$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da917d8a-5f87-4b60-9a74-a3a380e8de88.roa File: da917d8a-5f87-4b60-9a74-a3a380e8de88.roa (raw, json) Hash identifier: HfYSxpTkCwDJIoRbpCCJIGUHGGdIR4cuV3qtQJ5FYNU= Subject key identifier: 12:92:93:BF:63:83:A2:05:F4:8E:43:81:56:67:A7:FE:AB:68:30:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35E75E4DA78BD10CAB1B4B94D08A3AAAF365B6D6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da917d8a-5f87-4b60-9a74-a3a380e8de88.roa Signing time: Tue 25 Mar 2025 00:20:16 +0000 ROA not before: Tue 25 Mar 2025 00:20:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e7:5e:4d:a7:8b:d1:0c:ab:1b:4b:94:d0:8a:3a:aa:f3:65:b6:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:20:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=52c7d6f9ff5b3b7d3255a3fe4e6ba2b0a74bf4e2d26d0887dbcfc6d5dabf9171, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:07:d9:47:a6:d1:b5:27:36:f5:48:48:6a: e5:47:29:b1:d6:38:3b:fc:62:4d:22:24:80:6e:50: e2:86:58:a0:48:d6:2a:1f:d4:c4:24:66:47:c6:33: 48:27:93:67:46:2f:a8:c3:8b:a5:b2:e9:86:ec:0c: 08:db:ce:36:58:66:85:53:b7:69:6c:5a:57:01:25: b2:fd:4f:dc:2f:f2:f2:95:21:e8:3d:d1:a9:66:61: 1b:e3:b0:40:42:97:97:3f:8e:ca:d8:0f:4b:b3:32: a2:0e:05:aa:5f:8d:55:ca:c3:ac:da:43:41:1a:21: d2:c4:57:6f:6e:bf:66:af:20:2a:55:f9:26:73:6c: 6d:17:e2:73:a1:b6:11:91:bf:c7:92:c3:40:a1:46: 14:83:78:cb:51:35:52:73:bb:bf:42:17:cd:00:2c: d2:75:b9:46:60:ad:fe:ee:5c:8f:7f:42:2d:d2:18: 44:03:45:7e:37:5e:7c:e1:f8:54:d3:14:9f:23:9c: 9e:e1:f4:fa:cc:c6:6a:2c:dc:85:1e:fa:ce:90:09: f8:37:c3:6c:15:39:88:22:76:d9:fe:56:d8:7b:33: 54:6d:10:8a:c5:97:b3:76:9f:ba:c4:ad:f8:ca:e7: 23:6f:1f:cc:ab:ee:07:74:36:d4:bc:13:32:23:b9: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:92:93:BF:63:83:A2:05:F4:8E:43:81:56:67:A7:FE:AB:68:30:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da917d8a-5f87-4b60-9a74-a3a380e8de88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c020::/48 Signature Algorithm: sha256WithRSAEncryption b0:3d:27:e1:06:b6:e0:86:7f:7f:8d:56:af:ba:77:b2:4d:63: 66:71:ac:fd:45:bc:98:21:de:88:91:04:fe:89:c4:d2:84:77: b0:67:33:d3:93:97:3c:9a:03:a3:17:fb:da:01:a4:f5:f7:a3: e8:ee:b4:3d:a1:61:32:db:67:72:2f:62:cf:eb:bd:db:18:66: b3:9a:8d:06:1c:77:ff:18:66:9f:6c:9f:2c:e3:24:2c:e8:d2: c1:e7:a6:1d:1e:18:c5:0f:c1:7a:53:8b:bc:a6:d3:1c:ef:ff: af:93:a8:3c:82:77:a9:d0:82:84:c1:4f:27:17:55:70:57:23: f8:e5:f1:2b:c2:fd:4f:84:9a:1f:d3:7e:c9:c6:4a:c5:68:a3: 94:3d:3c:70:13:d3:b7:01:54:0e:cd:f6:04:17:46:e9:c9:75: fc:3f:c4:18:51:9a:f2:d4:95:70:d7:03:d1:c9:1a:42:46:bf: a7:cd:be:7f:4c:48:9f:d2:1d:b5:97:81:45:0b:fd:67:e0:5c: 27:53:38:4a:8d:fb:16:f2:29:cc:39:80:39:06:c1:dd:b1:9a: 49:a6:8f:50:a4:6e:e1:e6:35:2c:d1:ae:e5:bc:e6:1d:c2:ff: e6:d6:21:58:94:85:6e:02:68:4f:dd:d8:b2:2b:f0:8b:d8:76: aa:dc:4b:da -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNedeTaeL0QyrG0uU0Io6qvNlttYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMjAxNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANTJjN2Q2ZjlmZjViM2I3ZDMyNTVh M2ZlNGU2YmEyYjBhNzRiZjRlMmQyNmQwODg3ZGJjZmM2ZDVkYWJmOTE3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fMH2Uem0bUnNvVISGrlRymx1jg7 /GJNIiSAblDihligSNYqH9TEJGZHxjNIJ5NnRi+ow4ulsumG7AwI2842WGaFU7dp bFpXASWy/U/cL/LylSHoPdGpZmEb47BAQpeXP47K2A9LszKiDgWqX41VysOs2kNB GiHSxFdvbr9mryAqVfkmc2xtF+JzobYRkb/HksNAoUYUg3jLUTVSc7u/QhfNACzS dblGYK3+7lyPf0It0hhEA0V+N1584fhU0xSfI5ye4fT6zMZqLNyFHvrOkAn4N8Ns FTmIInbZ/lbYezNUbRCKxZezdp+6xK34yucjbx/Mq+4HdDbUvBMyI7nXWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBKSk79jg6IF9I5DgVZnp/6raDCrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhOTE3ZDhhLTVmODctNGI2MC05YTc0LWEzYTM4MGU4ZGU4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8AgMA0GCSqGSIb3DQEBCwUAA4IBAQCwPSfhBrbghn9/jVav uneyTWNmcaz9RbyYId6IkQT+icTShHewZzPTk5c8mgOjF/vaAaT196Po7rQ9oWEy 22dyL2LP673bGGazmo0GHHf/GGafbJ8s4yQs6NLB56YdHhjFD8F6U4u8ptMc7/+v k6g8gnep0IKEwU8nF1VwVyP45fErwv1PhJof037JxkrFaKOUPTxwE9O3AVQOzfYE F0bpyXX8P8QYUZry1JVw1wPRyRpCRr+nzb5/TEif0h21l4FFC/1n4FwnUzhKjfsW 8inMOYA5BsHdsZpJpo9QpG7h5jUs0a7lvOYdwv/m1iFYlIVuAmhP3diyK/CL2Haq 3Eva -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:07 2025 by rpki-client