$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec29fd3d-a5fc-4181-b573-9bd7520ac8cb.roa File: ec29fd3d-a5fc-4181-b573-9bd7520ac8cb.roa (raw, json) Hash identifier: DvxKHCtQM2fX506MLJOaVQgE65bx936JRKCIjKX7CLE= Subject key identifier: D1:B1:79:00:67:82:FB:90:63:AF:A9:2C:15:ED:1F:11:C0:15:91:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18D7B52189B4AE64C40EDFAFD69E89EA9AD8609C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec29fd3d-a5fc-4181-b573-9bd7520ac8cb.roa Signing time: Tue 25 Mar 2025 16:50:45 +0000 ROA not before: Tue 25 Mar 2025 16:50:45 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da17::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d7:b5:21:89:b4:ae:64:c4:0e:df:af:d6:9e:89:ea:9a:d8:60:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:45 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=3156369ed6c23342a509e8afc9e5e939529b62b53e1a2f3e073f3d88234ad4a8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:da:fa:83:af:46:d2:57:e0:d9:91:9c:8d: 12:23:c9:c4:a2:d4:d9:fe:64:6a:2c:82:4e:31:fc: a7:e0:8d:e8:03:25:14:ce:1e:c4:9e:ea:59:a1:7a: f2:47:ea:cf:c7:fb:c7:02:b3:09:5e:84:2c:3b:84: 27:44:3c:5e:4b:5a:42:6f:60:76:ce:19:3b:26:e0: 62:28:b1:8f:96:07:c4:02:56:96:4d:20:d4:42:45: 81:f3:c7:cf:f4:ed:d3:ce:39:c0:a2:30:34:38:3e: fa:f0:f2:e3:0c:80:2f:63:17:48:2b:86:2f:85:18: a5:9d:c2:2b:d2:ad:6e:c8:7f:16:cf:30:5b:b1:6b: 57:05:3a:3e:eb:e2:eb:07:0c:e4:e9:45:a7:7f:22: 41:6b:ef:a1:1e:77:c6:62:93:ed:26:14:a1:e4:c5: 6b:7c:d5:77:5f:c8:e4:cb:80:2e:f7:81:d6:95:80: fd:e5:99:d9:46:87:cc:90:d8:8f:d0:a6:e3:bc:3e: 13:16:ad:e3:0c:9f:85:45:79:3b:57:44:7c:d1:83: 43:57:cf:77:5f:27:ca:10:7d:27:06:4a:45:8d:b3: 45:d7:c6:91:18:08:4a:ba:a1:ef:98:63:d0:f8:0a: 5d:af:fe:d5:a1:cf:69:e7:9d:62:b5:8f:6c:bf:91: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:79:00:67:82:FB:90:63:AF:A9:2C:15:ED:1F:11:C0:15:91:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec29fd3d-a5fc-4181-b573-9bd7520ac8cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da17::/36 Signature Algorithm: sha256WithRSAEncryption 5a:9e:74:df:c0:58:ec:18:b8:b3:a3:45:95:e8:61:45:05:6a: 9d:47:8a:22:8a:ae:a1:9b:06:22:c9:a1:ee:47:a6:45:71:49: dc:1f:3d:a3:ff:f3:52:82:eb:7d:c4:9e:1c:da:a1:aa:e0:fb: e3:cd:b5:4e:71:48:eb:f8:dd:6c:f7:da:a5:6f:c4:35:f7:8e: 2f:54:ac:92:f8:01:cc:be:f0:38:f4:f9:2c:4c:d8:94:d7:cc: 93:c9:8b:88:3f:77:fe:a1:47:31:a3:e6:60:cd:2d:cb:62:e7: 8b:f0:73:9c:9c:0f:94:c4:ee:53:7b:62:92:41:e2:5e:a2:99: 34:11:81:1b:2e:03:b5:72:80:c5:1c:1b:f4:64:28:d5:52:6e: 09:79:c5:f2:69:87:7b:3b:ba:4b:fd:e6:7f:86:e5:86:06:7f: 97:88:03:d8:39:1a:11:ec:a8:03:07:28:0d:25:72:9d:d3:46: a6:d6:0e:e3:dc:38:70:41:ff:32:45:2e:b9:c9:8e:a5:19:06: 38:f5:97:0c:bc:53:a2:e0:75:5c:83:22:16:a4:f1:17:77:d8: 49:8c:b9:30:ff:73:e6:6c:c6:6f:86:a2:88:1d:c1:ef:ce:d4: 6c:8e:f7:f1:8c:94:f3:70:05:19:8e:d0:1a:16:12:fa:c9:f3: 97:38:b8:45 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGNe1IYm0rmTEDt+v1p6J6prYYJwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTA0NVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMzE1NjM2OWVkNmMyMzM0MmE1MDll OGFmYzllNWU5Mzk1MjliNjJiNTNlMWEyZjNlMDczZjNkODgyMzRhZDRhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ULa+oOvRtJX4NmRnI0SI8nEotTZ /mRqLIJOMfyn4I3oAyUUzh7EnupZoXryR+rPx/vHArMJXoQsO4QnRDxeS1pCb2B2 zhk7JuBiKLGPlgfEAlaWTSDUQkWB88fP9O3TzjnAojA0OD768PLjDIAvYxdIK4Yv hRilncIr0q1uyH8WzzBbsWtXBTo+6+LrBwzk6UWnfyJBa++hHnfGYpPtJhSh5MVr fNV3X8jky4Au94HWlYD95ZnZRofMkNiP0KbjvD4TFq3jDJ+FRXk7V0R80YNDV893 XyfKEH0nBkpFjbNF18aRGAhKuqHvmGPQ+Apdr/7Voc9p551itY9sv5G5rQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNGxeQBngvuQY6+pLBXtHxHAFZHyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjMjlmZDNkLWE1ZmMtNDE4MS1iNTczLTliZDc1MjBhYzhjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFwAwDQYJKoZIhvcNAQELBQADggEBAFqedN/AWOwYuLOjRZXo YUUFap1HiiKKrqGbBiLJoe5HpkVxSdwfPaP/81KC633Enhzaoarg++PNtU5xSOv4 3Wz32qVvxDX3ji9UrJL4Acy+8Dj0+SxM2JTXzJPJi4g/d/6hRzGj5mDNLcti54vw c5ycD5TE7lN7YpJB4l6imTQRgRsuA7VygMUcG/RkKNVSbgl5xfJph3s7ukv95n+G 5YYGf5eIA9g5GhHsqAMHKA0lcp3TRqbWDuPcOHBB/zJFLrnJjqUZBjj1lwy8U6Lg dVyDIhak8Rd32EmMuTD/c+Zsxm+Googdwe/O1GyO9/GMlPNwBRmO0BoWEvrJ85c4 uEU= -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:52 2025 by rpki-client