$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa File: f28ef137-0acd-4efd-b9ee-b352810a3e96.roa (raw, json) Hash identifier: 8Pd80TrvsL9z2C18HjcabQfJsisoVyISlj9V30Sb6I8= Subject key identifier: DC:82:1B:3E:83:4A:49:08:7C:F4:95:5F:1C:EC:8A:D1:7E:EC:2E:35 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28483C5677DB13209477A7DB5A5C2D1709B495EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa Signing time: Tue 25 Mar 2025 15:00:23 +0000 ROA not before: Tue 25 Mar 2025 15:00:23 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:48:3c:56:77:db:13:20:94:77:a7:db:5a:5c:2d:17:09:b4:95:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:00:23 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1da4d7eeea81ea5ad67841e3ff0989ccda515ebc62eca94e7edad72d23fc38a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:3d:1e:d9:72:47:d0:d2:6e:39:13:ff:77: f3:3a:78:80:26:b3:d8:18:9a:2e:af:1e:7f:8f:49: 7e:5a:d9:41:b6:94:3b:b0:80:5c:96:33:c8:35:92: 01:df:39:1c:38:19:f5:ff:01:e8:17:d1:8e:cb:23: d9:82:85:df:c5:05:83:75:60:76:31:cb:4e:86:c0: 46:e5:b6:9c:5e:04:60:72:d7:25:da:cc:e5:88:c3: 93:53:38:76:22:fa:bd:3e:15:89:f1:65:24:cc:49: 7c:3f:f6:1c:3c:2c:9c:c9:d9:58:3d:5b:05:8a:14: aa:31:25:ab:e8:08:b6:64:45:38:93:2b:b0:ef:ec: cd:47:85:d8:b3:25:91:64:7b:94:56:54:88:c7:5c: 9e:67:00:1b:a5:c4:a1:ba:a5:d7:26:77:9f:07:1a: 58:e8:21:5a:c1:95:85:2a:8b:04:50:a5:dd:49:c4: 4a:e0:b1:10:b0:16:1d:78:53:33:96:13:84:2c:51: da:02:12:40:53:de:a1:cb:70:88:25:d3:0b:22:26: 75:c1:60:67:11:4c:97:7b:30:1b:37:00:69:a4:9f: 04:69:6a:02:d0:d5:73:f2:55:3e:62:4a:8f:20:05: ea:7f:e3:71:46:cd:cb:24:fa:32:2f:0d:67:f6:ac: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:1B:3E:83:4A:49:08:7C:F4:95:5F:1C:EC:8A:D1:7E:EC:2E:35 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e080::/46 Signature Algorithm: sha256WithRSAEncryption 60:61:3b:be:fe:fa:67:59:c1:19:9a:67:b8:5e:b6:67:47:bc: 82:05:3a:fd:b9:31:db:59:2a:1a:88:49:63:68:f0:ea:b0:6f: 3d:c1:82:ea:a4:b4:5d:bd:0a:b1:97:69:0d:b5:89:d2:b4:63: 04:4b:28:2e:bb:d7:2c:6f:f4:47:4b:f2:45:af:df:d2:34:d1: 3b:fa:8a:f4:53:23:77:57:9f:a4:f7:40:03:62:c6:44:f3:e9: 75:cb:81:37:88:74:cd:f8:56:76:d6:e2:19:a8:46:3b:fa:b5: bd:8a:ec:27:27:9c:5a:1a:3a:d4:a2:86:45:6a:ac:9b:a2:d0: a4:ce:1a:01:00:2e:ae:30:b3:64:da:63:bd:bb:ae:a4:89:b9: 7a:a0:05:0d:19:b3:b8:6d:f5:7e:c7:6b:7a:24:03:99:14:7a: 1b:36:56:2a:e5:9f:00:d8:ad:3b:81:4f:cc:4c:86:f5:37:15: cc:93:90:86:41:ab:1c:98:98:6d:0f:02:7f:ec:af:10:0d:53: 78:98:1a:07:a2:93:c4:34:e0:65:91:99:bf:2d:cc:e5:9c:91: 46:ee:7f:c6:c5:19:38:e1:19:91:d6:3c:89:59:82:24:61:b0: c4:c2:9c:21:1d:92:b7:8a:a4:78:8b:2d:20:dc:8b:ab:7b:5c: fb:c6:6b:e2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKEg8VnfbEyCUd6fbWlwtFwm0leswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDAyM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWRhNGQ3ZWVlYTgxZWE1YWQ2Nzg0 MWUzZmYwOTg5Y2NkYTUxNWViYzYyZWNhOTRlN2VkYWQ3MmQyM2ZjMzhhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsw9HtlyR9DSbjkT/3fzOniAJrPY GJourx5/j0l+WtlBtpQ7sIBcljPINZIB3zkcOBn1/wHoF9GOyyPZgoXfxQWDdWB2 MctOhsBG5bacXgRgctcl2szliMOTUzh2Ivq9PhWJ8WUkzEl8P/YcPCycydlYPVsF ihSqMSWr6Ai2ZEU4kyuw7+zNR4XYsyWRZHuUVlSIx1yeZwAbpcShuqXXJnefBxpY 6CFawZWFKosEUKXdScRK4LEQsBYdeFMzlhOELFHaAhJAU96hy3CIJdMLIiZ1wWBn EUyXezAbNwBppJ8EaWoC0NVz8lU+YkqPIAXqf+NxRs3LJPoyLw1n9qxcXwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNyCGz6DSkkIfPSVXxzsitF+7C41MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyOGVmMTM3LTBhY2QtNGVmZC1iOWVlLWIzNTI4MTBhM2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeCAMA0GCSqGSIb3DQEBCwUAA4IBAQBgYTu+/vpnWcEZmme4 XrZnR7yCBTr9uTHbWSoaiEljaPDqsG89wYLqpLRdvQqxl2kNtYnStGMESyguu9cs b/RHS/JFr9/SNNE7+or0UyN3V5+k90ADYsZE8+l1y4E3iHTN+FZ21uIZqEY7+rW9 iuwnJ5xaGjrUooZFaqybotCkzhoBAC6uMLNk2mO9u66kibl6oAUNGbO4bfV+x2t6 JAOZFHobNlYq5Z8A2K07gU/MTIb1NxXMk5CGQascmJhtDwJ/7K8QDVN4mBoHopPE NOBlkZm/LczlnJFG7n/GxRk44RmR1jyJWYIkYbDEwpwhHZK3iqR4iy0g3Iure1z7 xmvi -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:41 2025 by rpki-client