$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa File: 64f65495-d8de-4492-a38d-c668479818e2.roa (raw, json) Hash identifier: WD56eVkFoeDbwMCnEzSYaNHVjB3sJBcXt/1E+2ouits= Subject key identifier: C5:7A:5E:58:FD:69:1D:F7:BA:D9:02:D7:EB:EB:49:C7:24:F8:38:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70CCA18E2497423F56B311C4F66A21E84CC2000C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa Signing time: Wed 02 Apr 2025 00:01:01 +0000 ROA not before: Wed 02 Apr 2025 00:01:01 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cc:a1:8e:24:97:42:3f:56:b3:11:c4:f6:6a:21:e8:4c:c2:00:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Apr 2 00:01:01 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:a2:69:b3:18:6a:c1:a1:be:a8:bc:a4:15: 94:d0:2f:71:75:62:90:91:c8:e9:1b:69:e5:b7:75: 4f:15:65:f0:ca:d3:30:32:74:81:5e:4e:7c:7b:48: 3d:42:e7:61:a4:67:9c:f5:21:82:bb:b2:13:5f:3c: 36:40:45:51:6a:d2:a9:c8:a6:e0:ef:48:7d:92:20: 96:3b:f5:a7:af:63:32:18:57:bd:eb:16:62:37:3c: 10:99:90:df:99:c7:4d:f7:42:24:7c:3c:b0:d0:f4: ea:92:eb:ff:d0:14:3a:fb:54:29:24:b3:e0:29:e6: ca:56:6c:eb:01:39:cc:e8:0b:aa:3c:b2:46:cb:67: 74:ff:36:68:3a:3a:24:29:b7:ce:e6:9b:00:e2:95: 6f:69:b1:8b:f5:fd:f1:72:b4:f4:61:5d:af:86:43: 73:a3:43:71:8c:04:39:cb:24:de:ae:28:92:c9:30: 00:00:fb:87:d4:88:03:6e:00:d9:15:44:99:d5:96: 22:79:1c:d4:f4:cc:e4:3a:86:a0:4a:11:ea:eb:b0: a0:f3:7f:ef:cd:9b:a4:f8:ac:5e:ff:6a:3e:6c:d5: f0:2e:ec:89:da:27:74:3c:22:90:03:f7:d3:85:2d: 45:cc:39:a9:10:ef:3a:b1:18:47:89:91:c6:c2:9b: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7A:5E:58:FD:69:1D:F7:BA:D9:02:D7:EB:EB:49:C7:24:F8:38:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:800::/40 Signature Algorithm: sha256WithRSAEncryption b9:74:a8:64:8c:83:9a:c7:2d:91:80:55:a0:69:50:9a:f4:e5: 25:51:af:fa:85:86:f7:e5:bb:f3:64:41:c0:a4:5d:fc:63:96: aa:90:67:7b:f4:75:ae:ca:7b:f0:64:f1:2d:90:a3:01:81:fb: e1:73:86:9e:50:3d:6d:73:ac:b5:84:19:3c:1e:64:82:9c:04: d0:d8:48:41:11:e9:65:fd:99:c1:85:c3:0f:7d:3f:60:e0:5a: c2:9b:54:8b:69:6e:c7:96:39:a6:6a:97:37:47:c7:c1:0e:4c: 31:4d:6a:47:ed:01:e3:2e:67:c6:47:97:90:ba:91:c3:15:1c: 52:fb:9b:d8:b5:d4:bd:51:8f:0d:1e:bb:88:09:97:09:d4:af: 8e:7c:c5:f7:ae:78:2c:b2:6f:65:14:24:9b:e1:0b:5c:23:6c: 6f:6d:d9:87:5c:b4:f1:69:26:16:65:ab:51:69:9a:20:9f:0b: c4:96:77:0d:51:a6:4b:45:0e:e3:af:f7:f9:38:1d:d6:69:bd: 8a:fb:4e:0d:4d:16:00:1e:66:16:74:f8:42:c6:29:b4:05:e3: 36:07:41:27:c6:39:6e:d4:e1:42:30:99:7b:54:81:33:40:dd: 9b:9d:31:89:43:10:6c:03:44:cf:ab:af:d5:47:b4:18:c3:19: 0e:c1:f7:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcMyhjiSXQj9WsxHE9moh6EzCAAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDEwMVoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNANmNhZTZkOGM1MGJkMDU4NTc1MDAz MGI1ZjNlZTY4YzY0NjI3MTQ3YjVmNzliYTY2MzZiNzgyYTljMjY2YmEyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J+iabMYasGhvqi8pBWU0C9xdWKQ kcjpG2nlt3VPFWXwytMwMnSBXk58e0g9QudhpGec9SGCu7ITXzw2QEVRatKpyKbg 70h9kiCWO/Wnr2MyGFe96xZiNzwQmZDfmcdN90IkfDyw0PTqkuv/0BQ6+1QpJLPg KebKVmzrATnM6AuqPLJGy2d0/zZoOjokKbfO5psA4pVvabGL9f3xcrT0YV2vhkNz o0NxjAQ5yyTeriiSyTAAAPuH1IgDbgDZFUSZ1ZYieRzU9MzkOoagShHq67Cg83/v zZuk+Kxe/2o+bNXwLuyJ2id0PCKQA/fThS1FzDmpEO86sRhHiZHGwptfRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMV6Xlj9aR33utkC1+vrScck+DiKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0ZjY1NDk1LWQ4ZGUtNDQ5Mi1hMzhkLWM2Njg0Nzk4MThlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7wgwDQYJKoZIhvcNAQELBQADggEBALl0qGSMg5rHLZGAVaBp UJr05SVRr/qFhvflu/NkQcCkXfxjlqqQZ3v0da7Ke/Bk8S2QowGB++Fzhp5QPW1z rLWEGTweZIKcBNDYSEER6WX9mcGFww99P2DgWsKbVItpbseWOaZqlzdHx8EOTDFN akftAeMuZ8ZHl5C6kcMVHFL7m9i11L1Rjw0eu4gJlwnUr458xfeueCyyb2UUJJvh C1wjbG9t2YdctPFpJhZlq1FpmiCfC8SWdw1RpktFDuOv9/k4HdZpvYr7Tg1NFgAe ZhZ0+ELGKbQF4zYHQSfGOW7U4UIwmXtUgTNA3ZudMYlDEGwDRM+rr9VHtBjDGQ7B 930= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:06 2025 by rpki-client