$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa File: 3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa (raw, json) Hash identifier: uTy3LKwRKaL2EBH58tSzRQAE99/aWD/KbUAvh2HCWWQ= Subject key identifier: 2A:55:AE:C6:68:D1:6F:02:6F:96:4C:1B:BE:8D:DA:4C:15:A0:26:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05C5540297ED028930BCBD09E6B6352F6DFFD72D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa Signing time: Tue 25 Mar 2025 00:50:53 +0000 ROA not before: Tue 25 Mar 2025 00:50:53 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c5:54:02:97:ed:02:89:30:bc:bd:09:e6:b6:35:2f:6d:ff:d7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:50:53 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ac5ac24b430bef8c9b5522949d6de9b4a531fa261f2a6f841d4e23704fbff460, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:34:44:2a:d3:a1:4b:a5:cd:ea:6d:eb:4a: ad:aa:4a:e6:40:fb:c6:ab:21:b4:92:39:c7:e3:6d: 7a:da:26:54:33:93:ef:c0:5f:64:ff:06:a1:d6:9e: a8:98:24:b7:38:e4:92:b6:68:98:bd:8a:02:90:e0: dc:7d:0b:54:07:5f:63:81:b0:9a:6c:33:b7:94:6f: 3d:9c:9a:95:63:cd:13:ab:a3:18:3b:54:8f:ca:ca: 6c:5d:84:59:3b:22:58:0c:62:88:f0:a1:0d:5c:cc: 9c:69:62:c6:00:5c:ce:18:07:0a:e0:17:e3:ec:0d: 12:25:ef:33:9b:73:11:07:95:f2:17:9c:f4:ef:0a: 75:96:af:da:f9:38:e2:15:59:9f:6b:72:2e:71:a2: 74:c2:b2:50:28:5f:6a:c2:87:64:ec:32:1a:f6:1b: f3:a4:fd:27:8d:a8:98:b2:2d:cb:a3:83:0c:fa:25: 87:26:30:fa:1b:1c:c6:b0:40:40:52:a7:1f:7d:a1: 31:2f:66:87:5f:c4:4e:4c:bb:6a:68:4b:c6:e1:54: 24:62:cd:6c:d5:c8:75:84:a4:1c:cb:49:03:e2:f4: f4:1b:26:11:88:8d:76:dc:bb:b8:9a:f1:49:44:41: be:27:fa:18:34:20:4a:8b:d5:88:d0:f2:4e:db:22: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:55:AE:C6:68:D1:6F:02:6F:96:4C:1B:BE:8D:DA:4C:15:A0:26:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c880::/48 Signature Algorithm: sha256WithRSAEncryption 82:e5:25:df:f6:e0:0b:56:ef:9e:b5:41:01:1f:93:b8:be:49: e6:7b:1a:57:fd:c1:56:05:1f:d3:72:f2:54:89:df:30:e1:3e: 78:01:a9:5f:d3:86:a2:49:db:8d:70:01:e1:03:58:48:1d:12: f6:2a:fd:44:c7:c9:d6:d8:68:99:90:91:ba:76:4f:81:b3:c0: 5d:1f:e9:84:aa:4b:99:0d:7e:24:58:d4:1c:96:80:82:2a:20: de:3a:fd:6f:90:21:90:67:51:06:86:8c:a7:49:17:14:88:e0: c9:a6:a8:1c:a3:80:fe:15:80:67:65:9c:af:29:65:e6:87:e4: 58:a7:d8:e2:90:ef:b1:b2:b9:c4:ed:f0:8c:87:7b:8c:27:22: 20:31:20:1f:bc:6c:22:07:7b:54:c8:e0:d9:a0:6b:72:62:ef: 2d:7e:83:fd:4a:ac:cd:8a:b6:1a:c8:d5:1f:ea:a7:d6:c9:89: 42:73:f8:88:ea:2b:4c:72:e3:91:6a:21:48:6d:21:6d:48:88: 10:95:51:a8:af:a5:57:cf:d4:c7:67:5a:8f:89:2d:56:ff:ab: 67:f2:cb:e8:96:8c:23:41:fa:31:22:bd:99:21:b3:3a:72:3c: a5:8b:c8:ae:84:76:50:29:eb:6b:08:11:7a:9d:4b:31:5b:cb: 83:2c:35:ab -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBcVUApftAokwvL0J5rY1L23/1y0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTA1M1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYWM1YWMyNGI0MzBiZWY4YzliNTUy Mjk0OWQ2ZGU5YjRhNTMxZmEyNjFmMmE2Zjg0MWQ0ZTIzNzA0ZmJmZjQ2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sc0RCrToUulzept60qtqkrmQPvG qyG0kjnH42162iZUM5PvwF9k/wah1p6omCS3OOSStmiYvYoCkODcfQtUB19jgbCa bDO3lG89nJqVY80Tq6MYO1SPyspsXYRZOyJYDGKI8KENXMycaWLGAFzOGAcK4Bfj 7A0SJe8zm3MRB5XyF5z07wp1lq/a+TjiFVmfa3IucaJ0wrJQKF9qwodk7DIa9hvz pP0njaiYsi3Lo4MM+iWHJjD6GxzGsEBAUqcffaExL2aHX8ROTLtqaEvG4VQkYs1s 1ch1hKQcy0kD4vT0GyYRiI123Lu4mvFJREG+J/oYNCBKi9WI0PJO2yJKSQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCpVrsZo0W8Cb5ZMG76N2kwVoCaCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhNmYwMWYxLWJjNWItNDczZC1hMTJmLTdmMGZmZWQ1ZjRmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8siAMA0GCSqGSIb3DQEBCwUAA4IBAQCC5SXf9uALVu+etUEB H5O4vknmexpX/cFWBR/TcvJUid8w4T54Aalf04aiSduNcAHhA1hIHRL2Kv1Ex8nW 2GiZkJG6dk+Bs8BdH+mEqkuZDX4kWNQcloCCKiDeOv1vkCGQZ1EGhoynSRcUiODJ pqgco4D+FYBnZZyvKWXmh+RYp9jikO+xsrnE7fCMh3uMJyIgMSAfvGwiB3tUyODZ oGtyYu8tfoP9SqzNirYayNUf6qfWyYlCc/iI6itMcuORaiFIbSFtSIgQlVGor6VX z9THZ1qPiS1W/6tn8svolowjQfoxIr2ZIbM6cjyli8iuhHZQKetrCBF6nUsxW8uD LDWr -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:51 2025 by rpki-client