$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa File: 564bcbed-0561-4889-868c-6cfcb0ba50ec.roa (raw, json) Hash identifier: 7P4kNtWP5I/i1G13USIW93qEmu9qXwIngNeGOODrYuY= Subject key identifier: 57:FA:0B:B1:40:31:62:BD:45:F1:2B:DD:6C:22:16:21:DC:15:A1:1C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 035F9C206F11EB389834DDC872A715DCEB05D7D4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa Signing time: Mon 21 Apr 2025 16:41:01 +0000 ROA not before: Mon 21 Apr 2025 16:41:01 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5f:9c:20:6f:11:eb:38:98:34:dd:c8:72:a7:15:dc:eb:05:d7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:41:01 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=2b588f994f85389ca52989bdd2874f20a199ef4d7be59e7eabf0da8ba54a56f2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:5e:6c:29:a3:76:24:39:a3:43:3b:4a:8b: e8:4c:11:78:96:9d:67:fe:b1:07:12:c1:51:96:1c: 50:c6:78:83:e5:09:8a:cf:a9:7e:22:fd:75:c6:06: 50:08:2c:80:f0:04:d3:d3:f7:35:99:9a:25:75:a3: f7:71:c8:3a:87:c3:1c:b6:e4:61:aa:40:ff:98:50: 9c:48:58:a3:b1:f2:5a:9d:23:86:63:02:38:2c:58: 7a:ed:2d:67:b8:fc:cb:27:22:eb:15:f5:48:ee:af: 76:34:00:0f:b6:ba:18:0a:f5:44:c5:19:0b:3f:9b: 42:81:d1:57:cd:e0:cb:22:0c:10:3d:6d:e7:0d:ef: 85:28:da:c5:5d:07:d2:c2:6a:bd:44:65:aa:2d:b6: 90:83:2c:f0:83:d0:10:83:7a:d8:b7:5f:14:1f:54: 11:b0:f7:ce:c1:70:dc:bd:bc:c6:fa:02:e5:4b:75: 19:f3:7e:19:f2:d8:df:a7:34:60:f8:9c:a9:be:84: e2:c5:96:03:ff:6e:f5:6f:e4:0a:9d:b7:67:e6:92: de:f0:b7:1e:2a:fc:80:94:89:4b:9d:0d:05:a4:e8: 0a:a4:46:ac:c1:0a:7d:25:c8:9a:45:74:0b:89:c2: 06:10:8f:7f:23:c8:d2:b7:4e:b2:2b:c2:fe:45:1e: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FA:0B:B1:40:31:62:BD:45:F1:2B:DD:6C:22:16:21:DC:15:A1:1C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8c00::/38 Signature Algorithm: sha256WithRSAEncryption 82:c9:b5:e7:4e:a2:3d:8b:c2:be:2f:c6:a4:a9:cb:99:ca:27: 8e:b3:b7:9c:6b:d9:40:a9:4b:a0:04:4e:98:df:d7:47:16:76: bb:47:24:26:be:37:a1:12:89:6f:53:bf:ea:37:27:34:86:26: fa:a1:e1:17:8f:e5:b8:2d:c8:13:ef:8e:92:43:b4:a6:93:3f: 0f:3c:33:03:57:a3:99:78:a7:88:b0:66:a2:bb:5b:dc:40:1b: e7:e2:1e:53:a2:66:44:c5:6a:a2:15:70:ea:59:fa:5d:3c:81: 43:41:c0:5d:10:47:f0:f4:a0:8f:69:42:85:d8:c0:27:02:6f: 7b:23:37:16:49:33:0e:d7:66:ed:7e:9e:01:c8:39:9d:b8:9e: ad:4b:5b:96:85:ad:29:c5:78:bf:42:6d:a9:27:3f:cd:8e:cf: eb:e9:7f:cf:97:dc:ae:c1:a0:6b:a6:cb:f5:5d:0f:ca:fe:0a: 8c:37:95:24:f7:5d:ee:e2:89:65:b4:e4:6d:fb:3b:36:15:eb: 28:6c:a3:23:27:9d:ef:df:4b:27:7e:b2:d7:54:1a:8d:24:ee: c6:6f:8f:b8:9c:83:1d:fd:96:ae:0d:9f:4b:81:52:d2:8d:1d: 92:ea:b6:99:db:34:90:c1:d5:96:15:fe:49:96:b6:c8:87:c1: 39:2d:fb:18 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA1+cIG8R6ziYNN3IcqcV3OsF19QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NDEwMVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMmI1ODhmOTk0Zjg1Mzg5Y2E1Mjk4 OWJkZDI4NzRmMjBhMTk5ZWY0ZDdiZTU5ZTdlYWJmMGRhOGJhNTRhNTZmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5xebCmjdiQ5o0M7SovoTBF4lp1n /rEHEsFRlhxQxniD5QmKz6l+Iv11xgZQCCyA8ATT0/c1mZoldaP3ccg6h8MctuRh qkD/mFCcSFijsfJanSOGYwI4LFh67S1nuPzLJyLrFfVI7q92NAAPtroYCvVExRkL P5tCgdFXzeDLIgwQPW3nDe+FKNrFXQfSwmq9RGWqLbaQgyzwg9AQg3rYt18UH1QR sPfOwXDcvbzG+gLlS3UZ834Z8tjfpzRg+JypvoTixZYD/271b+QKnbdn5pLe8Lce KvyAlIlLnQ0FpOgKpEaswQp9JciaRXQLicIGEI9/I8jSt06yK8L+RR7l4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFf6C7FAMWK9RfEr3WwiFiHcFaEcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2NGJjYmVkLTA1NjEtNDg4OS04NjhjLTZjZmNiMGJhNTBlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEowwDQYJKoZIhvcNAQELBQADggEBAILJtedOoj2Lwr4vxqSp y5nKJ46zt5xr2UCpS6AETpjf10cWdrtHJCa+N6ESiW9Tv+o3JzSGJvqh4ReP5bgt yBPvjpJDtKaTPw88MwNXo5l4p4iwZqK7W9xAG+fiHlOiZkTFaqIVcOpZ+l08gUNB wF0QR/D0oI9pQoXYwCcCb3sjNxZJMw7XZu1+ngHIOZ24nq1LW5aFrSnFeL9Cbakn P82Oz+vpf8+X3K7BoGumy/VdD8r+Cow3lST3Xe7iiWW05G37OzYV6yhsoyMnne/f Syd+stdUGo0k7sZvj7icgx39lq4Nn0uBUtKNHZLqtpnbNJDB1ZYV/kmWtsiHwTkt +xg= -----END CERTIFICATE-----Generated at Sat Apr 26 07:35:17 2025 by rpki-client