$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa File: dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa (raw, json) Hash identifier: 4rWtAjTYpaJSQwV4GzNnXDtrwPDr3Vu94SygjF1Bg+E= Subject key identifier: 43:FD:D8:00:F6:67:CC:7C:38:02:64:38:EF:AC:4A:87:1F:D4:E8:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A4C4F783EEB490ABE1746FFD871F5188F3A8F64 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa Signing time: Tue 25 Mar 2025 00:51:13 +0000 ROA not before: Tue 25 Mar 2025 00:51:13 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:4f:78:3e:eb:49:0a:be:17:46:ff:d8:71:f5:18:8f:3a:8f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:51:13 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=6459fab120a1137dc8e1d454356427b0e62f82bf9acbaf20db1a864d4cb62ee7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a0:d4:e0:47:b6:61:41:3a:b5:b9:25:48:88: 9f:2a:16:b3:c4:6a:95:e0:ed:cd:98:ca:42:7b:d7: e6:c4:db:43:ff:e3:d5:2c:9a:46:23:14:b3:ea:f6: 0b:96:0c:2e:15:5f:ea:54:9e:95:02:7c:b9:3f:b9: bc:68:d7:fb:af:f0:54:62:f3:07:95:84:13:75:0b: 9e:8c:00:da:10:a1:15:01:72:31:c4:04:db:4f:7e: ab:c6:52:db:23:07:2f:9f:f9:8a:4a:ac:1a:9e:59: 7a:f4:03:be:2d:de:3e:7d:a8:19:f6:16:02:67:50: 43:e1:6d:d8:9c:b4:f4:1d:80:8d:77:83:3e:89:03: 5b:65:d0:aa:bd:41:e8:05:26:21:e5:be:75:e7:80: 58:55:cc:4a:47:e1:52:2d:bd:79:17:c5:e0:c0:56: d2:df:f1:33:f5:f2:07:9c:22:f1:59:56:c3:7c:08: 1d:47:7a:41:66:49:09:1e:4c:f2:04:ab:dc:d2:de: 48:df:7d:18:78:4e:c4:50:69:b5:f7:e9:4a:3d:94: 56:73:b4:8c:60:ad:69:2d:e0:24:e3:74:7e:79:b6: 97:d2:49:40:37:73:4f:43:f7:0e:d1:e0:25:42:09: 83:9f:d6:85:dd:2c:1e:da:d7:da:12:10:98:fa:ea: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:D8:00:F6:67:CC:7C:38:02:64:38:EF:AC:4A:87:1F:D4:E8:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 08:8a:e0:35:02:7e:b5:f7:0b:99:d2:f1:fe:c4:00:08:2c:34: 1a:77:e0:9f:4f:a6:e2:b7:da:d5:bb:01:44:6f:87:2d:f0:01: a8:58:19:5d:b1:8b:de:eb:42:76:b6:5d:30:2c:83:d1:56:3e: 7c:78:40:2c:dd:f1:b7:0b:e4:17:19:58:bf:4a:73:4c:a4:68: 73:91:f0:4f:60:4b:5f:e7:7b:21:f5:1a:44:8e:d6:ac:f9:89: 14:6a:7c:d5:dd:cd:f6:3c:c5:78:44:b5:81:40:36:ec:3c:1c: 97:ce:fd:e3:eb:de:c2:7b:5a:69:a5:be:7b:a2:50:dd:20:5d: da:bb:82:27:e1:6c:3f:2b:76:c5:44:ca:3c:93:d5:2d:db:63: e3:fb:5c:49:0a:68:46:42:d4:58:a6:54:c3:8d:4f:db:ea:4b: 13:01:b5:ef:5b:79:30:0c:84:8b:8c:c4:80:0f:27:45:b6:11: 08:3c:de:92:43:8c:61:8a:3d:64:8a:7b:cd:82:79:1b:76:5d: d5:ad:72:6d:38:48:16:6e:1d:7a:3a:b1:70:e5:64:3e:ac:4b: 8e:01:69:41:e3:46:f3:13:1f:c8:99:27:5d:8a:94:1f:e5:35: ca:f1:bc:f3:d5:cf:b7:cf:36:16:d4:ec:36:3b:4e:af:ec:bd: 27:be:0c:07 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOkxPeD7rSQq+F0b/2HH1GI86j2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTExM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANjQ1OWZhYjEyMGExMTM3ZGM4ZTFk NDU0MzU2NDI3YjBlNjJmODJiZjlhY2JhZjIwZGIxYTg2NGQ0Y2I2MmVlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66DU4Ee2YUE6tbklSIifKhazxGqV 4O3NmMpCe9fmxNtD/+PVLJpGIxSz6vYLlgwuFV/qVJ6VAny5P7m8aNf7r/BUYvMH lYQTdQuejADaEKEVAXIxxATbT36rxlLbIwcvn/mKSqwanll69AO+Ld4+fagZ9hYC Z1BD4W3YnLT0HYCNd4M+iQNbZdCqvUHoBSYh5b5154BYVcxKR+FSLb15F8XgwFbS 3/Ez9fIHnCLxWVbDfAgdR3pBZkkJHkzyBKvc0t5I330YeE7EUGm19+lKPZRWc7SM YK1pLeAk43R+ebaX0klAN3NPQ/cO0eAlQgmDn9aF3Swe2tfaEhCY+urJ2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEP92AD2Z8x8OAJkOO+sSocf1Oj8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmZWIzOWFkLTI2NDQtNGYyYS1iMjNlLTE4ZjUxY2NkNDllMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYRDAMA0GCSqGSIb3DQEBCwUAA4IBAQAIiuA1An619wuZ0vH+ xAAILDQad+CfT6bit9rVuwFEb4ct8AGoWBldsYve60J2tl0wLIPRVj58eEAs3fG3 C+QXGVi/SnNMpGhzkfBPYEtf53sh9RpEjtas+YkUanzV3c32PMV4RLWBQDbsPByX zv3j697Ce1pppb57olDdIF3au4In4Ww/K3bFRMo8k9Ut22Pj+1xJCmhGQtRYplTD jU/b6ksTAbXvW3kwDISLjMSADydFthEIPN6SQ4xhij1kinvNgnkbdl3VrXJtOEgW bh16OrFw5WQ+rEuOAWlB40bzEx/ImSddipQf5TXK8bzz1c+3zzYW1Ow2O06v7L0n vgwH -----END CERTIFICATE-----Generated at Thu Apr 17 17:41:17 2025 by rpki-client