$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa File: b1655db6-c486-404e-a33e-9132a12eb476.roa (raw, json) Hash identifier: o1B3/k3cSnJEXCU4/fKK1KaiJZR7/KJBqnZmdE4I30M= Subject key identifier: 70:80:C4:6F:0B:47:7A:09:62:88:C0:18:27:06:31:3E:07:73:F2:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 588583D5AD328FDDF498AE941C2CFD5C2DBF3C0C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa Signing time: Tue 25 Mar 2025 15:40:20 +0000 ROA not before: Tue 25 Mar 2025 15:40:20 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:10c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:85:83:d5:ad:32:8f:dd:f4:98:ae:94:1c:2c:fd:5c:2d:bf:3c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:40:20 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=8e0bba4a9b7ad72cd7f0597fbddb5e9cc16837dbc658799a623b15ddd4177e28, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:53:02:d2:f2:a8:15:fa:99:1a:70:63:87: b2:81:20:60:b8:41:3f:04:6f:23:60:03:f1:ba:8e: 7f:41:42:70:1b:fe:71:5e:5d:a7:00:66:d0:bb:ff: 8a:67:eb:5b:b5:b4:f0:9c:e0:46:b7:d9:45:14:d0: 7d:e9:86:92:96:a4:58:51:4e:da:9a:b2:60:e0:2f: ae:05:54:9e:77:0f:33:9c:20:68:bd:6f:9e:ff:b3: 2a:9b:4f:cc:ac:bf:39:ce:fd:c2:3e:98:02:ed:dc: ec:58:67:45:76:42:ca:25:37:15:78:7d:c7:18:2f: 13:5a:69:4d:76:0b:78:2f:23:bb:92:62:f5:27:ea: 3c:e4:43:d3:77:23:9a:cd:5d:3e:2e:f3:ae:f7:9b: 86:77:ad:a5:98:94:ba:9f:62:34:cc:d0:c9:00:67: bf:f4:68:df:9b:7d:76:19:16:39:6c:9b:4e:9e:01: 01:af:d3:d9:92:da:b3:e9:d8:1a:9f:1c:a8:fd:28: 2a:bc:c0:aa:37:e7:ae:dd:ba:08:9a:9c:4f:5a:c7: 68:29:c0:db:42:47:09:20:9e:bb:30:9e:25:5f:d3: 9e:4a:82:6f:d7:fe:88:3a:11:39:eb:74:84:b0:b0: d0:9f:b1:4c:09:30:05:32:5a:09:87:14:7d:ea:c3: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:C4:6F:0B:47:7A:09:62:88:C0:18:27:06:31:3E:07:73:F2:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:10c0::/46 Signature Algorithm: sha256WithRSAEncryption 8a:99:af:22:34:28:02:1e:9e:a3:3b:cf:bd:7c:53:87:c7:51: 4b:4d:71:1c:14:46:12:cd:26:f0:6f:eb:08:00:1f:31:3a:de: 1e:e5:00:1e:cd:c3:d8:1c:99:08:fe:65:4c:1a:70:42:57:0f: 31:1c:56:15:57:43:12:ca:51:40:e0:96:45:21:2c:47:1e:46: e4:68:49:b0:c6:72:f9:6b:0f:d3:76:91:ee:ed:24:6d:32:4d: 08:bb:90:11:de:de:2f:5c:1d:9f:be:03:85:6c:99:64:28:ca: e3:69:25:3d:ec:b5:e6:d3:07:7d:16:5e:40:46:c5:e0:75:83: 7f:ff:5a:7a:2f:dd:34:bf:36:88:0f:e8:a1:e4:71:f7:d4:56: 64:e9:38:0c:35:5d:0e:7e:2d:cc:80:ef:78:65:01:ee:6a:2f: 4b:c8:d7:dc:25:05:56:a3:21:7a:27:27:b9:06:37:73:4e:04: 91:65:a2:15:01:89:ce:61:95:28:63:01:00:01:65:ea:58:55: 52:37:c2:3b:fe:24:9e:cc:14:91:f4:f6:27:e9:54:69:62:0e: 59:8d:c6:95:8d:19:00:d8:90:b5:a8:69:26:94:17:fc:08:90: 84:78:20:7e:a7:ef:ed:12:90:c2:88:3d:57:c6:7b:6c:37:f4: 13:a6:5c:11 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWIWD1a0yj930mK6UHCz9XC2/PAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NDAyMFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOGUwYmJhNGE5YjdhZDcyY2Q3ZjA1 OTdmYmRkYjVlOWNjMTY4MzdkYmM2NTg3OTlhNjIzYjE1ZGRkNDE3N2UyODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9RTAtLyqBX6mRpwY4eygSBguEE/ BG8jYAPxuo5/QUJwG/5xXl2nAGbQu/+KZ+tbtbTwnOBGt9lFFNB96YaSlqRYUU7a mrJg4C+uBVSedw8znCBovW+e/7Mqm0/MrL85zv3CPpgC7dzsWGdFdkLKJTcVeH3H GC8TWmlNdgt4LyO7kmL1J+o85EPTdyOazV0+LvOu95uGd62lmJS6n2I0zNDJAGe/ 9Gjfm312GRY5bJtOngEBr9PZktqz6dganxyo/SgqvMCqN+eu3boImpxPWsdoKcDb QkcJIJ67MJ4lX9OeSoJv1/6IOhE563SEsLDQn7FMCTAFMloJhxR96sOs/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHCAxG8LR3oJYojAGCcGMT4Hc/IVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxNjU1ZGI2LWM0ODYtNDA0ZS1hMzNlLTkxMzJhMTJlYjQ3Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+xDAMA0GCSqGSIb3DQEBCwUAA4IBAQCKma8iNCgCHp6jO8+9 fFOHx1FLTXEcFEYSzSbwb+sIAB8xOt4e5QAezcPYHJkI/mVMGnBCVw8xHFYVV0MS ylFA4JZFISxHHkbkaEmwxnL5aw/TdpHu7SRtMk0Iu5AR3t4vXB2fvgOFbJlkKMrj aSU97LXm0wd9Fl5ARsXgdYN//1p6L900vzaID+ih5HH31FZk6TgMNV0Ofi3MgO94 ZQHuai9LyNfcJQVWoyF6Jye5BjdzTgSRZaIVAYnOYZUoYwEAAWXqWFVSN8I7/iSe zBSR9PYn6VRpYg5ZjcaVjRkA2JC1qGkmlBf8CJCEeCB+p+/tEpDCiD1XxntsN/QT plwR -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:08 2025 by rpki-client