$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa File: fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa (raw, json) Hash identifier: hF++xdf+wIvo2z1sSsaUNryumBaZooWNLnm5614EWzg= Subject key identifier: 28:29:98:3F:E8:64:10:BB:E7:B2:C9:F9:0E:77:E8:11:CD:32:D9:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47A368A21DA460C98A6440203FE34964F24E4D7B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa Signing time: Tue 25 Mar 2025 00:31:17 +0000 ROA not before: Tue 25 Mar 2025 00:31:17 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a3:68:a2:1d:a4:60:c9:8a:64:40:20:3f:e3:49:64:f2:4e:4d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:31:17 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=e2032ddb6c14ce0da01696ecba9581956a1ee130e95561451c76677491b2da08, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:70:07:15:4e:31:40:30:00:1e:11:8d:7b: ae:1b:6c:11:64:5e:6e:37:7a:3b:aa:8d:c6:ec:4e: c9:38:e4:83:53:28:63:91:c8:01:bd:92:62:ac:63: 32:d8:3e:e4:45:07:c8:af:3f:ea:dd:e8:13:52:f7: 1f:5c:c4:f0:62:11:37:ff:d9:32:a5:80:ec:91:76: cb:91:42:a7:2e:d1:cd:b0:cd:66:8b:47:b3:4b:f3: 47:83:3f:7e:19:1a:89:8b:ba:10:c6:c1:30:14:72: 49:b1:14:1a:e2:d0:45:3d:ad:13:fb:6b:dd:92:9b: 0e:ba:89:97:d3:42:1f:8d:d2:74:26:8c:ac:98:87: d7:7d:fc:b4:83:3a:5a:6b:88:99:c4:2f:e3:33:63: 70:3e:e6:59:6f:58:99:2f:c7:8a:9e:42:7b:6f:98: 57:24:5c:dd:6b:81:87:ed:e5:d9:50:ef:1b:0c:93: 8f:6e:d3:60:ce:b0:ab:92:b7:1d:be:78:ad:0c:47: 21:ff:5c:de:64:c5:57:84:98:0a:29:11:26:a4:dc: 53:5c:61:88:44:2e:7b:26:44:f0:2c:49:c8:0c:c1: 77:c2:05:71:1f:ca:1b:f1:61:2e:b7:9b:d5:3e:86: 53:aa:e8:8b:9a:91:83:2c:5e:94:7b:c7:3f:fb:d5: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:29:98:3F:E8:64:10:BB:E7:B2:C9:F9:0E:77:E8:11:CD:32:D9:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4800::/40 Signature Algorithm: sha256WithRSAEncryption 28:77:53:6e:e7:85:7d:79:47:d7:d1:da:20:f6:c3:e4:83:3c: 01:5d:da:23:8f:cb:e8:63:cb:38:4e:6d:fe:4a:4f:7a:ab:26: 9b:6e:0e:9e:09:17:75:db:75:1e:43:d3:dc:a9:ac:cb:da:dc: 9d:4e:1c:09:48:e7:ae:d6:5a:69:b2:8c:9c:06:68:7c:53:33: 50:af:b1:10:f7:53:87:6e:57:39:de:9d:2a:db:33:dd:87:16: c4:e4:d5:31:41:4a:00:ce:9a:4b:f0:8b:7c:a1:4a:54:2d:65: b5:0e:16:f2:8f:68:81:57:bb:f9:26:2d:12:d2:e9:c2:42:0f: 67:b9:39:2e:99:ae:9f:17:53:41:00:d5:8b:67:20:4c:db:c2: f3:2f:c0:cb:43:b2:d6:c4:de:cd:d5:3c:8e:55:8d:f1:3a:97: 2f:63:6a:a3:ab:31:85:ed:7d:25:bd:f9:8b:f5:c9:a5:05:b7: e5:e1:96:f4:d9:73:52:8e:72:a8:7d:0c:eb:10:ff:56:17:4f: a8:9e:d0:b4:ed:56:e9:1e:fb:19:8e:27:25:25:a9:b6:09:5b: 7f:f1:26:1e:e2:f5:31:b7:9a:ff:26:b5:0b:be:1a:c7:b0:27: c4:b4:90:c7:13:59:0d:47:19:8e:53:84:88:82:d9:d8:78:04: 64:b9:15:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR6Nooh2kYMmKZEAgP+NJZPJOTXswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMzExN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZTIwMzJkZGI2YzE0Y2UwZGEwMTY5 NmVjYmE5NTgxOTU2YTFlZTEzMGU5NTU2MTQ1MWM3NjY3NzQ5MWIyZGEwODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDtwBxVOMUAwAB4RjXuuG2wRZF5u N3o7qo3G7E7JOOSDUyhjkcgBvZJirGMy2D7kRQfIrz/q3egTUvcfXMTwYhE3/9ky pYDskXbLkUKnLtHNsM1mi0ezS/NHgz9+GRqJi7oQxsEwFHJJsRQa4tBFPa0T+2vd kpsOuomX00IfjdJ0JoysmIfXffy0gzpaa4iZxC/jM2NwPuZZb1iZL8eKnkJ7b5hX JFzda4GH7eXZUO8bDJOPbtNgzrCrkrcdvnitDEch/1zeZMVXhJgKKREmpNxTXGGI RC57JkTwLEnIDMF3wgVxH8ob8WEut5vVPoZTquiLmpGDLF6Ue8c/+9WsXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCgpmD/oZBC757LJ+Q536BHNMtnxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZkZDVjMmZhLTgxM2YtNDEzZC04YzJkLThkMzU1MzYxZjJmYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAEgwDQYJKoZIhvcNAQELBQADggEBACh3U27nhX15R9fR2iD2 w+SDPAFd2iOPy+hjyzhObf5KT3qrJptuDp4JF3XbdR5D09yprMva3J1OHAlI567W WmmyjJwGaHxTM1CvsRD3U4duVznenSrbM92HFsTk1TFBSgDOmkvwi3yhSlQtZbUO FvKPaIFXu/kmLRLS6cJCD2e5OS6Zrp8XU0EA1YtnIEzbwvMvwMtDstbE3s3VPI5V jfE6ly9jaqOrMYXtfSW9+Yv1yaUFt+XhlvTZc1KOcqh9DOsQ/1YXT6ie0LTtVuke +xmOJyUlqbYJW3/xJh7i9TG3mv8mtQu+GsewJ8S0kMcTWQ1HGY5ThIiC2dh4BGS5 FZw= -----END CERTIFICATE-----Generated at Thu Apr 17 17:53:16 2025 by rpki-client