$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa File: e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa (raw, json) Hash identifier: zt2NvNUgPJ3iKi94jRwdzvNNy+Dx4nK7q+D5NrQkmI8= Subject key identifier: A0:63:1E:27:66:A6:A0:9F:94:53:E5:97:CC:1C:9D:18:B3:ED:88:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47F45303984E13483EAEC5B4A91EC65751C0D84B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa Signing time: Tue 25 Mar 2025 00:10:50 +0000 ROA not before: Tue 25 Mar 2025 00:10:50 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f4:53:03:98:4e:13:48:3e:ae:c5:b4:a9:1e:c6:57:51:c0:d8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:10:50 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1d1d376a76b6e271f6ea48a3385d17a8d50f2b98d6796300f520ec3e7ea06ec2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:ba:ab:66:24:cc:a9:cf:99:c6:8f:bc:b1: d8:cb:2b:e5:df:55:01:a9:f3:90:e4:c9:2d:e2:e3: 9b:e1:ca:1b:ca:bc:73:d0:91:8c:f9:11:0d:eb:d2: 68:93:59:9b:dd:d8:1b:da:b7:f0:a7:b2:de:2b:51: 6c:be:de:25:5a:98:a7:06:60:a1:e8:89:49:78:e7: 19:e7:fd:b7:61:3f:d3:5a:a7:20:cf:b4:64:38:05: d7:95:d6:8d:7a:1a:43:cd:f4:53:7d:f5:ff:2d:34: d5:e4:ba:07:97:26:c6:1b:1a:e3:74:4e:6e:9d:d5: 53:33:ae:a0:39:12:d3:bb:9e:5b:f6:e0:51:1f:ba: 86:c0:ae:c1:78:a5:61:1f:39:ad:5a:ff:70:4e:cc: bd:0b:f5:6a:e2:55:ae:8f:ab:5c:d8:e7:dc:71:88: 0c:2a:9f:19:83:96:0f:8d:47:85:12:44:3c:30:4d: 33:84:3e:e1:03:26:80:b9:b8:17:a7:65:39:85:40: 27:7a:26:49:54:16:22:99:69:5d:76:41:f6:b8:b7: aa:cb:1f:5c:7b:56:e6:e0:68:d9:0f:5d:c6:ff:ff: 30:4b:3c:32:16:30:c1:8b:7c:84:cc:ee:63:8c:ce: d2:2a:29:4e:54:cb:c7:ec:25:81:95:8f:8d:17:5f: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:63:1E:27:66:A6:A0:9F:94:53:E5:97:CC:1C:9D:18:B3:ED:88:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption a4:2c:75:1e:90:d4:e0:87:cc:8b:db:6d:72:6b:38:94:4a:39: f7:6b:77:f2:58:40:e5:11:0a:31:49:09:d6:51:69:ac:c5:4d: c2:dc:41:9b:63:22:e1:ce:2a:1a:08:7c:91:b7:98:9d:87:61: 1a:da:a8:a1:f7:68:9e:15:0d:ed:87:f7:80:a0:eb:04:4f:32: 48:f7:a3:f6:63:1a:5b:c1:a7:17:e0:7a:0f:41:69:8d:b2:86: 3e:8c:94:46:35:90:96:24:81:40:04:d1:fe:f9:46:d6:d7:63: ed:62:f9:8c:9c:ca:90:e1:4f:ff:c6:3a:3b:ef:37:1f:51:e0: c2:b7:b0:eb:7f:50:80:01:db:85:04:d2:6f:7c:59:29:8a:86: 89:1d:79:83:fc:71:78:79:c6:dc:83:4e:2e:e2:14:f3:01:5f: 9f:04:f0:a8:0d:a1:21:fa:30:c9:0a:f8:8c:13:94:e9:4c:b5: bd:82:72:ef:55:51:77:d6:62:7a:b6:9c:60:1b:db:d3:64:0a: 3b:0c:4a:b4:8a:b6:d4:88:07:34:38:b6:b4:b6:af:f4:e5:0d: a9:aa:fb:c9:16:22:f5:2b:a3:c4:6e:69:5e:38:7b:5f:d0:d4: 9b:0f:a7:e9:bf:53:9f:c3:a4:c1:c6:ec:a3:df:c7:4d:55:13: 2a:76:d8:bb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUR/RTA5hOE0g+rsW0qR7GV1HA2EswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMTA1MFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWQxZDM3NmE3NmI2ZTI3MWY2ZWE0 OGEzMzg1ZDE3YThkNTBmMmI5OGQ2Nzk2MzAwZjUyMGVjM2U3ZWEwNmVjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszi6q2YkzKnPmcaPvLHYyyvl31UB qfOQ5Mkt4uOb4cobyrxz0JGM+REN69Jok1mb3dgb2rfwp7LeK1Fsvt4lWpinBmCh 6IlJeOcZ5/23YT/TWqcgz7RkOAXXldaNehpDzfRTffX/LTTV5LoHlybGGxrjdE5u ndVTM66gORLTu55b9uBRH7qGwK7BeKVhHzmtWv9wTsy9C/Vq4lWuj6tc2OfccYgM Kp8Zg5YPjUeFEkQ8ME0zhD7hAyaAubgXp2U5hUAneiZJVBYimWlddkH2uLeqyx9c e1bm4GjZD13G//8wSzwyFjDBi3yEzO5jjM7SKilOVMvH7CWBlY+NF18qXwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKBjHidmpqCflFPll8wcnRiz7YjvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwOTk1MGJkLTA3Y2EtNGU1Yy1iZDNkLWExN2ZjYzM2NzI5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfDAMA0GCSqGSIb3DQEBCwUAA4IBAQCkLHUekNTgh8yL221y aziUSjn3a3fyWEDlEQoxSQnWUWmsxU3C3EGbYyLhzioaCHyRt5idh2Ea2qih92ie FQ3th/eAoOsETzJI96P2YxpbwacX4HoPQWmNsoY+jJRGNZCWJIFABNH++UbW12Pt YvmMnMqQ4U//xjo77zcfUeDCt7Drf1CAAduFBNJvfFkpioaJHXmD/HF4ecbcg04u 4hTzAV+fBPCoDaEh+jDJCviME5TpTLW9gnLvVVF31mJ6tpxgG9vTZAo7DEq0irbU iAc0OLa0tq/05Q2pqvvJFiL1K6PEbmleOHtf0NSbD6fpv1Ofw6TBxuyj38dNVRMq dti7 -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:03 2025 by rpki-client