$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa File: ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa (raw, json) Hash identifier: 837vyqYODWxBR9uEh3GsTYvkZ40H0HWVkzH3RzDtV9s= Subject key identifier: 91:A4:BF:A6:38:49:60:57:FC:D2:0B:D8:94:C6:3C:AA:35:9B:B4:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 538D4289353033181615C8B48DCD3625C1285F61 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa Signing time: Tue 25 Mar 2025 16:11:17 +0000 ROA not before: Tue 25 Mar 2025 16:11:17 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8d:42:89:35:30:33:18:16:15:c8:b4:8d:cd:36:25:c1:28:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:11:17 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=aed79f1b7a27cf95e7e14b56023809e4372400db6129dbc1678957584cef6022, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:c0:0f:f6:88:c9:ae:58:12:40:a6:87:da: d8:27:e8:4d:e1:a8:ea:21:10:a5:7d:e5:2d:8b:e3: 71:61:22:10:4f:78:bc:95:5d:c7:f8:8d:81:22:da: c5:78:bb:31:dd:21:0c:9e:f5:b3:02:31:5d:c4:7d: 09:f9:19:a9:b7:7a:e7:7e:47:cc:86:ce:55:40:a1: b0:39:d1:af:71:ab:b4:a4:7f:83:9e:7d:59:58:46: 3e:e8:51:5d:c0:35:e2:6c:9a:49:88:c3:93:92:e7: 51:7b:82:53:11:1a:e0:40:04:7e:78:7d:38:b2:b8: c6:7b:74:f6:25:ba:f0:04:11:ac:6c:80:d1:d5:a7: 46:1a:61:27:1c:c1:5c:ad:f3:fa:65:59:b7:18:a3: df:de:c3:cb:df:b1:5e:ce:d7:74:87:2f:af:f9:3d: 53:14:1e:25:40:a2:f2:72:aa:c2:9b:a3:a0:89:fe: dd:e6:d3:18:8b:af:aa:cb:f1:2a:f5:33:67:86:75: 90:72:dd:33:bd:cd:e4:1f:f6:19:60:ad:5b:77:42: fa:99:fd:d7:dc:12:7f:30:df:8f:07:ce:e4:02:23: 12:3b:96:9c:1a:02:a1:84:50:c3:de:06:61:c1:c7: 10:05:13:23:b5:9e:d8:81:01:c9:2c:ce:5a:c0:00: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:BF:A6:38:49:60:57:FC:D2:0B:D8:94:C6:3C:AA:35:9B:B4:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:7000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:52:0c:96:52:1f:8b:27:97:a3:4d:43:df:69:a2:d3:47:2d: fa:0a:b3:5d:52:c6:57:59:84:01:29:18:0d:63:ea:33:1c:1e: 2e:4c:72:f7:2b:20:e2:e5:8e:ab:ba:bd:d3:b0:71:d7:68:3d: 5b:41:91:3b:5a:7c:bb:61:70:24:dd:29:c6:22:ca:c9:28:20: 42:42:d8:f0:b7:db:61:29:4a:b6:4d:10:d1:fd:d2:ed:67:35: 40:90:fe:92:be:69:c6:67:b1:db:99:86:eb:ab:cc:24:e7:41: 03:be:98:cc:fc:a0:bd:6c:8c:f9:14:0d:cc:b4:db:c8:ad:9a: 07:9b:10:a4:c5:68:4f:d9:23:b3:e3:e1:70:2e:8f:b2:66:8d: 54:9e:55:ec:45:e0:e3:e4:59:89:38:52:77:65:19:6f:a7:64: a1:94:0d:f9:4c:bf:5b:aa:1c:f2:fc:90:14:32:ba:20:e0:f3: bb:9d:3d:2d:32:f9:35:52:79:d1:98:da:8f:a7:51:68:1a:f2: f1:d3:6c:a4:13:ac:18:af:dc:20:59:96:3f:f1:1c:b8:92:55: 2c:31:76:8c:1b:63:0c:56:dd:6c:12:13:de:4f:44:04:80:fe: 81:03:7b:1c:8e:fb:c6:6d:86:70:50:ff:b7:e4:52:f0:ad:88: 46:5a:2c:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU41CiTUwMxgWFci0jc02JcEoX2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTExN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYWVkNzlmMWI3YTI3Y2Y5NWU3ZTE0 YjU2MDIzODA5ZTQzNzI0MDBkYjYxMjlkYmMxNjc4OTU3NTg0Y2VmNjAyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1HAD/aIya5YEkCmh9rYJ+hN4ajq IRClfeUti+NxYSIQT3i8lV3H+I2BItrFeLsx3SEMnvWzAjFdxH0J+Rmpt3rnfkfM hs5VQKGwOdGvcau0pH+Dnn1ZWEY+6FFdwDXibJpJiMOTkudRe4JTERrgQAR+eH04 srjGe3T2JbrwBBGsbIDR1adGGmEnHMFcrfP6ZVm3GKPf3sPL37Feztd0hy+v+T1T FB4lQKLycqrCm6Ogif7d5tMYi6+qy/Eq9TNnhnWQct0zvc3kH/YZYK1bd0L6mf3X 3BJ/MN+PB87kAiMSO5acGgKhhFDD3gZhwccQBRMjtZ7YgQHJLM5awAAPLQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJGkv6Y4SWBX/NIL2JTGPKo1m7R0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlOTA4ZTM3LTY4YzgtNDAxZC05ZWNmLWZkOWE4ZDc4NWY4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNnAwDQYJKoZIhvcNAQELBQADggEBAAtSDJZSH4snl6NNQ99p otNHLfoKs11SxldZhAEpGA1j6jMcHi5McvcrIOLljqu6vdOwcddoPVtBkTtafLth cCTdKcYiyskoIEJC2PC322EpSrZNENH90u1nNUCQ/pK+acZnsduZhuurzCTnQQO+ mMz8oL1sjPkUDcy028itmgebEKTFaE/ZI7Pj4XAuj7JmjVSeVexF4OPkWYk4Undl GW+nZKGUDflMv1uqHPL8kBQyuiDg87udPS0y+TVSedGY2o+nUWga8vHTbKQTrBiv 3CBZlj/xHLiSVSwxdowbYwxW3WwSE95PRASA/oEDexyO+8ZthnBQ/7fkUvCtiEZa LD4= -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:51 2025 by rpki-client