$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa File: 4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa (raw, json) Hash identifier: bSnaNPi2TLx9VngJ5cv79u/Bv63+xOdbNHZsGjyrjqs= Subject key identifier: 5D:27:18:64:2C:67:F6:66:9B:6B:7E:BA:76:02:1E:70:20:5B:FA:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04D219EB8663D64867FDF226E5512D7DF93318A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa Signing time: Fri 28 Mar 2025 00:00:18 +0000 ROA not before: Fri 28 Mar 2025 00:00:18 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daee:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d2:19:eb:86:63:d6:48:67:fd:f2:26:e5:51:2d:7d:f9:33:18:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 28 00:00:18 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:04:31:4f:8c:30:23:f8:01:60:30:4a:ef: c3:4f:5e:72:50:23:56:9c:45:47:85:f4:7d:e1:33: 3d:69:2d:f4:dc:2c:7d:bb:77:87:52:dd:42:42:fe: b1:68:e3:fe:b8:c9:fd:1f:5f:64:19:db:f3:e4:77: aa:7f:a5:cb:cc:8c:d5:97:c4:4a:ef:40:dc:91:7b: ad:03:b8:ec:df:af:fb:9d:c4:06:c6:80:4a:13:f2: fc:3d:f3:ba:0a:3a:4f:9f:c2:5d:8b:6c:d1:e0:80: 0b:96:31:ff:5f:1f:2d:00:12:c2:5c:4d:8f:c4:d3: a8:79:68:1d:67:91:76:b4:6a:af:fd:88:0e:28:85: 57:56:31:e0:12:0b:bb:a9:3f:fd:67:9c:6a:fb:d5: 9a:69:9d:58:ec:00:66:b0:2d:2f:ef:10:be:c5:17: 81:bd:f1:53:b9:05:26:35:5d:a5:91:51:56:90:aa: ef:70:61:a1:5c:05:3a:11:36:41:61:bb:8a:af:be: 37:61:4a:6d:b4:bd:34:3c:e1:bc:1a:ec:4c:4a:d3: 06:ac:9f:10:c6:ae:ef:2a:0f:c4:5d:da:43:77:13: 3c:91:f5:cd:42:63:b4:3f:ba:68:a5:51:a2:86:06: bb:2d:74:fb:2b:57:f0:08:57:1f:25:69:18:83:e9: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:27:18:64:2C:67:F6:66:9B:6B:7E:BA:76:02:1E:70:20:5B:FA:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daee:4800::/40 Signature Algorithm: sha256WithRSAEncryption 63:b4:6b:8b:2b:fe:ec:0f:01:74:82:e4:a0:96:89:f9:d9:d3: 20:5d:f6:24:ce:cd:08:96:0a:99:a3:1e:5a:a7:8b:2a:d5:c4: ee:ab:d3:b0:e5:50:8c:13:f0:d0:e8:26:26:fd:49:14:ea:b2: 4c:58:af:ca:30:9d:e4:a8:db:78:36:12:a4:6a:e5:20:1f:45: f2:18:09:b6:6f:bf:33:d8:99:e2:3e:1b:df:03:46:5e:62:2e: b0:10:d7:b1:e2:44:ca:2a:d8:5b:f0:da:30:14:19:9b:b0:3b: f1:09:8a:f2:de:d6:d1:ed:3c:7a:f9:1c:3f:2c:85:48:93:16: c7:b8:47:f0:1a:0a:7d:f3:b8:c1:5b:5e:9b:13:87:a9:1f:fd: ae:a6:67:ec:58:5d:02:2e:f5:e6:5e:e4:c5:47:99:5d:6f:29: 1e:88:ab:13:33:1b:30:09:d0:8c:c2:3b:f7:99:e8:da:1d:76: f3:06:61:ed:34:6d:56:e7:04:6e:b1:e2:3a:a1:7d:b7:ab:33: 79:50:13:54:62:b7:09:ea:8a:c2:a6:15:2f:e9:68:78:a7:7d: 15:66:84:c0:ec:1c:d2:0e:5a:80:e6:36:2a:d0:f5:29:22:9f: 99:ad:26:76:45:23:82:7b:b5:24:b8:49:d1:8e:59:d0:88:6c: 10:93:60:f6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBNIZ64Zj1khn/fIm5VEtffkzGKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyODAwMDAxOFoX DTI1MDUwMjIzNTk1OVowejFJMEcGA1UEBRNAOGQyYmFiMmM2OGUyZTUxMTk0MmRm NGE4MjQwODI0ZjM2NWFjN2YyNDA1NzQyYTYzZDJkY2EwZWIzZGY5ODJjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbsEMU+MMCP4AWAwSu/DT15yUCNW nEVHhfR94TM9aS303Cx9u3eHUt1CQv6xaOP+uMn9H19kGdvz5Heqf6XLzIzVl8RK 70DckXutA7js36/7ncQGxoBKE/L8PfO6CjpPn8Jdi2zR4IALljH/Xx8tABLCXE2P xNOoeWgdZ5F2tGqv/YgOKIVXVjHgEgu7qT/9Z5xq+9WaaZ1Y7ABmsC0v7xC+xReB vfFTuQUmNV2lkVFWkKrvcGGhXAU6ETZBYbuKr743YUpttL00POG8GuxMStMGrJ8Q xq7vKg/EXdpDdxM8kfXNQmO0P7popVGihga7LXT7K1fwCFcfJWkYg+lzXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF0nGGQsZ/Zmm2t+unYCHnAgW/pKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRhYTkwN2JjLTk4YTUtNDVlMy1iMWE0LTkyNTQ0NmJmMGE3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7kgwDQYJKoZIhvcNAQELBQADggEBAGO0a4sr/uwPAXSC5KCW ifnZ0yBd9iTOzQiWCpmjHlqniyrVxO6r07DlUIwT8NDoJib9SRTqskxYr8owneSo 23g2EqRq5SAfRfIYCbZvvzPYmeI+G98DRl5iLrAQ17HiRMoq2Fvw2jAUGZuwO/EJ ivLe1tHtPHr5HD8shUiTFse4R/AaCn3zuMFbXpsTh6kf/a6mZ+xYXQIu9eZe5MVH mV1vKR6IqxMzGzAJ0IzCO/eZ6NoddvMGYe00bVbnBG6x4jqhfberM3lQE1Ritwnq isKmFS/paHinfRVmhMDsHNIOWoDmNirQ9Skin5mtJnZFI4J7tSS4SdGOWdCIbBCT YPY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:59 2025 by rpki-client