$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd2b2e92-17ea-4b49-b199-9af23a32900f.roa File: fd2b2e92-17ea-4b49-b199-9af23a32900f.roa (raw, json) Hash identifier: F2xPj9WjXeGKkJscGmDlzoAdtE5slY+PxzVvuPgrPXs= Subject key identifier: B5:15:74:EF:82:6B:76:76:82:80:A9:5F:3B:B8:23:67:22:FF:C6:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 49A45A1A479FA35B20EC6F1BDF2B3DC2DE9CDA98 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd2b2e92-17ea-4b49-b199-9af23a32900f.roa Signing time: Wed 02 Apr 2025 00:01:06 +0000 ROA not before: Wed 02 Apr 2025 00:01:06 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a4:5a:1a:47:9f:a3:5b:20:ec:6f:1b:df:2b:3d:c2:de:9c:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:01:06 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=ef4e0a69c4e41892252b3a80a5e89952e86974adece3a628d9ff84834386bdbf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:b9:5d:db:6a:a5:d1:06:8a:77:53:92:c4: d0:d1:fa:54:17:56:64:17:67:d6:f5:fa:eb:6c:6f: 39:a4:a8:72:f3:17:77:a4:09:fc:9e:23:4c:70:5f: 21:cd:72:a9:0a:46:5a:d6:90:02:4a:1e:54:5d:c0: c9:f8:d1:bb:dd:28:06:1f:d9:9a:fd:7b:10:2e:0c: 53:a1:e8:88:5e:b9:e4:92:58:42:4f:5a:e2:69:db: 91:eb:66:3a:da:ce:e9:44:f7:9e:51:ce:cc:62:cf: 30:e7:6d:a6:30:b2:b2:03:ac:49:69:75:e3:ae:18: ba:cf:de:d5:5d:88:d2:9f:2b:e4:f0:60:90:a5:4f: 93:ce:00:a4:84:bc:2a:74:31:a5:a9:d9:ca:09:d7: bf:fe:c4:69:11:99:bb:e5:0b:6a:a5:69:93:77:92: b9:f1:57:a5:a1:7c:8b:b2:5a:32:a0:d2:cc:de:93: 6c:f3:5a:b5:de:78:c8:12:9c:42:e3:f3:8f:79:a7: 90:15:16:6a:5d:6c:ff:1a:86:23:87:63:ba:62:4f: 05:f8:ea:05:38:09:b6:34:4d:f4:35:32:0e:20:38: ed:23:59:a1:e5:55:46:86:10:7b:b6:e8:80:ab:d1: 02:45:cf:60:b1:80:6a:2f:00:20:2e:84:50:a3:af: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:74:EF:82:6B:76:76:82:80:A9:5F:3B:B8:23:67:22:FF:C6:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd2b2e92-17ea-4b49-b199-9af23a32900f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8800::/37 Signature Algorithm: sha256WithRSAEncryption 59:f2:77:5e:f5:f1:80:38:84:a4:18:7b:cb:63:d7:6f:02:82: ca:b6:fc:ac:70:6a:2f:24:82:06:d6:98:5f:bd:aa:55:6a:1e: 9b:1c:64:c1:1a:b6:82:73:a0:07:f8:20:e5:f7:ce:84:54:e3: 2f:ca:ab:78:89:21:c8:78:02:10:3d:c4:94:71:88:dd:a7:f2: 61:45:ea:5d:8a:6c:9e:5b:14:85:b4:7f:0e:be:15:9e:cd:41: 8d:71:d2:a3:35:30:35:5d:1d:3b:17:9a:07:ac:d6:d8:17:a1: 15:b1:f6:e5:c0:36:06:f6:76:7b:a7:8b:ef:e2:95:2f:0a:03: 4d:63:da:dc:fb:c1:86:fc:2d:3c:6e:d5:6b:d6:b9:54:ed:d5: 21:8e:ef:2e:9d:d5:25:c4:71:f2:31:cb:84:f4:20:90:29:b7: c3:a1:29:7b:17:cd:5f:d9:f4:7a:72:9b:f0:b4:f8:9e:79:35: 77:66:93:af:89:c7:87:ca:31:bb:1d:9b:d3:02:88:23:4d:41: f1:a1:47:d7:a6:b8:60:08:f9:87:bf:66:d6:1c:b1:08:1d:a4: c1:b2:3e:3d:bc:a1:16:c9:98:f2:b9:88:35:28:7e:d4:2c:36: c4:cf:b8:d6:fb:d7:a3:6f:93:64:0e:f3:aa:60:3d:f5:b3:55: ec:14:22:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSaRaGkefo1sg7G8b3ys9wt6c2pgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDEwNloX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAZWY0ZTBhNjljNGU0MTg5MjI1MmIz YTgwYTVlODk5NTJlODY5NzRhZGVjZTNhNjI4ZDlmZjg0ODM0Mzg2YmRiZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/u5XdtqpdEGindTksTQ0fpUF1Zk F2fW9frrbG85pKhy8xd3pAn8niNMcF8hzXKpCkZa1pACSh5UXcDJ+NG73SgGH9ma /XsQLgxToeiIXrnkklhCT1riaduR62Y62s7pRPeeUc7MYs8w522mMLKyA6xJaXXj rhi6z97VXYjSnyvk8GCQpU+TzgCkhLwqdDGlqdnKCde//sRpEZm75QtqpWmTd5K5 8VeloXyLsloyoNLM3pNs81q13njIEpxC4/OPeaeQFRZqXWz/GoYjh2O6Yk8F+OoF OAm2NE30NTIOIDjtI1mh5VVGhhB7tuiAq9ECRc9gsYBqLwAgLoRQo68gWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLUVdO+Ca3Z2goCpXzu4I2ci/8ZDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZkMmIyZTkyLTE3ZWEtNGI0OS1iMTk5LTlhZjIzYTMyOTAwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKogwDQYJKoZIhvcNAQELBQADggEBAFnyd1718YA4hKQYe8tj 128Cgsq2/Kxwai8kggbWmF+9qlVqHpscZMEatoJzoAf4IOX3zoRU4y/Kq3iJIch4 AhA9xJRxiN2n8mFF6l2KbJ5bFIW0fw6+FZ7NQY1x0qM1MDVdHTsXmges1tgXoRWx 9uXANgb2dnuni+/ilS8KA01j2tz7wYb8LTxu1WvWuVTt1SGO7y6d1SXEcfIxy4T0 IJApt8OhKXsXzV/Z9Hpym/C0+J55NXdmk6+Jx4fKMbsdm9MCiCNNQfGhR9emuGAI +Ye/ZtYcsQgdpMGyPj28oRbJmPK5iDUoftQsNsTPuNb716Nvk2QO86pgPfWzVewU ItQ= -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:40 2025 by rpki-client