$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa File: ab84696e-cfeb-4324-b2ed-e1db1e409253.roa (raw, json) Hash identifier: NCvYRvkRrD/oYwyy1gs7z3mNpzlL6T1H1vRMmwDGK50= Subject key identifier: 10:AB:F5:77:9E:4E:D4:71:EA:1A:65:39:16:E3:AE:35:4F:5B:62:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D4F37D0B9A8A24AA657258E2F6B797BFF874D38 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa Signing time: Mon 21 Apr 2025 15:41:18 +0000 ROA not before: Mon 21 Apr 2025 15:41:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4f:37:d0:b9:a8:a2:4a:a6:57:25:8e:2f:6b:79:7b:ff:87:4d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=701efeb16c8b3e5804748f0a12a32aece0bf6ae8a4ba84337b89cf8ebfd7fd3e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:9a:75:54:61:d9:61:31:60:83:dd:0b:ca: d0:35:0d:06:db:9a:97:68:61:cb:b4:67:f7:c7:65: 2e:50:a8:50:3e:b5:8a:0d:bb:4a:9e:85:5b:df:a1: 48:0f:74:dd:bd:f6:62:7e:05:6f:35:57:17:2d:c2: be:f0:c8:1e:33:55:74:81:18:c8:e7:ea:7c:99:56: 9d:17:5b:6b:6b:de:90:37:52:03:40:59:ee:e0:21: 2d:c8:32:f2:73:10:a8:f2:a8:49:38:f5:43:80:06: cd:4c:5c:6c:b1:c2:02:6b:2d:52:da:6c:3e:fb:98: e9:00:b4:15:ba:99:ff:e8:5c:ff:b1:53:5c:23:72: 4d:cb:50:3b:27:6d:da:ee:7d:a0:31:08:e8:2f:65: c1:37:7e:04:31:0c:9b:3a:41:00:72:7d:d4:34:23: 73:0c:f6:2c:62:99:29:8a:72:10:b0:b8:b0:5a:97: 59:6f:59:50:8e:37:52:64:51:c0:70:01:4c:5c:f4: 6c:eb:51:5e:89:7f:55:a4:ab:a1:cf:aa:50:33:d7: e4:69:9a:86:79:64:30:0e:5f:b9:7a:1e:79:5e:35: 3d:08:ef:40:61:4c:7c:5d:43:80:1d:a8:15:9e:6b: dd:92:6b:06:fe:b9:79:86:0c:23:da:40:7c:96:1b: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:F5:77:9E:4E:D4:71:EA:1A:65:39:16:E3:AE:35:4F:5B:62:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 96:58:8c:e9:7d:45:d0:2f:7d:6a:24:aa:2b:8a:41:5b:c5:64: d9:b9:a0:ce:67:3b:02:d3:ba:54:4f:b1:a1:b3:86:e5:b4:83: 22:ef:78:da:dc:55:7d:e3:a0:88:10:34:f8:50:b0:b8:33:d1: 68:1f:50:b6:6e:34:fb:33:9e:85:df:63:09:75:0c:5d:83:96: 17:79:cd:ca:86:15:93:65:46:e8:70:f2:c0:47:4f:e0:db:5e: b8:77:b4:fe:89:43:6c:19:c3:50:ba:49:83:05:28:2e:6d:7d: ea:2d:80:1b:b9:c2:a9:c6:1e:a0:05:71:2b:f2:64:ac:3e:e9: 62:d7:a9:75:d2:0a:31:85:4f:94:88:ec:aa:2f:7f:5f:a6:c3: c6:45:e8:e8:bc:3b:fa:f9:33:62:ce:be:9b:04:a1:4a:17:85: ec:98:71:11:96:85:06:82:b5:48:1a:fb:03:bc:d5:f6:99:cf: 78:62:40:0a:b1:12:d9:ba:f9:90:c3:a4:5f:f1:d5:ba:43:e1: c1:77:b6:de:1b:0a:8e:76:16:07:dc:6a:dc:22:f2:9d:b3:4e: d5:88:41:a2:39:12:4b:92:fb:2b:48:b7:98:05:55:68:ff:a1: bc:b6:d1:b8:ae:bc:0f:e2:09:4f:1f:b9:32:5a:93:46:be:5b: c8:00:34:71 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDU830LmookqmVyWOL2t5e/+HTTgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDExOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANzAxZWZlYjE2YzhiM2U1ODA0NzQ4 ZjBhMTJhMzJhZWNlMGJmNmFlOGE0YmE4NDMzN2I4OWNmOGViZmQ3ZmQzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTOadVRh2WExYIPdC8rQNQ0G25qX aGHLtGf3x2UuUKhQPrWKDbtKnoVb36FID3TdvfZifgVvNVcXLcK+8MgeM1V0gRjI 5+p8mVadF1tra96QN1IDQFnu4CEtyDLycxCo8qhJOPVDgAbNTFxsscICay1S2mw+ +5jpALQVupn/6Fz/sVNcI3JNy1A7J23a7n2gMQjoL2XBN34EMQybOkEAcn3UNCNz DPYsYpkpinIQsLiwWpdZb1lQjjdSZFHAcAFMXPRs61FeiX9VpKuhz6pQM9fkaZqG eWQwDl+5eh55XjU9CO9AYUx8XUOAHagVnmvdkmsG/rl5hgwj2kB8lhtQPwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBCr9XeeTtRx6hplORbjrjVPW2IIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiODQ2OTZlLWNmZWItNDMyNC1iMmVkLWUxZGIxZTQwOTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+8DAMA0GCSqGSIb3DQEBCwUAA4IBAQCWWIzpfUXQL31qJKor ikFbxWTZuaDOZzsC07pUT7Ghs4bltIMi73ja3FV946CIEDT4ULC4M9FoH1C2bjT7 M56F32MJdQxdg5YXec3KhhWTZUbocPLAR0/g2164d7T+iUNsGcNQukmDBSgubX3q LYAbucKpxh6gBXEr8mSsPuli16l10goxhU+UiOyqL39fpsPGRejovDv6+TNizr6b BKFKF4XsmHERloUGgrVIGvsDvNX2mc94YkAKsRLZuvmQw6Rf8dW6Q+HBd7beGwqO dhYH3GrcIvKds07ViEGiORJLkvsrSLeYBVVo/6G8ttG4rrwP4glPH7kyWpNGvlvI ADRx -----END CERTIFICATE-----Generated at Sat Apr 26 07:34:37 2025 by rpki-client