$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa File: 0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa (raw, json) Hash identifier: e6OZyeYMEdj7kzdVvzRXOPiFu5GyzFIGEkCAAKyCn44= Subject key identifier: 10:3B:59:16:04:5D:BB:C0:05:82:77:BD:8F:51:EB:BB:6D:FC:9E:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74EAE6685459737CBE227E27BBD9742BB21F2AF9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa Signing time: Fri 21 Mar 2025 00:00:06 +0000 ROA not before: Fri 21 Mar 2025 00:00:06 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ea:e6:68:54:59:73:7c:be:22:7e:27:bb:d9:74:2b:b2:1f:2a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:00:06 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:ef:81:77:1d:b2:b5:08:2c:97:f9:e2:7c: ea:e7:7c:3a:c5:34:ad:f8:67:2e:be:f7:4f:c7:0d: 70:e1:22:d7:2a:4c:73:88:2f:52:11:ef:03:68:32: 31:f7:13:f2:5e:1c:b9:f6:0d:86:c2:63:1d:35:3d: 1e:5c:29:1f:8f:03:e8:30:d2:f4:be:d9:34:0b:dc: b5:27:c1:30:ac:18:bf:28:6f:a3:42:22:65:a2:a9: e0:79:da:d2:54:22:79:c8:0f:2d:13:c9:74:aa:2e: 6d:fe:66:07:78:1e:09:e1:9f:06:7c:aa:9e:96:c3: 7a:aa:b5:81:fc:84:1a:97:55:d8:a4:72:3e:85:76: 88:c8:fd:4c:4c:46:22:86:44:9a:47:e7:fe:da:1e: 50:a3:8b:aa:17:d4:9a:38:28:43:ed:b9:24:02:c2: 5d:dc:ba:ad:ec:14:e1:b2:e8:46:e1:8d:41:29:55: 72:e5:11:55:c9:b0:0f:cd:3a:94:6a:78:76:95:34: 36:54:91:0a:30:65:f0:80:7e:79:0c:86:01:68:78: 55:99:97:ef:8d:9f:d2:de:14:15:c3:c1:0c:80:4b: 42:21:58:7f:01:47:9e:17:f9:34:99:43:64:f1:30: f9:c2:8f:65:8e:9d:ad:ff:23:35:d4:58:cf:1b:87: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:59:16:04:5D:BB:C0:05:82:77:BD:8F:51:EB:BB:6D:FC:9E:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:1000::/48 Signature Algorithm: sha256WithRSAEncryption 52:28:82:c5:d6:7e:79:7c:6a:1c:73:9f:e1:04:91:30:95:06: a6:5e:79:d6:5f:2b:b4:72:ca:97:16:60:d6:b1:b5:d2:b5:4e: 72:08:a9:51:1c:7e:f7:6a:6a:31:d6:9e:be:4a:94:6c:d7:07: 73:e6:b3:33:c0:2d:cf:d9:d4:58:f7:a0:63:58:11:14:b5:27: 49:e6:6a:9c:be:27:45:1a:1d:3b:10:9e:9c:a4:25:63:a7:61: 06:de:7a:a3:c5:47:ff:1d:e3:ec:eb:e4:74:e7:55:b1:64:19: 9b:a6:36:ce:dc:dd:9d:29:f7:93:5e:23:3e:58:1a:4a:e2:95: d4:40:3a:96:97:a4:9f:ef:ff:a0:f2:92:0b:10:0b:fc:e1:5a: 6b:0b:d5:ea:95:30:b4:53:37:ad:ba:02:9a:f1:1a:1b:2e:90: 3e:4f:9f:33:83:fb:f0:50:24:70:2a:66:db:dc:08:99:da:c4: 25:24:01:66:cb:99:43:52:bd:5d:95:89:22:60:c4:f0:0e:1b: ae:d6:93:83:b5:5a:2e:ea:9c:ae:69:17:7d:58:97:a7:95:87: 54:1a:d1:2e:22:32:50:29:ae:54:ff:a7:4f:97:dd:bc:22:f3: 7f:51:dd:44:d5:b1:91:fd:45:d6:a6:d2:50:07:62:20:81:b4: 07:d5:3f:68 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdOrmaFRZc3y+In4nu9l0K7IfKvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDAwNloX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAODE2YmU2ZjY5ODc4NWZlYjE0MDk2 ODJlNTY1OTBkMDcyMGU1NjJmNjQxNTJlMDM5YTcwZWNiNGVjYTlkOTIwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsPvgXcdsrUILJf54nzq53w6xTSt +GcuvvdPxw1w4SLXKkxziC9SEe8DaDIx9xPyXhy59g2GwmMdNT0eXCkfjwPoMNL0 vtk0C9y1J8EwrBi/KG+jQiJloqngedrSVCJ5yA8tE8l0qi5t/mYHeB4J4Z8GfKqe lsN6qrWB/IQal1XYpHI+hXaIyP1MTEYihkSaR+f+2h5Qo4uqF9SaOChD7bkkAsJd 3Lqt7BThsuhG4Y1BKVVy5RFVybAPzTqUanh2lTQ2VJEKMGXwgH55DIYBaHhVmZfv jZ/S3hQVw8EMgEtCIVh/AUeeF/k0mUNk8TD5wo9ljp2t/yM11FjPG4fE9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBA7WRYEXbvABYJ3vY9R67tt/J7CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBhYjljZmZiLTUwZWItNDE5Ni1hNGIyLWU2M2E0ZGExNGM1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9hAAMA0GCSqGSIb3DQEBCwUAA4IBAQBSKILF1n55fGocc5/h BJEwlQamXnnWXyu0csqXFmDWsbXStU5yCKlRHH73amox1p6+SpRs1wdz5rMzwC3P 2dRY96BjWBEUtSdJ5mqcvidFGh07EJ6cpCVjp2EG3nqjxUf/HePs6+R051WxZBmb pjbO3N2dKfeTXiM+WBpK4pXUQDqWl6Sf7/+g8pILEAv84VprC9XqlTC0UzetugKa 8RobLpA+T58zg/vwUCRwKmbb3AiZ2sQlJAFmy5lDUr1dlYkiYMTwDhuu1pODtVou 6pyuaRd9WJenlYdUGtEuIjJQKa5U/6dPl928IvN/Ud1E1bGR/UXWptJQB2IggbQH 1T9o -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:05 2025 by rpki-client