$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d4bf11-2541-434d-85c1-6b1e095e0eec.roa File: 01d4bf11-2541-434d-85c1-6b1e095e0eec.roa (raw, json) Hash identifier: tKZHJRqihitPiGnIzMEJIO+1yqZJw+ZFiIo182C8Kg4= Subject key identifier: 49:8F:F4:91:48:4D:69:9D:2F:82:4A:F1:66:0F:BB:2F:08:B1:42:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 753BF81FF125A3B870F1F5FA919C084FBC51177C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d4bf11-2541-434d-85c1-6b1e095e0eec.roa Signing time: Tue 25 Mar 2025 00:40:14 +0000 ROA not before: Tue 25 Mar 2025 00:40:14 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3b:f8:1f:f1:25:a3:b8:70:f1:f5:fa:91:9c:08:4f:bc:51:17:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:40:14 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=5b92af1e3830ded1986a9146fd80c90769094a5c7412ea23e43909fbee70fdcd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:03:9b:a0:2c:bc:77:62:57:ed:02:f6:de: 9d:77:29:26:17:3e:7f:cf:87:81:8f:4b:6c:a5:0d: 2a:99:80:7a:39:b8:24:d7:65:2f:15:fb:8d:68:de: dc:bc:7b:9b:94:25:bd:3f:ec:8f:02:b0:92:9c:53: 59:83:ca:7a:84:92:ba:97:ca:f7:33:98:53:ad:cf: 01:2e:c7:9f:a1:8c:ac:31:86:1a:21:f2:59:3c:9c: c6:42:70:4b:73:98:3b:4b:06:fe:94:f3:fb:4d:7b: fa:c3:74:d8:e3:b7:4b:fd:cc:c1:96:5d:46:67:da: 9b:8c:b1:96:fa:2f:be:8c:b1:35:98:76:aa:7b:6d: 6f:27:5d:04:54:7b:3e:86:4a:00:e1:3c:eb:c8:ea: f7:76:78:a4:12:2d:c4:29:49:5f:8d:1b:97:f4:77: 55:44:a4:14:04:8b:7f:ae:76:9e:02:9d:7a:84:5e: 58:d1:37:db:71:de:3a:72:f4:e7:11:61:e8:0e:0f: 40:ab:51:be:e5:6e:8f:00:a3:b2:ca:ee:27:66:2c: 8c:8a:69:a6:52:68:dc:91:40:64:39:42:7b:7e:44: 40:30:06:8c:f0:77:e7:a6:a4:53:bf:c1:b0:b9:e5: 20:47:98:18:03:bf:90:7f:df:fb:af:e0:05:31:38: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8F:F4:91:48:4D:69:9D:2F:82:4A:F1:66:0F:BB:2F:08:B1:42:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d4bf11-2541-434d-85c1-6b1e095e0eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8040::/48 Signature Algorithm: sha256WithRSAEncryption 4c:8f:3f:64:0c:3a:dd:75:4e:b2:d4:18:ad:54:15:c8:f0:19: 63:be:9a:60:84:90:f7:3a:98:c9:06:12:8e:61:5d:1f:84:3c: 0a:46:36:cc:5d:70:06:59:a9:2f:ab:5a:93:38:a7:20:84:35: 03:a4:f2:63:c9:a1:1e:ca:04:0b:56:1d:ef:dc:18:f5:72:ea: 9a:61:24:66:72:ed:38:61:63:85:f2:cb:01:f5:94:de:56:20: b1:e0:c8:53:82:36:e2:a8:e7:6e:4c:6c:eb:71:8f:db:16:e4: 65:9a:42:62:4b:31:8f:59:bc:21:69:dc:67:15:d0:2a:56:0e: 67:bd:f8:90:41:4a:42:bc:f4:83:f9:79:ac:34:30:35:6f:7a: b6:6e:12:44:72:c5:e2:44:28:2c:d5:b9:9c:42:00:19:d3:60: 5e:00:40:eb:be:57:53:17:2d:69:ed:21:5f:99:6e:30:38:24: 08:d0:cb:f0:43:a0:32:cf:e5:59:38:d1:8c:c2:63:b8:f8:b9: b7:65:67:96:e7:de:e2:c2:78:ab:7c:65:98:b8:bf:6f:59:cb: 46:6f:ea:45:53:02:94:71:dd:33:ab:8b:8c:cd:c3:cc:13:b2: eb:6c:a6:bd:84:d8:04:d2:40:49:02:5e:49:84:3c:67:95:fd: f6:03:7b:33 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdTv4H/Elo7hw8fX6kZwIT7xRF3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNDAxNFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANWI5MmFmMWUzODMwZGVkMTk4NmE5 MTQ2ZmQ4MGM5MDc2OTA5NGE1Yzc0MTJlYTIzZTQzOTA5ZmJlZTcwZmRjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJwDm6AsvHdiV+0C9t6ddykmFz5/ z4eBj0tspQ0qmYB6Obgk12UvFfuNaN7cvHublCW9P+yPArCSnFNZg8p6hJK6l8r3 M5hTrc8BLsefoYysMYYaIfJZPJzGQnBLc5g7Swb+lPP7TXv6w3TY47dL/czBll1G Z9qbjLGW+i++jLE1mHaqe21vJ10EVHs+hkoA4TzryOr3dnikEi3EKUlfjRuX9HdV RKQUBIt/rnaeAp16hF5Y0Tfbcd46cvTnEWHoDg9Aq1G+5W6PAKOyyu4nZiyMimmm UmjckUBkOUJ7fkRAMAaM8HfnpqRTv8GwueUgR5gYA7+Qf9/7r+AFMTgg0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEmP9JFITWmdL4JK8WYPuy8IsUIsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxZDRiZjExLTI1NDEtNDM0ZC04NWMxLTZiMWUwOTVlMGVlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4BAMA0GCSqGSIb3DQEBCwUAA4IBAQBMjz9kDDrddU6y1Bit VBXI8BljvppghJD3OpjJBhKOYV0fhDwKRjbMXXAGWakvq1qTOKcghDUDpPJjyaEe ygQLVh3v3Bj1cuqaYSRmcu04YWOF8ssB9ZTeViCx4MhTgjbiqOduTGzrcY/bFuRl mkJiSzGPWbwhadxnFdAqVg5nvfiQQUpCvPSD+XmsNDA1b3q2bhJEcsXiRCgs1bmc QgAZ02BeAEDrvldTFy1p7SFfmW4wOCQI0MvwQ6Ayz+VZONGMwmO4+Lm3ZWeW597i wnirfGWYuL9vWctGb+pFUwKUcd0zq4uMzcPME7LrbKa9hNgE0kBJAl5JhDxnlf32 A3sz -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:46 2025 by rpki-client