$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa File: 7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa (raw, json) Hash identifier: aLLFQD8xjWv6dIHY94T+MuyWd67GoZ57bs/kI44hf/Q= Subject key identifier: 1A:E7:D6:69:4B:86:69:32:05:68:5D:5F:AC:F7:04:32:53:7C:C1:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45613FD26D086F694A1F0398BE496B99A00E28D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa Signing time: Mon 24 Mar 2025 15:01:19 +0000 ROA not before: Mon 24 Mar 2025 15:01:19 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:61:3f:d2:6d:08:6f:69:4a:1f:03:98:be:49:6b:99:a0:0e:28:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:01:19 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=52663cdd0e217c8e6bf41d28bff87a2443189fc233457edaaa6ef61e82d85fab, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:72:64:1a:67:10:a4:3c:4c:88:26:0c:10: 0a:ff:f1:ff:a1:28:e4:87:be:dd:be:64:6d:04:39: 9b:22:21:eb:45:7a:ca:14:53:b0:0a:5c:db:81:dc: b7:57:4e:59:56:01:33:32:03:68:5e:77:0f:8d:c6: 68:6c:d0:9b:87:75:77:b5:8a:c7:bc:17:e7:b8:b4: 89:92:3e:97:5f:34:11:8a:58:1d:51:ae:0a:fc:30: 7e:a4:26:12:4d:0a:9c:22:37:0e:7d:4c:e8:78:05: c2:84:6d:8b:b1:19:89:b4:04:3c:a8:ae:87:f8:96: 1d:04:37:7b:b9:45:97:42:0a:6a:50:49:c6:09:25: 76:cf:8c:d4:19:f3:31:61:f3:36:60:a7:61:d9:3d: e0:5a:5a:db:67:a3:02:24:c3:1d:ee:b5:15:da:6b: d1:cf:1e:07:b7:22:fb:76:e4:d0:bb:2a:71:c6:e7: ec:01:50:6b:16:25:1a:97:76:92:c0:38:41:c3:49: 1d:46:34:86:b9:b5:4a:5e:0f:c0:a8:59:26:4b:8e: b4:be:85:4d:27:4c:c6:87:e7:41:01:eb:03:43:61: 91:12:25:79:78:91:76:aa:cc:67:13:62:51:1e:ec: 73:df:87:0c:8a:05:62:5d:dc:df:78:1b:11:24:84: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E7:D6:69:4B:86:69:32:05:68:5D:5F:AC:F7:04:32:53:7C:C1:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8840::/48 Signature Algorithm: sha256WithRSAEncryption af:5a:c9:0a:89:41:3e:a9:7b:07:ef:02:7d:4f:e9:84:a8:df: 4b:10:ab:4e:cb:c2:ab:9c:fa:6f:5b:fd:ab:51:19:63:16:bf: 09:00:f2:38:4c:24:84:60:94:15:38:53:d1:94:86:50:0b:e3: 53:c8:ad:8b:66:ef:73:a8:c7:e6:04:93:5a:19:90:33:64:fb: 43:9e:8c:a3:b0:82:d2:8d:ee:9d:b4:bd:a0:ec:aa:51:28:19: 64:e6:e4:90:02:54:2b:46:1d:f0:eb:4b:c8:f2:40:ae:6e:51: 32:e3:5a:be:92:c9:ee:6b:1b:36:47:4e:32:0f:61:86:7e:7a: 5c:1a:1a:a8:e0:6f:36:5c:ee:da:80:7d:73:bc:99:95:56:94: 19:aa:fe:b7:b5:e7:1f:d4:56:00:0f:b2:40:39:cf:6b:64:74: be:1d:20:2d:64:e4:7d:bf:01:be:f6:8d:ae:f0:87:b0:7b:89: 14:6a:a9:5d:e7:80:d5:a5:2d:4d:04:b8:03:ca:24:7d:1d:7a: 27:23:e0:45:2a:52:06:6a:44:84:ea:bb:c1:ab:b8:d0:f1:37: 8d:90:cf:97:74:e5:c2:41:c9:08:0a:56:51:89:fd:4c:ae:c8: fe:ef:99:86:79:47:08:d5:e9:36:a2:bf:4b:00:8b:4c:4f:81: f6:ba:9d:64 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURWE/0m0Ib2lKHwOYvklrmaAOKNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDExOVoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNANTI2NjNjZGQwZTIxN2M4ZTZiZjQx ZDI4YmZmODdhMjQ0MzE4OWZjMjMzNDU3ZWRhYWE2ZWY2MWU4MmQ4NWZhYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskByZBpnEKQ8TIgmDBAK//H/oSjk h77dvmRtBDmbIiHrRXrKFFOwClzbgdy3V05ZVgEzMgNoXncPjcZobNCbh3V3tYrH vBfnuLSJkj6XXzQRilgdUa4K/DB+pCYSTQqcIjcOfUzoeAXChG2LsRmJtAQ8qK6H +JYdBDd7uUWXQgpqUEnGCSV2z4zUGfMxYfM2YKdh2T3gWlrbZ6MCJMMd7rUV2mvR zx4HtyL7duTQuypxxufsAVBrFiUal3aSwDhBw0kdRjSGubVKXg/AqFkmS460voVN J0zGh+dBAesDQ2GREiV5eJF2qsxnE2JRHuxz34cMigViXdzfeBsRJIQ7xQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBrn1mlLhmkyBWhdX6z3BDJTfMHlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2NzZhNGFlLTY5ZjEtNDYwMC04Zjc5LTJkMjRlZDdlMDMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ohAMA0GCSqGSIb3DQEBCwUAA4IBAQCvWskKiUE+qXsH7wJ9 T+mEqN9LEKtOy8KrnPpvW/2rURljFr8JAPI4TCSEYJQVOFPRlIZQC+NTyK2LZu9z qMfmBJNaGZAzZPtDnoyjsILSje6dtL2g7KpRKBlk5uSQAlQrRh3w60vI8kCublEy 41q+ksnuaxs2R04yD2GGfnpcGhqo4G82XO7agH1zvJmVVpQZqv63tecf1FYAD7JA Oc9rZHS+HSAtZOR9vwG+9o2u8Iewe4kUaqld54DVpS1NBLgDyiR9HXonI+BFKlIG akSE6rvBq7jQ8TeNkM+XdOXCQckIClZRif1Mrsj+75mGeUcI1ek2or9LAItMT4H2 up1k -----END CERTIFICATE-----Generated at Thu Apr 17 18:14:02 2025 by rpki-client