$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8756e90-79cc-4ecd-9fd1-6612ecf711b8.roa File: c8756e90-79cc-4ecd-9fd1-6612ecf711b8.roa (raw, json) Hash identifier: 9rCdODF60aTOXJ1JHmbJsj0PFTz8Clkfma0GYv3GCZQ= Subject key identifier: A5:B8:C5:1A:28:CC:C3:51:30:41:B7:87:4D:6D:6C:C2:C0:33:D0:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72A941B3536B6525618FDD08072E5CDB5318F15F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8756e90-79cc-4ecd-9fd1-6612ecf711b8.roa Signing time: Tue 25 Mar 2025 15:01:19 +0000 ROA not before: Tue 25 Mar 2025 15:01:19 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a9:41:b3:53:6b:65:25:61:8f:dd:08:07:2e:5c:db:53:18:f1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:01:19 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a5d931a6a234588ace05053a7bd3d6ebaeffe79e96129c0fed1b385358a7ef92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:c0:0d:e5:e2:cb:25:74:96:9c:fb:f6:ce: 83:7a:5c:47:44:2b:a7:b9:bc:7b:1c:a8:99:e6:9d: 2f:f0:ca:7e:d5:07:2f:a4:8b:d9:5d:78:cc:d5:77: b4:87:07:93:12:a6:3c:74:db:00:5a:9d:f0:04:ec: 19:01:4a:60:4a:d1:e3:59:61:f9:38:e0:2c:0b:07: 47:ef:15:be:65:54:20:31:f0:50:b1:8c:7a:36:f8: 28:73:09:05:6b:6b:86:b3:9c:0e:d7:70:c3:ca:dc: 18:86:96:73:a2:e3:20:8d:25:d4:57:4a:77:3d:c9: 47:6a:e0:c6:a3:f9:de:d3:e1:cc:57:28:b6:1c:fa: 1f:a1:25:3a:b8:79:ca:d8:40:7d:49:7e:2c:44:5e: c2:66:ca:de:ca:23:a8:73:d2:71:0c:a0:fb:25:01: b0:b6:4e:73:da:5c:a8:55:f5:51:76:a2:c8:75:3c: cc:1f:eb:31:44:31:bf:97:01:cb:0c:d7:d1:49:02: 16:4a:54:49:d0:f0:6d:53:1e:74:03:3a:ed:f2:9f: 38:5d:f6:6c:aa:8b:01:13:dd:d1:23:05:82:40:9e: 83:ca:0f:87:1e:a9:31:d7:6f:e6:32:91:c3:62:5c: b1:c6:63:1a:a9:8a:3f:00:5e:fd:6d:8f:b4:5f:ee: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B8:C5:1A:28:CC:C3:51:30:41:B7:87:4D:6D:6C:C2:C0:33:D0:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8756e90-79cc-4ecd-9fd1-6612ecf711b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:b040::/48 Signature Algorithm: sha256WithRSAEncryption b9:c2:09:e2:04:e3:6f:12:4e:79:9b:5d:3d:dc:25:48:92:03: 29:d8:b2:a3:a2:ec:3e:d4:85:5b:28:bc:3a:fb:58:47:9e:1b: 0c:dc:a0:0f:ef:04:b0:ae:66:81:90:34:51:d8:c9:4e:58:85: 19:d6:30:91:21:4a:ed:4c:91:1a:31:ce:f5:28:21:40:10:06: 59:86:f3:f3:0b:1e:2f:50:af:d7:94:bd:2b:00:ce:a0:3e:c0: f3:1b:80:dd:0e:28:88:1e:92:5a:dd:6f:a3:af:33:23:ef:f1: de:13:36:43:b1:a1:97:b0:64:a7:bb:12:73:25:be:32:43:5d: 68:c5:5c:33:3a:1d:04:63:53:1b:a8:c9:91:1a:ff:6c:f0:47: 85:dd:04:b0:04:28:98:1b:b2:7c:6f:ab:87:4e:b6:21:ad:77: d4:54:7a:3c:38:2f:4c:ed:15:ee:5b:ab:1b:22:70:b8:a7:50: 18:81:3e:a0:28:68:46:8d:d0:16:91:20:ea:ed:18:4b:18:86: ac:76:89:9f:d5:d7:34:0b:6e:fc:01:d1:84:f1:27:c5:f6:a5: 50:0c:52:3b:21:4c:5d:f5:aa:75:f9:a2:07:f7:c8:61:87:95: c4:3d:a3:61:a1:b6:06:e5:5f:31:c7:82:1c:7e:62:53:66:ec: 7d:3f:e7:e1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcqlBs1NrZSVhj90IBy5c21MY8V8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDExOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTVkOTMxYTZhMjM0NTg4YWNlMDUw NTNhN2JkM2Q2ZWJhZWZmZTc5ZTk2MTI5YzBmZWQxYjM4NTM1OGE3ZWY5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjrADeXiyyV0lpz79s6DelxHRCun ubx7HKiZ5p0v8Mp+1QcvpIvZXXjM1Xe0hweTEqY8dNsAWp3wBOwZAUpgStHjWWH5 OOAsCwdH7xW+ZVQgMfBQsYx6NvgocwkFa2uGs5wO13DDytwYhpZzouMgjSXUV0p3 PclHauDGo/ne0+HMVyi2HPofoSU6uHnK2EB9SX4sRF7CZsreyiOoc9JxDKD7JQGw tk5z2lyoVfVRdqLIdTzMH+sxRDG/lwHLDNfRSQIWSlRJ0PBtUx50Azrt8p84XfZs qosBE93RIwWCQJ6Dyg+HHqkx12/mMpHDYlyxxmMaqYo/AF79bY+0X+4rYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKW4xRoozMNRMEG3h01tbMLAM9BrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4NzU2ZTkwLTc5Y2MtNGVjZC05ZmQxLTY2MTJlY2Y3MTFiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9LBAMA0GCSqGSIb3DQEBCwUAA4IBAQC5wgniBONvEk55m109 3CVIkgMp2LKjouw+1IVbKLw6+1hHnhsM3KAP7wSwrmaBkDRR2MlOWIUZ1jCRIUrt TJEaMc71KCFAEAZZhvPzCx4vUK/XlL0rAM6gPsDzG4DdDiiIHpJa3W+jrzMj7/He EzZDsaGXsGSnuxJzJb4yQ11oxVwzOh0EY1MbqMmRGv9s8EeF3QSwBCiYG7J8b6uH TrYhrXfUVHo8OC9M7RXuW6sbInC4p1AYgT6gKGhGjdAWkSDq7RhLGIasdomf1dc0 C278AdGE8SfF9qVQDFI7IUxd9ap1+aIH98hhh5XEPaNhobYG5V8xx4IcfmJTZux9 P+fh -----END CERTIFICATE-----Generated at Thu Apr 17 17:57:48 2025 by rpki-client