$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa File: 91d6523c-4ab1-4850-a8cf-025e394ee348.roa (raw, json) Hash identifier: heZkULwz9IQYKOGFr/TSGI8m+BavL4HNLZsZvv/cYWA= Subject key identifier: CE:3C:06:3E:90:80:2C:7F:A2:F8:DE:88:CB:2D:D7:6F:F4:CF:E6:02 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F17B59684F81A33674AE7D139990BBF37EBE4C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa Signing time: Fri 21 Mar 2025 00:01:30 +0000 ROA not before: Fri 21 Mar 2025 00:01:30 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:17:b5:96:84:f8:1a:33:67:4a:e7:d1:39:99:0b:bf:37:eb:e4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:01:30 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:48:6c:bf:8e:4f:bf:3f:bb:26:8d:79:d0: 47:f7:d9:b2:95:05:15:78:93:0a:57:49:3c:e2:57: e7:01:12:4d:ec:7b:db:03:3e:b7:11:da:55:63:17: d8:58:06:1c:3a:bc:db:f5:f2:19:a4:cb:12:8d:cf: 03:84:cd:db:9c:7f:b6:29:5e:a0:ad:5d:ab:45:7a: b6:01:0e:b7:ae:b7:9d:cd:a0:fa:80:57:bd:9e:45: 27:2b:03:50:a7:4c:d5:ba:96:62:08:a4:ca:46:11: 82:95:10:f4:30:d0:52:52:46:bc:dc:69:8a:27:51: 4b:a4:32:fb:71:70:fd:37:b3:62:9f:f1:0b:f3:1d: 61:1f:16:fc:c2:f8:99:80:36:4d:9d:61:55:ff:ad: 60:15:77:50:12:f1:1f:10:15:76:a6:4b:f8:dd:13: 5a:ef:20:6d:68:27:d8:d0:dc:56:8e:9c:48:69:0d: 9c:de:d1:dd:9e:ba:a3:60:a9:a6:44:f9:c2:d6:66: 43:64:50:e1:cb:8c:50:06:d6:c9:d5:dd:33:25:6b: 70:d3:71:15:d0:d1:39:21:ee:5a:1c:a8:20:4a:b7: 02:24:a7:88:8c:3a:fc:fe:eb:cd:c1:4e:fb:87:be: 57:56:38:1d:94:7a:0b:50:01:95:08:9c:d3:0a:8d: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:06:3E:90:80:2C:7F:A2:F8:DE:88:CB:2D:D7:6F:F4:CF:E6:02 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:6000::/40 Signature Algorithm: sha256WithRSAEncryption 85:cb:3d:85:31:92:70:15:17:21:be:3c:c2:f7:1f:a5:34:6e: 99:c3:4d:ee:fb:97:8b:c2:ed:ab:35:53:18:ae:4b:75:f1:73: 1c:45:c6:39:c0:8c:69:b4:67:1b:65:3a:6e:e6:77:43:72:c0: fc:0d:8e:8d:44:a8:3d:f5:d6:78:0f:16:29:77:da:f4:bd:7d: 74:89:62:8a:76:e9:be:a4:58:0c:a2:34:7a:db:81:1f:32:e1: d7:db:03:01:48:da:d1:ce:dd:04:bd:4f:0b:65:95:5e:8e:68: ff:6c:76:83:a8:bd:f0:14:e7:85:d0:dc:b5:8c:09:7d:1b:c5: 5c:ea:bf:e6:9f:c5:ec:e6:d3:ec:ec:c9:d3:00:ca:33:f6:36: ab:ff:ac:65:7d:09:59:0a:9b:4a:50:04:af:ac:85:90:69:f8: 6f:71:fb:8e:c3:25:d8:fc:67:5e:90:4e:ad:0d:74:9d:91:a5: b0:3f:a8:4a:ca:94:99:c0:e2:a7:71:04:a0:b8:10:3b:70:fa: 82:70:9b:0a:f1:f9:74:3b:6f:84:77:db:ff:30:18:f7:13:24: 56:ee:65:fe:c6:ec:fb:b5:86:34:78:63:e9:e0:5d:00:2f:d2: 52:c3:1d:4d:0b:56:94:d5:40:b8:ea:4d:39:5b:33:a5:b5:29: 42:2e:1c:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXxe1loT4GjNnSufROZkLvzfr5MUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDEzMFoX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAZDZjNGQ1ZjU0ZjM1MzllMDI3YzA0 YTE4ZWY4ODc2N2E2OTliMmFiY2U4Y2Q5NDA0NmI2ZWUxMzcxZGU1YjEwYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyelIbL+OT78/uyaNedBH99mylQUV eJMKV0k84lfnARJN7HvbAz63EdpVYxfYWAYcOrzb9fIZpMsSjc8DhM3bnH+2KV6g rV2rRXq2AQ63rredzaD6gFe9nkUnKwNQp0zVupZiCKTKRhGClRD0MNBSUka83GmK J1FLpDL7cXD9N7Nin/EL8x1hHxb8wviZgDZNnWFV/61gFXdQEvEfEBV2pkv43RNa 7yBtaCfY0NxWjpxIaQ2c3tHdnrqjYKmmRPnC1mZDZFDhy4xQBtbJ1d0zJWtw03EV 0NE5Ie5aHKggSrcCJKeIjDr8/uvNwU77h75XVjgdlHoLUAGVCJzTCo2GQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM48Bj6QgCx/ovjeiMst12/0z+YCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxZDY1MjNjLTRhYjEtNDg1MC1hOGNmLTAyNWUzOTRlZTM0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYGAwDQYJKoZIhvcNAQELBQADggEBAIXLPYUxknAVFyG+PML3 H6U0bpnDTe77l4vC7as1UxiuS3XxcxxFxjnAjGm0ZxtlOm7md0NywPwNjo1EqD31 1ngPFil32vS9fXSJYop26b6kWAyiNHrbgR8y4dfbAwFI2tHO3QS9TwtllV6OaP9s doOovfAU54XQ3LWMCX0bxVzqv+afxezm0+zsydMAyjP2Nqv/rGV9CVkKm0pQBK+s hZBp+G9x+47DJdj8Z16QTq0NdJ2RpbA/qErKlJnA4qdxBKC4EDtw+oJwmwrx+XQ7 b4R32/8wGPcTJFbuZf7G7Pu1hjR4Y+ngXQAv0lLDHU0LVpTVQLjqTTlbM6W1KUIu HN4= -----END CERTIFICATE-----Generated at Fri Apr 4 23:26:50 2025 by rpki-client