$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa File: d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa (raw, json) Hash identifier: A8ZfsgAKqwXe6m4v+mRz87rhyIqF63D0gFqNmJIuzMM= Subject key identifier: 87:F4:87:E5:08:5D:07:F9:7D:31:AE:5E:C4:DD:64:34:42:A2:FC:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 773FA017DD9FEBEA0499FFF963321A23BFF0A86A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa Signing time: Tue 25 Mar 2025 15:41:27 +0000 ROA not before: Tue 25 Mar 2025 15:41:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3f:a0:17:dd:9f:eb:ea:04:99:ff:f9:63:32:1a:23:bf:f0:a8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:41:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=473b409c2f7b4d60f85551a00709e546bb50023d825858f7304a58ef9912cc1c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:98:12:2f:4a:d6:a2:04:bd:c7:9c:b2:e1: b6:61:ed:04:c3:f8:eb:c3:88:47:25:83:f6:6c:2a: 5d:1d:9c:f1:65:d7:0a:f5:94:22:a9:75:9d:f4:3b: af:7e:71:d7:63:92:ac:85:ad:af:8a:53:b4:ea:f4: 2d:cf:ea:22:4b:e8:a3:56:18:61:49:37:93:6c:24: 6b:a9:97:d2:57:85:e4:7c:39:4d:97:60:f6:1b:6d: d8:b0:ef:69:73:14:66:b8:24:45:e6:2c:3a:39:f9: cc:ee:05:70:2a:12:72:c1:60:87:b2:e5:0b:ea:f8: 32:2a:99:66:b1:4b:fa:eb:67:03:73:a4:ed:08:1c: 70:2f:c8:58:02:b3:eb:0d:2e:81:27:dd:68:39:58: bf:6f:87:5d:8e:b2:3f:4d:60:42:9a:25:4e:40:3c: 1e:65:a9:4c:ec:a6:f9:48:0d:95:94:37:51:87:1d: 8c:6a:ba:1e:98:21:98:c1:32:8e:16:1e:b8:e2:51: 4c:b5:0d:3e:0b:95:94:e1:78:42:a0:ed:d2:a3:3a: b1:a6:b4:6b:ce:85:c2:f9:a8:93:85:17:21:5a:f2: 6c:5f:ed:32:38:8e:5d:f0:45:88:36:98:90:78:84: e2:9a:87:c4:43:8c:03:ba:b1:5f:24:b3:3a:bb:38: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F4:87:E5:08:5D:07:F9:7D:31:AE:5E:C4:DD:64:34:42:A2:FC:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c880::/46 Signature Algorithm: sha256WithRSAEncryption 5a:29:bb:ea:83:ce:4b:d0:e5:67:2a:6e:82:e5:6d:3d:ef:ec: 0b:85:bd:aa:81:73:4c:90:22:79:3a:a6:ce:de:aa:4a:77:73: e1:65:f9:a4:37:4c:2c:7b:ea:47:3f:b1:4f:49:66:81:56:c2: 2f:25:14:8e:48:84:31:bd:5d:82:fb:0c:2f:15:51:58:bc:e1: 08:82:dc:b5:10:41:71:a7:e1:c6:c3:cc:53:19:f6:5a:b0:0d: e5:47:c6:87:cd:27:3f:e1:76:bd:c8:d9:54:95:82:4b:59:ea: 27:18:31:25:59:fb:a4:c9:15:9c:af:1c:01:56:5d:b5:a4:c0: 07:34:65:79:5e:b1:21:2a:b7:88:b0:cc:fe:69:8d:43:c5:76: 7c:13:b2:e6:99:16:55:fd:33:6e:04:c4:b8:aa:8c:7d:6a:0e: ca:66:a7:90:d9:60:47:60:f3:62:01:0c:d0:59:11:04:c7:5f: 94:bc:4f:d2:30:56:c7:51:af:53:54:14:8f:3e:57:d3:d2:e0: 16:c5:90:ae:42:80:af:82:2d:ba:f8:05:1e:0c:65:a8:71:0c: 78:86:d4:4f:43:f2:a1:82:20:19:08:53:50:b4:d3:7f:1f:5d: 01:58:ec:f1:68:e7:9f:f9:9b:19:ef:9e:52:02:44:fc:4c:08: aa:db:70:50 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdz+gF92f6+oEmf/5YzIaI7/wqGowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NDEyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANDczYjQwOWMyZjdiNGQ2MGY4NTU1 MWEwMDcwOWU1NDZiYjUwMDIzZDgyNTg1OGY3MzA0YTU4ZWY5OTEyY2MxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza2YEi9K1qIEvcecsuG2Ye0Ew/jr w4hHJYP2bCpdHZzxZdcK9ZQiqXWd9DuvfnHXY5Ksha2vilO06vQtz+oiS+ijVhhh STeTbCRrqZfSV4XkfDlNl2D2G23YsO9pcxRmuCRF5iw6OfnM7gVwKhJywWCHsuUL 6vgyKplmsUv662cDc6TtCBxwL8hYArPrDS6BJ91oOVi/b4ddjrI/TWBCmiVOQDwe ZalM7Kb5SA2VlDdRhx2MaroemCGYwTKOFh644lFMtQ0+C5WU4XhCoO3SozqxprRr zoXC+aiThRchWvJsX+0yOI5d8EWINpiQeITimofEQ4wDurFfJLM6uzhpZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIf0h+UIXQf5fTGuXsTdZDRCovzNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNzVhYzZlLWVhM2UtNDAwOC1hY2RlLWQxMGY2YzRjMWJhYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaciAMA0GCSqGSIb3DQEBCwUAA4IBAQBaKbvqg85L0OVnKm6C 5W097+wLhb2qgXNMkCJ5OqbO3qpKd3PhZfmkN0wse+pHP7FPSWaBVsIvJRSOSIQx vV2C+wwvFVFYvOEIgty1EEFxp+HGw8xTGfZasA3lR8aHzSc/4Xa9yNlUlYJLWeon GDElWfukyRWcrxwBVl21pMAHNGV5XrEhKreIsMz+aY1DxXZ8E7LmmRZV/TNuBMS4 qox9ag7KZqeQ2WBHYPNiAQzQWREEx1+UvE/SMFbHUa9TVBSPPlfT0uAWxZCuQoCv gi26+AUeDGWocQx4htRPQ/KhgiAZCFNQtNN/H10BWOzxaOef+ZsZ755SAkT8TAiq 23BQ -----END CERTIFICATE-----Generated at Thu Apr 17 17:41:17 2025 by rpki-client