$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa File: 89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa (raw, json) Hash identifier: yhbrnuDKFBNn2W44LtsizVjTq+/GtbNMc7a4nh4WJgc= Subject key identifier: CD:9E:0D:06:DE:D0:50:DA:CC:14:A0:F5:0E:AA:49:1C:50:07:87:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38AF6B9A1291D945EDFB2E8F7C7E8D874A27D421 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa Signing time: Tue 25 Mar 2025 15:10:27 +0000 ROA not before: Tue 25 Mar 2025 15:10:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:af:6b:9a:12:91:d9:45:ed:fb:2e:8f:7c:7e:8d:87:4a:27:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:10:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a3a3b96b4cc6a519767abcb8dff3532baac36ca49311e75ed3f5fc14711be0b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5d:2e:93:5e:ef:d2:29:f9:11:4e:22:99:df: 2c:58:8d:4f:62:4a:84:2f:cc:24:9d:9a:49:b3:78: 25:e6:8d:12:ed:67:22:06:5f:71:e5:de:92:c3:6a: 58:ba:87:e5:75:9e:f4:7a:0b:ae:e5:8f:fd:b8:9a: 86:e3:53:fd:e6:e7:37:12:e1:b6:09:cb:e4:a4:39: 9c:a2:32:22:33:a8:e8:78:c6:99:66:90:53:53:ea: 3a:d6:9e:6f:8a:e1:c9:c7:13:58:99:3d:a3:71:88: c7:d3:2a:52:06:0d:e8:51:9e:ab:0c:8a:77:5c:6f: 25:be:e3:dc:29:a5:0e:1d:5d:1f:74:ca:af:45:d3: 62:f2:19:78:8e:70:51:28:a9:bd:ea:f7:74:fe:68: 8a:bc:28:14:8f:6a:50:19:f4:ba:60:3e:44:fd:68: d1:4f:70:c1:6a:5f:80:44:97:ee:b5:88:39:55:54: e4:de:98:c3:c0:73:30:29:b3:e3:e9:cb:76:8e:c1: ae:12:fd:da:f8:65:d2:3e:ba:f7:34:00:11:39:d9: f2:b5:fd:2e:7d:aa:c0:c3:2c:de:2d:c9:51:7a:8f: 1e:35:e1:ef:c8:95:ad:ed:c0:1b:b9:9f:d7:a1:4d: 46:47:82:0f:ed:72:db:6d:4f:9f:ea:03:a0:12:93: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9E:0D:06:DE:D0:50:DA:CC:14:A0:F5:0E:AA:49:1C:50:07:87:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2020::/46 Signature Algorithm: sha256WithRSAEncryption 59:91:c2:ce:27:b7:87:0c:58:a4:63:13:dd:6a:f8:ac:42:ad: 36:a2:91:12:4b:59:17:3d:0c:43:0f:be:b4:5b:81:1a:16:12: 88:ff:8f:8b:83:cf:8c:c5:d5:4d:df:f8:06:02:6a:02:fa:81: 60:5e:b7:b2:b0:0c:5a:8c:12:f7:b4:3e:43:45:d0:fc:9d:d8: b7:f6:56:95:1b:ba:27:1c:60:0a:b1:c9:32:dc:77:e5:b5:75: 91:e4:e1:61:93:e1:b2:11:70:00:2b:43:c9:cf:11:33:b3:42: 12:d9:c2:bd:1e:63:56:4d:9e:a2:ed:12:dc:05:8c:ed:9f:b5: a9:12:03:25:1f:92:8f:c6:64:b0:cf:e0:b5:10:ea:df:8c:c4: 57:96:ac:f6:69:91:d0:bb:6c:5a:4e:0a:5c:d5:83:7a:a4:d4: 98:ab:54:16:23:6b:7f:b3:4d:91:81:89:b6:0d:b4:5b:17:28: 9b:c4:5a:7e:92:fd:97:8c:f6:8e:70:5b:4b:85:3b:42:af:ff: f9:c2:36:3c:49:19:5f:cc:07:fe:20:24:f5:3e:36:58:6a:5f: 96:e7:e2:39:2a:a7:19:75:f8:15:43:d4:7e:4d:3c:60:b4:28: 78:e5:a3:6b:53:86:3d:88:5e:2e:77:c7:67:9c:ac:66:1e:bc: f7:10:7a:94 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOK9rmhKR2UXt+y6PfH6Nh0on1CEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MTAyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTNhM2I5NmI0Y2M2YTUxOTc2N2Fi Y2I4ZGZmMzUzMmJhYWMzNmNhNDkzMTFlNzVlZDNmNWZjMTQ3MTFiZTBiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+F0uk17v0in5EU4imd8sWI1PYkqE L8wknZpJs3gl5o0S7WciBl9x5d6Sw2pYuofldZ70eguu5Y/9uJqG41P95uc3EuG2 CcvkpDmcojIiM6joeMaZZpBTU+o61p5viuHJxxNYmT2jcYjH0ypSBg3oUZ6rDIp3 XG8lvuPcKaUOHV0fdMqvRdNi8hl4jnBRKKm96vd0/miKvCgUj2pQGfS6YD5E/WjR T3DBal+ARJfutYg5VVTk3pjDwHMwKbPj6ct2jsGuEv3a+GXSPrr3NAAROdnytf0u farAwyzeLclReo8eNeHvyJWt7cAbuZ/XoU1GR4IP7XLbbU+f6gOgEpMXQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM2eDQbe0FDazBSg9Q6qSRxQB4ddMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmJiNWM1LTBmZjktNDU0OC1iYjUwLTZlNDIxZWM2ZTI3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9yAgMA0GCSqGSIb3DQEBCwUAA4IBAQBZkcLOJ7eHDFikYxPd avisQq02opESS1kXPQxDD760W4EaFhKI/4+Lg8+MxdVN3/gGAmoC+oFgXreysAxa jBL3tD5DRdD8ndi39laVG7onHGAKscky3HfltXWR5OFhk+GyEXAAK0PJzxEzs0IS 2cK9HmNWTZ6i7RLcBYztn7WpEgMlH5KPxmSwz+C1EOrfjMRXlqz2aZHQu2xaTgpc 1YN6pNSYq1QWI2t/s02RgYm2DbRbFyibxFp+kv2XjPaOcFtLhTtCr//5wjY8SRlf zAf+ICT1PjZYal+W5+I5KqcZdfgVQ9R+TTxgtCh45aNrU4Y9iF4ud8dnnKxmHrz3 EHqU -----END CERTIFICATE-----Generated at Thu Apr 17 17:45:57 2025 by rpki-client