$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa File: 9f808762-dd71-4f33-bfa8-cb4244801d34.roa (raw, json) Hash identifier: Kvr4sthGZhtZ3uNdYkQ0A/bu3qtuOBQeZnQdqvWLcgk= Subject key identifier: AC:3C:3E:50:7A:29:E9:F6:75:CD:9A:62:DA:AC:BD:FB:71:49:7A:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62AE68EE8904CC5D3473772493CEC18C27F55A88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa Signing time: Tue 25 Mar 2025 15:42:02 +0000 ROA not before: Tue 25 Mar 2025 15:42:02 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:7040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ae:68:ee:89:04:cc:5d:34:73:77:24:93:ce:c1:8c:27:f5:5a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:42:02 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a7384258f7fe227b5897ad694ffa8e3d65d0c146c9910fea951f999631506650, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:08:fe:c2:21:f2:dc:c7:79:27:70:93:66: 15:45:9a:3f:9b:0e:ec:cb:42:01:7d:ce:0c:34:b5: 72:db:ae:ae:96:bb:18:7e:05:e5:f3:6a:7a:4c:b2: a3:57:bf:a7:58:ac:b2:45:8f:61:81:c4:ce:07:79: 8b:bb:aa:1b:9d:c6:63:c7:64:98:d1:fc:31:15:ad: 5a:82:c7:40:02:25:c9:4c:86:65:e6:03:7c:88:7f: 86:52:5b:87:e0:f8:f7:60:b6:7d:13:29:f2:f3:85: 25:6a:71:8a:c9:a6:9b:33:7f:a5:99:42:9c:7e:85: 8d:78:60:99:19:8a:e1:82:f7:01:94:7c:0e:e7:c6: bd:0b:7d:a3:0c:ca:4a:97:54:4c:50:9b:85:16:49: 46:b6:05:26:9f:92:f3:69:1d:a1:d2:31:24:7e:27: cb:cd:2f:77:d2:18:9d:91:72:72:a6:48:c7:40:d7: b1:05:de:26:d6:de:90:73:4c:3f:88:8a:94:56:1e: 4e:f9:5d:66:86:08:4a:46:a8:80:bc:e9:b7:5f:9d: dd:17:5e:0d:a8:29:31:39:78:9d:e0:ef:ed:29:98: e5:6a:60:45:04:17:6f:3b:41:a0:cc:67:04:89:eb: 1b:ee:ce:a6:c1:63:4c:e1:6d:ec:12:9c:c9:06:8e: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3C:3E:50:7A:29:E9:F6:75:CD:9A:62:DA:AC:BD:FB:71:49:7A:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:7040::/46 Signature Algorithm: sha256WithRSAEncryption 03:93:1b:20:eb:4a:a7:0e:37:c6:fe:a4:e7:f5:82:0c:d3:29: c0:22:94:67:2e:cd:cf:bb:06:da:5a:dc:59:48:78:5c:c7:9e: d8:56:32:db:a3:23:db:ce:14:9f:c3:24:1d:c2:ea:9f:ae:88: e5:fc:ec:11:91:48:7b:69:49:d0:ec:6d:1c:59:9c:75:21:1d: ef:5d:4b:a2:62:5f:09:b0:e6:78:47:50:cf:22:26:f7:7a:9d: d2:c5:62:b1:d6:51:1f:5b:93:96:ff:8a:03:af:b6:d4:63:10: 7a:41:bc:fe:d3:94:97:de:5b:de:e9:48:12:39:4f:ca:e8:a5: 50:14:1f:4e:23:f5:da:67:7d:5f:b3:1b:ee:83:84:8c:10:75: 61:43:87:78:30:b0:29:83:64:46:76:45:1e:e6:47:31:33:72: 3f:59:18:e4:9d:4f:b4:12:7b:5f:15:85:f4:2f:57:de:1f:5e: 6e:2a:2b:00:1c:d7:20:b6:e9:44:25:ca:fd:09:b8:54:56:08: b6:1f:48:d3:d5:5d:4a:60:3b:75:00:ea:ce:4e:cb:3b:4c:91: 7c:01:c4:e7:48:7c:69:a0:33:d9:b9:e6:59:f9:9a:c9:06:13: 79:01:9a:4b:c8:42:49:b9:eb:7f:96:cb:00:18:e2:38:64:d0: f9:e6:86:3f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYq5o7okEzF00c3ckk87BjCf1WogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NDIwMloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTczODQyNThmN2ZlMjI3YjU4OTdh ZDY5NGZmYThlM2Q2NWQwYzE0NmM5OTEwZmVhOTUxZjk5OTYzMTUwNjY1MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW8I/sIh8tzHeSdwk2YVRZo/mw7s y0IBfc4MNLVy266ulrsYfgXl82p6TLKjV7+nWKyyRY9hgcTOB3mLu6obncZjx2SY 0fwxFa1agsdAAiXJTIZl5gN8iH+GUluH4Pj3YLZ9Eyny84UlanGKyaabM3+lmUKc foWNeGCZGYrhgvcBlHwO58a9C32jDMpKl1RMUJuFFklGtgUmn5LzaR2h0jEkfifL zS930hidkXJypkjHQNexBd4m1t6Qc0w/iIqUVh5O+V1mhghKRqiAvOm3X53dF14N qCkxOXid4O/tKZjlamBFBBdvO0GgzGcEiesb7s6mwWNM4W3sEpzJBo6lnQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKw8PlB6Ken2dc2aYtqsvftxSXp4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODA4NzYyLWRkNzEtNGYzMy1iZmE4LWNiNDI0NDgwMWQzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba93BAMA0GCSqGSIb3DQEBCwUAA4IBAQADkxsg60qnDjfG/qTn 9YIM0ynAIpRnLs3PuwbaWtxZSHhcx57YVjLboyPbzhSfwyQdwuqfrojl/OwRkUh7 aUnQ7G0cWZx1IR3vXUuiYl8JsOZ4R1DPIib3ep3SxWKx1lEfW5OW/4oDr7bUYxB6 Qbz+05SX3lve6UgSOU/K6KVQFB9OI/XaZ31fsxvug4SMEHVhQ4d4MLApg2RGdkUe 5kcxM3I/WRjknU+0EntfFYX0L1feH15uKisAHNcgtulEJcr9CbhUVgi2H0jT1V1K YDt1AOrOTss7TJF8AcTnSHxpoDPZueZZ+ZrJBhN5AZpLyEJJuet/lssAGOI4ZND5 5oY/ -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:10 2025 by rpki-client