$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa File: cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa (raw, json) Hash identifier: 90WIJN0saQpL70HJhXtdNPBLjNH3jYJBYH5ibSGiNYM= Subject key identifier: 27:56:7F:FC:10:07:E0:90:7A:A9:63:EE:61:0D:16:A5:32:38:AC:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21C2AA86F6916D2D41311BD3BF1C7D9950385173 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa Signing time: Mon 24 Mar 2025 15:01:11 +0000 ROA not before: Mon 24 Mar 2025 15:01:11 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c2:aa:86:f6:91:6d:2d:41:31:1b:d3:bf:1c:7d:99:50:38:51:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:01:11 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=34629f54d9f62c49d91b85845837124e51cb67a2c9ae49d0ca5e21d1f8ea00a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:30:35:86:e9:9e:6f:79:a7:a6:25:79:37: 24:9c:6e:48:37:28:09:3b:60:cd:58:c7:17:17:e5: f6:43:bd:e6:17:5f:4d:82:25:d5:fc:73:ce:e9:d5: 7b:3a:e6:c2:53:9d:3b:a5:2f:6a:8c:40:0a:f3:58: b6:ee:a4:12:0d:f3:f8:ba:ac:aa:f6:eb:cf:fa:3f: b7:d8:f1:58:b9:44:33:36:0d:9b:72:02:5f:40:09: 61:35:37:75:ba:3f:70:27:f6:da:9c:dc:40:1e:74: b7:04:ca:a5:b8:a5:a0:48:6d:1b:ef:c3:75:55:98: 45:6a:e2:8c:57:c5:34:68:91:56:29:3e:e7:0b:b9: 33:84:38:12:17:d4:f3:25:fd:46:98:63:2d:6c:f5: 44:eb:4c:44:59:3f:a3:94:dd:28:ce:8b:90:bc:66: 0b:0c:56:dc:0d:9c:8b:6a:00:7a:ee:5d:5e:21:29: fb:41:ff:ab:d6:41:5f:af:d3:db:8e:df:b1:ff:c3: 3b:cd:79:e0:09:58:3c:d1:ea:db:6c:3f:ff:b6:14: 49:b7:57:0f:70:ea:43:d0:87:c6:d0:6d:5e:bf:fa: 4e:80:d4:6a:1c:c7:a5:fe:35:ce:5a:18:71:2f:95: a9:56:71:f3:60:64:12:9e:f9:25:8b:a4:81:4e:0b: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:56:7F:FC:10:07:E0:90:7A:A9:63:EE:61:0D:16:A5:32:38:AC:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:10c0::/48 Signature Algorithm: sha256WithRSAEncryption ab:a7:5a:f2:30:cb:03:d8:b0:c8:a6:fe:23:66:76:29:8d:ab: c7:f0:ba:b9:df:29:9d:81:16:6b:aa:4c:ff:32:a0:4b:dc:92: ac:a8:c1:d5:38:54:57:48:78:84:b3:27:aa:52:e4:4b:e9:ce: a2:83:2d:4e:81:67:91:25:8e:8a:38:59:ca:6b:04:9d:68:d3: 08:65:55:7c:70:84:a2:f4:ee:87:b6:ba:c9:e2:08:e2:96:76: 73:f3:46:01:82:f3:54:54:a4:d2:75:14:65:df:8d:fc:1e:c6: fb:51:9c:6e:2b:10:80:18:9b:7b:19:a6:56:f3:36:37:ca:43: 79:f0:40:76:fd:26:f6:96:04:e3:86:03:38:80:58:66:b3:d8: f2:a8:45:ec:2a:53:20:5d:35:ca:a2:bf:9f:35:eb:da:99:cf: e8:40:17:15:e4:24:7d:51:c2:d4:8c:98:6b:a2:82:ab:7e:2e: b5:dc:1d:94:e8:40:1c:5b:0d:56:be:1b:75:8b:d1:47:5d:29: 6e:54:90:6a:0b:b7:2b:48:9d:6c:ba:1f:eb:57:af:cb:94:ce: 78:67:be:d8:81:50:3f:7f:18:99:09:cc:c3:71:e7:96:ea:a7: fe:52:da:27:77:e1:e5:62:01:03:6a:8d:ca:fd:68:f1:58:67: 05:d7:c0:12 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIcKqhvaRbS1BMRvTvxx9mVA4UXMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDExMVoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAMzQ2MjlmNTRkOWY2MmM0OWQ5MWI4 NTg0NTgzNzEyNGU1MWNiNjdhMmM5YWU0OWQwY2E1ZTIxZDFmOGVhMDBhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9owNYbpnm95p6YleTcknG5INygJ O2DNWMcXF+X2Q73mF19NgiXV/HPO6dV7OubCU507pS9qjEAK81i27qQSDfP4uqyq 9uvP+j+32PFYuUQzNg2bcgJfQAlhNTd1uj9wJ/banNxAHnS3BMqluKWgSG0b78N1 VZhFauKMV8U0aJFWKT7nC7kzhDgSF9TzJf1GmGMtbPVE60xEWT+jlN0ozouQvGYL DFbcDZyLagB67l1eISn7Qf+r1kFfr9Pbjt+x/8M7zXngCVg80erbbD//thRJt1cP cOpD0IfG0G1ev/pOgNRqHMel/jXOWhhxL5WpVnHzYGQSnvkli6SBTguCMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCdWf/wQB+CQeqlj7mENFqUyOKynMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmYTdhY2Y4LTAwNjktNGZiMS04MTlhLWE0NmQyMzUyY2UwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xDAMA0GCSqGSIb3DQEBCwUAA4IBAQCrp1ryMMsD2LDIpv4j ZnYpjavH8Lq53ymdgRZrqkz/MqBL3JKsqMHVOFRXSHiEsyeqUuRL6c6igy1OgWeR JY6KOFnKawSdaNMIZVV8cISi9O6HtrrJ4gjilnZz80YBgvNUVKTSdRRl3438Hsb7 UZxuKxCAGJt7GaZW8zY3ykN58EB2/Sb2lgTjhgM4gFhms9jyqEXsKlMgXTXKor+f Nevamc/oQBcV5CR9UcLUjJhrooKrfi613B2U6EAcWw1Wvht1i9FHXSluVJBqC7cr SJ1suh/rV6/LlM54Z77YgVA/fxiZCczDceeW6qf+Utond+HlYgEDao3K/WjxWGcF 18AS -----END CERTIFICATE-----Generated at Thu Apr 17 17:24:34 2025 by rpki-client