$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa File: 652666fe-aad6-4cd8-8e35-91322c742337.roa (raw, json) Hash identifier: ES1YFtIhJ1MIrxDBsQCqYtJHi1GhsLztcwd1y5UIyxM= Subject key identifier: 8C:91:E8:19:96:0D:10:66:DE:8A:7D:57:19:A3:CA:54:A7:19:49:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44B618277D8A1E1C8A0F2AB85101FE622E430869 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa Signing time: Tue 25 Mar 2025 00:30:11 +0000 ROA not before: Tue 25 Mar 2025 00:30:11 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b6:18:27:7d:8a:1e:1c:8a:0f:2a:b8:51:01:fe:62:2e:43:08:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:30:11 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=fc8d34ff12d0badf3e384255cc4a43b321f5075cecd120105ae291f11bd3eb0b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:f6:4a:d7:91:03:44:d9:fc:4a:2a:35:55: 33:7c:58:45:78:1c:ea:45:44:23:b8:85:8f:cb:e9: 24:af:c1:1d:7f:fb:00:f6:a6:47:59:51:45:7b:47: 76:21:f4:40:bf:c3:e3:db:b4:eb:1d:45:27:c8:19: 3e:dd:2d:e1:b1:94:ef:b9:0a:2f:e2:4b:c5:15:53: ab:4b:07:9a:98:19:93:fc:0c:07:09:59:0d:80:6e: 65:0e:36:39:8f:35:bf:34:1e:76:f8:df:99:ff:72: 9a:79:52:bf:40:8b:e8:9b:96:80:84:ee:33:a8:f5: c7:39:62:99:d5:74:33:76:c5:0c:c8:74:18:c9:ea: 2e:e7:96:93:2c:2d:3a:a3:ca:1b:b8:c6:1c:51:58: 07:7e:6a:a9:34:ae:91:9c:63:0c:2d:21:9e:db:a8: 88:eb:a6:19:96:4f:72:19:d7:f7:cd:15:e8:5a:af: 3d:01:54:2f:9f:a2:c9:62:91:bb:5d:12:18:f0:4f: ac:f8:12:6e:c1:9d:1b:26:6f:f4:6f:28:ab:6a:87: 12:3b:20:e1:7d:07:62:9b:0b:5c:d3:1d:1b:87:af: ac:f6:6d:3e:ff:84:b2:97:fe:48:c5:ca:94:9a:f1: 3c:55:77:9f:d7:e3:61:da:3a:ca:2e:89:8e:2e:4c: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:E8:19:96:0D:10:66:DE:8A:7D:57:19:A3:CA:54:A7:19:49:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9000::/40 Signature Algorithm: sha256WithRSAEncryption 89:14:3b:fa:d7:94:77:e0:b3:12:98:70:2e:98:d9:55:43:c8: 02:c8:dd:bb:9f:b0:53:5d:82:ce:22:c2:b0:71:b2:c0:29:48: 41:fb:51:3e:77:e9:0c:a6:03:29:33:2b:11:35:cc:d8:ff:7d: 24:a3:0b:6b:ee:f5:72:95:16:99:13:77:34:cf:10:e5:27:9c: 6f:ad:b9:ef:62:e2:a7:19:a3:25:c5:b6:23:de:d0:dd:98:b7: 28:72:e8:7c:53:33:8f:b6:6c:02:6a:71:f7:36:4d:53:49:e6: ef:dc:bf:3a:3e:52:19:9b:48:84:16:25:0e:4c:b4:c0:3b:2a: c2:8f:02:5d:11:2f:47:d6:ae:75:e3:1c:33:d6:c7:2d:4c:02: b8:6a:25:26:51:2b:ae:e6:6e:51:61:03:7c:4a:31:be:24:82: d4:e7:8e:2e:11:85:00:c0:0b:4d:f2:c4:89:da:c6:3a:81:0d: 79:0a:66:7c:e6:ca:37:02:45:cf:93:96:a9:1f:b9:9b:d9:57: d3:aa:3c:4d:68:13:7e:ae:30:59:f4:8a:f0:69:2f:6a:24:4d: 92:c6:14:b3:00:e6:ca:e5:39:0c:ba:1f:97:3c:52:6b:dc:46: 22:46:9c:85:e4:32:ea:ba:d9:20:73:f2:b3:da:77:eb:d9:24: ef:0f:5f:b7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURLYYJ32KHhyKDyq4UQH+Yi5DCGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMzAxMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZmM4ZDM0ZmYxMmQwYmFkZjNlMzg0 MjU1Y2M0YTQzYjMyMWY1MDc1Y2VjZDEyMDEwNWFlMjkxZjExYmQzZWIwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfL2SteRA0TZ/EoqNVUzfFhFeBzq RUQjuIWPy+kkr8Edf/sA9qZHWVFFe0d2IfRAv8Pj27TrHUUnyBk+3S3hsZTvuQov 4kvFFVOrSweamBmT/AwHCVkNgG5lDjY5jzW/NB52+N+Z/3KaeVK/QIvom5aAhO4z qPXHOWKZ1XQzdsUMyHQYyeou55aTLC06o8obuMYcUVgHfmqpNK6RnGMMLSGe26iI 66YZlk9yGdf3zRXoWq89AVQvn6LJYpG7XRIY8E+s+BJuwZ0bJm/0byiraocSOyDh fQdimwtc0x0bh6+s9m0+/4Syl/5IxcqUmvE8VXef1+Nh2jrKLomOLkx6HQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIyR6BmWDRBm3op9VxmjylSnGUkPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1MjY2NmZlLWFhZDYtNGNkOC04ZTM1LTkxMzIyYzc0MjMzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/5AwDQYJKoZIhvcNAQELBQADggEBAIkUO/rXlHfgsxKYcC6Y 2VVDyALI3bufsFNdgs4iwrBxssApSEH7UT536QymAykzKxE1zNj/fSSjC2vu9XKV FpkTdzTPEOUnnG+tue9i4qcZoyXFtiPe0N2Ytyhy6HxTM4+2bAJqcfc2TVNJ5u/c vzo+UhmbSIQWJQ5MtMA7KsKPAl0RL0fWrnXjHDPWxy1MArhqJSZRK67mblFhA3xK Mb4kgtTnji4RhQDAC03yxInaxjqBDXkKZnzmyjcCRc+TlqkfuZvZV9OqPE1oE36u MFn0ivBpL2okTZLGFLMA5srlOQy6H5c8UmvcRiJGnIXkMuq62SBz8rPad+vZJO8P X7c= -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:48 2025 by rpki-client