$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af8dad8f-1b43-44a7-a8af-fef9607356c3.roa File: af8dad8f-1b43-44a7-a8af-fef9607356c3.roa (raw, json) Hash identifier: xTkiN3AbYyLUMXzNwnO5HFGacDixXSoXd/P0cxc3R4g= Subject key identifier: 79:17:35:1C:A7:FC:F4:30:2E:23:BD:AE:63:9A:81:00:1D:27:A4:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08944653D2FF7BBE6C2ADDF2F0744DF70FAE0277 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af8dad8f-1b43-44a7-a8af-fef9607356c3.roa Signing time: Wed 02 Apr 2025 00:00:05 +0000 ROA not before: Wed 02 Apr 2025 00:00:05 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:94:46:53:d2:ff:7b:be:6c:2a:dd:f2:f0:74:4d:f7:0f:ae:02:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:00:05 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=8deae82b5ebfe76b313a36c0d859d98e57f1b7427208863429f9baeb153bd8a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:05:9f:13:a8:5a:c9:09:a4:69:d0:72:db: 59:08:a7:60:24:cd:99:4b:d3:c2:c4:98:60:9f:bc: 55:2f:aa:f7:2d:cf:3d:ce:9a:ed:f8:e0:da:a6:26: 11:47:20:8a:93:32:7d:5e:0b:d2:84:1e:a1:b3:8e: b0:3a:d0:12:b4:94:1a:0a:51:5b:00:a1:d6:ad:72: da:a8:6a:5a:90:fe:7e:89:32:f9:f3:90:a6:72:84: 71:83:9c:e8:41:03:62:43:87:a1:14:7d:2f:68:a2: 49:47:27:b7:ea:49:95:23:c7:d7:1f:bb:c0:12:f0: e0:07:00:c2:41:87:bd:82:94:c5:ec:73:fd:06:c4: 11:dc:bf:cd:f5:e4:cd:66:52:11:7f:09:d3:94:a3: 88:d4:9c:b1:63:f6:b3:ba:a5:5d:aa:80:b7:78:1f: 6b:61:4f:25:6e:e4:e4:1a:00:e0:47:4c:01:ec:ff: ab:69:57:55:38:72:55:8a:62:b8:ac:05:c9:15:47: 06:00:89:96:d5:df:d5:8b:56:57:18:2f:b0:29:ba: 3d:11:7b:9a:bc:13:c5:89:d5:d5:b0:1c:f7:ff:31: 42:b0:8b:73:0f:af:cc:91:1b:39:ba:2b:a1:bc:e3: c3:20:ec:1b:53:97:ce:96:1a:43:fa:79:03:b5:51: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:35:1C:A7:FC:F4:30:2E:23:BD:AE:63:9A:81:00:1D:27:A4:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af8dad8f-1b43-44a7-a8af-fef9607356c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:f000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:b8:12:23:56:85:91:a6:21:73:e3:0f:77:85:b2:58:01:28: f7:fe:e3:e7:18:82:46:bd:6a:a3:ed:8d:cb:c3:4b:00:c4:99: 61:d6:ec:61:fe:a4:75:9b:46:82:c0:ca:e2:72:33:c6:80:64: 55:bd:34:62:9a:62:04:6f:37:e4:56:bc:0b:2f:7d:f3:8e:d4: 0d:96:95:6f:40:dd:f2:e7:0c:46:fe:52:24:1d:d7:09:a1:61: 1f:3a:1b:2d:15:01:52:bb:95:c7:bb:ae:ed:73:ee:5a:b9:f1: ef:d9:68:ca:fa:51:be:b0:08:1d:ff:95:59:64:0c:c7:14:82: b2:ef:44:fd:5d:b4:7e:77:7b:dc:48:b5:92:57:23:4b:8c:c6: 73:c8:de:2c:5a:e6:9f:e9:1b:98:78:3c:95:a5:92:af:ff:20: 32:cd:3c:2a:43:46:8a:f7:fc:85:c1:f9:b9:05:f2:a7:31:a3: 4d:28:85:e5:3a:a6:f0:8f:fa:24:48:5e:59:99:91:16:ac:90: 17:6e:c8:77:60:2b:1e:76:ca:7c:d6:c4:eb:66:0e:c6:b2:ae: 4d:ca:21:15:fc:bf:fb:d9:74:a1:04:f8:67:8c:4c:8c:df:f9: f9:de:bb:c8:8c:a6:49:0a:63:34:27:01:50:8a:29:20:ad:cc: 6a:8e:4b:67 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCJRGU9L/e75sKt3y8HRN9w+uAncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDAwNVoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAOGRlYWU4MmI1ZWJmZTc2YjMxM2Ez NmMwZDg1OWQ5OGU1N2YxYjc0MjcyMDg4NjM0MjlmOWJhZWIxNTNiZDhhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeUFnxOoWskJpGnQcttZCKdgJM2Z S9PCxJhgn7xVL6r3Lc89zprt+ODapiYRRyCKkzJ9XgvShB6hs46wOtAStJQaClFb AKHWrXLaqGpakP5+iTL585CmcoRxg5zoQQNiQ4ehFH0vaKJJRye36kmVI8fXH7vA EvDgBwDCQYe9gpTF7HP9BsQR3L/N9eTNZlIRfwnTlKOI1JyxY/azuqVdqoC3eB9r YU8lbuTkGgDgR0wB7P+raVdVOHJVimK4rAXJFUcGAImW1d/Vi1ZXGC+wKbo9EXua vBPFidXVsBz3/zFCsItzD6/MkRs5uiuhvOPDIOwbU5fOlhpD+nkDtVEvUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHkXNRyn/PQwLiO9rmOagQAdJ6SUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmOGRhZDhmLTFiNDMtNDRhNy1hOGFmLWZlZjk2MDczNTZjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7/AwDQYJKoZIhvcNAQELBQADggEBAFy4EiNWhZGmIXPjD3eF slgBKPf+4+cYgka9aqPtjcvDSwDEmWHW7GH+pHWbRoLAyuJyM8aAZFW9NGKaYgRv N+RWvAsvffOO1A2WlW9A3fLnDEb+UiQd1wmhYR86Gy0VAVK7lce7ru1z7lq58e/Z aMr6Ub6wCB3/lVlkDMcUgrLvRP1dtH53e9xItZJXI0uMxnPI3ixa5p/pG5h4PJWl kq//IDLNPCpDRor3/IXB+bkF8qcxo00oheU6pvCP+iRIXlmZkRaskBduyHdgKx52 ynzWxOtmDsayrk3KIRX8v/vZdKEE+GeMTIzf+fneu8iMpkkKYzQnAVCKKSCtzGqO S2c= -----END CERTIFICATE-----Generated at Thu Apr 17 17:46:00 2025 by rpki-client