$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f00ce68a-58da-4964-ae28-394559757448.roa File: f00ce68a-58da-4964-ae28-394559757448.roa (raw, json) Hash identifier: ROKlVhHDV/Wq8WsjzTfGIu0Rzv1w5rHqZivfloJbmec= Subject key identifier: 62:49:FF:8E:F1:00:33:E3:FF:B9:DE:E2:0A:6D:3F:1D:3D:32:EC:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13258AAB8A948BAF0DCA7369D24AE238ABEF5A15 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f00ce68a-58da-4964-ae28-394559757448.roa Signing time: Tue 25 Mar 2025 00:10:39 +0000 ROA not before: Tue 25 Mar 2025 00:10:39 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:25:8a:ab:8a:94:8b:af:0d:ca:73:69:d2:4a:e2:38:ab:ef:5a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:10:39 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=dd806eacdf39fa25c3ae578b9e7310583f7408a46dcef70a9248a00bb29ebda8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:dd:41:fe:4e:d2:bc:f9:57:e3:d1:87:30: 3a:20:25:9c:27:b2:55:27:78:7b:f1:26:f3:5e:f1: d7:2e:db:6e:c7:43:e7:b8:bf:b8:7b:80:0e:aa:2b: 49:73:82:6c:e0:0f:ba:fb:49:d1:57:9b:e8:85:9d: dd:e8:b9:aa:92:f6:77:e5:90:4b:33:2f:b6:6b:6f: c6:96:34:b2:8f:4d:80:0f:88:54:89:99:21:50:08: 2b:c2:22:9c:31:10:8d:38:63:6d:91:ab:af:6c:d7: e6:a7:95:6f:53:23:2b:c4:87:df:4f:be:95:56:7d: 8b:d8:e9:55:1b:31:dd:14:4c:4f:fc:85:a9:39:61: 04:25:1d:71:f1:35:1b:c9:36:e3:44:04:f2:d1:ed: 75:16:d1:5c:fc:f9:90:13:13:81:eb:e3:91:ea:09: 7f:f7:da:96:f2:ee:54:36:17:bc:3c:f6:41:99:e1: f8:e6:da:0e:33:6c:0b:8e:c9:3c:36:fb:7d:d8:0b: 32:d2:24:03:94:95:94:7a:b1:04:6d:d7:1c:6b:1c: 23:69:c5:7d:d4:0f:5b:1e:08:b6:db:05:5e:ce:b4: 3f:9a:36:ba:b3:26:a3:82:7d:af:85:65:a6:92:8d: f7:ab:29:37:52:15:a2:6f:4e:35:b3:e4:66:fb:a0: 45:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:FF:8E:F1:00:33:E3:FF:B9:DE:E2:0A:6D:3F:1D:3D:32:EC:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f00ce68a-58da-4964-ae28-394559757448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 97:00:90:76:66:d6:e5:98:75:42:19:ad:73:d7:f1:44:e0:02: 43:25:31:4b:97:4f:4e:6f:8c:95:5b:7c:c2:11:24:e3:1d:34: d3:11:ff:b5:bb:69:31:4e:8d:e2:33:7a:6f:41:d9:64:83:30: 57:86:49:0d:b3:f3:14:90:81:0a:81:d6:9f:d6:fe:dc:db:94: 3d:46:28:55:af:33:ba:c1:59:19:25:b9:d1:60:e2:2b:c5:5c: 7e:b8:70:40:69:2f:d7:46:26:a3:cd:e6:dc:e7:f9:20:79:22: 9b:3d:92:eb:11:60:99:5a:04:b8:31:c0:ee:f7:74:6d:b0:b3: 62:06:02:27:0b:55:9c:b8:31:9d:6f:76:6f:a3:a0:8c:c6:cf: 4d:ec:1b:14:64:7a:d4:f7:4c:17:20:03:e9:57:08:c4:8e:0e: 4f:06:1c:5a:91:92:b7:2e:0e:1e:98:d8:fa:7a:7b:15:e6:a2: cf:14:b7:54:db:aa:89:35:a2:5b:41:34:fd:18:be:48:26:d9: 37:24:6a:a7:45:63:d5:a7:08:50:77:d5:05:27:97:65:a1:02: 6a:f1:ac:fe:9b:fa:97:4b:67:b1:7e:06:66:df:bf:30:b2:88: 3b:f1:13:30:be:66:3d:fe:c9:69:a6:a8:15:bf:72:a5:51:48: 5d:95:0c:b3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEyWKq4qUi68NynNp0kriOKvvWhUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMTAzOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZGQ4MDZlYWNkZjM5ZmEyNWMzYWU1 NzhiOWU3MzEwNTgzZjc0MDhhNDZkY2VmNzBhOTI0OGEwMGJiMjllYmRhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGfdQf5O0rz5V+PRhzA6ICWcJ7JV J3h78SbzXvHXLttux0PnuL+4e4AOqitJc4Js4A+6+0nRV5vohZ3d6LmqkvZ35ZBL My+2a2/GljSyj02AD4hUiZkhUAgrwiKcMRCNOGNtkauvbNfmp5VvUyMrxIffT76V Vn2L2OlVGzHdFExP/IWpOWEEJR1x8TUbyTbjRATy0e11FtFc/PmQExOB6+OR6gl/ 99qW8u5UNhe8PPZBmeH45toOM2wLjsk8Nvt92Asy0iQDlJWUerEEbdccaxwjacV9 1A9bHgi22wVezrQ/mja6syajgn2vhWWmko33qyk3UhWib041s+Rm+6BFzQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGJJ/47xADPj/7ne4gptPx09MuyEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwMGNlNjhhLTU4ZGEtNDk2NC1hZTI4LTM5NDU1OTc1NzQ0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYSjAMA0GCSqGSIb3DQEBCwUAA4IBAQCXAJB2ZtblmHVCGa1z 1/FE4AJDJTFLl09Ob4yVW3zCESTjHTTTEf+1u2kxTo3iM3pvQdlkgzBXhkkNs/MU kIEKgdaf1v7c25Q9RihVrzO6wVkZJbnRYOIrxVx+uHBAaS/XRiajzebc5/kgeSKb PZLrEWCZWgS4McDu93RtsLNiBgInC1WcuDGdb3Zvo6CMxs9N7BsUZHrU90wXIAPp VwjEjg5PBhxakZK3Lg4emNj6ensV5qLPFLdU26qJNaJbQTT9GL5IJtk3JGqnRWPV pwhQd9UFJ5dloQJq8az+m/qXS2exfgZm378wsog78RMwvmY9/slppqgVv3KlUUhd lQyz -----END CERTIFICATE-----Generated at Thu Apr 17 18:22:05 2025 by rpki-client