$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d3756cb-3d90-4f28-96d5-2e8b14556142.roa File: 2d3756cb-3d90-4f28-96d5-2e8b14556142.roa (raw, json) Hash identifier: m6FoQKKlwsegCPmr5EOoWlyHBHOfzEAcitdPOJiBS1c= Subject key identifier: FE:C2:9A:E8:8C:85:4C:EE:66:64:C1:0E:DC:DB:25:DD:E2:A0:9B:7F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6658EAD8BD7F199842D08D6CA48A4338CCEBAC67 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d3756cb-3d90-4f28-96d5-2e8b14556142.roa Signing time: Mon 24 Mar 2025 15:21:45 +0000 ROA not before: Mon 24 Mar 2025 15:21:45 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:40e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:58:ea:d8:bd:7f:19:98:42:d0:8d:6c:a4:8a:43:38:cc:eb:ac:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:21:45 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=dbb8b49bdca8257e2a44d4c7c18d471458507763edf817d61e32056b5385e1a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:11:9d:d2:ba:ca:90:24:28:dd:b5:3e:79:f8: 51:a9:01:86:8a:c2:bc:d9:f2:a0:60:fe:89:d4:b1: 82:92:b9:a6:75:10:40:c8:4f:53:ed:2e:55:39:c9: 59:85:cb:a4:49:4e:f7:cb:d4:d7:1d:2a:81:7f:32: 85:6a:91:90:cd:c8:29:e9:e3:f1:b9:4f:7d:26:0f: db:f9:ea:12:ed:8d:94:29:7a:be:49:93:58:ce:92: 6f:95:e7:dd:67:08:c9:d5:ac:de:f8:e4:38:60:50: 47:bd:0b:9c:b9:66:a9:af:0b:56:10:d9:24:15:63: 30:c1:4f:3e:41:aa:0d:b9:c3:fc:5d:50:af:84:53: 0d:0d:cb:aa:7c:73:4b:ba:1a:50:f5:bd:19:c9:8b: 3e:15:13:c9:0e:aa:8b:3e:0f:71:9e:b6:70:33:2e: 51:33:ee:f0:a9:70:a2:2b:a4:11:29:be:69:56:5a: dd:22:9e:2f:eb:5d:62:05:c1:6a:e4:49:5d:38:00: e1:26:71:0e:7e:c6:2f:20:55:66:5f:ed:38:3b:2d: e4:f3:7c:2f:0c:08:dc:6d:83:80:2b:46:4a:94:5e: 5a:f8:28:f9:54:d0:49:44:93:1c:0d:d7:94:e3:86: 60:bf:a0:a4:18:4f:71:57:58:4c:96:ff:c5:56:37: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:9A:E8:8C:85:4C:EE:66:64:C1:0E:DC:DB:25:DD:E2:A0:9B:7F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d3756cb-3d90-4f28-96d5-2e8b14556142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:40e0::/48 Signature Algorithm: sha256WithRSAEncryption ba:c2:2e:f8:a3:2e:31:09:b6:62:21:43:cb:8c:b4:05:d2:c3: 86:74:a4:8a:07:5d:ed:83:0c:d6:cd:07:6b:b0:ae:2c:4c:4b: 68:b4:bf:30:7d:e9:58:25:f3:42:89:7e:bc:6b:23:94:c4:3e: 83:b6:63:e0:db:5e:65:a7:fa:4e:48:47:e3:30:3d:5a:9f:ed: 07:e8:d5:e8:0b:c2:bf:3a:81:38:cc:82:7b:8d:48:49:e4:0d: 21:62:d8:ab:f3:e2:6a:c2:49:82:8c:ac:6d:75:d0:c6:be:fc: 6e:0a:0d:5c:ff:fb:d5:5d:94:96:b9:b3:43:7f:22:c2:77:dd: f1:44:41:0e:27:7d:51:f9:9e:ae:7b:98:e6:a2:3f:2f:71:f6: 0e:85:bb:ee:5a:8a:c7:d5:dc:40:d6:48:54:25:17:60:5c:bb: 3c:45:4f:59:62:73:19:b1:f7:76:b7:eb:83:13:fa:fc:01:29: 66:f4:f0:49:87:80:98:70:32:a8:c7:ec:02:09:21:e7:34:85: a3:4a:11:94:1b:66:a5:e8:a8:b1:dd:ba:52:37:fb:6f:be:49: ce:c7:08:ba:a5:03:bd:c7:af:e0:5d:f4:56:28:f6:2c:c7:86: 0b:60:89:22:33:63:e0:00:51:cb:9c:7a:fa:9b:99:ec:fa:40: 6d:08:55:9e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZljq2L1/GZhC0I1spIpDOMzrrGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MjE0NVoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAZGJiOGI0OWJkY2E4MjU3ZTJhNDRk NGM3YzE4ZDQ3MTQ1ODUwNzc2M2VkZjgxN2Q2MWUzMjA1NmI1Mzg1ZTFhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BGd0rrKkCQo3bU+efhRqQGGisK8 2fKgYP6J1LGCkrmmdRBAyE9T7S5VOclZhcukSU73y9TXHSqBfzKFapGQzcgp6ePx uU99Jg/b+eoS7Y2UKXq+SZNYzpJvlefdZwjJ1aze+OQ4YFBHvQucuWaprwtWENkk FWMwwU8+QaoNucP8XVCvhFMNDcuqfHNLuhpQ9b0ZyYs+FRPJDqqLPg9xnrZwMy5R M+7wqXCiK6QRKb5pVlrdIp4v611iBcFq5EldOADhJnEOfsYvIFVmX+04Oy3k83wv DAjcbYOAK0ZKlF5a+Cj5VNBJRJMcDdeU44Zgv6CkGE9xV1hMlv/FVjemaQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP7CmuiMhUzuZmTBDtzbJd3ioJt/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkMzc1NmNiLTNkOTAtNGYyOC05NmQ1LTJlOGIxNDU1NjE0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0DgMA0GCSqGSIb3DQEBCwUAA4IBAQC6wi74oy4xCbZiIUPL jLQF0sOGdKSKB13tgwzWzQdrsK4sTEtotL8wfelYJfNCiX68ayOUxD6DtmPg215l p/pOSEfjMD1an+0H6NXoC8K/OoE4zIJ7jUhJ5A0hYtir8+JqwkmCjKxtddDGvvxu Cg1c//vVXZSWubNDfyLCd93xREEOJ31R+Z6ue5jmoj8vcfYOhbvuWorH1dxA1khU JRdgXLs8RU9ZYnMZsfd2t+uDE/r8ASlm9PBJh4CYcDKox+wCCSHnNIWjShGUG2al 6Kix3bpSN/tvvknOxwi6pQO9x6/gXfRWKPYsx4YLYIkiM2PgAFHLnHr6m5ns+kBt CFWe -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:37 2025 by rpki-client