$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: 0gYwz1KX7AGG1zKXzgLMlM3FLLoOjZ7HKhbRv5vsBt8= Subject key identifier: 19:E8:3B:41:EA:DF:6D:D9:03:32:1E:E0:7D:63:EE:7D:5E:25:97:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42D01AF7632A7502EF73AEB3606207551F6FAAE8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Tue 25 Mar 2025 16:10:52 +0000 ROA not before: Tue 25 Mar 2025 16:10:52 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d0:1a:f7:63:2a:75:02:ef:73:ae:b3:60:62:07:55:1f:6f:aa:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 25 16:10:52 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:fc:dc:23:08:b5:26:58:15:ba:a1:ad:17: d3:cc:fc:96:6e:05:1c:f3:85:b1:93:25:65:97:4e: 61:29:33:a8:1b:a3:e3:2b:ef:2c:09:99:7b:f2:50: b5:26:9f:eb:04:97:01:3a:79:34:72:80:02:2b:ce: 96:e1:ee:3f:78:dc:f6:be:f1:4a:7d:5c:43:ae:f4: b0:a6:31:10:e7:7e:d2:5f:0e:50:73:65:69:cb:96: 83:16:4b:f8:46:b1:19:a1:26:d8:3c:7c:da:8a:69: 2d:fc:9c:1f:2b:7b:f1:e6:10:fd:d3:0f:59:a4:5d: d4:b9:6f:30:f0:33:28:a4:87:81:74:40:d1:06:ef: cc:22:e5:b0:56:22:95:c0:62:98:e8:b5:01:87:d0: ec:c4:b2:50:ec:77:7f:92:3c:b8:a9:d8:a7:d6:85: da:05:f5:02:b0:5d:13:62:aa:49:9f:8f:e5:70:ed: 76:07:90:13:0d:c2:9c:48:74:1c:2b:4b:5d:22:64: 23:34:72:8c:58:7f:ad:d0:4d:2c:0f:58:db:e6:7a: 90:a1:f3:c7:13:4a:bb:17:b3:1e:80:f7:db:f1:78: 20:57:0e:7f:d0:dd:08:a9:a0:19:cc:ca:64:a4:79: a8:eb:4e:88:4e:c5:30:21:d8:30:79:31:46:b9:0c: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E8:3B:41:EA:DF:6D:D9:03:32:1E:E0:7D:63:EE:7D:5E:25:97:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption 23:a8:b3:4f:79:3b:1f:89:7e:33:b6:f1:49:40:e6:b6:0a:2f: 63:c1:62:aa:d8:c3:0d:40:59:5e:66:18:bb:e8:65:c0:a0:bd: ee:56:a7:7a:66:89:01:cd:1e:45:e0:4e:d4:ca:4a:97:e8:1c: f8:cb:64:37:f6:2a:04:bf:53:12:6f:4f:a9:f1:41:8f:0a:4c: a3:7d:ba:23:e3:11:1e:32:d9:e2:27:6e:f7:9e:e9:d4:a2:56: 88:d9:c4:26:70:0f:e2:bb:42:a5:45:4a:52:dc:b7:ed:3b:3f: c8:04:ca:62:07:bd:30:31:c2:33:e0:23:4f:bc:eb:7e:e3:bb: 1f:2e:c1:80:71:e1:53:a9:fe:31:dc:12:22:48:90:c3:35:d9: 35:c2:6e:f7:fe:ff:22:93:99:81:79:5a:f1:79:6c:8f:8c:06: 9e:3c:db:43:fc:bf:d4:0d:09:4c:fb:c1:19:b3:28:8f:86:27: 27:a7:12:ed:2c:a0:76:86:af:96:c3:d6:29:bb:9b:19:f8:4c: 71:80:e8:20:4e:18:37:8c:2f:e5:f3:36:5a:50:f5:68:74:f2: 8f:27:57:55:74:f8:0a:f2:97:34:3a:64:dc:e4:55:c3:1d:66: 5e:1a:ea:c7:f4:b6:80:d0:c6:ce:8f:c0:ba:02:40:a8:75:27: a7:c8:50:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQtAa92MqdQLvc66zYGIHVR9vqugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTA1MloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjQwYzcxNjQzMzFhYzk0MjYwMDNj Y2M1NTZiYWFlZWM2YTc4NWMxMjNiMDgzZDNiMWUxM2ZjZjRlNDMzMjZjYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwz83CMItSZYFbqhrRfTzPyWbgUc 84WxkyVll05hKTOoG6PjK+8sCZl78lC1Jp/rBJcBOnk0coACK86W4e4/eNz2vvFK fVxDrvSwpjEQ537SXw5Qc2Vpy5aDFkv4RrEZoSbYPHzaimkt/JwfK3vx5hD90w9Z pF3UuW8w8DMopIeBdEDRBu/MIuWwViKVwGKY6LUBh9DsxLJQ7Hd/kjy4qdin1oXa BfUCsF0TYqpJn4/lcO12B5ATDcKcSHQcK0tdImQjNHKMWH+t0E0sD1jb5nqQofPH E0q7F7MegPfb8XggVw5/0N0IqaAZzMpkpHmo606ITsUwIdgweTFGuQw7ywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBnoO0Hq323ZAzIe4H1j7n1eJZe5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBACOos095Ox+JfjO28UlA 5rYKL2PBYqrYww1AWV5mGLvoZcCgve5Wp3pmiQHNHkXgTtTKSpfoHPjLZDf2KgS/ UxJvT6nxQY8KTKN9uiPjER4y2eInbvee6dSiVojZxCZwD+K7QqVFSlLct+07P8gE ymIHvTAxwjPgI0+8637jux8uwYBx4VOp/jHcEiJIkMM12TXCbvf+/yKTmYF5WvF5 bI+MBp4820P8v9QNCUz7wRmzKI+GJyenEu0soHaGr5bD1im7mxn4THGA6CBOGDeM L+XzNlpQ9Wh08o8nV1V0+ArylzQ6ZNzkVcMdZl4a6sf0toDQxs6PwLoCQKh1J6fI UE0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:43 2025 by rpki-client