$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81f26a69-4419-444e-a58a-f1c88386085f.roa File: 81f26a69-4419-444e-a58a-f1c88386085f.roa (raw, json) Hash identifier: PuvZ/hJWbpiMDj700J3uFdsOMJnBUXStP9TGNVKo3jo= Subject key identifier: 9B:FB:94:07:71:8F:6D:DB:C7:1B:76:0C:5D:56:4C:2B:4E:F7:88:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 16945D88305199395AED1035513189CE9B798A95 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81f26a69-4419-444e-a58a-f1c88386085f.roa Signing time: Sat 15 Mar 2025 00:00:06 +0000 ROA not before: Sat 15 Mar 2025 00:00:06 +0000 ROA not after: Sat 19 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:94:5d:88:30:51:99:39:5a:ed:10:35:51:31:89:ce:9b:79:8a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 15 00:00:06 2025 GMT Not After : Apr 19 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:6b:f9:64:92:e6:4e:88:f4:77:ea:4a:4e: 21:dc:b1:45:94:ac:fb:05:ed:77:47:44:8a:3b:e5: 30:ef:4b:4c:59:08:4c:98:68:a1:2d:c7:12:2e:00: 8b:66:d0:84:4b:3f:cb:28:45:5d:b6:ac:ec:f2:b4: 36:5c:70:8e:32:65:9d:b5:19:01:98:f3:54:6d:a5: 4c:3a:89:7a:75:1a:7a:a5:62:e2:39:3c:a1:1a:37: 33:29:d0:a1:e5:52:f9:62:56:10:14:a7:2d:0d:d0: a9:95:43:2f:3e:73:08:79:1b:26:08:d3:17:92:25: 03:43:17:b1:09:54:be:65:8d:cf:79:29:78:3a:d6: 6b:49:ba:13:e8:c4:5a:ae:d0:8d:8f:3d:63:dd:8c: b6:91:59:b3:17:79:0b:eb:2f:48:d9:a6:00:10:91: a2:a6:be:a8:6f:eb:b7:93:68:5c:9a:ef:1d:9c:ab: e4:6c:1e:53:2d:5b:66:bc:19:43:98:20:2f:06:9b: 9a:f5:7f:0e:91:6e:a0:a9:39:1d:e0:96:b0:34:e1: f9:0c:ab:e8:ef:51:3e:5c:77:0c:d6:37:2e:c4:2e: e7:2f:11:31:12:2d:e2:f3:fe:28:02:b4:98:8c:11: 6f:f4:03:c7:b4:e6:32:52:ef:b1:8d:51:01:75:14: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FB:94:07:71:8F:6D:DB:C7:1B:76:0C:5D:56:4C:2B:4E:F7:88:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81f26a69-4419-444e-a58a-f1c88386085f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:8000::/40 Signature Algorithm: sha256WithRSAEncryption 05:cf:ad:6e:7d:f0:f6:1f:1c:e0:0c:b6:a6:79:5a:bd:87:91: 16:61:6b:01:d6:9e:2d:4c:91:97:1a:96:07:f4:f4:70:14:99: d4:15:77:58:76:0b:79:01:c7:28:7c:d9:97:43:c5:ba:af:b0: 26:51:ca:67:d3:cf:fb:7b:e3:06:6f:c9:80:c0:2e:fd:46:f3: 5d:69:d2:3e:36:77:6b:d4:06:e0:70:ee:9a:95:86:95:56:dc: 25:25:7c:18:90:dd:d8:85:b3:d2:ed:08:6a:cb:f7:e8:d9:a4: a7:77:a3:0d:78:61:73:d7:59:0a:d8:9b:0d:6d:b4:2b:ff:11: b4:6c:e6:f5:11:c6:02:22:d9:c6:16:3d:f7:4b:35:c7:a1:08: db:6c:a3:ac:70:91:06:0b:e6:41:a9:fe:f0:61:f4:fd:86:b8: 13:d4:62:1e:e6:b0:b5:6a:bd:50:e8:a3:89:9c:2d:b8:cd:fa: 49:90:ed:5c:ed:69:14:25:35:18:fa:8a:84:9d:cd:09:02:e4: e5:8d:09:9e:c5:83:67:24:8f:ce:93:1b:32:ed:e8:d1:96:5c: 99:d0:61:e0:f5:6a:5c:38:d7:fc:1d:f4:56:d8:80:19:aa:b2: 2f:52:e7:e0:b3:88:8d:40:cc:c8:9f:77:94:6a:8a:83:89:2a: 89:33:f5:99 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFpRdiDBRmTla7RA1UTGJzpt5ipUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMxNTAwMDAwNloX DTI1MDQxOTIzNTk1OVowejFJMEcGA1UEBRNAYjllMzg1NWRmZGU0MTllMTliZjZi Mzc5ZjhhMDM2NmI1ZTk1ZmI2MWI2ZWE1YTgxZWQ3NjJkZDA1NjNlYzJkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ndr+WSS5k6I9HfqSk4h3LFFlKz7 Be13R0SKO+Uw70tMWQhMmGihLccSLgCLZtCESz/LKEVdtqzs8rQ2XHCOMmWdtRkB mPNUbaVMOol6dRp6pWLiOTyhGjczKdCh5VL5YlYQFKctDdCplUMvPnMIeRsmCNMX kiUDQxexCVS+ZY3PeSl4OtZrSboT6MRartCNjz1j3Yy2kVmzF3kL6y9I2aYAEJGi pr6ob+u3k2hcmu8dnKvkbB5TLVtmvBlDmCAvBpua9X8OkW6gqTkd4JawNOH5DKvo 71E+XHcM1jcuxC7nLxExEi3i8/4oArSYjBFv9APHtOYyUu+xjVEBdRTYNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJv7lAdxj23bxxt2DF1WTCtO94jWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxZjI2YTY5LTQ0MTktNDQ0ZS1hNThhLWYxYzg4Mzg2MDg1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMoAwDQYJKoZIhvcNAQELBQADggEBAAXPrW598PYfHOAMtqZ5 Wr2HkRZhawHWni1MkZcalgf09HAUmdQVd1h2C3kBxyh82ZdDxbqvsCZRymfTz/t7 4wZvyYDALv1G811p0j42d2vUBuBw7pqVhpVW3CUlfBiQ3diFs9LtCGrL9+jZpKd3 ow14YXPXWQrYmw1ttCv/EbRs5vURxgIi2cYWPfdLNcehCNtso6xwkQYL5kGp/vBh 9P2GuBPUYh7msLVqvVDoo4mcLbjN+kmQ7VztaRQlNRj6ioSdzQkC5OWNCZ7Fg2ck j86TGzLt6NGWXJnQYeD1alw41/wd9FbYgBmqsi9S5+CziI1AzMifd5RqioOJKokz 9Zk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:12 2025 by rpki-client