$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa File: bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa (raw, json) Hash identifier: 0Cn62ul4fNOEiLv3bv25Pk1/H7saSW0xBKHRyZv023s= Subject key identifier: DB:F5:4D:A7:F9:63:33:DD:B5:C2:A5:7B:8B:06:7D:11:26:30:4D:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45D64F3F59C90EE4A3F8DCE67AA391DA99D43A03 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa Signing time: Sat 29 Mar 2025 00:00:49 +0000 ROA not before: Sat 29 Mar 2025 00:00:49 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da13::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d6:4f:3f:59:c9:0e:e4:a3:f8:dc:e6:7a:a3:91:da:99:d4:3a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 29 00:00:49 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:fa:48:e1:2a:09:96:b0:f3:74:71:fe:13: 02:00:cb:a3:4b:39:38:2b:e8:50:90:a6:20:f4:8d: 60:c1:12:af:07:00:7f:69:fb:ea:c5:63:52:aa:d5: 2a:fb:48:8c:6b:cd:3c:31:db:12:70:66:79:c1:70: 3d:eb:55:5d:4a:36:d6:20:e3:56:71:c8:22:b7:1a: 01:33:cf:01:66:39:cb:23:60:8d:9f:32:5a:cd:7e: 81:e6:7b:c6:c6:b7:35:ac:46:2c:68:c0:4f:b2:04: 73:a2:ed:34:bb:34:b9:c3:95:37:c8:52:93:16:15: d3:27:4e:e1:05:d3:e7:20:cb:30:27:01:84:02:87: 6e:88:f7:52:6b:b6:9a:ae:7c:d6:4b:57:f3:3a:43: b4:dd:42:4e:b9:5e:9e:95:0d:37:96:97:4b:a8:df: ba:f4:b8:8c:5a:9b:da:c8:34:fe:69:b0:d9:91:ef: 37:33:4c:69:47:f1:70:b4:6d:ec:7b:a4:81:a8:88: f7:cc:0c:20:cb:7d:45:38:7d:56:b3:7e:35:4c:27: e8:7d:9d:cc:ba:e8:20:15:90:c1:b1:10:cc:4b:66: 7f:2d:ba:87:ee:21:e0:13:3d:d4:b9:06:1f:b1:5e: 2b:e6:e6:6e:d8:9b:cd:c8:d4:50:e5:70:77:b6:3f: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F5:4D:A7:F9:63:33:DD:B5:C2:A5:7B:8B:06:7D:11:26:30:4D:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da13::/36 Signature Algorithm: sha256WithRSAEncryption 2c:56:fc:b2:a2:8a:3f:62:2a:a8:2d:04:35:cd:ff:6b:9e:24: 0c:f7:c0:d8:a5:55:41:20:39:7d:d3:73:76:01:80:a2:28:01: 73:80:b9:e5:45:b6:45:92:dd:6c:05:d0:e8:81:eb:07:43:0d: 2d:f9:a9:60:f9:06:9f:31:60:95:7e:ad:03:8b:67:ce:a9:f0: 01:3c:35:ef:27:68:d7:23:b9:66:d4:4a:12:3c:17:ab:e3:b0: 32:b0:c4:cd:e4:09:99:2a:c6:e4:bf:c7:3d:3b:38:9f:83:b1: 17:48:8c:54:27:2b:3f:af:e2:ed:f7:89:70:13:66:01:6c:de: 6e:af:73:68:ee:d8:7f:01:bb:64:27:71:de:11:c8:a6:9d:b1: 8b:99:71:4e:03:48:5c:f1:89:f7:e6:ba:55:01:48:ae:0b:c8: 83:ab:e7:d4:57:09:3a:ef:7f:68:ac:50:03:6c:e8:e1:89:f4: 3b:33:d6:fe:92:72:56:6f:f6:4b:ee:fd:6d:a7:64:78:2b:8b: 59:a1:af:88:a2:ab:dc:a0:4c:d7:7d:49:16:3f:fe:da:73:69: f4:40:f0:57:ce:fa:60:31:ba:9d:94:86:66:d9:3c:bd:55:e2: 3f:98:2c:ba:a9:8c:ff:7a:d1:a8:e5:03:c3:2c:ce:9d:7c:ae: c9:22:d8:98 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURdZPP1nJDuSj+NzmeqOR2pnUOgMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyOTAwMDA0OVoX DTI1MDUwMzIzNTk1OVowejFJMEcGA1UEBRNANmM5YzE2ZDRlZDIyNDQzZWM2NDQ4 Mjk5ZDY1NjU3M2VmMTQ5Y2VjMjc4ZWYxYjE4YTg5YTFkZDcwMjAwNDk4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9n6SOEqCZaw83Rx/hMCAMujSzk4 K+hQkKYg9I1gwRKvBwB/afvqxWNSqtUq+0iMa808MdsScGZ5wXA961VdSjbWIONW ccgitxoBM88BZjnLI2CNnzJazX6B5nvGxrc1rEYsaMBPsgRzou00uzS5w5U3yFKT FhXTJ07hBdPnIMswJwGEAoduiPdSa7aarnzWS1fzOkO03UJOuV6elQ03lpdLqN+6 9LiMWpvayDT+abDZke83M0xpR/FwtG3se6SBqIj3zAwgy31FOH1Ws341TCfofZ3M uuggFZDBsRDMS2Z/LbqH7iHgEz3UuQYfsV4r5uZu2JvNyNRQ5XB3tj9A4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNv1Taf5YzPdtcKle4sGfREmME1mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmODEzMWU4LTNiMDctNGI1ZS05NDdkLWQ2ZWU0YzJlN2I1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEwAwDQYJKoZIhvcNAQELBQADggEBACxW/LKiij9iKqgtBDXN /2ueJAz3wNilVUEgOX3Tc3YBgKIoAXOAueVFtkWS3WwF0OiB6wdDDS35qWD5Bp8x YJV+rQOLZ86p8AE8Ne8naNcjuWbUShI8F6vjsDKwxM3kCZkqxuS/xz07OJ+DsRdI jFQnKz+v4u33iXATZgFs3m6vc2ju2H8Bu2Qncd4RyKadsYuZcU4DSFzxiffmulUB SK4LyIOr59RXCTrvf2isUANs6OGJ9Dsz1v6SclZv9kvu/W2nZHgri1mhr4iiq9yg TNd9SRY//tpzafRA8FfO+mAxup2UhmbZPL1V4j+YLLqpjP960ajlA8Mszp18rski 2Jg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:18 2025 by rpki-client