$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f908d384-ebab-4e47-9054-b6225011a89f.roa File: f908d384-ebab-4e47-9054-b6225011a89f.roa (raw, json) Hash identifier: s1o3ou3V66myFY6XNPwvIpobFmMc7z3e9u6HURXmv2Q= Subject key identifier: AC:AD:4D:55:E4:00:A5:49:0D:9F:FB:8B:FD:66:85:50:36:A6:03:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A241ACD963A46822139B9A1E8C3BA4ED3FFBA77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f908d384-ebab-4e47-9054-b6225011a89f.roa Signing time: Wed 02 Apr 2025 00:01:36 +0000 ROA not before: Wed 02 Apr 2025 00:01:36 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:24:1a:cd:96:3a:46:82:21:39:b9:a1:e8:c3:ba:4e:d3:ff:ba:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:01:36 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=95c1a846ec42af068861f7fc64297f3fabc8149f8d2f02700615ff8d6e71ab6a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:03:9e:d5:09:68:0a:82:5c:bc:25:c1:9e: ec:d7:52:c2:26:10:fb:e3:c6:a9:68:44:10:51:97: 50:fe:17:cd:db:ec:51:5e:f7:95:4c:d6:d4:b1:9f: 69:63:31:bd:1b:b6:d5:a8:b9:fe:ee:ae:03:21:a0: b9:e8:a4:19:dc:6f:94:53:0b:9a:7e:a7:d3:a7:9a: 2f:ee:34:2a:61:19:18:3c:61:2d:6b:e7:be:4a:60: 8f:7a:20:fa:d8:cd:f1:3e:1f:8d:7f:5a:9c:4b:83: 52:34:e1:c4:01:89:f9:79:33:6e:ba:a2:60:1c:53: a1:56:65:ee:ca:77:83:ed:c3:86:8d:32:9c:ea:7e: 77:a1:71:6c:73:84:6c:bc:fb:2f:df:c0:e7:7b:eb: 8f:0b:b7:cb:e4:d3:74:75:17:7b:08:24:cd:7f:35: de:42:75:9f:59:c7:40:28:43:b9:96:42:c1:2c:1c: 89:71:a2:f9:b3:a5:ae:de:39:26:93:6d:0d:ff:f5: af:ed:18:fd:f5:0a:bd:65:e9:1f:f9:dc:c1:cd:dc: 6b:3c:99:43:26:22:d1:66:11:34:67:20:ce:23:24: 51:3b:fe:7b:20:df:cb:3d:08:3f:c9:05:1d:c0:ae: 9b:7d:8d:67:95:cd:21:92:e7:75:6d:71:ef:1b:9c: 00:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:4D:55:E4:00:A5:49:0D:9F:FB:8B:FD:66:85:50:36:A6:03:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f908d384-ebab-4e47-9054-b6225011a89f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/36 Signature Algorithm: sha256WithRSAEncryption 44:9e:ca:cb:5f:4b:54:8c:6a:82:95:93:18:3d:20:6b:64:30: 27:4f:31:a7:f2:81:27:33:99:be:0e:30:bb:32:01:bc:e4:68: 1b:9a:3a:b4:65:c1:7b:a9:c9:24:0a:e8:21:1c:c3:83:cf:ad: 3d:d3:f8:cb:5c:ef:ab:89:d0:7c:15:e5:ff:c9:f5:e0:d7:97: b1:9d:0e:4b:9c:10:49:5b:a5:e0:39:2f:8c:9b:af:86:55:17: 6c:dc:40:c7:fd:ae:6a:bb:bd:72:f7:f7:44:15:92:e7:df:55: 47:89:5b:ab:dd:ac:f7:8e:2b:a0:16:92:b0:09:89:a7:e1:d9: 2d:7b:85:09:68:2b:e9:f0:c5:96:3d:10:16:d4:71:c6:4e:34: d0:7c:2a:f3:1e:df:42:48:89:87:5a:9a:72:cc:fb:8b:23:35: 6b:bc:83:b2:a7:0a:00:52:43:3a:d7:53:40:03:fa:cb:0f:28: 1f:f0:d8:e2:44:84:c2:2d:ca:10:ea:49:0b:31:31:2d:49:51: a0:3d:e1:08:e7:b0:a1:d9:d1:59:ab:2d:16:af:06:6c:73:6c: 29:bf:60:3d:f3:39:a2:92:7d:d7:87:33:23:97:f6:79:5e:34: f0:9a:bb:97:a6:b7:42:6e:72:0c:2c:f8:a9:01:b5:f2:b9:d3: 0c:4b:4d:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaiQazZY6RoIhObmh6MO6TtP/uncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDEzNloX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAOTVjMWE4NDZlYzQyYWYwNjg4NjFm N2ZjNjQyOTdmM2ZhYmM4MTQ5ZjhkMmYwMjcwMDYxNWZmOGQ2ZTcxYWI2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OoDntUJaAqCXLwlwZ7s11LCJhD7 48apaEQQUZdQ/hfN2+xRXveVTNbUsZ9pYzG9G7bVqLn+7q4DIaC56KQZ3G+UUwua fqfTp5ov7jQqYRkYPGEta+e+SmCPeiD62M3xPh+Nf1qcS4NSNOHEAYn5eTNuuqJg HFOhVmXuyneD7cOGjTKc6n53oXFsc4RsvPsv38Dne+uPC7fL5NN0dRd7CCTNfzXe QnWfWcdAKEO5lkLBLByJcaL5s6Wu3jkmk20N//Wv7Rj99Qq9Zekf+dzBzdxrPJlD JiLRZhE0ZyDOIyRRO/57IN/LPQg/yQUdwK6bfY1nlc0hkud1bXHvG5wAnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKytTVXkAKVJDZ/7i/1mhVA2pgPpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y5MDhkMzg0LWViYWItNGU0Ny05MDU0LWI2MjI1MDExYTg5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAESeystfS1SMaoKVkxg9 IGtkMCdPMafygSczmb4OMLsyAbzkaBuaOrRlwXupySQK6CEcw4PPrT3T+Mtc76uJ 0HwV5f/J9eDXl7GdDkucEElbpeA5L4ybr4ZVF2zcQMf9rmq7vXL390QVkuffVUeJ W6vdrPeOK6AWkrAJiafh2S17hQloK+nwxZY9EBbUccZONNB8KvMe30JIiYdamnLM +4sjNWu8g7KnCgBSQzrXU0AD+ssPKB/w2OJEhMItyhDqSQsxMS1JUaA94QjnsKHZ 0VmrLRavBmxzbCm/YD3zOaKSfdeHMyOX9nleNPCau5emt0Jucgws+KkBtfK50wxL TQY= -----END CERTIFICATE-----Generated at Thu Apr 17 17:57:48 2025 by rpki-client