$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa File: 916d4cc7-71da-4d70-94e5-6749d742f22a.roa (raw, json) Hash identifier: XgrHuC2tvyh3z+c/PUeVuqIeLK6m5xWN4kvobzdUVrQ= Subject key identifier: C3:3F:9F:46:D8:01:2B:B2:EC:1D:B5:FD:3E:8E:0F:A1:23:37:F6:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6200E87A4EB54F60E5745C98E910D50E0A803850 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa Signing time: Tue 25 Mar 2025 15:51:54 +0000 ROA not before: Tue 25 Mar 2025 15:51:54 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:70c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:00:e8:7a:4e:b5:4f:60:e5:74:5c:98:e9:10:d5:0e:0a:80:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:51:54 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=eda9e95214de710891e96f6b70335a631b7e2e583d021c5632c50277b94a13c0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:f3:cc:00:32:37:77:78:f4:c5:82:8b:06: 1a:27:ed:80:34:43:ad:4a:bb:fd:d4:ab:ac:ba:0f: 59:c9:6d:4f:29:5e:99:0c:48:87:58:77:c2:c9:f4: fe:e7:42:63:25:39:d5:80:13:82:81:b1:dc:70:98: a4:16:61:69:bc:36:fe:99:83:0b:ef:b4:01:d1:e0: 0f:4c:d4:0a:28:c1:41:d8:03:19:56:88:05:60:ee: dc:f4:13:aa:b2:78:ec:72:c3:9b:45:57:93:58:d4: 70:84:d9:3a:25:83:04:6f:0a:b7:ed:dc:c8:86:26: 94:77:37:da:33:bb:53:7f:7d:0a:f7:57:24:92:1f: 31:90:9f:5c:e5:52:11:82:e7:8d:20:80:a7:2d:13: 63:92:b6:82:a3:fa:f1:54:69:fe:46:f8:be:15:cc: 8d:e9:ca:48:05:40:9c:b8:75:ce:ab:44:c4:60:23: 02:33:68:4e:4e:f3:59:22:be:df:9e:07:b3:b2:dd: 28:d9:e2:20:7b:76:67:48:b6:7a:e9:a8:10:c4:0d: 53:26:c4:05:0c:56:dd:e6:85:f4:cd:ec:76:97:8c: ec:76:f2:1a:ff:98:a7:19:fb:b2:4a:dd:09:6d:de: ec:6d:6b:b7:ea:27:c3:dc:d9:cd:a8:50:8d:69:b9: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:9F:46:D8:01:2B:B2:EC:1D:B5:FD:3E:8E:0F:A1:23:37:F6:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:70c0::/46 Signature Algorithm: sha256WithRSAEncryption c9:5f:02:d5:66:58:d5:a8:5c:78:9b:0d:bf:d8:2c:9f:a7:9f: 08:d9:56:57:d2:78:66:38:e5:ff:a0:7e:04:70:c0:2b:22:09: 22:f6:cd:23:d5:17:69:ac:1c:12:34:0a:5e:52:3d:c6:c4:25: 41:92:96:62:f8:33:f4:c6:ba:c3:0f:46:fb:0f:7d:f6:7b:af: 9f:80:fa:64:e0:d0:98:ce:8b:dd:b8:de:0a:20:55:79:7a:85: 55:19:10:72:f6:2d:d2:87:05:b9:ee:71:83:1a:9e:42:33:d3: 2e:91:ec:2d:db:83:19:3f:90:98:3d:cb:99:c3:eb:e3:3c:48: d7:41:28:24:b7:24:07:78:7a:45:c8:b3:90:d2:4e:51:aa:b0: 13:d5:2f:e9:7e:64:c2:41:98:e8:ff:5e:07:5f:38:f5:e0:50: b4:8f:63:80:01:f6:ea:fe:6f:03:35:75:a3:bb:fe:2c:2d:a2: 8c:e7:61:00:2e:c1:8e:30:1b:cd:1b:4e:48:b8:a8:21:93:d7: da:a7:1b:ae:4e:84:46:3a:f0:03:38:1b:3a:24:b9:e4:66:16: a4:a7:76:bf:64:02:44:5d:ea:8a:1a:56:95:4e:22:b3:00:58: 0f:d7:cf:ed:60:08:a7:83:85:e1:90:d5:30:b0:68:f4:cd:fc: 0e:91:42:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYgDoek61T2DldFyY6RDVDgqAOFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NTE1NFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZWRhOWU5NTIxNGRlNzEwODkxZTk2 ZjZiNzAzMzVhNjMxYjdlMmU1ODNkMDIxYzU2MzJjNTAyNzdiOTRhMTNjMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo3zzAAyN3d49MWCiwYaJ+2ANEOt Srv91Kusug9ZyW1PKV6ZDEiHWHfCyfT+50JjJTnVgBOCgbHccJikFmFpvDb+mYML 77QB0eAPTNQKKMFB2AMZVogFYO7c9BOqsnjscsObRVeTWNRwhNk6JYMEbwq37dzI hiaUdzfaM7tTf30K91ckkh8xkJ9c5VIRgueNIICnLRNjkraCo/rxVGn+Rvi+FcyN 6cpIBUCcuHXOq0TEYCMCM2hOTvNZIr7fngezst0o2eIge3ZnSLZ66agQxA1TJsQF DFbd5oX0zex2l4zsdvIa/5inGfuySt0Jbd7sbWu36ifD3NnNqFCNabn0hwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMM/n0bYASuy7B21/T6OD6EjN/bLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxNmQ0Y2M3LTcxZGEtNGQ3MC05NGU1LTY3NDlkNzQyZjIyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaXDAMA0GCSqGSIb3DQEBCwUAA4IBAQDJXwLVZljVqFx4mw2/ 2Cyfp58I2VZX0nhmOOX/oH4EcMArIgki9s0j1RdprBwSNApeUj3GxCVBkpZi+DP0 xrrDD0b7D332e6+fgPpk4NCYzovduN4KIFV5eoVVGRBy9i3ShwW57nGDGp5CM9Mu kewt24MZP5CYPcuZw+vjPEjXQSgktyQHeHpFyLOQ0k5RqrAT1S/pfmTCQZjo/14H Xzj14FC0j2OAAfbq/m8DNXWju/4sLaKM52EALsGOMBvNG05IuKghk9fapxuuToRG OvADOBs6JLnkZhakp3a/ZAJEXeqKGlaVTiKzAFgP18/tYAing4XhkNUwsGj0zfwO kUK4 -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:18 2025 by rpki-client