$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39a1f0f4-ce79-499f-a3af-a554d10d64e9.roa File: 39a1f0f4-ce79-499f-a3af-a554d10d64e9.roa (raw, json) Hash identifier: blKBk4ywH//tClEWOAM39dC5kftMZ4yBw4hyqBWMr7M= Subject key identifier: 62:4E:BF:01:4B:5E:12:B4:1C:E3:3A:80:CC:1C:CF:78:38:8E:98:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63D8879BE03AC1C94EAF0307A21E016CE55B1204 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39a1f0f4-ce79-499f-a3af-a554d10d64e9.roa Signing time: Mon 17 Mar 2025 15:00:59 +0000 ROA not before: Mon 17 Mar 2025 15:00:59 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d8:87:9b:e0:3a:c1:c9:4e:af:03:07:a2:1e:01:6c:e5:5b:12:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 17 15:00:59 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:24:bd:69:ec:24:84:59:39:b3:e7:a0:63: d2:1d:2a:89:44:a4:7d:e5:5a:f5:b8:86:52:6e:04: cf:ea:09:6c:8f:ed:0c:1d:53:08:d0:05:14:1b:21: 7c:bc:43:03:5f:ad:39:3d:b8:82:a4:1b:12:e2:e3: 59:2a:b6:5b:6c:fb:35:06:ed:5b:2c:df:7f:19:a4: cd:68:52:25:ca:fa:70:39:1c:a2:7b:1a:9f:e1:a0: 0d:3d:09:8a:40:38:68:a6:8b:75:1a:fc:44:7e:ca: f0:66:54:c5:d2:2d:98:e8:17:80:68:79:4d:49:b3: e7:8f:f8:ba:76:1c:1c:ab:ec:e6:b5:50:63:97:d7: f0:a3:01:0b:e3:fb:cb:51:2a:c3:ca:a0:b0:9f:5c: 96:15:03:bb:c5:22:a7:e7:65:4b:b6:bc:3c:6a:2f: 2a:a8:8b:21:2d:3f:5e:23:eb:ba:74:dd:ae:40:42: b0:13:9c:56:07:52:61:b4:71:53:ba:05:dc:0c:58: 33:f7:04:a9:b3:d9:8a:20:ea:66:c1:58:0f:f2:be: f7:e7:a6:23:67:a7:8d:86:43:c5:91:e8:41:1d:de: 58:9b:21:f1:77:1f:45:ef:6e:26:dd:b6:43:26:60: f2:5c:4f:7b:66:f3:17:69:c2:91:a5:5d:0e:c1:f1: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4E:BF:01:4B:5E:12:B4:1C:E3:3A:80:CC:1C:CF:78:38:8E:98:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39a1f0f4-ce79-499f-a3af-a554d10d64e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:4000::/40 Signature Algorithm: sha256WithRSAEncryption b6:21:ef:3d:20:e3:57:5b:14:ee:74:b9:a5:31:28:a3:10:dd: f6:f9:77:49:fc:b8:f6:a8:c2:e5:d8:f9:60:c6:1a:d3:8d:6b: e7:49:d3:12:82:32:6e:c6:4f:f5:60:a1:c1:b1:df:ee:94:c6: fb:0b:62:b6:ff:a5:ed:b3:a1:23:41:1b:ed:6d:7f:e5:2b:a2: b8:66:8a:17:9a:e4:05:c1:3e:67:71:6e:5f:2f:57:3e:e3:4f: 24:08:ef:c5:32:a8:28:71:26:e7:2f:28:55:ac:98:10:ab:bc: f2:0b:05:64:ab:9e:54:c7:62:bc:eb:f3:37:48:5f:80:7c:36: ff:56:5e:7f:25:da:77:78:0e:ca:a5:b0:e8:4d:7d:4b:9e:2d: 8b:a0:a9:d9:ba:58:88:41:c7:bd:bc:35:bf:91:5d:43:d3:7e: 2a:cf:9d:d8:69:28:60:eb:f4:ff:40:f4:6b:b1:a0:1c:2f:c3: 3d:99:de:e7:8b:9c:99:9e:03:f5:1f:99:42:84:14:e2:3b:d4: d7:bc:e6:a8:23:74:87:b2:de:e4:c9:b3:3c:6c:e3:3d:96:aa: 2a:3d:00:4e:fd:d2:43:c9:0f:0c:5b:98:50:56:fb:e7:f0:f7: 18:5c:de:a3:52:fc:2a:24:ca:2e:3b:a5:9f:b0:93:e5:ca:5b: d0:84:20:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY9iHm+A6wclOrwMHoh4BbOVbEgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMxNzE1MDA1OVoX DTI1MDQyMTIzNTk1OVowejFJMEcGA1UEBRNANjJhYzE3YmQwZmY1ZDc3NjE2NjY0 NjRiNTk1YWYwYzE5ZmZmMjJmM2NmNzg4NDJlY2MwODQwNjM1Y2U2ZGU2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4kvWnsJIRZObPnoGPSHSqJRKR9 5Vr1uIZSbgTP6glsj+0MHVMI0AUUGyF8vEMDX605PbiCpBsS4uNZKrZbbPs1Bu1b LN9/GaTNaFIlyvpwORyiexqf4aANPQmKQDhopot1GvxEfsrwZlTF0i2Y6BeAaHlN SbPnj/i6dhwcq+zmtVBjl9fwowEL4/vLUSrDyqCwn1yWFQO7xSKn52VLtrw8ai8q qIshLT9eI+u6dN2uQEKwE5xWB1JhtHFTugXcDFgz9wSps9mKIOpmwVgP8r7356Yj Z6eNhkPFkehBHd5YmyHxdx9F724m3bZDJmDyXE97ZvMXacKRpV0OwfEVEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGJOvwFLXhK0HOM6gMwcz3g4jph2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5YTFmMGY0LWNlNzktNDk5Zi1hM2FmLWE1NTRkMTBkNjRlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauEAwDQYJKoZIhvcNAQELBQADggEBALYh7z0g41dbFO50uaUx KKMQ3fb5d0n8uPaowuXY+WDGGtONa+dJ0xKCMm7GT/VgocGx3+6UxvsLYrb/pe2z oSNBG+1tf+Urorhmihea5AXBPmdxbl8vVz7jTyQI78UyqChxJucvKFWsmBCrvPIL BWSrnlTHYrzr8zdIX4B8Nv9WXn8l2nd4DsqlsOhNfUueLYugqdm6WIhBx728Nb+R XUPTfirPndhpKGDr9P9A9GuxoBwvwz2Z3ueLnJmeA/UfmUKEFOI71Ne85qgjdIey 3uTJszxs4z2Wqio9AE790kPJDwxbmFBW++fw9xhc3qNS/Cokyi47pZ+wk+XKW9CE IBE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:41 2025 by rpki-client