$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28cdc7bf-56f0-4c40-a789-3c91448fb955.roa File: 28cdc7bf-56f0-4c40-a789-3c91448fb955.roa (raw, json) Hash identifier: b73YprVr8sNTgOzMF5Tb/2FRp2wxlj55py34zZCJ0tM= Subject key identifier: 14:85:3F:20:1B:15:6D:5A:69:0C:4F:0F:02:28:75:03:75:65:AA:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1076F168DBAD1793DE448E8626A35FBF738DEA2A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28cdc7bf-56f0-4c40-a789-3c91448fb955.roa Signing time: Mon 21 Apr 2025 15:00:18 +0000 ROA not before: Mon 21 Apr 2025 15:00:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:76:f1:68:db:ad:17:93:de:44:8e:86:26:a3:5f:bf:73:8d:ea:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:00:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=bb4f17d558072421f12671ee955041c58d940276f79a954478e0aa279df95b48, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:d4:3f:c7:11:1a:77:81:7f:eb:7b:f7:19: 80:cc:58:b7:88:86:db:ea:95:ea:e8:01:e1:6b:83: 18:a2:21:16:2b:a3:7e:e8:71:15:15:81:12:d3:5e: 2a:a1:35:8d:cd:63:c4:a7:e7:ac:71:71:3d:ab:e2: da:c1:52:20:36:27:50:fc:a7:42:a0:b8:ad:2e:ea: 8f:34:f4:42:6f:22:be:7f:26:30:71:4d:a1:f6:5f: 17:4f:53:1d:e0:57:2f:4a:0c:45:8c:19:9f:af:e0: 08:ed:82:5f:cf:c0:42:9f:09:2b:b0:83:df:ab:82: bc:90:dc:2c:9a:6b:c4:7f:1f:96:aa:c6:5d:aa:82: 29:24:59:69:00:90:16:f0:5e:cb:ed:19:5a:de:a3: 18:05:a5:c5:92:ee:81:89:8b:a5:de:f4:cf:be:6a: b5:15:31:9a:3b:3a:74:4c:83:ea:e1:a3:cc:99:34: 95:42:f0:27:53:4b:48:aa:8f:8a:ae:60:20:1c:ef: 09:89:73:44:d9:ef:a7:2b:43:86:a2:ad:48:e9:b9: 2c:c6:37:80:f6:1d:b6:0c:16:00:8f:79:6d:44:26: e9:18:b4:dd:4c:a5:09:6c:25:a7:e8:f2:c5:85:f2: 86:42:8a:aa:fb:39:02:90:e1:f0:c2:71:44:63:c9: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:85:3F:20:1B:15:6D:5A:69:0C:4F:0F:02:28:75:03:75:65:AA:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28cdc7bf-56f0-4c40-a789-3c91448fb955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4040::/48 Signature Algorithm: sha256WithRSAEncryption 26:fe:d8:85:31:f6:59:95:b2:90:35:3a:5b:5b:f6:ec:48:d6: 3b:35:2d:14:07:bf:5f:da:4c:b5:32:6d:4b:a8:76:8b:06:8a: 31:f1:5f:34:b9:d5:27:f8:50:97:43:c1:76:a1:46:a2:8e:d9: 91:5a:61:ce:4f:da:96:aa:a7:72:30:3f:78:39:37:da:33:36: f5:e6:30:c4:d7:e8:f1:a6:b6:f0:9c:72:10:c0:c6:28:65:43: 88:b6:1f:cd:e8:f7:c6:15:8f:a1:b8:fa:57:81:e3:7f:36:df: b9:e5:64:22:88:30:e4:57:b8:9d:41:0f:dd:09:5b:4b:7d:34: 09:c6:e5:dc:47:f2:0b:2c:8c:99:64:a4:e2:18:11:16:1b:e1: c7:27:d0:f4:ad:5f:e7:8f:11:0e:6e:2c:97:7b:89:a4:b8:b6: 08:fa:d0:99:07:49:bf:bd:74:f2:15:b4:72:ac:1a:72:0a:ea: 8a:50:8e:b1:ad:d8:b4:76:7e:96:2d:68:f1:6f:1c:aa:b0:1f: f6:e5:73:48:7c:83:38:aa:c9:89:83:d5:fc:59:f2:7b:6d:39: 91:0e:54:91:a2:ab:3f:34:b7:94:f0:a5:ea:68:75:5c:6f:9d: 2f:48:ac:ff:bd:ad:00:5f:40:50:57:6d:9b:ff:ab:ec:2c:3f: b7:b5:b3:46 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEHbxaNutF5PeRI6GJqNfv3ON6iowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDAxOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYmI0ZjE3ZDU1ODA3MjQyMWYxMjY3 MWVlOTU1MDQxYzU4ZDk0MDI3NmY3OWE5NTQ0NzhlMGFhMjc5ZGY5NWI0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR/UP8cRGneBf+t79xmAzFi3iIbb 6pXq6AHha4MYoiEWK6N+6HEVFYES014qoTWNzWPEp+escXE9q+LawVIgNidQ/KdC oLitLuqPNPRCbyK+fyYwcU2h9l8XT1Md4FcvSgxFjBmfr+AI7YJfz8BCnwkrsIPf q4K8kNwsmmvEfx+WqsZdqoIpJFlpAJAW8F7L7Rla3qMYBaXFku6BiYul3vTPvmq1 FTGaOzp0TIPq4aPMmTSVQvAnU0tIqo+KrmAgHO8JiXNE2e+nK0OGoq1I6bksxjeA 9h22DBYAj3ltRCbpGLTdTKUJbCWn6PLFhfKGQoqq+zkCkOHwwnFEY8n5TQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBSFPyAbFW1aaQxPDwIodQN1ZaokMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4Y2RjN2JmLTU2ZjAtNGM0MC1hNzg5LTNjOTE0NDhmYjk1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEBAMA0GCSqGSIb3DQEBCwUAA4IBAQAm/tiFMfZZlbKQNTpb W/bsSNY7NS0UB79f2ky1Mm1LqHaLBoox8V80udUn+FCXQ8F2oUaijtmRWmHOT9qW qqdyMD94OTfaMzb15jDE1+jxprbwnHIQwMYoZUOIth/N6PfGFY+huPpXgeN/Nt+5 5WQiiDDkV7idQQ/dCVtLfTQJxuXcR/ILLIyZZKTiGBEWG+HHJ9D0rV/njxEObiyX e4mkuLYI+tCZB0m/vXTyFbRyrBpyCuqKUI6xrdi0dn6WLWjxbxyqsB/25XNIfIM4 qsmJg9X8WfJ7bTmRDlSRoqs/NLeU8KXqaHVcb50vSKz/va0AX0BQV22b/6vsLD+3 tbNG -----END CERTIFICATE-----Generated at Sat Apr 26 07:37:43 2025 by rpki-client