$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/680b28c0-fd78-49c9-9355-94724e964ebe.roa File: 680b28c0-fd78-49c9-9355-94724e964ebe.roa (raw, json) Hash identifier: Wm1BWf9IgqTBtCcsrFV9nwmXEVCvtAAnkPzJLhCTVFs= Subject key identifier: 8F:D5:B5:29:B5:D4:60:12:A0:4F:26:CA:17:20:8D:C8:05:FE:99:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 602F9BA9462D1C34BE935C0D2D7E1A79B1D09135 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/680b28c0-fd78-49c9-9355-94724e964ebe.roa Signing time: Tue 25 Mar 2025 00:31:34 +0000 ROA not before: Tue 25 Mar 2025 00:31:34 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2f:9b:a9:46:2d:1c:34:be:93:5c:0d:2d:7e:1a:79:b1:d0:91:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:31:34 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=57ad08ae9a605fe49f4972db6e9c11f7962cc68a07b4317fc49901a3238c8f74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:ce:91:82:9d:6f:87:35:2b:ad:94:10:58: 0f:91:1d:be:d9:b3:1d:5f:2c:4a:1c:3e:86:c6:45: 24:49:8c:da:75:48:e8:8e:24:b6:92:f6:73:31:64: 28:e5:b3:e3:c1:fc:01:4a:32:54:a6:8f:b5:60:b6: d6:71:69:94:88:6c:fd:88:4d:8e:09:1e:50:33:85: 03:56:53:03:27:89:07:34:89:51:3f:ea:cd:ee:0a: 1f:ab:3d:e8:d2:90:16:9c:29:39:03:b1:55:62:5b: 19:a1:ca:2d:af:c1:ba:c1:c0:27:17:6b:82:65:f4: 5e:c8:1e:16:f0:78:11:01:85:87:58:46:8e:52:87: 24:5b:d0:61:18:1d:51:77:1c:36:1c:5f:0e:b1:fa: 6a:1a:ff:99:19:32:8f:1d:73:0c:bc:53:b8:44:f3: 57:e4:13:cc:51:63:a9:35:bb:3c:14:0b:21:74:69: 26:5e:80:07:b4:62:48:5e:c8:3a:31:f2:d7:2a:10: ad:da:2e:0d:f9:47:1e:56:41:51:6d:6d:b2:06:cc: 5f:28:e8:0b:bd:52:07:06:f0:10:31:6f:c6:71:42: 70:cc:dc:55:84:6e:f0:7f:28:b0:84:4f:dd:3b:f4: db:e8:90:50:90:fc:13:55:3a:53:d6:c3:c9:da:b1: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D5:B5:29:B5:D4:60:12:A0:4F:26:CA:17:20:8D:C8:05:FE:99:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/680b28c0-fd78-49c9-9355-94724e964ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c040::/48 Signature Algorithm: sha256WithRSAEncryption 87:f0:20:9a:3d:55:35:93:d0:f0:b2:e3:90:24:be:25:1d:47: 32:ca:2a:80:e1:77:27:1f:8a:6c:70:bd:0a:39:43:27:e4:12: 5b:ef:62:ca:cc:69:25:ad:e3:1a:37:ce:c0:61:e9:c1:5a:b9: 87:42:09:57:ce:a8:34:73:59:eb:91:2d:86:df:68:8d:72:58: cb:cf:59:a0:fd:35:15:f3:33:8a:5a:e1:32:c1:ae:9b:ad:65: 37:d6:0e:4c:30:df:ac:28:6a:d8:0c:b2:f8:d7:6f:78:65:1b: bd:8d:f2:7b:35:35:45:fc:8e:35:54:00:b5:6a:85:6f:8e:bf: 38:f5:18:3a:54:e1:3e:9d:99:ef:68:d6:81:87:ca:f0:52:ca: eb:08:d8:9f:34:73:3b:30:e0:59:8e:92:d2:4f:4a:16:0a:f4: 10:68:2e:93:d8:d7:01:f6:56:32:1e:8a:e9:bc:d3:20:2b:80: ad:32:9d:d1:63:13:eb:ee:7a:c1:6d:fe:f0:d8:78:6f:c0:ee: 99:d4:97:14:ad:c0:36:76:05:1b:c1:a7:f3:d8:d1:49:84:87: 0d:2d:e5:76:57:a2:56:7f:96:45:80:9f:b7:af:9d:e6:ad:6b: ba:6f:98:bd:12:e2:5c:bf:c6:84:f3:ed:2d:b4:fc:bf:9d:dd: ab:68:2e:32 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYC+bqUYtHDS+k1wNLX4aebHQkTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMzEzNFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANTdhZDA4YWU5YTYwNWZlNDlmNDk3 MmRiNmU5YzExZjc5NjJjYzY4YTA3YjQzMTdmYzQ5OTAxYTMyMzhjOGY3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTDOkYKdb4c1K62UEFgPkR2+2bMd XyxKHD6GxkUkSYzadUjojiS2kvZzMWQo5bPjwfwBSjJUpo+1YLbWcWmUiGz9iE2O CR5QM4UDVlMDJ4kHNIlRP+rN7gofqz3o0pAWnCk5A7FVYlsZocotr8G6wcAnF2uC ZfReyB4W8HgRAYWHWEaOUockW9BhGB1Rdxw2HF8OsfpqGv+ZGTKPHXMMvFO4RPNX 5BPMUWOpNbs8FAshdGkmXoAHtGJIXsg6MfLXKhCt2i4N+UceVkFRbW2yBsxfKOgL vVIHBvAQMW/GcUJwzNxVhG7wfyiwhE/dO/Tb6JBQkPwTVTpT1sPJ2rHNWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI/VtSm11GASoE8myhcgjcgF/plYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4MGIyOGMwLWZkNzgtNDljOS05MzU1LTk0NzI0ZTk2NGViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYcBAMA0GCSqGSIb3DQEBCwUAA4IBAQCH8CCaPVU1k9DwsuOQ JL4lHUcyyiqA4XcnH4pscL0KOUMn5BJb72LKzGklreMaN87AYenBWrmHQglXzqg0 c1nrkS2G32iNcljLz1mg/TUV8zOKWuEywa6brWU31g5MMN+sKGrYDLL41294ZRu9 jfJ7NTVF/I41VAC1aoVvjr849Rg6VOE+nZnvaNaBh8rwUsrrCNifNHM7MOBZjpLS T0oWCvQQaC6T2NcB9lYyHorpvNMgK4CtMp3RYxPr7nrBbf7w2HhvwO6Z1JcUrcA2 dgUbwafz2NFJhIcNLeV2V6JWf5ZFgJ+3r53mrWu6b5i9EuJcv8aE8+0ttPy/nd2r aC4y -----END CERTIFICATE-----Generated at Thu Apr 17 18:02:34 2025 by rpki-client