBSj/xfj5W7A8YAKFTK9IOwi6m0wiRb66BUP2hb 3iHi5kllF8lN91+OCK8X3tnSAfwCBkK4o+2cdHyVgUAom/zraiSHETWFWTU+ZmPX PTe6 -----END CERTIFICATE-----Generated at Thu Apr 17 17:45:57 2025 by rpki-client