$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa File: 9a9d41bd-0bed-4bc0-8365-34453f074020.roa (raw, json) Hash identifier: zci3/aCYU8L3dKRYjt3Iq3q8ffO1GKYCgBZ5llax0mE= Subject key identifier: 2E:FF:F1:7A:B9:67:F1:9A:D5:1C:04:E3:F6:0E:CE:5A:3F:8B:07:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24F76A47925829515A31E9172ABE050650C98A56 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa Signing time: Wed 26 Mar 2025 00:00:55 +0000 ROA not before: Wed 26 Mar 2025 00:00:55 +0000 ROA not after: Wed 30 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f7:6a:47:92:58:29:51:5a:31:e9:17:2a:be:05:06:50:c9:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 26 00:00:55 2025 GMT Not After : Apr 30 23:59:59 2025 GMT Subject: serialNumber=5b7c80d19571f216060bd5748b753c06ba78b976dba28b98c335cc0acaf0052a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:cc:74:fc:b5:9d:e1:8f:97:98:8e:b5:a9: 8c:b7:dc:2b:71:d9:ab:4e:cb:dc:ab:c0:6f:3f:ee: 07:16:0d:8b:4c:f7:2c:ee:cf:c4:1e:e7:a7:57:d4: 38:91:d7:08:58:c1:e3:bb:3e:08:2a:cd:d3:63:0e: d4:99:09:92:f7:66:6c:d2:2c:b0:32:bb:91:94:af: 5b:52:1b:a1:88:21:f0:54:8c:c5:11:50:ef:2f:0d: f1:84:35:19:c1:5b:ac:ae:52:f3:ae:59:43:7d:8b: 4f:f0:a1:28:40:da:69:49:74:b4:0c:24:81:cf:56: b8:89:37:0b:99:a5:75:8f:91:14:75:52:ba:fd:74: cd:82:6c:1b:82:27:15:e0:9d:4a:41:47:ac:a4:9a: d1:e6:f5:f9:cd:78:b3:7e:40:4a:6f:55:0a:6b:9b: 36:3d:25:df:a0:db:5d:98:c5:c6:8c:72:59:f3:e3: 47:89:f2:eb:e9:b4:0d:8c:49:40:67:5a:e0:1c:6d: eb:b8:c9:f3:07:26:ac:c7:ad:5c:14:eb:b9:f7:8c: ef:92:42:c9:ba:6d:6f:97:18:d9:7f:6e:57:50:38: ca:20:9f:a9:2e:c0:8f:f8:ce:84:d0:ad:ff:e1:3a: c2:2c:34:fe:f8:dd:d3:d0:b5:0b:50:c8:7a:ad:14: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FF:F1:7A:B9:67:F1:9A:D5:1C:04:E3:F6:0E:CE:5A:3F:8B:07:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:e000::/40 Signature Algorithm: sha256WithRSAEncryption a7:cb:e0:d2:26:96:44:fa:ad:b2:53:8e:da:fa:72:4c:17:e4: c6:8d:b1:f4:3b:ab:96:bd:86:79:70:e6:67:e7:b2:d9:43:b7: cf:d3:fc:ed:63:33:01:16:f9:00:d0:b6:c4:80:93:a1:20:af: cf:55:ef:d4:51:97:8e:2b:5f:2b:e6:37:fd:b0:38:52:75:d7: 79:b7:40:b9:f0:14:40:3d:88:cb:1f:b8:83:92:bb:40:e8:31: d1:51:4e:1c:a7:46:df:0b:e2:ad:fd:00:d7:c2:59:18:59:e2: 1e:a1:18:82:5d:53:2c:2e:7b:2a:14:04:af:d8:9d:18:e2:fa: be:f8:2a:5c:49:e7:a4:76:16:61:f8:0b:cb:96:31:c7:c7:ed: 67:7f:70:4b:4a:4d:d0:06:92:6e:53:7c:27:59:c3:cb:bc:36: 42:79:bc:da:c7:37:16:5f:0c:41:3f:3b:6c:35:d6:56:7a:ac: 6d:1d:da:e4:f0:7e:b2:c7:7d:e2:59:e7:93:16:c9:81:1e:ee: 12:f9:a7:70:6e:43:1f:1f:68:9e:18:f2:cd:a6:01:de:fa:11: 43:07:15:1b:3d:7a:9d:31:8e:9f:54:30:01:73:ed:68:9c:9f: e6:06:b2:c3:35:77:fb:ac:aa:b7:9a:72:ba:69:16:57:2e:6f: a2:93:73:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJPdqR5JYKVFaMekXKr4FBlDJilYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNjAwMDA1NVoX DTI1MDQzMDIzNTk1OVowejFJMEcGA1UEBRNANWI3YzgwZDE5NTcxZjIxNjA2MGJk NTc0OGI3NTNjMDZiYTc4Yjk3NmRiYTI4Yjk4YzMzNWNjMGFjYWYwMDUyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrfMdPy1neGPl5iOtamMt9wrcdmr Tsvcq8BvP+4HFg2LTPcs7s/EHuenV9Q4kdcIWMHjuz4IKs3TYw7UmQmS92Zs0iyw MruRlK9bUhuhiCHwVIzFEVDvLw3xhDUZwVusrlLzrllDfYtP8KEoQNppSXS0DCSB z1a4iTcLmaV1j5EUdVK6/XTNgmwbgicV4J1KQUespJrR5vX5zXizfkBKb1UKa5s2 PSXfoNtdmMXGjHJZ8+NHifLr6bQNjElAZ1rgHG3ruMnzByasx61cFOu594zvkkLJ um1vlxjZf25XUDjKIJ+pLsCP+M6E0K3/4TrCLDT++N3T0LULUMh6rRQa5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC7/8Xq5Z/Ga1RwE4/YOzlo/iwcLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhOWQ0MWJkLTBiZWQtNGJjMC04MzY1LTM0NDUzZjA3NDAyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/uAwDQYJKoZIhvcNAQELBQADggEBAKfL4NImlkT6rbJTjtr6 ckwX5MaNsfQ7q5a9hnlw5mfnstlDt8/T/O1jMwEW+QDQtsSAk6Egr89V79RRl44r XyvmN/2wOFJ113m3QLnwFEA9iMsfuIOSu0DoMdFRThynRt8L4q39ANfCWRhZ4h6h GIJdUywueyoUBK/YnRji+r74KlxJ56R2FmH4C8uWMcfH7Wd/cEtKTdAGkm5TfCdZ w8u8NkJ5vNrHNxZfDEE/O2w11lZ6rG0d2uTwfrLHfeJZ55MWyYEe7hL5p3BuQx8f aJ4Y8s2mAd76EUMHFRs9ep0xjp9UMAFz7Wicn+YGssM1d/usqreacrppFlcub6KT cwY= -----END CERTIFICATE-----Generated at Thu Apr 17 18:16:35 2025 by rpki-client