$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/1dffeac8-b779-49ef-ba27-58bc19891e60.roa File: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (raw, json) Hash identifier: j/4WjlQinhUUmOm/ukBqpfPcM+hHnnFzWxAEvB09rSA= Subject key identifier: BE:5D:F8:10:CC:E9:E1:88:13:74:D5:71:C3:85:F9:36:03:95:77:FD Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 760F0621F83D2FD72F9EF2171A809118663FA248 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/1dffeac8-b779-49ef-ba27-58bc19891e60.roa Signing time: Sat 29 Mar 2025 00:00:12 +0000 ROA not before: Sat 29 Mar 2025 00:00:12 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0f:06:21:f8:3d:2f:d7:2f:9e:f2:17:1a:80:91:18:66:3f:a2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001 Validity Not Before: Mar 29 00:00:12 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fc:76:8f:81:56:fe:05:89:62:63:ef:92:4e: f9:6d:b6:95:c2:80:d2:63:99:69:65:8b:67:bf:19: aa:10:cc:e2:69:14:7b:54:d4:6f:88:1c:6e:64:a3: 12:f3:53:38:85:32:62:61:78:d6:f2:3d:60:5c:3c: 82:02:fa:a3:ec:09:46:f0:66:22:d5:aa:40:cc:4b: 9d:13:d8:2c:27:9c:7a:49:78:19:c9:22:7b:33:9a: 9e:bf:c2:e1:dc:d3:b2:69:39:f0:dc:be:dc:3c:31: 6a:c4:96:b1:cd:b8:84:b8:7f:0a:06:c4:fe:03:f8: 50:c4:48:3b:f2:dd:a9:8e:e6:db:f5:f5:f8:4e:a1: 07:c4:7b:76:80:2d:be:1f:57:ab:9a:07:a9:f1:42: c6:47:e9:9e:e7:ac:a9:ec:00:02:7e:d0:f2:5d:b6: 95:2e:75:14:fe:49:36:bd:f1:15:41:57:98:30:71: 4d:3e:6f:9e:4a:cc:d4:01:1b:bc:fb:37:d6:33:92: 34:db:1b:4b:d2:95:27:7b:98:dd:cc:d2:d9:73:ee: ab:2d:72:8b:21:d6:5e:b0:1f:90:7c:3e:25:19:2c: 2d:76:16:dd:58:7a:62:3a:e3:43:08:d2:84:f6:fd: 3d:89:83:a2:3f:28:f7:b8:a0:4a:45:0d:a2:76:dd: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:F8:10:CC:E9:E1:88:13:74:D5:71:C3:85:F9:36:03:95:77:FD X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/1dffeac8-b779-49ef-ba27-58bc19891e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.144.0/22 Signature Algorithm: sha256WithRSAEncryption f2:8e:cc:80:c6:c7:0d:f6:f0:f0:66:c6:82:33:ff:94:34:48: bb:3b:29:38:a3:80:86:36:18:5d:42:3e:4a:aa:a3:1c:2c:2e: a1:dd:4b:e1:1f:eb:24:a7:f5:4b:79:ff:3b:bb:57:57:42:c5: c4:42:7d:7f:e6:da:31:11:ae:91:b3:cc:52:e1:43:6e:cb:f9: e1:81:a9:5a:8e:7a:99:d7:a8:bc:07:ed:4d:17:d6:35:4c:3d: 3a:2c:52:3f:00:8a:49:3c:dc:a2:49:9e:54:7e:75:8c:b2:ac: 3e:ef:1e:87:58:b9:9a:ca:a6:33:b2:1f:1a:12:f2:14:22:64: 63:ad:6c:b6:46:8e:bb:63:24:6c:90:ad:cc:40:e0:39:81:15: 90:77:67:e4:1d:02:17:ab:b1:d5:03:26:97:b7:e1:59:b2:2e: 73:fb:3e:0c:3a:71:f3:92:39:4e:cb:c3:71:f6:8b:16:94:21: ea:9b:e0:c8:12:13:e9:0f:85:f7:1d:fd:3f:6b:9a:de:45:12: d2:21:b5:30:ba:b6:5c:f0:88:67:c0:29:d0:14:e1:f4:5e:26: 6c:88:fe:41:19:96:05:e8:d7:56:aa:f1:bf:53:c9:e0:2a:64: f8:16:10:78:8a:09:a5:09:af:a9:52:28:24:76:1a:48:6a:31: b5:ee:3f:3a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUdg8GIfg9L9cvnvIXGoCRGGY/okgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDMyOTAwMDAxMloX DTI1MDUwMzIzNTk1OVowejFJMEcGA1UEBRNAMzRmOWQ1YzU1OGJkZDlmY2U3ODdk YjBkMjdiMDI5MTRiNzkxZWI1NDY4ZDYyZTgzMzAzYWYzMzQ0ZDI2N2M3NjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/x2j4FW/gWJYmPvkk75bbaVwoDS Y5lpZYtnvxmqEMziaRR7VNRviBxuZKMS81M4hTJiYXjW8j1gXDyCAvqj7AlG8GYi 1apAzEudE9gsJ5x6SXgZySJ7M5qev8Lh3NOyaTnw3L7cPDFqxJaxzbiEuH8KBsT+ A/hQxEg78t2pjubb9fX4TqEHxHt2gC2+H1ermgep8ULGR+me56yp7AACftDyXbaV LnUU/kk2vfEVQVeYMHFNPm+eSszUARu8+zfWM5I02xtL0pUne5jdzNLZc+6rLXKL IdZesB+QfD4lGSwtdhbdWHpiOuNDCNKE9v09iYOiPyj3uKBKRQ2idt0nvQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFL5d+BDM6eGIE3TVccOF+TYDlXf9MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzFkZmZlYWM4LWI3NzktNDllZi1iYTI3LTU4YmMxOTg5MWU2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrymQMA0GCSqGSIb3DQEBCwUAA4IBAQDyjsyAxscN9vDwZsaCM/+U NEi7Oyk4o4CGNhhdQj5KqqMcLC6h3UvhH+skp/VLef87u1dXQsXEQn1/5toxEa6R s8xS4UNuy/nhgalajnqZ16i8B+1NF9Y1TD06LFI/AIpJPNyiSZ5UfnWMsqw+7x6H WLmayqYzsh8aEvIUImRjrWy2Ro67YyRskK3MQOA5gRWQd2fkHQIXq7HVAyaXt+FZ si5z+z4MOnHzkjlOy8Nx9osWlCHqm+DIEhPpD4X3Hf0/a5reRRLSIbUwurZc8Ihn wCnQFOH0XiZsiP5BGZYF6NdWqvG/U8ngKmT4FhB4igmlCa+pUigkdhpIajG17j86 -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:52 2025 by rpki-client