$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa File: 8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa (raw, json) Hash identifier: Y1NQ2A3cRcHjh7+2AYDDB2tOZCEsMiHk5BOvMr+o6rk= Subject key identifier: 0C:95:6C:79:B4:79:0E:D3:8F:51:5C:9F:08:F6:82:CA:6A:0A:14:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 727F1B2C2DB531F4E011B80DED380604BF9C8A22 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa Signing time: Tue 25 Mar 2025 16:01:06 +0000 ROA not before: Tue 25 Mar 2025 16:01:06 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:1b:2c:2d:b5:31:f4:e0:11:b8:0d:ed:38:06:04:bf:9c:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:06 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=42e2320ef6afac4dbe3db869fd8a3099c5aa360007b27c24e99d27f5c2ac06d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:15:bd:15:2b:9b:6f:ee:58:69:81:31:5b: bf:d7:43:4b:69:3e:c8:62:53:b8:9a:c5:45:45:a9: 8c:25:59:30:d6:8b:df:2d:51:d6:e6:a5:54:46:a2: 1d:90:da:60:d7:f1:f3:0e:59:ff:ad:74:82:ef:55: 88:12:fd:19:50:c0:b3:94:3e:85:09:aa:c5:a4:ba: 14:87:c3:66:ce:d9:f1:9e:76:86:9e:be:0f:cc:3d: 36:33:e1:93:0a:c4:6a:1b:38:6b:70:7f:39:da:0c: a1:0c:56:8c:45:f3:df:ca:70:67:af:0c:58:5e:f5: 55:41:db:18:2c:8b:92:5d:5a:f0:d4:73:9c:42:d8: 59:35:8f:b3:ac:26:e0:21:b6:00:72:1c:ca:67:00: 9d:1a:f4:d4:ea:94:f6:18:76:a9:0d:8e:ce:ab:58: 4c:ab:20:c8:7f:1a:e9:c0:6f:58:f0:44:28:ae:63: 1b:21:8e:93:04:a7:09:e8:e7:bc:2c:de:40:bb:e0: 1d:7d:4e:9c:c9:54:17:3f:29:30:0c:5a:27:87:2f: da:c7:b7:03:1a:a5:95:4a:7e:52:ef:b5:a4:c9:d7: 81:0e:b2:52:53:ea:46:a3:ef:fa:e9:ee:d2:c1:21: b6:d9:69:ba:e1:a3:ba:19:90:a8:96:98:12:94:e2: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:95:6C:79:B4:79:0E:D3:8F:51:5C:9F:08:F6:82:CA:6A:0A:14:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:e000::/40 Signature Algorithm: sha256WithRSAEncryption 9b:93:db:1e:9a:3b:58:92:7d:62:dd:32:3d:55:07:56:6d:17: 31:a8:42:86:fe:c0:9f:05:6b:8e:6d:d2:9d:ac:83:ab:49:88: bd:9d:3e:28:08:c0:5f:6e:4d:6a:10:04:b8:95:f6:fa:10:0a: 1d:34:ca:e5:af:0f:07:c8:04:e1:40:85:cd:84:03:a2:9c:8b: 14:17:d2:b4:0a:77:23:6b:06:8d:1b:0f:ab:fa:b7:6a:39:52: d0:2c:47:6e:d9:a7:f1:06:3e:5e:3a:ac:18:5a:1d:a9:21:a0: 76:ee:c7:f6:5c:5e:3f:b9:a8:ea:51:8c:c7:be:09:8d:5c:67: 66:d2:48:20:34:df:b0:df:5d:2d:47:2c:44:ca:80:bf:26:74: 03:2d:cc:a8:ec:55:fa:06:d3:2c:7a:d9:8a:db:ff:6b:6f:62: b7:d1:1d:93:de:d5:45:33:f6:a1:03:b0:2e:48:8b:0b:97:10: 87:ec:89:06:66:32:f6:2d:c6:ff:42:32:9c:44:58:ce:89:03: 7d:7a:e8:45:2e:63:1f:3d:94:f2:d4:ce:7d:7b:ca:78:2f:83: b0:39:76:ae:4e:1c:bd:34:ee:f5:b5:b6:ac:e8:c4:d7:56:cc: 80:d2:f7:ea:94:b0:b5:2c:0a:db:a1:88:1d:71:33:e3:2a:48: 62:8b:04:87 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcn8bLC21MfTgEbgN7TgGBL+ciiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDEwNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANDJlMjMyMGVmNmFmYWM0ZGJlM2Ri ODY5ZmQ4YTMwOTljNWFhMzYwMDA3YjI3YzI0ZTk5ZDI3ZjVjMmFjMDZkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX4VvRUrm2/uWGmBMVu/10NLaT7I YlO4msVFRamMJVkw1ovfLVHW5qVURqIdkNpg1/HzDln/rXSC71WIEv0ZUMCzlD6F CarFpLoUh8NmztnxnnaGnr4PzD02M+GTCsRqGzhrcH852gyhDFaMRfPfynBnrwxY XvVVQdsYLIuSXVrw1HOcQthZNY+zrCbgIbYAchzKZwCdGvTU6pT2GHapDY7Oq1hM qyDIfxrpwG9Y8EQormMbIY6TBKcJ6Oe8LN5Au+AdfU6cyVQXPykwDFonhy/ax7cD GqWVSn5S77WkydeBDrJSU+pGo+/66e7SwSG22Wm64aO6GZColpgSlOI63QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAyVbHm0eQ7Tj1Fcnwj2gspqChSwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhhNDhiODdmLWQ2MjMtNGFlNC05ZTc5LTJjOGMyMjM3ZDM3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba++AwDQYJKoZIhvcNAQELBQADggEBAJuT2x6aO1iSfWLdMj1V B1ZtFzGoQob+wJ8Fa45t0p2sg6tJiL2dPigIwF9uTWoQBLiV9voQCh00yuWvDwfI BOFAhc2EA6KcixQX0rQKdyNrBo0bD6v6t2o5UtAsR27Zp/EGPl46rBhaHakhoHbu x/ZcXj+5qOpRjMe+CY1cZ2bSSCA037DfXS1HLETKgL8mdAMtzKjsVfoG0yx62Yrb /2tvYrfRHZPe1UUz9qEDsC5IiwuXEIfsiQZmMvYtxv9CMpxEWM6JA3166EUuYx89 lPLUzn17yngvg7A5dq5OHL007vW1tqzoxNdWzIDS9+qUsLUsCtuhiB1xM+MqSGKL BIc= -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:49 2025 by rpki-client