$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa File: 96f64204-fd73-4c1d-b9a9-36fef424cb34.roa (raw, json) Hash identifier: se4pZZNf8vByrBbEX9kyMapcJfgBPYcPjHA9Wx81Kww= Subject key identifier: 07:C8:49:FC:57:F8:C7:9A:58:CE:A0:46:8E:EC:22:83:CF:B1:EF:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 510FED0C119E713544A3C26BD2D9DF53FDED2AE6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa Signing time: Tue 25 Mar 2025 00:21:27 +0000 ROA not before: Tue 25 Mar 2025 00:21:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0f:ed:0c:11:9e:71:35:44:a3:c2:6b:d2:d9:df:53:fd:ed:2a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:21:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=69dffae8bf2c9a6f5110ddcc51cbaa7329a65d33d4bb7cc2be6fad1cdc939693, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:8c:af:f2:a6:ed:47:65:91:c8:c4:7a:93: 0b:3f:60:8c:a2:18:25:ad:8c:b1:99:97:1c:34:87: af:03:10:1f:15:6b:f5:53:dd:a8:e7:e1:57:e0:89: 1f:93:b0:eb:d9:57:7c:c7:8a:c9:67:7f:11:bd:72: 07:e3:2a:fb:d8:32:ee:6d:c5:4e:e7:09:fd:59:66: 7b:64:f0:8d:d6:8e:59:1c:89:3f:6d:a2:bf:ad:0c: cb:4c:b7:40:0e:34:89:fc:2d:34:0d:9e:66:01:0b: b4:f1:d1:68:35:83:3d:83:9c:e9:02:c7:85:de:1d: aa:66:41:52:c7:d9:3a:ec:b5:81:66:fc:86:c2:2c: c6:0c:ba:aa:8b:34:aa:45:93:36:bf:e9:76:df:14: ab:1c:69:31:7d:e4:c4:7e:cd:7b:cd:cd:7b:f5:09: aa:ad:fa:d6:a9:0f:34:b6:ab:33:76:7d:48:c6:e3: e8:c8:47:c7:e8:e6:0d:dd:e4:b9:c8:14:80:5e:66: 39:f9:7a:f6:d2:4e:41:da:cc:6f:72:d9:2e:83:bf: 44:6f:9c:65:cc:d7:6f:c7:c6:73:6a:fe:d6:46:81: 76:fe:45:9c:c0:ba:b0:81:a7:83:34:ba:4c:6f:4a: 74:71:5e:99:78:24:a6:54:e1:81:91:38:18:3c:71: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:49:FC:57:F8:C7:9A:58:CE:A0:46:8E:EC:22:83:CF:B1:EF:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:51:d8:fa:2a:30:ff:2d:b3:80:6f:20:ad:a1:ac:5b:d4:ef: 76:51:31:6c:55:5f:9c:3d:d7:a0:d2:c2:67:4a:7a:e3:6b:a2: 76:23:ff:28:32:fb:a7:b1:d6:f4:11:29:2e:75:29:d2:81:72: 7a:c7:20:5d:74:02:0b:7b:fb:c1:78:42:13:56:f4:b3:8a:7c: ca:99:30:ec:4f:dd:ab:be:fc:e4:aa:53:1a:b6:b0:d7:53:16: 7e:15:e8:69:fe:fb:2b:55:79:a2:3f:51:34:d1:01:75:28:a5: f5:47:6a:f4:ac:65:af:22:7d:e0:0c:1f:5b:2f:1a:4a:50:2e: 3f:4f:9a:45:14:9e:69:23:45:73:0d:bd:15:f2:c9:a6:ec:06: 59:7f:54:27:98:a2:8f:8f:6c:53:36:c2:dd:22:14:1f:7e:cf: ff:bd:41:2d:16:23:fa:d4:52:76:87:4d:9d:36:ee:c6:27:aa: 99:fe:87:3a:ba:ab:79:c2:82:15:7e:53:34:21:50:28:f2:47: 40:61:56:29:ed:52:39:36:63:ec:c3:47:74:7b:fa:8b:47:ac: 2b:eb:4d:73:42:2c:a7:2c:68:dd:34:72:38:70:3f:0d:74:87: bc:1b:66:46:b0:93:b6:43:47:b3:6d:86:88:4d:12:41:19:7f: bb:2c:30:a7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUQ/tDBGecTVEo8Jr0tnfU/3tKuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMjEyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANjlkZmZhZThiZjJjOWE2ZjUxMTBk ZGNjNTFjYmFhNzMyOWE2NWQzM2Q0YmI3Y2MyYmU2ZmFkMWNkYzkzOTY5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/2Mr/Km7UdlkcjEepMLP2CMohgl rYyxmZccNIevAxAfFWv1U92o5+FX4Ikfk7Dr2Vd8x4rJZ38RvXIH4yr72DLubcVO 5wn9WWZ7ZPCN1o5ZHIk/baK/rQzLTLdADjSJ/C00DZ5mAQu08dFoNYM9g5zpAseF 3h2qZkFSx9k67LWBZvyGwizGDLqqizSqRZM2v+l23xSrHGkxfeTEfs17zc179Qmq rfrWqQ80tqszdn1IxuPoyEfH6OYN3eS5yBSAXmY5+Xr20k5B2sxvctkug79Eb5xl zNdvx8Zzav7WRoF2/kWcwLqwgaeDNLpMb0p0cV6ZeCSmVOGBkTgYPHEPkQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAfISfxX+MeaWM6gRo7sIoPPse94MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2ZjY0MjA0LWZkNzMtNGMxZC1iOWE5LTM2ZmVmNDI0Y2IzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUDAMA0GCSqGSIb3DQEBCwUAA4IBAQBaUdj6KjD/LbOAbyCt oaxb1O92UTFsVV+cPdeg0sJnSnrja6J2I/8oMvunsdb0ESkudSnSgXJ6xyBddAIL e/vBeEITVvSzinzKmTDsT92rvvzkqlMatrDXUxZ+Fehp/vsrVXmiP1E00QF1KKX1 R2r0rGWvIn3gDB9bLxpKUC4/T5pFFJ5pI0VzDb0V8smm7AZZf1QnmKKPj2xTNsLd IhQffs//vUEtFiP61FJ2h02dNu7GJ6qZ/oc6uqt5woIVflM0IVAo8kdAYVYp7VI5 NmPsw0d0e/qLR6wr601zQiynLGjdNHI4cD8NdIe8G2ZGsJO2Q0ezbYaITRJBGX+7 LDCn -----END CERTIFICATE-----Generated at Thu Apr 17 17:53:18 2025 by rpki-client