$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa File: ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa (raw, json) Hash identifier: zjzmWZHDmLpe5FH+CCV0tXsd6zK3vJ2L5orcwchZSf4= Subject key identifier: CC:EA:86:CB:FE:5A:D5:50:DE:50:25:88:FB:EF:E8:4E:89:A1:5B:8B Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 7907FB58C0CE01404BD13EBA5BA11815CD79C528 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa Signing time: Mon 31 Mar 2025 15:01:08 +0000 ROA not before: Mon 31 Mar 2025 15:01:08 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:07:fb:58:c0:ce:01:40:4b:d1:3e:ba:5b:a1:18:15:cd:79:c5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000 Validity Not Before: Mar 31 15:01:08 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:ee:24:a0:26:f1:7b:ff:bb:3c:e5:29:e1: 05:b8:9e:cd:18:72:e3:68:c2:b9:82:4a:45:1b:ca: 32:0d:7b:2c:0c:17:65:25:ca:92:00:4e:0d:29:33: 9b:37:7c:5b:f2:d1:f6:13:80:ca:43:19:62:1c:a0: d0:d5:af:0f:0b:3e:0a:91:76:be:bb:ad:e5:97:17: 0d:ec:a9:ae:ca:2c:27:03:a9:17:b0:52:e1:11:18: 37:de:9e:b5:a1:81:4b:0f:d7:99:26:56:42:ec:ee: 3f:23:31:f3:4e:81:ff:a0:99:82:ad:f4:a9:64:b1: f0:84:58:28:4f:99:a6:fb:4e:26:10:fb:a5:22:94: 45:44:46:70:2f:9e:b4:0e:67:d6:0a:04:c6:48:52: 01:7a:1b:76:1c:e2:de:ce:c7:79:a7:5b:e1:1e:d6: 6a:ee:2a:bd:fc:45:ec:a8:e6:c7:40:b1:37:63:25: 3f:17:b7:ff:5c:ab:bd:4a:28:33:30:96:78:12:19: 5c:3b:15:d5:14:00:6f:d8:7a:7a:01:96:08:8a:92: 3f:05:5a:67:83:a9:2e:b1:44:f6:6a:82:94:63:74: 48:18:e4:fa:e0:e9:66:84:d3:ca:42:fc:47:ee:a2: 89:7d:5d:ac:0d:6b:92:1a:7c:ef:b9:35:66:4f:37: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:86:CB:FE:5A:D5:50:DE:50:25:88:FB:EF:E8:4E:89:A1:5B:8B X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:8020::/48 Signature Algorithm: sha256WithRSAEncryption 18:6d:92:29:2b:31:3d:ba:52:53:a0:dc:da:7d:fa:7d:1f:86: dd:6f:65:05:cd:18:be:de:42:62:3c:93:8f:f6:cc:99:8c:08: 5f:66:ea:9f:68:b0:f1:ed:4f:0d:e6:5e:ee:b1:e2:89:85:a1: f2:42:95:e3:4c:63:a7:13:69:3e:c3:ad:cd:0d:3b:87:65:5d: dc:20:6f:94:a6:c2:11:5a:71:e5:51:e2:51:6a:2a:a1:dc:a9: 66:4b:5b:59:83:7b:55:76:bf:0b:d5:eb:9c:cb:06:2b:91:a0: 05:3b:55:3c:00:9b:9b:27:56:5b:c4:a8:a3:9c:89:bc:72:07: e2:90:f2:51:28:07:e2:d5:e6:70:71:a2:3a:b3:be:7c:a0:95: 8a:8c:cf:33:c4:0b:32:65:93:92:98:3c:18:08:d0:00:72:f9: 1f:1c:9e:d1:66:db:25:b1:57:ae:35:49:81:ab:82:77:3d:c7: cc:d6:33:4b:aa:fd:f9:3c:fe:51:6f:d3:38:17:ba:ae:49:89: 69:39:40:1b:6e:52:7f:a0:51:06:20:ad:57:81:e2:52:db:42: 65:5e:16:f6:77:b0:1a:84:2e:38:1d:3f:0f:b4:bf:ed:55:df: 27:dc:cc:a3:2c:98:23:36:8d:aa:99:40:f4:38:d6:52:99:e0: 23:c9:5f:c1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeQf7WMDOAUBL0T66W6EYFc15xSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDMzMTE1MDEwOFoX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNANWE3ZTIzNTA5MTYyNDMzZTU3NTU0 NmViZDYzNDBkYzVlMzA3YWFlMzM2MmM0NjMwZDExYWVkNmIxNGJkZDk1MTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE7uJKAm8Xv/uzzlKeEFuJ7NGHLj aMK5gkpFG8oyDXssDBdlJcqSAE4NKTObN3xb8tH2E4DKQxliHKDQ1a8PCz4KkXa+ u63llxcN7KmuyiwnA6kXsFLhERg33p61oYFLD9eZJlZC7O4/IzHzToH/oJmCrfSp ZLHwhFgoT5mm+04mEPulIpRFREZwL560DmfWCgTGSFIBeht2HOLezsd5p1vhHtZq 7iq9/EXsqObHQLE3YyU/F7f/XKu9SigzMJZ4EhlcOxXVFABv2Hp6AZYIipI/BVpn g6kusUT2aoKUY3RIGOT64OlmhNPKQvxH7qKJfV2sDWuSGnzvuTVmTzd/nwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMzqhsv+WtVQ3lAliPvv6E6JoVuLMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2FiNGFkMTg1LTJiZmItNDI4MS05ZTIzLTAwYTJhYjRiNmU4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4AgMA0GCSqGSIb3DQEBCwUAA4IBAQAYbZIpKzE9ulJToNza ffp9H4bdb2UFzRi+3kJiPJOP9syZjAhfZuqfaLDx7U8N5l7useKJhaHyQpXjTGOn E2k+w63NDTuHZV3cIG+UpsIRWnHlUeJRaiqh3KlmS1tZg3tVdr8L1eucywYrkaAF O1U8AJubJ1ZbxKijnIm8cgfikPJRKAfi1eZwcaI6s758oJWKjM8zxAsyZZOSmDwY CNAAcvkfHJ7RZtslsVeuNUmBq4J3PcfM1jNLqv35PP5Rb9M4F7quSYlpOUAbblJ/ oFEGIK1XgeJS20JlXhb2d7AahC44HT8PtL/tVd8n3MyjLJgjNo2qmUD0ONZSmeAj yV/B -----END CERTIFICATE-----Generated at Fri Apr 4 23:25:47 2025 by rpki-client