$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa File: 6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa (raw, json) Hash identifier: +f8hyjZQxc7KEA8k61l7oDv+vUuH8kcHuFLUQ+LZ0Yg= Subject key identifier: 6F:9A:24:C8:A9:37:78:48:8E:EF:B5:51:E6:E6:C0:93:67:DC:3E:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77C60B63D6228B8CC6BA870EB1B8871AB7FD7A43 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa Signing time: Tue 25 Mar 2025 00:31:03 +0000 ROA not before: Tue 25 Mar 2025 00:31:03 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c6:0b:63:d6:22:8b:8c:c6:ba:87:0e:b1:b8:87:1a:b7:fd:7a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:31:03 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1b1c968790b464dbe90304778af1a0d3045f5a881a1a1e27587f279a9984baff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:44:25:c3:3f:c8:51:9a:0f:15:66:03:46: e7:38:ae:d8:47:31:c2:69:06:b8:95:4a:06:5f:5f: 57:79:11:d3:70:e4:85:84:7d:df:e5:20:fa:b0:76: 92:28:72:f1:ce:f4:58:10:af:e4:fd:dc:fa:a9:57: f8:d4:67:a6:a1:4d:fb:7d:92:b3:cb:96:5c:1b:80: cc:8e:21:4f:7e:55:b2:cc:9f:c9:00:57:47:d8:f3: 2f:2b:91:d9:8e:83:a6:f3:ac:be:84:21:70:9c:0b: ba:f8:d5:36:7d:69:49:5b:1c:e4:b5:4f:c1:df:04: 16:38:0b:d6:0d:98:2d:49:70:5c:a9:df:3b:eb:42: d5:0d:bf:50:d8:0e:86:11:90:50:d0:38:df:ac:0f: b4:ad:37:3e:fb:63:cb:9e:a8:72:1a:93:9d:ec:99: 17:38:02:c7:32:53:7e:34:4b:ff:86:fe:ce:8e:f7: 49:58:60:71:bb:a0:4d:af:d6:08:f2:ad:b7:fb:31: 66:1d:35:40:9d:51:21:4d:12:80:76:4a:2a:ce:5b: 18:f0:b9:08:62:89:44:0e:02:26:60:18:13:51:1d: c3:90:ca:ee:08:78:03:c7:b0:96:8b:6f:38:94:e4: 4e:b3:ed:46:d5:06:27:65:8a:ee:1c:c1:54:fc:65: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9A:24:C8:A9:37:78:48:8E:EF:B5:51:E6:E6:C0:93:67:DC:3E:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c880::/48 Signature Algorithm: sha256WithRSAEncryption 0d:d5:61:f5:67:1d:ab:f0:43:46:62:08:99:86:0b:39:e6:8f: 1a:8b:4b:1f:09:db:bb:79:cf:86:6c:c8:dd:e8:0f:62:42:fa: 42:46:f0:2a:49:8a:fc:49:9c:27:ec:da:d2:cc:84:cd:81:d3: 34:a4:5d:7e:20:af:63:84:64:a7:5c:06:81:82:89:88:92:a4: df:26:68:8f:52:ff:2d:d1:91:a7:71:5d:d1:c0:df:3c:4e:37: 0a:ed:e5:2b:8a:57:d5:58:c5:23:bf:ab:f0:3b:a9:5a:c6:c8: b9:e6:45:80:db:d6:c1:6a:12:e4:da:1f:93:fb:41:a8:df:51: 34:60:73:67:e7:8a:f5:0b:f4:75:87:f0:50:5a:17:58:d4:39: c5:13:8e:80:e5:b1:ec:1a:20:0c:57:65:fc:15:96:73:7c:23: d3:c1:c9:96:4a:5d:33:7b:1b:e4:b8:9b:26:59:2e:e6:06:49: 92:f2:cf:2d:b6:63:59:3d:a5:b6:ed:74:fa:36:eb:95:2f:08: 42:f3:3b:24:46:62:49:03:a5:40:b5:99:34:d7:dc:8e:9c:f2: a0:51:42:39:ec:67:0e:4b:26:5c:3c:f6:fc:2f:9a:dd:82:b0: 52:d2:2f:56:ce:02:a5:f9:65:22:a7:f0:1d:ee:39:21:85:83: b4:c5:fd:28 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd8YLY9Yii4zGuocOsbiHGrf9ekMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMzEwM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWIxYzk2ODc5MGI0NjRkYmU5MDMw NDc3OGFmMWEwZDMwNDVmNWE4ODFhMWExZTI3NTg3ZjI3OWE5OTg0YmFmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt39EJcM/yFGaDxVmA0bnOK7YRzHC aQa4lUoGX19XeRHTcOSFhH3f5SD6sHaSKHLxzvRYEK/k/dz6qVf41GemoU37fZKz y5ZcG4DMjiFPflWyzJ/JAFdH2PMvK5HZjoOm86y+hCFwnAu6+NU2fWlJWxzktU/B 3wQWOAvWDZgtSXBcqd8760LVDb9Q2A6GEZBQ0DjfrA+0rTc++2PLnqhyGpOd7JkX OALHMlN+NEv/hv7OjvdJWGBxu6BNr9YI8q23+zFmHTVAnVEhTRKAdkoqzlsY8LkI YolEDgImYBgTUR3DkMruCHgDx7CWi284lOROs+1G1QYnZYruHMFU/GVZkQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG+aJMipN3hIju+1UebmwJNn3D7bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmNmI1YTNjLWIzZjUtNDU3Ny1hMjI4LTJjZTFiNzMyN2MwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8iAMA0GCSqGSIb3DQEBCwUAA4IBAQAN1WH1Zx2r8ENGYgiZ hgs55o8ai0sfCdu7ec+GbMjd6A9iQvpCRvAqSYr8SZwn7NrSzITNgdM0pF1+IK9j hGSnXAaBgomIkqTfJmiPUv8t0ZGncV3RwN88TjcK7eUrilfVWMUjv6vwO6laxsi5 5kWA29bBahLk2h+T+0Go31E0YHNn54r1C/R1h/BQWhdY1DnFE46A5bHsGiAMV2X8 FZZzfCPTwcmWSl0zexvkuJsmWS7mBkmS8s8ttmNZPaW27XT6NuuVLwhC8zskRmJJ A6VAtZk019yOnPKgUUI57GcOSyZcPPb8L5rdgrBS0i9WzgKl+WUip/Ad7jkhhYO0 xf0o -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:04 2025 by rpki-client