$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa File: 5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa (raw, json) Hash identifier: WoIcdpOxUfQJ0r04O2h4gGaaGAgnXPt/1O+G+0cdXXg= Subject key identifier: 04:96:13:76:2D:0A:17:85:37:75:C5:24:A2:87:5B:B0:57:E6:03:61 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73717CD17A243693753D40C2838A360B8C0DD493 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa Signing time: Mon 21 Apr 2025 15:30:34 +0000 ROA not before: Mon 21 Apr 2025 15:30:34 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:71:7c:d1:7a:24:36:93:75:3d:40:c2:83:8a:36:0b:8c:0d:d4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:30:34 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=af9bb579d81de1257e40b418facad54e58bc2beeb31d127642300f0f98a91d7f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:d8:70:c7:97:6c:7e:70:e4:3e:7c:83:6f: 40:d9:c1:df:30:41:81:9b:b2:8c:e4:85:83:10:d1: c8:b0:12:b2:fe:2a:3a:5e:f5:0a:16:f8:98:6c:31: a0:93:7c:fc:3e:2d:9f:ca:c5:8d:e2:0c:db:03:1b: 30:0f:76:e7:2e:fb:ff:c6:f2:79:dc:36:7b:cc:5b: df:26:c8:4c:54:69:81:aa:75:82:6a:e3:36:8c:bf: 89:35:43:5e:16:6e:dd:06:8e:c3:41:8e:31:72:81: fe:e2:70:bb:c5:77:b9:98:b0:d4:00:94:2c:fb:6a: 31:96:b1:ab:f8:89:e5:31:11:d2:e6:de:0c:c5:7c: dc:74:e6:34:48:1c:b6:7f:77:10:a2:07:53:60:2f: c1:0a:4d:7a:26:bb:20:cd:41:6b:30:df:88:a0:a9: ec:95:7f:32:c2:ec:f8:77:18:d2:fb:b0:c6:19:1e: 42:64:a6:e2:2e:e1:c9:c9:62:20:8f:79:98:7f:bb: 4b:f4:24:3c:5b:58:c5:37:2b:e7:10:fa:fb:90:cd: 8d:8f:f9:98:c2:98:a2:b6:c7:84:73:c4:e8:b5:3c: 3b:05:47:c1:28:d3:b2:ef:93:0e:95:95:ce:b8:95: 27:89:a0:82:4f:4a:7d:e2:a8:f9:ce:d8:58:64:c1: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:96:13:76:2D:0A:17:85:37:75:C5:24:A2:87:5B:B0:57:E6:03:61 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:9000::/40 Signature Algorithm: sha256WithRSAEncryption 77:83:fc:7f:b6:6a:fc:89:a2:53:17:32:09:15:92:fd:2b:50: b0:20:f9:bf:c1:5f:ad:c1:fa:7e:26:73:51:df:3d:2d:b8:2b: ee:69:09:5d:6a:0a:b5:9d:7a:2f:e5:ee:80:34:37:a5:28:3a: 9f:49:44:8e:fc:2e:a1:3f:1d:e0:2e:d6:f8:0e:66:91:71:3f: c6:c2:2d:25:e1:05:94:b9:80:fb:44:0a:7b:98:7d:f9:1a:91: 87:4d:e1:3b:4d:98:a9:f2:6a:83:87:00:0d:43:59:80:95:16: 12:b2:28:aa:e3:dd:f8:11:22:20:e9:a1:d6:e6:bf:1d:94:55: 17:6c:e2:76:1c:d7:16:d3:2e:ef:c9:2e:5d:0d:fa:68:6f:89: 9f:2c:17:93:b5:39:23:87:c0:61:08:6b:60:b2:a9:88:a1:e8: cd:ca:9e:1e:a3:4c:6c:dd:85:e6:aa:86:22:2b:87:42:47:cc: 04:fe:71:15:36:ac:82:e3:47:84:d9:01:95:24:f1:b2:41:d9: ef:0d:70:ea:52:11:a5:64:50:a8:16:89:46:0a:01:9d:42:9e: 64:51:18:aa:fb:1c:b9:5a:08:c7:20:64:01:9f:18:c0:bc:96: 1a:f9:9b:0a:aa:9b:de:15:fd:71:17:40:98:88:3a:bf:a7:fd: 8f:ef:6c:42 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc3F80XokNpN1PUDCg4o2C4wN1JMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzAzNFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWY5YmI1NzlkODFkZTEyNTdlNDBi NDE4ZmFjYWQ1NGU1OGJjMmJlZWIzMWQxMjc2NDIzMDBmMGY5OGE5MWQ3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXLYcMeXbH5w5D58g29A2cHfMEGB m7KM5IWDENHIsBKy/io6XvUKFviYbDGgk3z8Pi2fysWN4gzbAxswD3bnLvv/xvJ5 3DZ7zFvfJshMVGmBqnWCauM2jL+JNUNeFm7dBo7DQY4xcoH+4nC7xXe5mLDUAJQs +2oxlrGr+InlMRHS5t4MxXzcdOY0SBy2f3cQogdTYC/BCk16JrsgzUFrMN+IoKns lX8ywuz4dxjS+7DGGR5CZKbiLuHJyWIgj3mYf7tL9CQ8W1jFNyvnEPr7kM2Nj/mY wpiitseEc8TotTw7BUfBKNOy75MOlZXOuJUniaCCT0p94qj5zthYZMHrDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFASWE3YtCheFN3XFJKKHW7BX5gNhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViMzZkNzQ3LWMzYmUtNDBiYi04YWUwLWEzNDRhNGVlNmY1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+5AwDQYJKoZIhvcNAQELBQADggEBAHeD/H+2avyJolMXMgkV kv0rULAg+b/BX63B+n4mc1HfPS24K+5pCV1qCrWdei/l7oA0N6UoOp9JRI78LqE/ HeAu1vgOZpFxP8bCLSXhBZS5gPtECnuYffkakYdN4TtNmKnyaoOHAA1DWYCVFhKy KKrj3fgRIiDpodbmvx2UVRds4nYc1xbTLu/JLl0N+mhviZ8sF5O1OSOHwGEIa2Cy qYih6M3Knh6jTGzdheaqhiIrh0JHzAT+cRU2rILjR4TZAZUk8bJB2e8NcOpSEaVk UKgWiUYKAZ1CnmRRGKr7HLlaCMcgZAGfGMC8lhr5mwqqm94V/XEXQJiIOr+n/Y/v bEI= -----END CERTIFICATE-----Generated at Sat Apr 26 07:33:43 2025 by rpki-client