$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa File: 544e7031-781b-4e29-9730-b21cc2781435.roa (raw, json) Hash identifier: 1Z9gZtmGZH+/vYBcknCwEeZ8VtlhZdyVTTW05rzdSqw= Subject key identifier: D0:CB:87:3D:C5:A5:71:46:1F:D0:02:17:A7:01:C4:C8:50:F6:45:4E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 327A865830EEA64C919660F69D7BF73D05273DAE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa Signing time: Fri 25 Apr 2025 00:00:44 +0000 ROA not before: Fri 25 Apr 2025 00:00:44 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7a:86:58:30:ee:a6:4c:91:96:60:f6:9d:7b:f7:3d:05:27:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 25 00:00:44 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=3df65bb451f0b360eb7dc013f5c8141b63a5c59867a9d2d6251fb601f79be7a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:60:bb:cd:2f:b3:2b:97:cb:a8:06:b0:bd: 27:78:a9:30:6f:7e:d0:57:ca:ab:86:19:71:66:77: 46:6d:ae:6a:32:01:a7:f8:a0:78:21:63:af:5f:bf: ab:2c:82:77:bd:52:30:52:3f:7b:9d:70:63:bb:78: 50:77:aa:77:e2:4d:93:39:7d:4d:0f:ad:46:80:43: 5d:01:c6:45:2e:e9:f6:e5:06:29:7c:c9:37:9a:6b: 63:b2:ed:7f:79:56:bf:93:4c:7e:d8:d7:d9:b7:47: a7:ec:d6:e6:94:25:71:eb:7d:53:c6:f8:be:ba:c5: 8d:eb:ca:78:8c:58:a2:2b:24:2f:e4:74:bb:ac:0f: e1:61:c6:3a:02:c7:d7:ca:54:c6:c3:18:01:39:7c: 41:68:dc:d5:36:b3:a7:1e:eb:42:c1:1b:16:21:bf: 0d:dc:68:46:6d:ee:a0:0e:0c:43:e5:2d:23:1a:21: 6e:aa:45:8b:1b:7a:66:f0:ca:01:99:e1:1b:68:37: 61:19:75:8d:19:7a:fb:69:27:13:40:4f:ca:c5:43: 7f:7d:5a:ae:70:ee:86:8f:a3:5e:5e:be:23:b3:c7: 7a:e9:97:fb:3c:db:6b:5b:75:3d:a8:95:92:e1:d5: 8b:bf:90:d2:c9:a5:57:6f:00:04:cb:f2:db:c5:89: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CB:87:3D:C5:A5:71:46:1F:D0:02:17:A7:01:C4:C8:50:F6:45:4E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:a000::/40 Signature Algorithm: sha256WithRSAEncryption b0:3b:63:62:6a:1a:e2:c8:ba:47:ff:38:ef:c7:51:87:07:e1: 77:d4:de:59:a3:0e:3e:8b:e2:20:19:8d:b5:73:c6:58:8d:62: f0:75:32:a8:69:ad:ed:0a:e2:19:27:08:e3:20:1a:e2:05:6f: 46:d5:dc:0d:f7:fb:9a:0b:bb:ed:85:fa:88:0d:f8:cb:4e:c6: bc:97:dc:2d:f5:0c:cb:d1:83:f2:63:34:aa:26:4c:39:d2:e5: dd:47:12:c0:97:d5:eb:04:7c:d9:e2:fa:87:a9:56:02:23:73: d8:10:a0:e7:23:cf:e3:38:62:b5:12:8f:9d:90:fb:20:a4:9f: ee:26:69:88:4e:0d:c2:ca:70:3a:6f:a4:95:60:ef:04:a5:29: 34:ca:9d:f4:31:e8:4f:1a:b6:aa:b0:75:ef:7c:75:a8:ad:33: da:32:15:10:cb:22:0c:d2:77:c3:15:56:e1:ce:2c:74:85:e9: 4d:0e:99:02:a1:82:01:73:c5:46:6b:fd:a4:7a:a7:60:5b:f8: d3:b2:5c:3c:e5:b0:93:d8:2f:68:2e:38:99:6c:6b:63:dc:1b: 49:5f:29:6d:cd:bf:84:3f:7b:22:aa:14:8b:53:d0:2a:e3:f3: e9:54:f0:71:d7:f5:40:43:db:56:d7:b8:63:ed:24:02:ad:d9: 7e:8c:68:44 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMnqGWDDupkyRlmD2nXv3PQUnPa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyNTAwMDA0NFoX DTI1MDUzMDIzNTk1OVowejFJMEcGA1UEBRNAM2RmNjViYjQ1MWYwYjM2MGViN2Rj MDEzZjVjODE0MWI2M2E1YzU5ODY3YTlkMmQ2MjUxZmI2MDFmNzliZTdhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRJgu80vsyuXy6gGsL0neKkwb37Q V8qrhhlxZndGba5qMgGn+KB4IWOvX7+rLIJ3vVIwUj97nXBju3hQd6p34k2TOX1N D61GgENdAcZFLun25QYpfMk3mmtjsu1/eVa/k0x+2NfZt0en7NbmlCVx631Txvi+ usWN68p4jFiiKyQv5HS7rA/hYcY6AsfXylTGwxgBOXxBaNzVNrOnHutCwRsWIb8N 3GhGbe6gDgxD5S0jGiFuqkWLG3pm8MoBmeEbaDdhGXWNGXr7aScTQE/KxUN/fVqu cO6Gj6NeXr4js8d66Zf7PNtrW3U9qJWS4dWLv5DSyaVXbwAEy/LbxYlj0wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNDLhz3FpXFGH9ACF6cBxMhQ9kVOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0NGU3MDMxLTc4MWItNGUyOS05NzMwLWIyMWNjMjc4MTQzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNqAwDQYJKoZIhvcNAQELBQADggEBALA7Y2JqGuLIukf/OO/H UYcH4XfU3lmjDj6L4iAZjbVzxliNYvB1Mqhpre0K4hknCOMgGuIFb0bV3A33+5oL u+2F+ogN+MtOxryX3C31DMvRg/JjNKomTDnS5d1HEsCX1esEfNni+oepVgIjc9gQ oOcjz+M4YrUSj52Q+yCkn+4maYhODcLKcDpvpJVg7wSlKTTKnfQx6E8atqqwde98 daitM9oyFRDLIgzSd8MVVuHOLHSF6U0OmQKhggFzxUZr/aR6p2Bb+NOyXDzlsJPY L2guOJlsa2PcG0lfKW3Nv4Q/eyKqFItT0Crj8+lU8HHX9UBD21bXuGPtJAKt2X6M aEQ= -----END CERTIFICATE-----Generated at Sat Apr 26 07:42:04 2025 by rpki-client