$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa File: a198eb49-1497-483a-ae8b-bfc84a056462.roa (raw, json) Hash identifier: 8Eep5Mj6pK7Mztx/47jaB2wdNVXLOA7cM+fZGe47jVE= Subject key identifier: DA:D1:65:FE:6E:8F:F5:7A:E6:30:BC:0F:C3:0D:32:D2:04:FF:DB:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48C3040593AE857F55E4D975D018B2519FAFF8EA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa Signing time: Fri 21 Mar 2025 00:00:23 +0000 ROA not before: Fri 21 Mar 2025 00:00:23 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c3:04:05:93:ae:85:7f:55:e4:d9:75:d0:18:b2:51:9f:af:f8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:00:23 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:c8:e3:11:ab:f6:92:b5:1d:55:4c:93:16: fe:80:dc:b0:90:69:20:29:aa:60:f0:6c:32:49:99: 93:13:98:3c:0c:2f:3a:e9:5a:c4:48:69:35:3d:f1: 40:4a:5c:78:9f:1d:c5:a3:3a:d5:54:bb:c4:db:95: 10:29:cf:3d:8c:a7:3b:6e:a7:bd:c2:89:c6:8c:30: f3:39:0b:8a:ca:d7:9d:6d:46:4a:18:94:4b:f4:36: 00:76:5c:ef:0b:81:97:16:d4:be:ba:7e:ef:57:26: 1a:af:a5:5b:c4:7f:b9:a6:a6:68:05:9a:fc:75:51: 8b:95:f8:44:2d:e8:12:11:ac:41:a7:ad:1b:7e:b3: 89:0e:cd:38:9c:a4:d4:16:0d:de:29:b7:50:6b:ee: 23:71:09:cb:c1:85:89:ee:ba:ce:37:d8:79:6a:73: 10:ca:74:e2:0d:3c:ea:e3:14:8a:08:c2:eb:60:68: fa:df:9d:0a:f8:11:24:37:13:79:ec:7e:bb:ad:04: bb:4c:d8:fb:2f:22:d6:4d:70:33:23:7c:66:3f:7e: d8:bd:b6:8a:13:27:f8:57:7b:38:c4:7d:ba:f7:83: b8:cf:1c:77:03:01:7b:5c:a6:54:5d:8e:3e:67:c2: ae:c1:15:1a:b4:c9:85:d4:d5:e7:11:85:6d:28:74: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:65:FE:6E:8F:F5:7A:E6:30:BC:0F:C3:0D:32:D2:04:FF:DB:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c800::/40 Signature Algorithm: sha256WithRSAEncryption 91:cb:b3:b5:1f:c7:57:50:c5:78:f6:61:cb:b4:67:fd:87:51: ad:a9:a0:7e:2d:96:7d:51:97:4d:f9:c8:46:55:cf:db:9f:59: 51:90:d2:71:40:18:35:7f:a8:0e:e1:94:31:43:86:5d:ea:50: df:93:47:65:a3:bd:20:fe:24:54:16:50:fb:c3:c6:67:4d:c6: 1b:0d:97:f9:f6:f2:e7:dc:5f:0d:83:8c:37:6b:f7:bc:12:6c: 3f:da:fe:d1:07:9c:c7:b0:4e:c4:1a:a9:ab:c3:7b:1b:12:59: 92:9e:fb:0c:37:8d:f5:70:8f:cd:9c:61:72:bf:fd:39:b5:fc: c9:dd:b7:30:48:ee:17:09:41:6b:45:81:30:be:e5:55:45:fa: 35:71:1c:73:53:2d:31:fb:e1:fb:a6:3a:ad:89:e9:fa:d7:cf: 38:c0:ff:80:ee:3d:98:84:33:ff:08:40:77:02:75:1e:25:7c: 10:68:65:e7:dd:a8:3c:98:ea:83:ef:45:d1:15:e8:fc:1e:c5: 5d:76:d7:9f:a0:5a:6e:82:2f:06:b8:1e:69:87:19:bd:0a:e6: 9a:de:07:9d:1b:f2:97:14:54:da:ce:d9:85:29:75:a7:68:f8: 08:ac:e3:72:d8:77:c2:7d:cd:5b:8e:f0:6a:6a:8b:0c:84:79: 34:fc:7c:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSMMEBZOuhX9V5Nl10BiyUZ+v+OowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDAyM1oX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAYTI1Y2E1YjBmM2I2Y2UyMDc2ZDNm MDVmOTRlOTk1YmJlNmJiN2VjMzg2OGViZWNlNzMzYTQ4NjkxMmRlZGM3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTrI4xGr9pK1HVVMkxb+gNywkGkg Kapg8GwySZmTE5g8DC866VrESGk1PfFASlx4nx3FozrVVLvE25UQKc89jKc7bqe9 wonGjDDzOQuKytedbUZKGJRL9DYAdlzvC4GXFtS+un7vVyYar6VbxH+5pqZoBZr8 dVGLlfhELegSEaxBp60bfrOJDs04nKTUFg3eKbdQa+4jcQnLwYWJ7rrON9h5anMQ ynTiDTzq4xSKCMLrYGj6350K+BEkNxN57H67rQS7TNj7LyLWTXAzI3xmP37YvbaK Eyf4V3s4xH2694O4zxx3AwF7XKZUXY4+Z8KuwRUatMmF1NXnEYVtKHT9DQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNrRZf5uj/V65jC8D8MNMtIE/9uKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExOThlYjQ5LTE0OTctNDgzYS1hZThiLWJmYzg0YTA1NjQ2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMgwDQYJKoZIhvcNAQELBQADggEBAJHLs7Ufx1dQxXj2Ycu0 Z/2HUa2poH4tln1Rl035yEZVz9ufWVGQ0nFAGDV/qA7hlDFDhl3qUN+TR2WjvSD+ JFQWUPvDxmdNxhsNl/n28ufcXw2DjDdr97wSbD/a/tEHnMewTsQaqavDexsSWZKe +ww3jfVwj82cYXK//Tm1/MndtzBI7hcJQWtFgTC+5VVF+jVxHHNTLTH74fumOq2J 6frXzzjA/4DuPZiEM/8IQHcCdR4lfBBoZefdqDyY6oPvRdEV6PwexV1215+gWm6C Lwa4HmmHGb0K5preB50b8pcUVNrO2YUpdado+Ais43LYd8J9zVuO8GpqiwyEeTT8 fCM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:54 2025 by rpki-client