$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa File: 32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa (raw, json) Hash identifier: +j6lkD8f6TXsORVqngO4wYJdlD1YDPrEkBvKfc8+Jsg= Subject key identifier: 20:17:B7:B8:D0:25:1B:7F:39:EE:D1:A4:A1:88:E5:19:11:E5:51:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 469BE538B5CDB566296AD91280024E3B6B27B135 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa Signing time: Fri 21 Mar 2025 00:01:40 +0000 ROA not before: Fri 21 Mar 2025 00:01:40 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9b:e5:38:b5:cd:b5:66:29:6a:d9:12:80:02:4e:3b:6b:27:b1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:01:40 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:27:65:ed:e5:a4:7e:04:dc:2c:5a:8c:a2: 2f:1e:71:5d:dd:40:b4:a6:74:e3:d9:75:59:c5:6c: 79:51:79:c1:fb:23:ad:e3:6f:f0:9f:b5:76:db:ff: 16:da:89:94:d2:ca:9b:44:a8:47:09:17:f3:7c:96: 93:ee:a8:8b:ac:62:0f:b9:2f:87:3b:1d:9f:6e:dc: 9d:1b:5c:6f:51:fa:42:30:cf:5a:88:85:ef:e2:e3: 25:6f:af:73:18:f2:2c:ae:67:47:99:f1:5a:96:55: c9:9e:7d:65:26:32:4b:df:bd:32:fd:f7:e9:24:9f: 31:77:a3:51:4a:29:65:aa:60:9f:50:14:ea:95:97: dc:13:94:8c:dd:53:ad:38:ec:42:ac:95:8e:99:f2: 34:5b:3c:75:64:c3:26:6f:96:19:30:51:b1:e6:b5: 50:ea:5c:9a:69:7a:be:1b:12:5b:60:8f:48:cc:2a: 06:a3:07:98:ec:bc:98:32:15:78:a2:53:b4:9c:d1: c3:25:41:6d:3a:51:9d:2a:7f:95:1e:0b:04:b6:6c: 37:64:79:ce:d9:13:da:69:70:2f:23:b3:a2:22:a1: 97:2d:64:05:55:7c:c7:82:ac:ac:f3:58:93:b5:71: a7:02:1b:13:94:9d:4f:ea:88:8f:6d:f8:89:b4:66: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:17:B7:B8:D0:25:1B:7F:39:EE:D1:A4:A1:88:E5:19:11:E5:51:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:a000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:f2:ac:19:48:24:0d:13:f4:bd:1f:df:c3:cc:e0:0c:0c:4e: 77:74:6e:ff:18:89:14:8a:45:30:74:7a:d2:51:4a:69:99:2e: 91:08:18:16:39:e6:50:b9:ec:f8:4b:e1:96:bf:8b:4e:cf:83: b3:d3:75:c3:0e:65:7f:4f:7e:41:d1:d2:32:5b:1e:e6:af:b3: a5:f7:ae:9d:b8:8d:96:ff:15:1b:37:85:7f:42:01:e2:45:f4: 41:3a:f3:23:6a:24:5e:6e:66:c5:0e:04:10:73:ae:48:61:e4: 67:fc:d2:40:4a:1e:ed:15:3b:fe:9c:b6:7e:5c:37:77:56:7c: bd:e9:be:73:aa:29:29:2a:e8:08:27:2c:fb:1e:cb:ef:d9:58: b9:3d:d2:ea:96:72:12:78:6d:e0:b4:44:dc:57:42:47:d7:18: 3f:90:99:b8:90:8a:c6:65:34:fc:5e:24:e7:1b:d6:c0:39:76: 11:e7:1a:c8:02:de:a1:12:5f:f2:0c:36:77:24:09:0d:e6:1a: dd:65:0e:04:b8:48:8d:eb:25:30:cb:83:65:17:64:98:ce:aa: ac:04:f1:50:55:c3:b9:5b:fd:b7:c1:08:c6:68:91:05:5a:3c: 72:f8:6c:91:01:46:88:8b:61:29:08:f2:a1:ff:6a:02:4e:c6: 79:a4:8c:ae -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURpvlOLXNtWYpatkSgAJOO2snsTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDE0MFoX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAYjRkNDlkNzMwMzNhMTM0ZjdiZGRj NTU3MjE1Nzk5ZWI0ZGYwNWEzNGY0NTJkNTAyMGVjYWY1MzFiNjJiNmMyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVEnZe3lpH4E3CxajKIvHnFd3UC0 pnTj2XVZxWx5UXnB+yOt42/wn7V22/8W2omU0sqbRKhHCRfzfJaT7qiLrGIPuS+H Ox2fbtydG1xvUfpCMM9aiIXv4uMlb69zGPIsrmdHmfFallXJnn1lJjJL370y/ffp JJ8xd6NRSillqmCfUBTqlZfcE5SM3VOtOOxCrJWOmfI0Wzx1ZMMmb5YZMFGx5rVQ 6lyaaXq+GxJbYI9IzCoGoweY7LyYMhV4olO0nNHDJUFtOlGdKn+VHgsEtmw3ZHnO 2RPaaXAvI7OiIqGXLWQFVXzHgqys81iTtXGnAhsTlJ1P6oiPbfiJtGZ3WwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCAXt7jQJRt/Oe7RpKGI5RkR5VFoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyZTRlY2U2LWQzNWUtNDFjZi04ZGExLTNiNzczM2U0NmU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYKAwDQYJKoZIhvcNAQELBQADggEBAHvyrBlIJA0T9L0f38PM 4AwMTnd0bv8YiRSKRTB0etJRSmmZLpEIGBY55lC57PhL4Za/i07Pg7PTdcMOZX9P fkHR0jJbHuavs6X3rp24jZb/FRs3hX9CAeJF9EE68yNqJF5uZsUOBBBzrkhh5Gf8 0kBKHu0VO/6ctn5cN3dWfL3pvnOqKSkq6AgnLPsey+/ZWLk90uqWchJ4beC0RNxX QkfXGD+QmbiQisZlNPxeJOcb1sA5dhHnGsgC3qESX/IMNnckCQ3mGt1lDgS4SI3r JTDLg2UXZJjOqqwE8VBVw7lb/bfBCMZokQVaPHL4bJEBRoiLYSkI8qH/agJOxnmk jK4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:19 2025 by rpki-client