$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae4367a2-0505-4de7-8e63-9b244ca6020f.roa File: ae4367a2-0505-4de7-8e63-9b244ca6020f.roa (raw, json) Hash identifier: 3NNbTLzTO+Odg1KQgP8wQhSCeMJyVgY5NDAqLCcTLUE= Subject key identifier: B3:36:59:3A:0B:A7:E7:F7:CD:1A:CE:0C:65:34:58:42:14:1C:87:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37A2DEB93CC24D409F3CCD53191845005937265C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae4367a2-0505-4de7-8e63-9b244ca6020f.roa Signing time: Tue 25 Mar 2025 16:00:20 +0000 ROA not before: Tue 25 Mar 2025 16:00:20 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a2:de:b9:3c:c2:4d:40:9f:3c:cd:53:19:18:45:00:59:37:26:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:00:20 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1df8587bfbb67e2c853101d4cea9fc30676334b612df7b34beab0528e1f6268f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:76:37:97:48:dd:06:a1:80:4c:66:e7:03: 03:75:74:48:a4:53:9a:6e:46:24:68:77:27:3a:c5: a0:2d:c6:b5:b3:3b:b6:c0:93:63:8a:76:4a:98:69: ac:5f:57:a2:64:43:7b:63:cc:d3:16:18:21:7b:25: c6:ac:e6:97:16:2b:75:3a:96:72:07:19:72:e7:26: 73:5d:2a:3a:1f:57:c4:4c:91:93:01:25:4e:f5:8a: 9c:32:a7:3c:4c:1e:74:a1:8b:93:9b:6c:55:0d:17: fb:03:75:c5:dc:22:d3:83:83:01:d4:35:c4:d1:75: 26:0a:62:1c:31:72:0e:01:b0:f5:fc:d2:36:2f:11: 90:4e:c1:7a:e6:b1:14:8b:81:99:7a:99:44:1a:d9: 94:27:0c:93:16:8f:42:ff:e9:5a:7b:ff:36:07:df: 0e:38:47:11:3d:e6:e5:9e:73:6c:25:7f:af:53:12: a8:dc:5b:a4:2f:a4:a5:05:f8:ff:ab:b0:cc:bb:0d: 6b:e4:e9:17:02:c3:85:96:8c:cd:37:35:e7:81:04: 42:48:6e:01:e8:60:4e:3f:32:c6:fd:ce:f3:38:46: fd:de:c1:3f:a0:59:bf:df:db:fb:a0:3c:be:84:4e: 18:ce:cd:8f:43:61:c5:f1:fe:6d:c1:cd:dd:6b:67: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:59:3A:0B:A7:E7:F7:CD:1A:CE:0C:65:34:58:42:14:1C:87:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae4367a2-0505-4de7-8e63-9b244ca6020f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8c0::/46 Signature Algorithm: sha256WithRSAEncryption bd:53:cd:7c:76:62:40:ce:b7:3c:e1:be:23:f6:0d:df:5c:08: bf:17:16:59:62:34:ab:75:be:30:f8:a5:e4:49:c5:44:3a:da: 1a:54:83:12:f4:43:57:35:41:06:4b:e0:7d:cd:f9:af:02:51: d2:62:e0:9a:d1:f8:b3:53:c9:1f:47:ef:4f:ea:2a:83:9a:fd: af:26:e5:64:ec:1e:29:bb:5b:38:87:91:07:76:11:84:83:76: 27:44:65:20:64:de:60:b3:a8:d8:2a:1e:d4:b0:0b:20:9e:e7: 38:b4:54:a3:b9:cc:3b:6b:7e:7a:21:91:af:38:b5:3e:88:0f: ab:3f:23:32:26:bb:93:14:8d:63:01:35:34:fd:88:f3:22:01: f8:70:37:7b:34:bc:95:81:00:23:4e:0d:38:bf:c5:0d:22:e7: ce:b8:a6:da:fe:40:ce:bc:dc:4f:aa:6f:38:eb:fc:b9:25:50: f6:1a:6c:5f:1e:00:35:67:76:09:d6:0f:9e:25:ed:1f:59:c1: 2a:12:02:27:6f:ad:ae:da:85:e4:57:f2:bb:b3:63:a3:c0:73: 66:7c:f5:f3:c8:6c:68:35:13:47:3b:34:d7:ae:c3:59:49:4c: e5:ae:f0:58:09:12:ab:7a:15:42:1e:83:8b:93:52:16:b8:d3: 69:58:ea:5a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUN6LeuTzCTUCfPM1TGRhFAFk3JlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDAyMFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWRmODU4N2JmYmI2N2UyYzg1MzEw MWQ0Y2VhOWZjMzA2NzYzMzRiNjEyZGY3YjM0YmVhYjA1MjhlMWY2MjY4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi92N5dI3QahgExm5wMDdXRIpFOa bkYkaHcnOsWgLca1szu2wJNjinZKmGmsX1eiZEN7Y8zTFhgheyXGrOaXFit1OpZy Bxly5yZzXSo6H1fETJGTASVO9YqcMqc8TB50oYuTm2xVDRf7A3XF3CLTg4MB1DXE 0XUmCmIcMXIOAbD1/NI2LxGQTsF65rEUi4GZeplEGtmUJwyTFo9C/+lae/82B98O OEcRPeblnnNsJX+vUxKo3FukL6SlBfj/q7DMuw1r5OkXAsOFlozNNzXngQRCSG4B 6GBOPzLG/c7zOEb93sE/oFm/39v7oDy+hE4Yzs2PQ2HF8f5twc3da2elbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLM2WToLp+f3zRrODGU0WEIUHIfuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlNDM2N2EyLTA1MDUtNGRlNy04ZTYzLTliMjQ0Y2E2MDIwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9wjAMA0GCSqGSIb3DQEBCwUAA4IBAQC9U818dmJAzrc84b4j 9g3fXAi/FxZZYjSrdb4w+KXkScVEOtoaVIMS9ENXNUEGS+B9zfmvAlHSYuCa0fiz U8kfR+9P6iqDmv2vJuVk7B4pu1s4h5EHdhGEg3YnRGUgZN5gs6jYKh7UsAsgnuc4 tFSjucw7a356IZGvOLU+iA+rPyMyJruTFI1jATU0/YjzIgH4cDd7NLyVgQAjTg04 v8UNIufOuKba/kDOvNxPqm846/y5JVD2GmxfHgA1Z3YJ1g+eJe0fWcEqEgInb62u 2oXkV/K7s2OjwHNmfPXzyGxoNRNHOzTXrsNZSUzlrvBYCRKrehVCHoOLk1IWuNNp WOpa -----END CERTIFICATE-----Generated at Thu Apr 17 17:45:59 2025 by rpki-client