$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa File: f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa (raw, json) Hash identifier: U0gRLOIJlNj2aLxSBY2IEr7JEBBPNLAqKElrqBw4bug= Subject key identifier: F0:DB:F3:3D:45:A6:DE:EC:DB:30:EA:B3:D4:67:AC:01:2F:37:02:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24AAC6DC3B796CA7C924A84F4511AD48F77F6FB3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa Signing time: Tue 25 Mar 2025 16:00:13 +0000 ROA not before: Tue 25 Mar 2025 16:00:13 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:9040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:aa:c6:dc:3b:79:6c:a7:c9:24:a8:4f:45:11:ad:48:f7:7f:6f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:00:13 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=2b0c9519eff5bceae6ef38f87f780bb0dd6111c5cacce7a0185dcc5df14b5e50, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:e1:80:d6:25:e1:04:12:fd:78:41:37:b3: 81:b1:d0:6e:3a:d2:0d:4b:ca:f6:cc:2f:86:c4:ba: 16:77:35:7d:4b:53:95:62:b1:60:74:4d:d9:84:d0: 4f:8a:93:8c:8d:d2:0d:cf:e7:bf:44:6b:8f:ea:e0: 7b:2e:7e:62:94:fd:9d:ae:93:a4:e3:18:d4:98:49: e0:a0:fa:b9:20:6a:bf:59:fd:96:02:6d:61:ee:c9: 14:38:67:b1:e0:64:2a:36:df:b0:70:ca:0f:eb:46: 52:8e:eb:c3:b5:87:92:d0:14:14:8c:39:01:a1:8e: 28:26:c5:3b:e7:8d:05:2f:c4:3d:33:0d:d3:4f:55: 46:a5:b8:6d:0f:c0:f4:09:75:c8:9b:0a:5c:fb:dc: f7:de:c6:4a:8d:01:86:e3:d2:d8:b1:3f:4f:7f:05: 24:02:bd:60:3b:a7:b5:36:05:74:63:2b:16:26:bb: 09:d3:ec:70:5e:0a:00:20:bb:2d:80:a8:3d:89:a9: b5:6b:26:2e:ba:20:43:7c:e3:ec:ec:b1:8b:2c:d3: 74:07:a3:29:ea:5b:52:63:77:20:fb:94:5c:38:8b: 62:dc:d9:13:e9:97:a6:f6:09:7e:c4:29:67:bc:73: a4:ff:be:d8:73:6d:a3:d5:90:d5:58:11:7c:30:d5: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DB:F3:3D:45:A6:DE:EC:DB:30:EA:B3:D4:67:AC:01:2F:37:02:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:9040::/46 Signature Algorithm: sha256WithRSAEncryption 38:65:07:57:0b:c1:da:cf:c2:9b:d2:91:e1:a4:41:b1:60:d1: 3a:4d:25:80:95:04:aa:81:3b:79:ec:a2:bd:dd:3d:b9:e2:c5: a1:f0:1a:49:d1:60:2b:1b:0d:b4:1f:a1:c5:47:ca:f9:ed:cc: f4:1b:96:52:0f:38:ce:b0:c8:d4:a5:95:29:2f:36:f4:63:0f: c6:26:9b:e9:5b:ce:82:d1:05:e8:db:d6:4e:c5:1a:e3:55:e0: ce:6c:e3:97:48:86:2c:55:bc:ba:44:e9:2e:2b:c5:f7:1e:5f: eb:df:6e:d2:87:f3:35:2e:90:31:53:c5:45:49:47:d6:68:60: 8c:ae:20:b3:b0:3f:84:dd:14:08:09:a3:e8:fe:ce:9a:62:c0: 26:31:98:a5:66:51:c7:a1:2c:0d:7e:7e:3c:b5:91:34:d1:a2: 7f:fb:25:b7:c0:8b:cd:94:71:61:7b:82:38:9d:e4:a6:e9:61: 72:ac:26:67:63:e8:b4:ae:8d:3e:4a:99:ac:b9:3a:dd:e5:ed: f8:e6:80:c9:e9:17:78:5a:48:45:c6:03:26:f8:dd:f5:1a:c9: 7d:84:cf:70:76:8b:ee:67:95:48:95:28:f5:78:0b:4e:4a:d1: 1a:4d:61:ab:8d:d4:37:f6:83:e8:08:6d:ba:be:e3:3d:c1:d3: a2:4c:92:47 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJKrG3Dt5bKfJJKhPRRGtSPd/b7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDAxM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMmIwYzk1MTllZmY1YmNlYWU2ZWYz OGY4N2Y3ODBiYjBkZDYxMTFjNWNhY2NlN2EwMTg1ZGNjNWRmMTRiNWU1MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9rhgNYl4QQS/XhBN7OBsdBuOtIN S8r2zC+GxLoWdzV9S1OVYrFgdE3ZhNBPipOMjdINz+e/RGuP6uB7Ln5ilP2drpOk 4xjUmEngoPq5IGq/Wf2WAm1h7skUOGex4GQqNt+wcMoP60ZSjuvDtYeS0BQUjDkB oY4oJsU7540FL8Q9Mw3TT1VGpbhtD8D0CXXImwpc+9z33sZKjQGG49LYsT9PfwUk Ar1gO6e1NgV0YysWJrsJ0+xwXgoAILstgKg9iam1ayYuuiBDfOPs7LGLLNN0B6Mp 6ltSY3cg+5RcOIti3NkT6Zem9gl+xClnvHOk/77Yc22j1ZDVWBF8MNXRbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPDb8z1Fpt7s2zDqs9RnrAEvNwKrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3ZjliZjBiLTNkYmQtNGVlNi04NGRiLTQzOTBkMzE5NmZkMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba95BAMA0GCSqGSIb3DQEBCwUAA4IBAQA4ZQdXC8Haz8Kb0pHh pEGxYNE6TSWAlQSqgTt57KK93T254sWh8BpJ0WArGw20H6HFR8r57cz0G5ZSDzjO sMjUpZUpLzb0Yw/GJpvpW86C0QXo29ZOxRrjVeDObOOXSIYsVby6ROkuK8X3Hl/r 327Sh/M1LpAxU8VFSUfWaGCMriCzsD+E3RQICaPo/s6aYsAmMZilZlHHoSwNfn48 tZE00aJ/+yW3wIvNlHFhe4I4neSm6WFyrCZnY+i0ro0+SpmsuTrd5e345oDJ6Rd4 WkhFxgMm+N31Gsl9hM9wdovuZ5VIlSj1eAtOStEaTWGrjdQ39oPoCG26vuM9wdOi TJJH -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:16 2025 by rpki-client