$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa File: e07de3d6-bd1c-45fc-a092-f2635716b267.roa (raw, json) Hash identifier: ehWKKt+0mMyT3xjDP2NFZnLWsL9Oj49ONTNc6nmBV7A= Subject key identifier: 2C:39:9E:BF:5C:98:0F:C0:59:55:68:29:02:52:59:9D:5D:0B:0E:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AB0F8A8B365B1AED7E822B3DD7F7632564872B0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa Signing time: Tue 25 Mar 2025 15:31:03 +0000 ROA not before: Tue 25 Mar 2025 15:31:03 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b0:f8:a8:b3:65:b1:ae:d7:e8:22:b3:dd:7f:76:32:56:48:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:31:03 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=f06852f43f77193f12c0407c8b51cdb56880896624eb14cb6ac96957ffd7fa2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:3f:5d:28:e2:c5:aa:d4:45:b7:1f:c6:24: 33:41:d0:51:e7:96:07:4f:b4:25:ce:bb:3c:27:f7: 0a:62:03:80:bd:b0:47:3e:96:e0:4b:89:ee:ff:7e: 8e:f2:2b:9e:31:5e:ea:26:f3:c9:fc:1d:17:e3:5e: 75:9c:37:3b:e8:2d:2e:e3:4f:b6:fe:4b:6c:bd:bd: 2c:c0:6f:7b:5b:fb:32:b5:0a:a7:66:de:81:9c:d0: ea:c1:4c:39:40:0a:b5:73:69:6c:de:ea:37:f0:69: 8b:a6:52:9a:0f:0d:1e:d9:bc:38:9a:08:e1:5d:25: ed:d3:eb:39:c8:c5:52:33:f4:83:d4:5a:5d:ac:19: bb:3b:06:e6:a3:ac:24:70:20:f8:37:9c:1f:8f:9a: b2:1d:1f:6b:ad:7a:04:0b:dd:d8:c4:dd:09:33:80: a6:6e:b5:a5:2f:aa:3a:d1:2b:e2:70:3c:92:98:f4: 5d:54:05:a4:6c:ba:d2:8d:b3:b5:d4:a3:c2:be:64: 57:2d:13:76:f4:9f:c7:d5:d1:8a:f5:56:f2:89:49: d8:e6:48:a9:ed:ed:61:53:96:6f:96:cc:df:7d:f6: df:d0:00:da:cf:cc:54:fb:6d:97:a6:ec:8e:7c:05: 3b:c4:8e:b3:e8:11:6e:98:4b:71:04:2a:12:1b:cb: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:9E:BF:5C:98:0F:C0:59:55:68:29:02:52:59:9D:5D:0B:0E:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c080::/46 Signature Algorithm: sha256WithRSAEncryption 79:5a:6c:f1:e7:a9:c5:1e:0b:ec:87:5e:d3:f9:cc:38:bd:ae: 14:88:c5:86:4e:86:63:ba:a5:ba:78:b1:4a:58:b1:6e:be:f3: 05:f5:5c:29:b6:9b:7b:23:a8:17:3b:5a:34:cf:9b:2f:42:df: ba:42:a2:8a:a8:4e:24:e3:94:27:fd:1d:b6:8a:5a:64:a9:4a: 5d:28:fb:f9:f4:c0:4b:73:2e:d4:3a:57:ad:ab:ad:cd:22:59: 21:3a:b6:78:2a:8b:fe:5d:ec:e4:ca:d0:93:27:ce:63:31:ef: fe:39:f2:9e:f6:6b:26:fb:ce:b2:a2:13:18:84:8d:c0:c3:2c: d5:39:99:0f:7e:a1:31:db:75:7e:dc:9f:61:ec:e8:b7:84:30: e6:9f:e3:12:5b:91:ab:1f:3a:d7:81:ee:11:50:6a:b3:00:66: 83:d8:dd:f5:9e:3c:6f:81:7d:3c:53:a1:12:91:fc:55:d0:fe: 63:75:ce:24:9c:f7:6c:93:1b:33:73:69:23:b8:5e:95:59:c6: 10:7c:ea:d6:64:a7:9c:b6:43:01:5c:47:09:5c:3b:48:37:a4: 85:6e:4c:45:d7:c1:3a:b0:a1:db:73:6d:94:74:32:2e:66:2f: 3a:96:28:09:d3:bd:60:2c:23:f5:72:5f:47:9d:c9:0f:99:6e: 70:72:3b:2d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUarD4qLNlsa7X6CKz3X92MlZIcrAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MzEwM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjA2ODUyZjQzZjc3MTkzZjEyYzA0 MDdjOGI1MWNkYjU2ODgwODk2NjI0ZWIxNGNiNmFjOTY5NTdmZmQ3ZmEyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxk/XSjixarURbcfxiQzQdBR55YH T7Qlzrs8J/cKYgOAvbBHPpbgS4nu/36O8iueMV7qJvPJ/B0X4151nDc76C0u40+2 /ktsvb0swG97W/sytQqnZt6BnNDqwUw5QAq1c2ls3uo38GmLplKaDw0e2bw4mgjh XSXt0+s5yMVSM/SD1FpdrBm7Owbmo6wkcCD4N5wfj5qyHR9rrXoEC93YxN0JM4Cm brWlL6o60SvicDySmPRdVAWkbLrSjbO11KPCvmRXLRN29J/H1dGK9VbyiUnY5kip 7e1hU5Zvlszfffbf0ADaz8xU+22XpuyOfAU7xI6z6BFumEtxBCoSG8vfDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCw5nr9cmA/AWVVoKQJSWZ1dCw6AMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwN2RlM2Q2LWJkMWMtNDVmYy1hMDkyLWYyNjM1NzE2YjI2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98CAMA0GCSqGSIb3DQEBCwUAA4IBAQB5Wmzx56nFHgvsh17T +cw4va4UiMWGToZjuqW6eLFKWLFuvvMF9Vwptpt7I6gXO1o0z5svQt+6QqKKqE4k 45Qn/R22ilpkqUpdKPv59MBLcy7UOletq63NIlkhOrZ4Kov+XezkytCTJ85jMe/+ OfKe9msm+86yohMYhI3AwyzVOZkPfqEx23V+3J9h7Oi3hDDmn+MSW5GrHzrXge4R UGqzAGaD2N31njxvgX08U6ESkfxV0P5jdc4knPdskxszc2kjuF6VWcYQfOrWZKec tkMBXEcJXDtIN6SFbkxF18E6sKHbc22UdDIuZi86ligJ071gLCP1cl9HnckPmW5w cjst -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:51 2025 by rpki-client