$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbddded6-dcdb-4e7d-afd3-a45288409de7.roa File: bbddded6-dcdb-4e7d-afd3-a45288409de7.roa (raw, json) Hash identifier: a7kImHeqCYM7FQAmg+e/n5Kg+OyGXeFdEuJ6rCdYPgQ= Subject key identifier: 0C:BB:09:F9:02:98:0F:DD:1C:14:06:1B:3A:AE:40:5A:F2:D3:59:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 458A593D4DE77D24DCA5B21D3027C0A1B54EB7C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbddded6-dcdb-4e7d-afd3-a45288409de7.roa Signing time: Tue 25 Mar 2025 15:21:41 +0000 ROA not before: Tue 25 Mar 2025 15:21:41 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:e0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8a:59:3d:4d:e7:7d:24:dc:a5:b2:1d:30:27:c0:a1:b5:4e:b7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:21:41 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=20b9581cad3ec2db38cb23b43d55537cf3e62e1264bcb0a81a411d2d4fc23e2e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:00:69:35:86:ad:15:ca:39:39:96:22:75: 46:54:6c:f9:9b:05:32:1f:ff:ee:dd:e9:1d:e8:7f: 8a:f0:35:40:18:cc:a4:5f:fe:80:4d:94:28:58:34: a9:44:41:ca:10:2e:1d:69:39:23:6b:8b:12:dc:3d: c4:76:ac:5c:f8:b8:a3:3c:8f:82:e2:b9:2a:4c:29: 51:77:2d:91:9a:7e:a5:7e:29:e7:34:91:36:b4:90: 34:e1:c0:54:a0:2a:e0:2a:e3:e5:08:bc:13:07:81: 4c:90:04:b0:b8:8e:29:91:31:8c:2d:7b:36:8b:e0: 1a:69:7e:8f:26:fc:38:fd:4a:a1:28:df:ea:69:66: c3:24:0d:8b:e0:01:67:54:cf:bd:a1:04:ab:03:58: 2a:79:7f:73:58:ec:b0:f7:37:49:4f:a4:33:5a:d7: b9:56:9b:bf:ee:41:d1:69:e5:3d:6c:dd:d9:ba:91: 84:1c:75:31:7d:d1:d6:de:57:d3:4e:86:49:14:5e: e0:1d:c9:78:af:73:5a:f8:3d:bd:88:b4:b2:a4:c9: ff:c4:1a:a0:a0:7d:3d:c3:08:52:7d:e4:76:07:1c: d4:2b:52:a8:55:9d:98:38:80:be:b1:ef:dd:df:54: c9:7a:d6:61:40:89:56:93:c6:d6:b1:70:f0:44:6e: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BB:09:F9:02:98:0F:DD:1C:14:06:1B:3A:AE:40:5A:F2:D3:59:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbddded6-dcdb-4e7d-afd3-a45288409de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:e0c0::/46 Signature Algorithm: sha256WithRSAEncryption 28:fc:fc:c4:ff:6f:94:1f:09:2b:1f:b4:a5:09:f8:d6:d0:a0: dc:25:6b:e8:09:cc:a3:07:91:43:3b:4e:7b:50:a7:67:d5:bb: 70:8c:cd:24:1e:7e:e4:6d:a9:f8:2f:a9:93:11:c5:47:ce:70: 56:10:86:11:c4:41:18:1e:0c:63:64:2b:db:00:62:98:48:6f: 24:50:f4:ef:66:ec:db:26:15:ae:41:5e:d0:a7:cd:fd:8b:ca: 6a:d7:81:f2:04:6a:9f:f6:4a:dd:d3:fd:36:b8:08:e4:42:f4: 60:78:93:3e:71:a6:f5:05:db:80:fe:ed:60:9f:c3:9e:8d:38: 28:85:61:83:4b:28:3b:92:84:7b:0a:14:af:ca:e7:ec:e3:cc: e9:11:eb:7d:01:40:f0:a9:13:be:38:64:c2:c2:0b:97:58:5d: 2f:42:d2:d7:7b:01:ca:bc:62:38:de:16:f4:5c:74:37:be:e5: 3a:8f:dd:7c:51:02:86:0c:c0:bd:24:b0:7c:fb:8e:fe:8f:3c: fb:0c:b8:e0:4e:0c:48:c9:3a:d4:4c:8a:d7:e8:33:8b:8e:68: f9:b5:f3:72:dc:d7:6b:b5:28:dc:4a:0b:be:f4:33:00:06:fa: 51:25:a1:ee:70:3b:45:ee:27:5e:62:11:6a:1b:aa:e9:3c:2e: 51:c6:cb:c7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURYpZPU3nfSTcpbIdMCfAobVOt8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MjE0MVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMjBiOTU4MWNhZDNlYzJkYjM4Y2Iy M2I0M2Q1NTUzN2NmM2U2MmUxMjY0YmNiMGE4MWE0MTFkMmQ0ZmMyM2UyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7AAaTWGrRXKOTmWInVGVGz5mwUy H//u3ekd6H+K8DVAGMykX/6ATZQoWDSpREHKEC4daTkja4sS3D3Edqxc+LijPI+C 4rkqTClRdy2Rmn6lfinnNJE2tJA04cBUoCrgKuPlCLwTB4FMkASwuI4pkTGMLXs2 i+AaaX6PJvw4/UqhKN/qaWbDJA2L4AFnVM+9oQSrA1gqeX9zWOyw9zdJT6QzWte5 Vpu/7kHRaeU9bN3ZupGEHHUxfdHW3lfTToZJFF7gHcl4r3Na+D29iLSypMn/xBqg oH09wwhSfeR2BxzUK1KoVZ2YOIC+se/d31TJetZhQIlWk8bWsXDwRG6yywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAy7CfkCmA/dHBQGGzquQFry01kgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiZGRkZWQ2LWRjZGItNGU3ZC1hZmQzLWE0NTI4ODQwOWRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9+DAMA0GCSqGSIb3DQEBCwUAA4IBAQAo/PzE/2+UHwkrH7Sl CfjW0KDcJWvoCcyjB5FDO057UKdn1btwjM0kHn7kban4L6mTEcVHznBWEIYRxEEY HgxjZCvbAGKYSG8kUPTvZuzbJhWuQV7Qp839i8pq14HyBGqf9krd0/02uAjkQvRg eJM+cab1BduA/u1gn8OejTgohWGDSyg7koR7ChSvyufs48zpEet9AUDwqRO+OGTC wguXWF0vQtLXewHKvGI43hb0XHQ3vuU6j918UQKGDMC9JLB8+47+jzz7DLjgTgxI yTrUTIrX6DOLjmj5tfNy3NdrtSjcSgu+9DMABvpRJaHucDtF7ideYhFqG6rpPC5R xsvH -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:55 2025 by rpki-client