$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa File: a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa (raw, json) Hash identifier: 7ZVr71JfcLs/X6iUk5D89DwgTlii+LLvkOtayQrj5aw= Subject key identifier: D8:0C:03:27:40:E9:36:6F:C0:DD:64:34:09:ED:A1:A5:F4:37:6C:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48E0BB0753BDF4CBB880AEC702CD9C1F3851755F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa Signing time: Tue 25 Mar 2025 00:50:07 +0000 ROA not before: Tue 25 Mar 2025 00:50:07 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e0:bb:07:53:bd:f4:cb:b8:80:ae:c7:02:cd:9c:1f:38:51:75:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:50:07 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a19f051d69586d4545fee8f14a6823f4e74963373f46d544b7b66cb0db64a959, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:e4:0d:ac:1f:7f:29:ed:a8:e4:79:d1:df: 9a:24:12:78:2f:68:a8:cd:28:f2:37:1f:ca:db:81: 53:03:10:28:6e:e6:7a:99:d1:91:df:9f:aa:84:db: e5:da:ba:bb:48:4e:85:21:1a:cd:0c:dc:f4:37:46: c7:1f:06:58:d7:27:b6:c7:d1:20:63:52:03:7c:2c: 34:26:ed:1f:ba:ca:77:61:69:dc:45:2f:e6:6c:3f: 1a:60:75:2f:da:de:77:28:40:a3:4b:db:85:9d:ff: 5c:b1:3b:44:92:68:c4:6d:5d:75:ea:db:92:14:b4: bb:a3:38:e9:a3:1f:5a:bd:c4:aa:79:8e:c1:8e:9a: 55:d4:d7:81:96:28:b5:c2:fb:bd:ac:e3:2d:49:13: af:a3:13:a6:06:20:04:d8:8f:e2:b3:ab:dd:80:1c: 73:3f:6d:63:61:13:78:a5:46:ad:6f:e9:69:81:a8: cd:3a:c8:fd:27:f4:89:40:c7:3c:4f:88:af:1b:fd: e9:78:70:6d:40:b1:c4:77:3f:07:ba:7d:52:8a:50: 9a:c4:ab:5d:44:1c:16:11:68:bb:de:e0:eb:35:24: 69:65:6d:62:69:5c:29:73:ea:d5:76:5f:84:89:ef: 5c:53:17:fa:5c:da:e7:b0:47:8c:e6:f9:24:ad:24: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0C:03:27:40:E9:36:6F:C0:DD:64:34:09:ED:A1:A5:F4:37:6C:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:880::/48 Signature Algorithm: sha256WithRSAEncryption 42:42:ac:e8:66:c1:99:8d:63:05:49:cb:49:f3:04:0d:56:4c: 95:91:09:d4:d8:6f:9d:ad:9b:64:a1:db:ff:67:6b:f4:1d:41: cf:17:bc:f6:03:84:6e:f1:03:4a:12:7d:d5:fc:d8:6e:55:68: 98:5e:ce:96:ca:d8:7f:a8:fd:f0:18:36:fe:b4:b8:78:19:55: 22:ec:c3:b0:ec:62:d7:bf:b7:da:c2:e3:3c:98:5b:38:fc:7f: f0:d5:73:fe:ad:9f:b6:01:b2:6a:86:07:69:5a:0f:f8:a5:44: a6:a2:a6:03:12:41:d8:90:c4:bd:9a:c9:49:39:67:b5:d8:52: 65:cc:1d:23:22:c3:2a:56:18:80:24:ad:62:02:ee:8b:b6:a0: 7b:d8:38:a1:9c:06:f6:be:19:dd:5f:ce:ad:71:e5:51:e6:01: 53:d5:24:e1:bd:3f:31:a6:20:fa:01:d7:02:bd:91:40:23:6f: 34:9a:4e:1f:ad:a1:09:82:03:1a:b8:7a:fb:48:6a:8b:51:9b: 4c:75:9f:3c:0e:70:86:4b:01:e4:12:b0:2a:14:d8:79:03:29: 51:ff:6b:f8:1e:5e:63:f0:b5:b0:6a:9a:c8:ed:83:b0:82:8e: f0:c4:15:69:f1:20:b3:83:7d:40:5d:ec:e6:05:9e:54:29:56: 55:ff:75:22 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSOC7B1O99Mu4gK7HAs2cHzhRdV8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTAwN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTE5ZjA1MWQ2OTU4NmQ0NTQ1ZmVl OGYxNGE2ODIzZjRlNzQ5NjMzNzNmNDZkNTQ0YjdiNjZjYjBkYjY0YTk1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUzkDawffyntqOR50d+aJBJ4L2io zSjyNx/K24FTAxAobuZ6mdGR35+qhNvl2rq7SE6FIRrNDNz0N0bHHwZY1ye2x9Eg Y1IDfCw0Ju0fusp3YWncRS/mbD8aYHUv2t53KECjS9uFnf9csTtEkmjEbV116tuS FLS7ozjpox9avcSqeY7BjppV1NeBlii1wvu9rOMtSROvoxOmBiAE2I/is6vdgBxz P21jYRN4pUatb+lpgajNOsj9J/SJQMc8T4ivG/3peHBtQLHEdz8Hun1SilCaxKtd RBwWEWi73uDrNSRpZW1iaVwpc+rVdl+Eie9cUxf6XNrnsEeM5vkkrSTK5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNgMAydA6TZvwN1kNAntoaX0N2x0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2NzYyODhiLTQxNDgtNGY0ZS1iZmJlLTU3YTE4ZWI5YjI1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8giAMA0GCSqGSIb3DQEBCwUAA4IBAQBCQqzoZsGZjWMFSctJ 8wQNVkyVkQnU2G+drZtkodv/Z2v0HUHPF7z2A4Ru8QNKEn3V/NhuVWiYXs6Wyth/ qP3wGDb+tLh4GVUi7MOw7GLXv7fawuM8mFs4/H/w1XP+rZ+2AbJqhgdpWg/4pUSm oqYDEkHYkMS9mslJOWe12FJlzB0jIsMqVhiAJK1iAu6LtqB72DihnAb2vhndX86t ceVR5gFT1SThvT8xpiD6AdcCvZFAI280mk4fraEJggMauHr7SGqLUZtMdZ88DnCG SwHkErAqFNh5AylR/2v4Hl5j8LWwaprI7YOwgo7wxBVp8SCzg31AXezmBZ5UKVZV /3Ui -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:50 2025 by rpki-client