$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa File: 1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa (raw, json) Hash identifier: 7GASQYR48hCzzqAr7kZPj7UyGmv+dTxAJoe5gIFQ0rA= Subject key identifier: BC:13:4D:B2:54:36:2F:A2:E3:F4:B5:7C:8C:F6:AC:FA:4B:FD:6C:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52A0DB6C9C48A67FB952F444A65136D38D0DBE45 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa Signing time: Tue 25 Mar 2025 16:01:27 +0000 ROA not before: Tue 25 Mar 2025 16:01:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:b080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a0:db:6c:9c:48:a6:7f:b9:52:f4:44:a6:51:36:d3:8d:0d:be:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1acf439f9980e7b84f6489955b5826fc260acf5188143dd31f4dec623a516196, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:82:77:4b:52:fa:a1:c1:7d:2a:30:7a:77:e5: cc:30:5a:de:68:13:49:e5:8d:aa:4f:80:ee:d4:90: c0:17:b3:ba:6a:89:d7:35:7e:30:bc:3e:f6:1e:b5: ce:fc:8e:32:48:73:4f:f1:71:e7:d2:57:21:ab:6c: 04:21:69:5d:d3:8f:c6:af:bd:3f:9b:aa:00:45:e5: 71:7a:b8:f8:e0:88:bb:f8:8b:b7:6c:38:86:73:15: eb:43:50:13:44:36:47:4c:3b:d2:0c:1c:65:a1:24: 30:7e:5c:2c:d5:f5:58:63:32:4a:36:ef:16:57:70: 16:fb:c1:70:8d:e2:fe:74:42:f3:62:6b:b6:9b:5e: fd:7f:c9:4c:05:d5:30:36:ea:3f:69:ef:8f:ff:87: f4:d7:66:18:5e:34:5e:12:81:2a:5d:89:ab:52:66: df:6f:07:8f:91:aa:6b:f3:bc:89:10:24:d1:c1:56: 39:73:34:49:6d:3e:72:f0:ab:de:ea:d8:3a:aa:1d: 99:5a:2e:c3:94:58:ec:02:4e:64:11:3a:bc:bd:e2: 3a:51:6c:a7:2d:5f:87:1a:f3:14:e2:a8:c9:a0:78: 43:91:ef:bb:f0:d5:76:25:90:56:0c:5f:12:72:86: dc:67:6c:c8:96:54:ad:26:dd:1e:3a:0a:a4:85:6c: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:13:4D:B2:54:36:2F:A2:E3:F4:B5:7C:8C:F6:AC:FA:4B:FD:6C:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:b080::/46 Signature Algorithm: sha256WithRSAEncryption 5c:da:19:21:32:52:3d:a5:a1:46:39:b4:fd:fc:32:9f:60:ba: ef:47:4b:9f:e1:08:a9:9b:e7:eb:57:72:25:b1:92:3a:37:cd: 1b:31:50:ac:2e:a0:17:cf:b9:b4:d8:02:cd:95:ba:43:ad:f3: 03:5e:0a:7a:eb:b4:35:df:50:37:80:9f:40:e9:c6:9a:c5:7e: 91:71:10:7c:7b:09:4b:df:c9:08:26:26:b2:65:1b:e1:f5:27: 26:c4:95:e1:c7:35:ec:97:75:79:99:3b:72:a6:dd:8d:cc:c5: 59:2d:07:3c:60:c3:08:cd:e9:8a:28:1d:5e:2d:0a:11:a9:53: 4f:d1:7a:93:cd:04:c1:0a:83:c5:d5:7f:52:b9:7d:37:be:d6: 7b:82:54:6d:de:ba:4d:45:8a:7b:82:b4:1d:27:da:02:0f:53: d2:4b:40:07:c8:98:a2:32:58:fe:7e:4a:e2:4b:7b:dd:a7:52: 0b:1a:e3:20:a0:89:3f:4b:cb:46:9c:ef:b0:ea:31:d8:7e:4e: 93:42:8b:2f:c1:da:1b:2b:25:9b:b0:57:d4:fc:05:91:71:0f: b0:33:1b:fd:99:84:97:df:a5:63:dc:c4:6e:28:4d:3d:09:b4: 0e:9d:24:34:82:e6:5c:f3:92:a4:e4:9d:2f:f7:66:52:47:b2: 13:dd:64:dc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUqDbbJxIpn+5UvREplE2040NvkUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDEyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWFjZjQzOWY5OTgwZTdiODRmNjQ4 OTk1NWI1ODI2ZmMyNjBhY2Y1MTg4MTQzZGQzMWY0ZGVjNjIzYTUxNjE5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oJ3S1L6ocF9KjB6d+XMMFreaBNJ 5Y2qT4Du1JDAF7O6aonXNX4wvD72HrXO/I4ySHNP8XHn0lchq2wEIWld04/Gr70/ m6oAReVxerj44Ii7+Iu3bDiGcxXrQ1ATRDZHTDvSDBxloSQwflws1fVYYzJKNu8W V3AW+8FwjeL+dELzYmu2m179f8lMBdUwNuo/ae+P/4f012YYXjReEoEqXYmrUmbf bwePkapr87yJECTRwVY5czRJbT5y8Kve6tg6qh2ZWi7DlFjsAk5kETq8veI6UWyn LV+HGvMU4qjJoHhDke+78NV2JZBWDF8ScobcZ2zIllStJt0eOgqkhWw6SwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLwTTbJUNi+i4/S1fIz2rPpL/WwiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiOTZmMWIzLTVjN2EtNDFhNi1hYzViLTExNjI4OWZlMTQzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+7CAMA0GCSqGSIb3DQEBCwUAA4IBAQBc2hkhMlI9paFGObT9 /DKfYLrvR0uf4Qipm+frV3IlsZI6N80bMVCsLqAXz7m02ALNlbpDrfMDXgp667Q1 31A3gJ9A6caaxX6RcRB8ewlL38kIJiayZRvh9ScmxJXhxzXsl3V5mTtypt2NzMVZ LQc8YMMIzemKKB1eLQoRqVNP0XqTzQTBCoPF1X9SuX03vtZ7glRt3rpNRYp7grQd J9oCD1PSS0AHyJiiMlj+fkriS3vdp1ILGuMgoIk/S8tGnO+w6jHYfk6TQosvwdob KyWbsFfU/AWRcQ+wMxv9mYSX36Vj3MRuKE09CbQOnSQ0guZc85Kk5J0v92ZSR7IT 3WTc -----END CERTIFICATE-----Generated at Thu Apr 17 18:09:26 2025 by rpki-client