$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa File: a9812ae5-6cb6-43be-82bc-429f2e7be616.roa (raw, json) Hash identifier: Vraas+JwwGB4JmLpemYxcuFB7YLPpUsJ3nSKrScD0yI= Subject key identifier: 17:B5:51:6B:5E:B4:50:37:C8:FB:62:5D:AE:7A:F3:78:23:EF:56:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BD2362C040D1F6C554E7CD8C169830895FBD923 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa Signing time: Tue 25 Mar 2025 16:50:02 +0000 ROA not before: Tue 25 Mar 2025 16:50:02 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d2:36:2c:04:0d:1f:6c:55:4e:7c:d8:c1:69:83:08:95:fb:d9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:02 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=75179d4bcdea8ffbdbb383e304f0d26eb502096ea139c029d432a8ea919279db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:93:8f:2d:aa:cc:c9:ab:73:3b:c9:9f:50: ea:70:56:12:db:26:b6:e1:b3:c6:37:1a:66:f3:41: 2b:4c:23:3f:dc:90:cb:10:ee:c1:e1:a9:7d:3e:3c: 0c:86:52:3d:08:cf:7b:2f:ff:ae:92:cd:e0:31:99: a7:d9:f6:80:85:65:46:2e:fe:d0:b8:a7:73:1e:ce: c2:0e:a4:5d:8a:57:1a:95:22:ad:80:72:21:dc:48: 3f:c3:95:3e:dd:a5:14:7e:85:6b:bc:32:d2:a8:dc: f6:8c:b8:ac:73:b0:34:45:0f:e1:ea:ed:3b:47:cf: 96:6f:78:a1:15:ac:6e:a2:97:76:ee:14:ea:3d:b3: a3:01:fa:72:11:39:81:e5:e5:77:88:cc:ba:13:b8: 1e:3a:41:04:38:53:36:53:f9:a2:5a:27:b3:21:b7: 97:9b:54:b5:1d:1b:f5:2f:22:a2:5f:20:d2:75:07: a0:4e:83:e5:30:cd:fc:61:11:c2:5b:28:fa:6d:7a: f8:3e:d0:15:57:f4:67:b0:86:91:a7:cf:8c:10:78: c6:6d:44:fd:71:e8:57:b4:35:e7:d9:f4:03:89:4b: 27:33:c0:6c:67:75:7b:c3:c9:62:62:47:80:5f:f3: c0:34:fb:e4:23:d1:3b:18:b7:1e:84:b6:a5:f1:4e: 04:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:51:6B:5E:B4:50:37:C8:FB:62:5D:AE:7A:F3:78:23:EF:56:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:c00::/38 Signature Algorithm: sha256WithRSAEncryption bc:aa:40:0c:5c:7a:a5:10:b5:fb:0f:57:3b:59:8f:fb:73:24: b8:98:57:00:4c:6d:fd:43:25:b8:fb:8b:58:11:d6:c5:82:e1: 64:64:42:e0:fe:3a:f9:1b:c7:e2:71:15:f8:5f:e9:b3:19:6b: e6:44:bd:fa:12:df:8c:67:a0:6b:fb:85:d7:f5:ab:1f:86:5f: ac:2b:1b:19:ba:7c:22:f2:e8:68:7d:85:67:c6:e2:3a:0f:c9: 31:3b:58:92:0b:8b:4b:28:f7:19:05:d7:36:48:e2:e7:31:05: e9:5a:45:f3:31:47:9c:40:f4:f9:d4:44:fd:bc:5a:4e:c1:79: 61:ca:97:1a:bf:e8:bd:7a:37:7e:dd:da:f7:62:d4:92:21:48: 01:f9:d7:5e:99:96:92:f7:a3:dd:36:fa:78:f1:40:2e:09:23: 73:8f:59:47:8e:f2:3d:65:cc:09:b5:66:50:aa:8a:fb:37:04: 96:81:75:4e:9c:8c:8e:76:61:e4:75:e7:8d:ed:8c:80:12:1f: 7d:61:fc:bd:4e:01:c0:05:8b:fc:22:09:cd:a9:14:18:04:79: 92:a3:b8:12:95:5e:52:cd:d3:a2:b5:23:d2:46:dc:e6:88:c5: 48:3b:b9:0d:b4:4c:29:bd:4e:55:66:fc:d1:09:fb:aa:b8:f2: 80:25:ed:94 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa9I2LAQNH2xVTnzYwWmDCJX72SMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTAwMloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANzUxNzlkNGJjZGVhOGZmYmRiYjM4 M2UzMDRmMGQyNmViNTAyMDk2ZWExMzljMDI5ZDQzMmE4ZWE5MTkyNzlkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvaTjy2qzMmrczvJn1DqcFYS2ya2 4bPGNxpm80ErTCM/3JDLEO7B4al9PjwMhlI9CM97L/+uks3gMZmn2faAhWVGLv7Q uKdzHs7CDqRdilcalSKtgHIh3Eg/w5U+3aUUfoVrvDLSqNz2jLisc7A0RQ/h6u07 R8+Wb3ihFaxuopd27hTqPbOjAfpyETmB5eV3iMy6E7geOkEEOFM2U/miWiezIbeX m1S1HRv1LyKiXyDSdQegToPlMM38YRHCWyj6bXr4PtAVV/RnsIaRp8+MEHjGbUT9 cehXtDXn2fQDiUsnM8BsZ3V7w8liYkeAX/PANPvkI9E7GLcehLal8U4EDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBe1UWtetFA3yPtiXa5683gj71YTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ODEyYWU1LTZjYjYtNDNiZS04MmJjLTQyOWYyZTdiZTYxNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQwwDQYJKoZIhvcNAQELBQADggEBALyqQAxceqUQtfsPVztZ j/tzJLiYVwBMbf1DJbj7i1gR1sWC4WRkQuD+Ovkbx+JxFfhf6bMZa+ZEvfoS34xn oGv7hdf1qx+GX6wrGxm6fCLy6Gh9hWfG4joPyTE7WJILi0so9xkF1zZI4ucxBela RfMxR5xA9PnURP28Wk7BeWHKlxq/6L16N37d2vdi1JIhSAH5116ZlpL3o902+njx QC4JI3OPWUeO8j1lzAm1ZlCqivs3BJaBdU6cjI52YeR1543tjIASH31h/L1OAcAF i/wiCc2pFBgEeZKjuBKVXlLN06K1I9JG3OaIxUg7uQ20TCm9TlVm/NEJ+6q48oAl 7ZQ= -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:48 2025 by rpki-client