$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7521d624-9f73-434b-b487-b3db6d556c03.roa File: 7521d624-9f73-434b-b487-b3db6d556c03.roa (raw, json) Hash identifier: 1cx06Xd4Y3+SkbTqrYHho25HhRlCXKYnKq5OM4eoXDg= Subject key identifier: 6F:A4:BA:49:CF:EB:9A:2B:EF:5A:01:EA:CA:C1:CA:17:55:71:52:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C7434D94D4323B684516899484A959364E38006 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7521d624-9f73-434b-b487-b3db6d556c03.roa Signing time: Fri 21 Mar 2025 00:00:56 +0000 ROA not before: Fri 21 Mar 2025 00:00:56 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:74:34:d9:4d:43:23:b6:84:51:68:99:48:4a:95:93:64:e3:80:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:00:56 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:37:e7:b4:e6:5d:c3:d9:e8:9d:28:07:e0: dc:98:b7:4d:63:5a:51:fe:2c:86:08:ac:da:f6:c5: f8:21:9e:66:75:4e:c5:04:09:50:f7:9a:ac:29:dd: 5e:0a:95:97:e9:e2:c2:2b:78:fc:8e:ce:70:40:36: af:15:a6:ee:75:d4:c2:00:23:b2:77:d9:21:50:84: 83:2b:ec:31:90:5a:04:c4:66:91:65:1e:3c:e9:d2: 4d:e0:64:f3:f2:36:28:92:c8:0d:06:2e:18:a1:e8: 7b:0b:91:93:6c:8e:41:00:96:90:6f:8f:8c:c5:18: f3:d5:4d:04:35:37:93:34:49:06:a7:d5:a0:ce:7c: 96:fa:32:1c:a6:6b:3c:e2:a6:f0:48:32:0f:3f:a4: b8:15:00:77:a6:2e:33:ba:5d:91:94:4c:ca:85:c2: 2f:06:fc:32:dc:fc:af:2f:01:c4:47:30:ec:44:83: f9:ac:01:f3:e4:a9:85:eb:b9:6f:d0:45:79:32:78: 71:34:3a:64:05:be:ed:a6:28:af:c7:2a:5a:22:ac: 04:dd:db:cf:bc:96:38:ac:20:93:ea:f3:73:61:26: f7:b9:52:11:70:31:63:43:c3:c6:31:28:88:91:78: 2c:03:c6:d3:96:1c:42:78:d6:b5:11:be:2b:d8:a3: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A4:BA:49:CF:EB:9A:2B:EF:5A:01:EA:CA:C1:CA:17:55:71:52:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7521d624-9f73-434b-b487-b3db6d556c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:8000::/40 Signature Algorithm: sha256WithRSAEncryption c6:12:b3:bb:95:24:a7:1a:bc:e5:b4:9a:56:93:b8:b5:72:e7: 14:d9:1a:71:58:40:7c:29:70:10:ce:40:0b:d6:34:f4:37:7f: 21:53:b1:7d:5d:41:1d:00:2c:b7:69:f5:cf:39:ea:f2:46:92: ea:c5:92:a6:5a:3d:69:17:74:fe:08:43:79:38:0e:a8:f7:11: 33:8f:a2:6a:d8:01:e3:38:09:67:2a:6c:45:e7:7d:19:ff:0e: 50:4a:3a:4f:0d:07:5b:f1:c6:5a:0d:64:06:93:83:5e:46:51: 81:5a:e5:09:bd:46:99:cd:ae:d1:28:02:1c:77:94:bd:9c:bb: 5f:cd:8f:94:d1:7c:d4:23:f1:70:0d:4d:49:3a:8c:8d:3a:15: 29:2e:19:51:e0:df:36:03:42:23:dd:1e:52:60:cf:7f:53:50: ed:6c:46:c2:43:fc:bb:46:9f:16:1d:fe:99:f0:30:98:7b:70: b3:e7:0c:82:cd:c1:3e:96:a0:fa:ab:d7:50:33:2f:27:3c:1b: b6:0f:97:bb:50:02:54:7d:5b:1c:ba:5f:83:50:e9:85:7a:4c: 80:ee:de:9a:5e:df:8c:91:85:76:f6:34:0d:00:8f:c2:9d:2e: 8e:6f:8a:a0:4e:f2:03:b5:47:87:ca:f9:ed:4e:6a:a1:00:45: 9a:2b:83:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfHQ02U1DI7aEUWiZSEqVk2TjgAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDA1NloX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAMDk5Yzg5M2Q2MjY2YmY2YWY0ZTVk NmJjNWE0NDYyYjUzNzVhYThkMjljOWJiMjcyYTUwYjEzOGI1NTVjY2ZiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkY357TmXcPZ6J0oB+DcmLdNY1pR /iyGCKza9sX4IZ5mdU7FBAlQ95qsKd1eCpWX6eLCK3j8js5wQDavFabuddTCACOy d9khUISDK+wxkFoExGaRZR486dJN4GTz8jYoksgNBi4Yoeh7C5GTbI5BAJaQb4+M xRjz1U0ENTeTNEkGp9WgznyW+jIcpms84qbwSDIPP6S4FQB3pi4zul2RlEzKhcIv Bvwy3PyvLwHERzDsRIP5rAHz5KmF67lv0EV5MnhxNDpkBb7tpiivxypaIqwE3dvP vJY4rCCT6vNzYSb3uVIRcDFjQ8PGMSiIkXgsA8bTlhxCeNa1Eb4r2KNX6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG+kuknP65or71oB6srByhdVcVJ0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1MjFkNjI0LTlmNzMtNDM0Yi1iNDg3LWIzZGI2ZDU1NmMwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYIAwDQYJKoZIhvcNAQELBQADggEBAMYSs7uVJKcavOW0mlaT uLVy5xTZGnFYQHwpcBDOQAvWNPQ3fyFTsX1dQR0ALLdp9c856vJGkurFkqZaPWkX dP4IQ3k4Dqj3ETOPomrYAeM4CWcqbEXnfRn/DlBKOk8NB1vxxloNZAaTg15GUYFa 5Qm9RpnNrtEoAhx3lL2cu1/Nj5TRfNQj8XANTUk6jI06FSkuGVHg3zYDQiPdHlJg z39TUO1sRsJD/LtGnxYd/pnwMJh7cLPnDILNwT6WoPqr11AzLyc8G7YPl7tQAlR9 Wxy6X4NQ6YV6TIDu3ppe34yRhXb2NA0Aj8KdLo5viqBO8gO1R4fK+e1OaqEARZor gwc= -----END CERTIFICATE-----Generated at Fri Apr 4 23:41:10 2025 by rpki-client