$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa File: a894812d-493e-43f7-8c3a-76a64ad96de7.roa (raw, json) Hash identifier: 9hS3WM/ZNvu10SfkcNuIc+YetbKzdSfMgNFv3OgWiw4= Subject key identifier: 75:68:02:D8:ED:4C:E3:39:7B:99:84:C2:7B:84:AD:DE:6F:56:58:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01BFDCBB68FE35E230C0266C04452E2C05DB18AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa Signing time: Mon 24 Mar 2025 15:00:22 +0000 ROA not before: Mon 24 Mar 2025 15:00:22 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bf:dc:bb:68:fe:35:e2:30:c0:26:6c:04:45:2e:2c:05:db:18:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:00:22 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=1a5c785377bf18f190f670093f6b6fc7eaeb2c2162d58f76663f3d2a6fa50c05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:78:2e:22:e0:ba:93:b2:bd:fa:2c:f5:b7: 82:6f:e0:07:92:ad:1d:5f:eb:19:1f:41:41:13:48: 9c:4c:f3:7b:f3:36:0b:f9:b5:ef:49:50:f1:8a:4c: 3d:19:b0:a7:c7:a8:c8:14:06:d1:e0:8d:7c:87:9d: 20:e1:19:1d:49:7c:16:ef:35:2e:1e:97:7d:10:0f: 97:00:b6:f6:07:89:85:67:ba:30:50:9a:fb:f6:d4: ca:4d:e9:54:09:48:e6:58:df:d8:b3:a6:ba:f6:9f: 6f:3b:85:09:04:12:ce:d6:82:91:33:96:34:0b:fa: b6:2b:c4:19:c4:ba:bc:6a:3c:d7:07:8a:11:9e:fd: 3b:5c:54:2b:12:35:f8:d0:4b:fd:d2:e8:11:d3:0a: f3:a2:4f:91:f6:86:fa:82:9a:f5:47:be:3f:61:69: f4:46:88:75:64:85:9c:ee:cc:ca:17:90:44:e9:38: f3:f5:9f:02:f2:3e:62:0e:7b:48:df:8d:86:0f:5d: 63:69:51:92:01:9e:1c:eb:5d:49:4f:2d:1f:08:e7: 06:25:94:98:2e:71:0e:9d:b2:63:29:71:3a:95:80: 94:ab:47:3c:4d:d4:73:2a:1d:89:5b:34:ec:58:91: c3:40:1d:2a:24:84:99:f3:8a:19:17:ee:e1:ae:19: 56:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:68:02:D8:ED:4C:E3:39:7B:99:84:C2:7B:84:AD:DE:6F:56:58:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4040::/48 Signature Algorithm: sha256WithRSAEncryption 85:13:0f:a0:a1:bb:c6:a1:35:99:3d:35:1b:90:bf:78:12:a6: 9a:b4:08:dc:ef:3c:5c:86:ec:5f:30:48:36:14:8b:ad:80:64: fe:3c:0d:62:6b:59:13:3b:e9:19:d8:2c:94:25:76:5b:e6:12: fc:92:73:7e:65:0f:f6:52:bc:8e:e7:34:85:e3:c4:c2:96:fc: 67:52:c0:e6:e0:db:7b:e4:b2:a1:27:d0:ea:44:8e:60:56:39: 8d:fe:36:b1:b3:36:68:34:38:5b:86:8e:ba:ca:ae:54:92:c3: 33:c3:81:fb:56:7f:7a:52:0e:51:8a:fd:ce:68:5a:81:f5:26: 7a:e3:c7:d6:92:b0:66:91:ff:82:5f:c4:57:af:c0:14:54:35: 9d:11:2a:e0:8e:9a:ce:de:60:91:26:21:c8:54:ce:a1:21:1b: 42:c2:a6:41:f2:6c:00:da:e1:34:d7:b4:83:83:2a:b2:37:3d: dd:05:41:91:02:4f:9a:0f:6f:01:61:f3:13:34:a8:28:d2:d1: dd:74:5c:8e:a4:7c:83:7b:66:8c:6f:c5:27:99:2e:47:d6:83: ae:3e:e1:17:30:3f:f9:40:6a:c6:15:9b:73:a1:49:38:b2:7b: fc:fa:4c:b3:4c:ff:1a:2c:84:cb:3e:f7:b1:05:aa:28:03:90: 02:dc:e6:11 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAb/cu2j+NeIwwCZsBEUuLAXbGKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDAyMloX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAMWE1Yzc4NTM3N2JmMThmMTkwZjY3 MDA5M2Y2YjZmYzdlYWViMmMyMTYyZDU4Zjc2NjYzZjNkMmE2ZmE1MGMwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5d4LiLgupOyvfos9beCb+AHkq0d X+sZH0FBE0icTPN78zYL+bXvSVDxikw9GbCnx6jIFAbR4I18h50g4RkdSXwW7zUu Hpd9EA+XALb2B4mFZ7owUJr79tTKTelUCUjmWN/Ys6a69p9vO4UJBBLO1oKRM5Y0 C/q2K8QZxLq8ajzXB4oRnv07XFQrEjX40Ev90ugR0wrzok+R9ob6gpr1R74/YWn0 Roh1ZIWc7szKF5BE6Tjz9Z8C8j5iDntI342GD11jaVGSAZ4c611JTy0fCOcGJZSY LnEOnbJjKXE6lYCUq0c8TdRzKh2JWzTsWJHDQB0qJISZ84oZF+7hrhlWlwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHVoAtjtTOM5e5mEwnuErd5vVli0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E4OTQ4MTJkLTQ5M2UtNDNmNy04YzNhLTc2YTY0YWQ5NmRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUBAMA0GCSqGSIb3DQEBCwUAA4IBAQCFEw+gobvGoTWZPTUb kL94EqaatAjc7zxchuxfMEg2FIutgGT+PA1ia1kTO+kZ2CyUJXZb5hL8knN+ZQ/2 UryO5zSF48TClvxnUsDm4Nt75LKhJ9DqRI5gVjmN/jaxszZoNDhbho66yq5UksMz w4H7Vn96Ug5Riv3OaFqB9SZ648fWkrBmkf+CX8RXr8AUVDWdESrgjprO3mCRJiHI VM6hIRtCwqZB8mwA2uE017SDgyqyNz3dBUGRAk+aD28BYfMTNKgo0tHddFyOpHyD e2aMb8UnmS5H1oOuPuEXMD/5QGrGFZtzoUk4snv8+kyzTP8aLITLPvexBaooA5AC 3OYR -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:31 2025 by rpki-client