$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa File: db727801-736f-41c5-bf1a-e19ab3b36eff.roa (raw, json) Hash identifier: fngepXAMKlocsTC9g3FcORzImSvRvUAHTw/rv4gdTaU= Subject key identifier: 74:68:83:69:C3:1B:BB:05:24:0E:9C:11:9D:71:A3:AE:C8:FE:2A:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 347D287A1D4247D6D4E9B581DEB99E555706DD60 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa Signing time: Tue 25 Mar 2025 00:10:40 +0000 ROA not before: Tue 25 Mar 2025 00:10:40 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7d:28:7a:1d:42:47:d6:d4:e9:b5:81:de:b9:9e:55:57:06:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:10:40 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=8c38b710d743b33d4139f79322a1fc83b7f9add56d558fae8f9fe50aeaebdd22, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:f2:2d:58:8c:14:a6:1f:9b:21:81:7c:a8: 7e:07:d3:1e:f3:04:44:e7:0d:9e:a9:c1:a1:57:c8: 69:fa:ef:53:71:c9:e1:7a:f1:5d:cd:8c:a7:db:10: 4d:da:a8:ea:65:81:9c:81:90:b3:45:fd:90:73:37: 91:fa:fa:ad:a9:01:55:85:82:1a:85:b1:55:03:fc: 71:25:16:1d:a7:09:be:ab:cb:fe:18:26:b7:40:5d: b3:a9:91:76:f8:2f:e8:7a:8a:fa:7d:71:0b:af:0e: 9f:d8:f9:20:d1:2b:84:c6:87:6f:88:ed:f3:bb:55: 00:25:b9:3f:b4:91:31:cb:8c:3c:8b:cb:99:af:76: 2c:35:4b:05:8c:3b:a8:18:ac:c8:c1:35:a6:ee:40: 4f:f7:1d:41:32:e1:6a:cb:bb:27:f6:0e:a5:e0:c0: f7:9e:f7:84:e7:25:ce:79:f0:d1:11:e2:b8:4b:c6: 59:a4:e5:aa:a5:0f:b1:35:6a:eb:06:05:5b:85:77: 78:27:e8:47:f7:c9:d9:a4:f2:4e:9a:75:bf:ff:8f: 26:31:6b:f8:34:72:b3:23:f0:cd:49:18:b3:16:12: d5:02:5a:7f:43:99:a5:00:61:e6:09:41:4b:3b:bc: ea:fb:eb:a2:75:e2:f4:28:b7:51:f1:9e:1b:a3:21: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:83:69:C3:1B:BB:05:24:0E:9C:11:9D:71:A3:AE:C8:FE:2A:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8880::/48 Signature Algorithm: sha256WithRSAEncryption c6:52:11:88:86:6c:8f:73:f1:54:42:d1:84:20:61:c9:eb:81: fa:61:e0:8d:f3:31:5a:f2:c2:c6:b4:c4:68:28:d6:b3:ef:44: 60:40:ec:8e:1c:ab:86:15:58:34:cb:4b:46:bd:48:a3:7f:8a: 59:06:c3:9c:09:53:e6:4a:48:32:e2:29:a8:58:7b:c7:f5:e1: 8c:d6:a4:a2:d7:b6:9b:35:07:e3:81:d0:14:bb:ff:5d:9e:7c: 87:5f:f5:15:7a:0a:98:56:af:42:7b:80:c2:92:cd:55:4b:18: 8b:f4:3e:bb:26:cf:a5:53:98:a4:95:00:dd:d3:97:43:c0:86: df:1e:78:19:70:73:47:03:ed:0c:a8:e6:e0:dd:df:a9:de:33: c5:ee:07:cc:47:26:3b:ca:6b:b1:68:1c:b4:99:02:c4:4d:95: 24:dc:76:67:11:06:c2:6b:e4:48:cf:ce:f0:5a:57:a1:0d:17: 08:a4:be:5e:50:7b:ff:d3:94:df:2a:22:34:28:21:c3:e2:ab: 52:1e:73:6f:06:1c:79:45:bd:76:95:d9:34:22:58:cc:40:b4: 5e:28:d3:08:02:9a:73:53:c4:d8:75:e4:f5:8b:a8:b1:6c:4c: e5:c4:1a:93:7f:29:fc:ea:84:91:16:bb:26:08:9c:89:5e:ce: 44:e1:5e:9f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNH0oeh1CR9bU6bWB3rmeVVcG3WAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMTA0MFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOGMzOGI3MTBkNzQzYjMzZDQxMzlm NzkzMjJhMWZjODNiN2Y5YWRkNTZkNTU4ZmFlOGY5ZmU1MGFlYWViZGQyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDnyLViMFKYfmyGBfKh+B9Me8wRE 5w2eqcGhV8hp+u9TccnhevFdzYyn2xBN2qjqZYGcgZCzRf2QczeR+vqtqQFVhYIa hbFVA/xxJRYdpwm+q8v+GCa3QF2zqZF2+C/oeor6fXELrw6f2Pkg0SuExodviO3z u1UAJbk/tJExy4w8i8uZr3YsNUsFjDuoGKzIwTWm7kBP9x1BMuFqy7sn9g6l4MD3 nveE5yXOefDREeK4S8ZZpOWqpQ+xNWrrBgVbhXd4J+hH98nZpPJOmnW//48mMWv4 NHKzI/DNSRizFhLVAlp/Q5mlAGHmCUFLO7zq++uideL0KLdR8Z4boyHeEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHRog2nDG7sFJA6cEZ1xo67I/iobMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiNzI3ODAxLTczNmYtNDFjNS1iZjFhLWUxOWFiM2IzNmVmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oiAMA0GCSqGSIb3DQEBCwUAA4IBAQDGUhGIhmyPc/FUQtGE IGHJ64H6YeCN8zFa8sLGtMRoKNaz70RgQOyOHKuGFVg0y0tGvUijf4pZBsOcCVPm Skgy4imoWHvH9eGM1qSi17abNQfjgdAUu/9dnnyHX/UVegqYVq9Ce4DCks1VSxiL 9D67Js+lU5iklQDd05dDwIbfHngZcHNHA+0MqObg3d+p3jPF7gfMRyY7ymuxaBy0 mQLETZUk3HZnEQbCa+RIz87wWlehDRcIpL5eUHv/05TfKiI0KCHD4qtSHnNvBhx5 Rb12ldk0IljMQLReKNMIAppzU8TYdeT1i6ixbEzlxBqTfyn86oSRFrsmCJyJXs5E 4V6f -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:40 2025 by rpki-client