$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa File: 124c546b-d995-4fdf-978d-19217a16b0c7.roa (raw, json) Hash identifier: y/gmZR+4NnWbf71qm0eXQ4ZwRC2+sm9v9+FelHqo03Y= Subject key identifier: FB:56:8E:39:77:52:9A:E4:F3:E2:3B:E2:24:44:DB:28:CF:09:28:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FA2AED53B5D032D11628B612C7643F007A0460E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa Signing time: Mon 21 Apr 2025 16:51:12 +0000 ROA not before: Mon 21 Apr 2025 16:51:12 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a2:ae:d5:3b:5d:03:2d:11:62:8b:61:2c:76:43:f0:07:a0:46:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:51:12 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=282fa37633bb5865df8e94b557b7297489303172cbca376b850b9d989228b80f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:0e:35:97:9e:2a:bb:b5:fa:6f:8b:79:95: 31:26:7a:ba:6c:05:5b:dc:ce:40:54:bb:04:c8:c2: 5d:9a:df:b3:db:12:b9:dd:3c:6b:2c:fc:31:e3:d0: 03:78:5e:43:8a:0e:01:54:78:07:c2:4e:70:eb:a0: 13:52:01:e3:cc:2b:d8:9d:9b:81:d2:a7:25:f9:cc: 30:77:7c:02:19:cd:c1:4a:a4:8d:6c:90:ba:cc:78: 20:a7:75:78:26:34:3b:88:8b:ab:10:c9:ed:50:e6: d6:8f:d1:fc:a4:19:44:2e:b4:8c:e7:9c:b6:c0:1d: 70:e0:01:82:6c:69:e4:c2:46:03:b5:2b:8a:ee:8f: 9b:9f:06:55:c3:ea:cc:04:ca:3c:b7:cf:c2:76:10: fe:40:21:81:68:32:dd:dd:ed:15:e5:f6:93:71:bc: b7:98:9c:6a:4a:dd:2c:9c:ad:26:35:01:5d:50:51: 5d:86:5c:79:d6:0e:c3:7f:67:08:ad:14:3f:ef:a1: b1:60:6d:99:a9:3d:dc:b8:23:2e:08:17:cc:5e:10: dd:00:06:04:46:25:1b:85:aa:04:e1:01:dc:70:7c: 63:e1:2e:38:3f:63:23:d6:9d:3f:13:6f:8c:29:c0: a7:b6:b5:73:53:f7:60:d9:c5:dc:2e:5c:18:32:41: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:8E:39:77:52:9A:E4:F3:E2:3B:E2:24:44:DB:28:CF:09:28:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/38 Signature Algorithm: sha256WithRSAEncryption 2a:81:e1:cc:af:6f:54:41:69:2d:7e:06:e1:04:95:59:30:b4: c0:d3:58:79:7c:cf:52:75:c5:5a:ab:95:d6:f6:bd:2c:58:e7: ca:c4:bc:15:d1:56:57:76:8c:b6:bc:8c:78:79:8a:ef:d8:20: 93:e9:f8:07:67:05:2b:d9:37:2d:08:37:a0:23:09:f2:88:33: ae:46:20:0d:ff:8a:b7:7d:ed:b8:e9:4b:da:eb:9e:93:3e:12: fb:9a:55:19:64:99:15:13:6c:42:e1:28:10:ee:f8:d8:75:85: 55:32:71:41:04:ea:77:f9:e7:f0:90:aa:2c:10:33:43:30:2d: 2f:66:be:22:61:ac:24:08:93:89:3e:e4:1f:0e:20:58:c4:85: 01:e9:c3:29:fe:2b:3a:7b:14:c0:83:4c:2c:62:d6:29:ca:b7: 3a:5b:ca:d7:f8:9b:f7:5e:23:2b:75:df:2d:16:0d:f1:b0:41: 99:c6:26:bf:cf:0d:95:fd:64:af:20:45:6f:6c:4f:ac:4c:d4: 44:12:70:f2:c6:db:4e:e0:fd:7a:bf:81:f6:05:58:8b:9e:e0: 95:20:1d:17:76:b2:8d:ee:b5:5d:51:a4:fb:1d:1e:d9:69:ba: f4:d9:4c:85:36:e7:30:2e:f2:02:38:a3:96:87:67:13:8a:ad: ad:9c:a6:ce -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT6Ku1TtdAy0RYothLHZD8AegRg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NTExMloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMjgyZmEzNzYzM2JiNTg2NWRmOGU5 NGI1NTdiNzI5NzQ4OTMwMzE3MmNiY2EzNzZiODUwYjlkOTg5MjI4YjgwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkwONZeeKru1+m+LeZUxJnq6bAVb 3M5AVLsEyMJdmt+z2xK53TxrLPwx49ADeF5Dig4BVHgHwk5w66ATUgHjzCvYnZuB 0qcl+cwwd3wCGc3BSqSNbJC6zHggp3V4JjQ7iIurEMntUObWj9H8pBlELrSM55y2 wB1w4AGCbGnkwkYDtSuK7o+bnwZVw+rMBMo8t8/CdhD+QCGBaDLd3e0V5faTcby3 mJxqSt0snK0mNQFdUFFdhlx51g7Df2cIrRQ/76GxYG2ZqT3cuCMuCBfMXhDdAAYE RiUbhaoE4QHccHxj4S44P2Mj1p0/E2+MKcCntrVzU/dg2cXcLlwYMkG3WQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPtWjjl3Uprk8+I74iRE2yjPCSjJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyNGM1NDZiLWQ5OTUtNGZkZi05NzhkLTE5MjE3YTE2YjBjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIAwDQYJKoZIhvcNAQELBQADggEBACqB4cyvb1RBaS1+BuEE lVkwtMDTWHl8z1J1xVqrldb2vSxY58rEvBXRVld2jLa8jHh5iu/YIJPp+AdnBSvZ Ny0IN6AjCfKIM65GIA3/ird97bjpS9rrnpM+EvuaVRlkmRUTbELhKBDu+Nh1hVUy cUEE6nf55/CQqiwQM0MwLS9mviJhrCQIk4k+5B8OIFjEhQHpwyn+Kzp7FMCDTCxi 1inKtzpbytf4m/deIyt13y0WDfGwQZnGJr/PDZX9ZK8gRW9sT6xM1EQScPLG207g /Xq/gfYFWIue4JUgHRd2so3utV1RpPsdHtlpuvTZTIU25zAu8gI4o5aHZxOKra2c ps4= -----END CERTIFICATE-----Generated at Sat Apr 26 07:29:23 2025 by rpki-client