$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c135282-3228-4ddd-beca-26ac3dd348e8.roa File: 4c135282-3228-4ddd-beca-26ac3dd348e8.roa (raw, json) Hash identifier: efTHtFGm1vINk4xnMRywciLawzKo1vlt80E4cOt84Us= Subject key identifier: EF:F9:BE:E0:64:81:54:4B:C5:B0:4C:06:23:79:91:E3:BB:6B:3E:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17F9D83F0D61B3648A914CA15602CCC3933E0945 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c135282-3228-4ddd-beca-26ac3dd348e8.roa Signing time: Tue 25 Mar 2025 15:31:07 +0000 ROA not before: Tue 25 Mar 2025 15:31:07 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f9:d8:3f:0d:61:b3:64:8a:91:4c:a1:56:02:cc:c3:93:3e:09:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:31:07 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=7b721735b264abb85b04838db6a0fd0ea97a2a2c1ff18f137cd403c72deef57c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:4d:13:ef:2e:0f:87:3a:40:48:25:2f:f9: 89:b1:4d:c1:d3:71:82:05:54:ae:99:d0:eb:ce:e9: a1:44:19:99:0e:bd:bd:3f:bf:12:dc:a7:dc:44:f7: 8b:d7:64:59:5c:78:2d:ab:34:61:04:9f:48:27:7a: f9:6c:64:cf:6b:ae:68:7f:9f:72:3c:46:21:14:d4: a5:fa:1a:2b:d7:6d:0f:2b:ba:f0:a6:2b:a4:80:d6: 9b:3b:0d:90:bf:88:d1:d7:9c:73:65:9c:53:ce:86: c8:2c:c1:06:b1:60:ba:52:d1:e5:2d:7b:83:51:c0: 0b:34:e6:7d:cd:67:5c:d5:6b:93:5d:86:94:df:26: db:be:01:c1:6f:5b:ae:e7:3e:16:56:8d:82:60:6f: fd:26:b0:6b:ac:90:78:1b:e7:6e:d1:1e:8d:36:76: ff:40:6f:6b:ac:ab:55:9f:42:e0:2c:a8:ef:0e:e8: 2c:2d:cc:b4:6d:cf:3e:14:69:bf:cf:05:82:89:ae: d6:b1:dd:22:f7:35:01:4f:25:41:8d:ad:ce:9a:41: e1:9a:42:c9:7c:e5:f1:c9:2e:8b:db:54:a1:92:3c: 30:c6:fa:98:83:62:04:1f:f7:3f:6c:27:ae:5d:b0: 68:5a:ec:a9:0e:12:2f:f7:4c:80:e1:b1:7e:17:f3: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F9:BE:E0:64:81:54:4B:C5:B0:4C:06:23:79:91:E3:BB:6B:3E:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c135282-3228-4ddd-beca-26ac3dd348e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:60c0::/46 Signature Algorithm: sha256WithRSAEncryption 68:6d:c9:82:e0:5b:a2:3c:93:4b:ba:32:f4:fe:0c:6e:6b:18: da:7b:0e:ea:9c:e2:fa:0e:79:f4:63:b3:50:48:8e:fa:0b:ec: 25:09:bf:c6:b0:05:14:e0:dc:ad:c8:00:48:e9:5f:c6:d7:94: 44:27:2b:b9:71:70:55:c4:b9:14:fb:c6:be:27:6c:b9:d8:30: b8:c6:90:83:f9:ce:6d:06:c3:74:2d:55:94:9e:9e:91:c0:9c: 9e:d2:e6:78:46:9f:c3:71:20:de:48:58:6a:45:fb:5a:b1:51: 2a:68:05:4e:00:dc:15:38:14:32:0e:84:8a:07:bc:13:98:47: 89:a6:e0:ee:9e:dc:63:8d:72:24:72:df:d0:dd:3d:70:42:98: c0:16:30:57:f1:81:09:54:c1:0d:87:53:e3:1a:5a:dc:85:2c: 94:4f:2a:f7:d9:b1:a9:0d:2b:70:4b:1c:f0:b4:e1:6e:d1:9e: 1d:cb:22:18:c8:dd:0a:ba:1c:69:98:d4:e3:62:dc:1d:45:75: d0:c7:ef:97:ae:6f:a1:c6:61:13:d4:63:6f:01:9b:0a:ba:c9: b3:7c:16:4e:23:1f:f8:6c:74:38:f7:7c:a3:07:74:97:03:09: 5c:df:98:f9:22:c6:4d:72:bf:77:8e:70:89:f1:d4:47:3f:ca: 2b:72:9d:d2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUF/nYPw1hs2SKkUyhVgLMw5M+CUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MzEwN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAN2I3MjE3MzViMjY0YWJiODViMDQ4 MzhkYjZhMGZkMGVhOTdhMmEyYzFmZjE4ZjEzN2NkNDAzYzcyZGVlZjU3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob5NE+8uD4c6QEglL/mJsU3B03GC BVSumdDrzumhRBmZDr29P78S3KfcRPeL12RZXHgtqzRhBJ9IJ3r5bGTPa65of59y PEYhFNSl+hor120PK7rwpiukgNabOw2Qv4jR15xzZZxTzobILMEGsWC6UtHlLXuD UcALNOZ9zWdc1WuTXYaU3ybbvgHBb1uu5z4WVo2CYG/9JrBrrJB4G+du0R6NNnb/ QG9rrKtVn0LgLKjvDugsLcy0bc8+FGm/zwWCia7Wsd0i9zUBTyVBja3OmkHhmkLJ fOXxyS6L21ShkjwwxvqYg2IEH/c/bCeuXbBoWuypDhIv90yA4bF+F/O9GQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO/5vuBkgVRLxbBMBiN5keO7az6eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjMTM1MjgyLTMyMjgtNGRkZC1iZWNhLTI2YWMzZGQzNDhlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+2DAMA0GCSqGSIb3DQEBCwUAA4IBAQBobcmC4FuiPJNLujL0 /gxuaxjaew7qnOL6Dnn0Y7NQSI76C+wlCb/GsAUU4NytyABI6V/G15REJyu5cXBV xLkU+8a+J2y52DC4xpCD+c5tBsN0LVWUnp6RwJye0uZ4Rp/DcSDeSFhqRftasVEq aAVOANwVOBQyDoSKB7wTmEeJpuDuntxjjXIkct/Q3T1wQpjAFjBX8YEJVMENh1Pj GlrchSyUTyr32bGpDStwSxzwtOFu0Z4dyyIYyN0KuhxpmNTjYtwdRXXQx++Xrm+h xmET1GNvAZsKusmzfBZOIx/4bHQ493yjB3SXAwlc35j5IsZNcr93jnCJ8dRHP8or cp3S -----END CERTIFICATE-----Generated at Thu Apr 17 18:14:03 2025 by rpki-client