$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: nUYaFxtUZhGS/W+DgF8/RRaFsiPTHionQBwzzd6bivo= Subject key identifier: 8D:E7:A1:95:9C:73:B2:70:A5:20:BC:56:EC:E7:C7:2F:85:9B:45:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65B74C1CFE88B44FDF66B5433DDA1DC19CE08C79 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Mon 24 Mar 2025 15:01:21 +0000 ROA not before: Mon 24 Mar 2025 15:01:21 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b7:4c:1c:fe:88:b4:4f:df:66:b5:43:3d:da:1d:c1:9c:e0:8c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:01:21 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=ad01e1e5eeb1a97f5a38ade1a5be59bd46d2805be8ebb2e2316515f431fc1c56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:9a:7d:89:8d:33:11:8e:bf:00:03:70:74: f5:5f:39:28:58:c5:00:e9:ad:13:84:43:e1:bb:a5: a4:29:3f:6c:f9:58:ab:04:46:48:32:05:6a:bf:e6: 38:50:7e:df:09:95:c7:f5:cb:53:7c:17:4f:44:07: cc:52:a3:a8:43:ac:e9:58:7d:44:a2:d8:bd:81:e2: 78:20:85:60:8d:6f:ac:20:4b:07:70:16:b4:dd:5f: 98:a5:95:9c:8a:6e:55:4c:8f:c1:50:5d:3c:41:7c: 78:cb:35:ec:2f:93:52:a5:5b:53:a6:5a:0f:5a:f7: 48:2d:c1:2d:ef:57:4f:3f:7e:b6:b3:9e:83:6a:43: b1:68:4c:ca:eb:05:97:c0:02:5e:c1:c8:b7:a3:d5: ef:53:1a:13:1f:b9:be:7e:bf:bf:f7:dc:7f:83:4f: b9:bb:04:e8:49:d7:43:d5:32:47:dd:2f:bd:31:5b: 33:ef:50:fb:6f:e7:1a:b9:43:d1:fc:da:9d:ff:5a: a5:42:5f:5a:0e:5d:44:3e:4e:d8:5d:61:80:33:6e: cc:15:c0:9f:d3:b9:ff:94:c7:3c:cd:44:4a:91:8f: 7a:d0:47:df:e8:b6:fe:e1:c4:45:64:b2:c2:92:c6: fe:10:ce:46:89:ef:ab:f7:eb:5b:f9:67:9f:f4:b3: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E7:A1:95:9C:73:B2:70:A5:20:BC:56:EC:E7:C7:2F:85:9B:45:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 54:f3:dd:89:a3:19:92:59:12:9c:b5:c5:fc:c4:2b:69:fe:76: fe:f9:33:b1:cb:15:35:f8:5a:3a:cb:d9:87:d1:18:aa:a7:6f: 85:c3:8d:2f:3a:ae:8d:2c:7b:c5:29:fe:0e:0d:95:04:3d:60: 04:4b:32:8a:2a:e9:5b:f5:46:f9:a8:bd:ef:c1:dc:c1:f9:82: fa:86:c9:7f:8b:84:63:03:25:e2:c1:2d:c5:1b:22:f8:f4:26: 07:7d:3b:6e:4b:3b:99:f5:04:c6:35:d3:73:34:b7:18:12:92: 60:6b:6b:0a:63:8a:83:d2:b1:ac:59:6b:9d:e3:b4:f6:07:3b: 65:58:af:bc:a9:2d:ff:55:8f:7d:74:51:00:6e:72:95:56:fc: 14:28:cb:d1:5f:55:18:70:e7:e6:6e:97:3f:26:ef:6d:05:a0: ae:39:b7:69:59:04:91:e0:8c:47:08:ea:6f:05:29:48:68:53: 95:82:6a:de:ed:4e:5d:09:22:fd:70:1f:1a:f8:06:06:3b:3a: 6a:62:45:6d:36:5a:9a:7d:f0:6c:a1:6d:ba:12:dd:42:61:d5: 10:be:4e:83:b0:aa:42:3b:b1:e0:da:da:c6:4a:7b:e2:27:cb: b7:ef:61:eb:c6:eb:a3:77:6c:38:11:14:92:cc:8b:a3:58:62: 05:76:24:49 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZbdMHP6ItE/fZrVDPdodwZzgjHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDEyMVoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAYWQwMWUxZTVlZWIxYTk3ZjVhMzhh ZGUxYTViZTU5YmQ0NmQyODA1YmU4ZWJiMmUyMzE2NTE1ZjQzMWZjMWM1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTaafYmNMxGOvwADcHT1XzkoWMUA 6a0ThEPhu6WkKT9s+VirBEZIMgVqv+Y4UH7fCZXH9ctTfBdPRAfMUqOoQ6zpWH1E oti9geJ4IIVgjW+sIEsHcBa03V+YpZWcim5VTI/BUF08QXx4yzXsL5NSpVtTploP WvdILcEt71dPP362s56DakOxaEzK6wWXwAJewci3o9XvUxoTH7m+fr+/99x/g0+5 uwToSddD1TJH3S+9MVsz71D7b+cauUPR/Nqd/1qlQl9aDl1EPk7YXWGAM27MFcCf 07n/lMc8zURKkY960Eff6Lb+4cRFZLLCksb+EM5Gie+r9+tb+Wef9LOIbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI3noZWcc7JwpSC8Vuznxy+Fm0UuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQBU892JoxmSWRKctcX8 xCtp/nb++TOxyxU1+Fo6y9mH0Riqp2+Fw40vOq6NLHvFKf4ODZUEPWAESzKKKulb 9Ub5qL3vwdzB+YL6hsl/i4RjAyXiwS3FGyL49CYHfTtuSzuZ9QTGNdNzNLcYEpJg a2sKY4qD0rGsWWud47T2BztlWK+8qS3/VY99dFEAbnKVVvwUKMvRX1UYcOfmbpc/ Ju9tBaCuObdpWQSR4IxHCOpvBSlIaFOVgmre7U5dCSL9cB8a+AYGOzpqYkVtNlqa ffBsoW26Et1CYdUQvk6DsKpCO7Hg2trGSnviJ8u372Hrxuujd2w4ERSSzIujWGIF diRJ -----END CERTIFICATE-----Generated at Thu Apr 17 18:00:09 2025 by rpki-client