$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/562ea526-d7fd-4f54-a7f1-2891e7003176.roa File: 562ea526-d7fd-4f54-a7f1-2891e7003176.roa (raw, json) Hash identifier: 354rKJADiXdlqYcxxGfOPf32bDG8b1OIO9du9tmRpJo= Subject key identifier: 59:23:DC:52:2F:CA:39:E4:0F:F9:64:89:C4:DE:0F:E2:BD:1E:62:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75E23B145A4F8CA8CF98DAF0B0B95BAAF5D43061 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/562ea526-d7fd-4f54-a7f1-2891e7003176.roa Signing time: Mon 24 Mar 2025 15:21:08 +0000 ROA not before: Mon 24 Mar 2025 15:21:08 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:60a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e2:3b:14:5a:4f:8c:a8:cf:98:da:f0:b0:b9:5b:aa:f5:d4:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:21:08 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=c00b1904a1d774c535ce6926df5c4c19b7bdc4cb9cf903b9ab1d8852a93912a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:83:78:59:4c:04:47:97:44:6a:23:b7:2b: ca:d1:b4:fe:98:a5:51:f4:77:9f:c9:cf:ff:30:5a: 83:9e:56:d0:ca:52:f0:51:06:48:97:1d:7f:36:10: d7:2a:6c:39:32:9d:3f:6d:3e:ea:9c:98:0a:e0:b2: 8e:aa:0a:7a:33:b3:fb:55:8c:0a:da:7e:83:6a:00: bd:1c:42:16:ef:47:03:a2:17:df:32:37:49:53:7a: df:a4:e8:31:a2:0f:78:10:21:f1:a0:17:29:aa:53: 30:af:b5:46:3c:b0:e9:76:fc:4d:5c:53:74:31:ae: d8:51:02:1b:81:10:83:9a:f9:d9:99:76:f8:c1:69: c6:75:54:25:76:cc:33:2d:2e:13:38:9d:df:57:6c: a5:3c:c5:4a:d5:b2:05:0f:18:b2:ff:00:1e:39:be: 18:aa:3f:c9:dc:b4:73:10:0a:58:50:ab:dd:96:a5: b9:83:06:36:ca:21:09:5d:56:2b:be:67:61:3b:f8: 85:26:11:c8:15:5d:0e:1a:46:60:d8:30:03:c8:2b: a1:14:f0:19:04:06:70:51:3d:c8:21:c2:b0:a1:0a: 4a:48:41:05:cb:1a:51:ae:86:cb:39:70:27:b5:f1: 7f:fe:a2:3a:ac:b8:35:a9:ef:eb:8b:c0:79:5a:ca: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:DC:52:2F:CA:39:E4:0F:F9:64:89:C4:DE:0F:E2:BD:1E:62:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/562ea526-d7fd-4f54-a7f1-2891e7003176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:60a0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:1d:1a:32:57:74:e4:ee:22:7d:fe:3e:a4:64:69:f5:4f:26: b1:f9:46:cd:c2:38:47:b2:f0:34:f2:3a:70:d1:9b:53:0a:9b: 69:a6:13:06:94:2a:66:05:3f:5b:bc:f8:f5:f7:08:2b:e4:14: c2:26:34:d8:52:8b:eb:72:16:43:8c:30:2a:d6:05:ea:6d:91: 43:e7:1f:96:f8:2b:ed:cc:88:c5:bd:b0:09:1c:91:cc:78:4e: a2:b2:66:1a:ca:38:44:af:dd:3d:a3:ed:8d:d4:f2:93:a2:e0: d1:5c:24:56:f0:8d:81:dd:fb:b8:e8:24:29:30:62:ba:05:d0: f8:60:9c:d6:b2:bc:af:56:78:0c:25:53:49:56:72:d9:77:80: 39:70:6a:ee:21:27:c1:95:43:83:dd:b4:78:0f:fd:2d:52:ff: 7e:0a:7b:04:ae:ba:bc:09:cc:76:73:7d:e4:4a:77:52:3e:b7: da:38:62:9c:89:ac:cc:55:26:ac:35:fe:59:36:a6:e8:8e:fa: a2:69:5b:9c:e1:ae:d8:a2:c5:2e:ff:4d:ae:5d:20:e1:e3:2a: bf:ad:75:0a:e7:50:d6:8f:49:28:f5:9f:50:7b:ca:25:df:c8: 6b:bd:df:55:23:5c:30:e9:1e:a7:13:55:32:2e:45:99:6c:33: f0:fa:fa:fb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdeI7FFpPjKjPmNrwsLlbqvXUMGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MjEwOFoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAYzAwYjE5MDRhMWQ3NzRjNTM1Y2U2 OTI2ZGY1YzRjMTliN2JkYzRjYjljZjkwM2I5YWIxZDg4NTJhOTM5MTJhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcCDeFlMBEeXRGojtyvK0bT+mKVR 9Hefyc//MFqDnlbQylLwUQZIlx1/NhDXKmw5Mp0/bT7qnJgK4LKOqgp6M7P7VYwK 2n6DagC9HEIW70cDohffMjdJU3rfpOgxog94ECHxoBcpqlMwr7VGPLDpdvxNXFN0 Ma7YUQIbgRCDmvnZmXb4wWnGdVQldswzLS4TOJ3fV2ylPMVK1bIFDxiy/wAeOb4Y qj/J3LRzEApYUKvdlqW5gwY2yiEJXVYrvmdhO/iFJhHIFV0OGkZg2DADyCuhFPAZ BAZwUT3IIcKwoQpKSEEFyxpRrobLOXAntfF//qI6rLg1qe/ri8B5WspFCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFkj3FIvyjnkD/lkicTeD+K9HmIpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MmVhNTI2LWQ3ZmQtNGY1NC1hN2YxLTI4OTFlNzAwMzE3Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGCgMA0GCSqGSIb3DQEBCwUAA4IBAQA7HRoyV3Tk7iJ9/j6k ZGn1Tyax+UbNwjhHsvA08jpw0ZtTCptpphMGlCpmBT9bvPj19wgr5BTCJjTYUovr chZDjDAq1gXqbZFD5x+W+CvtzIjFvbAJHJHMeE6ismYayjhEr909o+2N1PKTouDR XCRW8I2B3fu46CQpMGK6BdD4YJzWsryvVngMJVNJVnLZd4A5cGruISfBlUOD3bR4 D/0tUv9+CnsErrq8Ccx2c33kSndSPrfaOGKciazMVSasNf5ZNqbojvqiaVuc4a7Y osUu/02uXSDh4yq/rXUK51DWj0ko9Z9Qe8ol38hrvd9VI1ww6R6nE1UyLkWZbDPw +vr7 -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:36 2025 by rpki-client