$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa File: 96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa (raw, json) Hash identifier: FfFlkr4FAFEP1Nn74oGy+wE1F+2U1TjJsxVwII3hHqw= Subject key identifier: C8:60:66:73:A7:0E:C7:68:33:5B:E2:75:58:31:A6:07:DC:97:A7:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 682A18092D1C85132720618D0AE79A65431C6822 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa Signing time: Tue 25 Mar 2025 15:10:05 +0000 ROA not before: Tue 25 Mar 2025 15:10:05 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2a:18:09:2d:1c:85:13:27:20:61:8d:0a:e7:9a:65:43:1c:68:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:10:05 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=12d07af3b4172d4c6e89e375c70f83ae5437ce7c684865572e4ac6056b15863d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:63:30:d5:9b:49:0a:2f:a4:09:7c:17:e6: ec:e8:b5:8a:76:9a:a7:bb:e7:cc:2e:ff:99:00:87: 48:cd:56:31:c5:70:05:1d:c0:0f:00:71:0a:93:30: 9f:fd:f1:7a:a9:87:c0:af:64:d0:b4:de:af:43:f9: fe:af:82:69:51:d7:bf:0d:f5:fd:97:c8:c5:91:ee: 47:2f:ec:a7:9b:7f:c7:b7:a8:6e:ce:d1:69:83:18: e9:a3:a3:ce:3a:b6:39:fd:a4:cd:7c:18:42:ce:e7: 79:44:03:07:7f:cc:97:7b:cd:a4:3b:19:84:e4:50: 08:d6:30:25:9d:f9:bd:c5:c3:fb:e0:d0:34:a8:24: df:04:23:88:65:d1:e2:eb:df:58:dd:53:17:7a:5d: 39:e4:60:3c:1e:47:52:2a:e8:98:b5:8f:be:46:0a: eb:56:07:66:97:ae:40:f6:d1:1f:85:03:62:cd:31: 68:77:46:ce:16:05:83:88:f3:97:11:6b:f8:fb:3c: 63:e1:52:b9:24:5d:c9:ac:e5:58:31:9e:bd:da:98: 85:16:ad:29:b5:7f:27:5d:3e:7a:ee:38:34:6f:0a: b9:a1:96:70:0e:b2:07:92:33:7c:09:6c:e7:89:eb: 53:0c:9d:0e:65:c5:9b:cb:55:95:79:fb:43:e5:bf: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:60:66:73:A7:0E:C7:68:33:5B:E2:75:58:31:A6:07:DC:97:A7:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c880::/46 Signature Algorithm: sha256WithRSAEncryption 08:50:01:ac:ec:cb:2c:94:1a:26:00:fd:2b:01:43:ad:9a:72: 16:c5:81:29:cc:7d:4f:8d:f8:82:fb:5f:35:d6:67:25:0b:c0: 9b:fd:44:8f:60:7e:1a:b8:8b:c6:dc:3f:94:9a:7b:fd:6d:b5: 05:6b:5a:49:68:c8:b2:95:13:25:04:e5:35:30:9d:4c:82:1a: 44:58:f5:06:20:fe:ae:83:f9:85:48:1d:bf:26:67:d0:0a:07: d6:1a:62:a7:d5:69:28:d3:2b:43:7e:53:f5:cf:7e:3a:9c:3e: 99:82:45:e0:9f:90:25:e0:d6:21:be:75:68:ed:de:bd:de:1b: 21:f9:f1:13:2d:69:f0:94:4b:f3:09:a3:60:e8:6b:8d:7e:29: 32:34:20:9c:74:86:ca:1c:8e:0d:1b:43:bf:60:cb:ec:b5:8a: 31:f1:8e:b1:e5:19:50:1e:b7:bc:02:7a:4d:1d:70:0a:6d:e7: f2:c6:d9:88:78:41:0c:dc:5d:f6:bb:cd:5b:e8:42:3d:09:18: 12:c4:50:88:1d:c7:25:a5:2a:6b:e9:44:66:ef:3c:6f:12:a9: 48:d1:cb:87:fa:65:f1:f2:4c:89:6e:ab:2c:ad:4b:97:38:52: d1:2d:73:38:5e:93:94:12:eb:bb:87:ae:58:32:ba:b6:89:ca: 8d:d5:03:03 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaCoYCS0chRMnIGGNCueaZUMcaCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MTAwNVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMTJkMDdhZjNiNDE3MmQ0YzZlODll Mzc1YzcwZjgzYWU1NDM3Y2U3YzY4NDg2NTU3MmU0YWM2MDU2YjE1ODYzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnidjMNWbSQovpAl8F+bs6LWKdpqn u+fMLv+ZAIdIzVYxxXAFHcAPAHEKkzCf/fF6qYfAr2TQtN6vQ/n+r4JpUde/DfX9 l8jFke5HL+ynm3/Ht6huztFpgxjpo6POOrY5/aTNfBhCzud5RAMHf8yXe82kOxmE 5FAI1jAlnfm9xcP74NA0qCTfBCOIZdHi699Y3VMXel055GA8HkdSKuiYtY++Rgrr Vgdml65A9tEfhQNizTFod0bOFgWDiPOXEWv4+zxj4VK5JF3JrOVYMZ692piFFq0p tX8nXT567jg0bwq5oZZwDrIHkjN8CWznietTDJ0OZcWby1WVeftD5b8dZwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMhgZnOnDsdoM1vidVgxpgfcl6fNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2ZTY3MTM3LTZjYjUtNDUyYi1iMDljLWQ2YzZhOWY1NDExYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98iAMA0GCSqGSIb3DQEBCwUAA4IBAQAIUAGs7MsslBomAP0r AUOtmnIWxYEpzH1PjfiC+1811mclC8Cb/USPYH4auIvG3D+Umnv9bbUFa1pJaMiy lRMlBOU1MJ1MghpEWPUGIP6ug/mFSB2/JmfQCgfWGmKn1Wko0ytDflP1z346nD6Z gkXgn5Al4NYhvnVo7d693hsh+fETLWnwlEvzCaNg6GuNfikyNCCcdIbKHI4NG0O/ YMvstYox8Y6x5RlQHre8AnpNHXAKbefyxtmIeEEM3F32u81b6EI9CRgSxFCIHccl pSpr6URm7zxvEqlI0cuH+mXx8kyJbqssrUuXOFLRLXM4XpOUEuu7h65YMrq2icqN 1QMD -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:14 2025 by rpki-client