$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa File: 830000fc-9d46-461c-8155-e409ef5fadcc.roa (raw, json) Hash identifier: N8zYoBFCQhlTBHGtLXZJvkCkh4rLtQiHJRVruDvZhhU= Subject key identifier: 5A:F4:85:03:70:26:40:C4:F6:4B:E0:5C:75:3B:EB:56:5E:AF:CD:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04182E956BE1FB4D4B418047A028C5CD4F3EE7EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa Signing time: Mon 24 Mar 2025 15:00:10 +0000 ROA not before: Mon 24 Mar 2025 15:00:10 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:18:2e:95:6b:e1:fb:4d:4b:41:80:47:a0:28:c5:cd:4f:3e:e7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:00:10 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=425358abb77c09b6009e6faf5705f6fb0ef27f15cc1d3f5cfd484acb53446f3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:84:90:f2:8a:6f:b7:1a:f8:e9:0a:15:76: 06:f3:8a:22:7d:3d:c8:1a:b1:fd:84:18:9e:1a:cf: 5f:e3:fb:ad:86:25:c0:94:d2:ab:9f:3f:70:1d:5a: d9:89:d2:7b:59:1e:68:b2:44:57:e2:f1:70:24:ad: 45:b4:55:7c:94:9a:86:6f:4c:67:b2:f0:61:b6:f5: 64:28:68:a7:e4:a0:9a:19:72:8c:ec:51:76:a4:31: 42:b3:ab:6e:99:58:93:01:72:b5:d9:81:d5:04:c9: 48:4a:f4:61:61:94:ea:d0:1a:9c:3b:f7:d8:f7:e9: 11:56:be:5a:ae:72:4a:17:05:21:7c:8d:db:0f:49: 90:de:4d:1e:87:d5:8f:56:34:47:53:b9:80:ee:58: d9:d2:a9:20:f8:6e:e3:01:86:45:48:9d:91:a3:5b: 40:5b:e9:03:29:88:60:c4:3f:bd:80:03:dc:5f:aa: 26:aa:41:32:47:08:55:0c:21:ad:9d:d1:7a:ab:f4: 3c:d7:c3:93:47:8d:db:96:c7:67:2e:f7:0b:4a:35: cb:c9:e5:97:5b:ec:6f:b8:99:2c:eb:7c:4f:1a:80: b5:67:3c:5b:a5:d8:c0:e2:a7:79:2a:68:19:52:5f: 75:cc:bc:6f:01:ee:1d:01:c7:75:c6:50:c5:38:03: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:85:03:70:26:40:C4:F6:4B:E0:5C:75:3B:EB:56:5E:AF:CD:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f080::/48 Signature Algorithm: sha256WithRSAEncryption 93:b1:b8:93:bf:3b:1b:bb:de:39:1f:91:09:82:28:13:1c:68: c1:f8:1b:90:0d:74:f9:93:b9:34:57:59:90:0c:93:8e:71:b7: af:9f:a8:c0:a5:1a:6d:c6:99:38:46:e2:da:c1:18:72:61:f9: 8d:a4:3c:71:5b:7f:59:f6:bd:c8:b6:d7:f9:04:1a:4b:b5:c1: 88:bf:8a:71:39:e4:7c:b9:a7:6b:4e:c5:07:4e:33:7c:06:9a: 4e:2c:f0:73:ed:9a:69:a0:b9:3a:a8:8f:51:77:8f:6a:c0:81: 9c:6a:87:e7:df:b5:d7:94:7e:49:f2:57:5f:44:a8:5c:d4:ce: 8d:e1:66:14:81:8a:7a:d5:3c:b3:77:e5:0f:66:8a:50:4e:4c: 27:1f:6c:06:2a:0c:68:90:39:9a:f1:8d:aa:cb:62:14:f9:09: 9c:9c:57:ef:10:8c:0f:91:1e:c0:ec:04:5d:de:7f:44:46:cd: 31:19:a1:77:4c:20:21:b9:b5:ae:e9:ab:86:cc:be:8e:44:61: 90:f8:fe:33:fe:6b:e0:93:a0:66:a5:18:87:e2:02:bf:7c:63: dd:6b:c8:1e:4f:f2:a3:3a:2d:ed:ac:e8:08:9c:e8:85:34:49: 45:be:ef:da:75:b1:30:03:0f:c2:e5:00:94:60:0f:be:15:64: da:be:e5:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBBgulWvh+01LQYBHoCjFzU8+5+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDAxMFoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNANDI1MzU4YWJiNzdjMDliNjAwOWU2 ZmFmNTcwNWY2ZmIwZWYyN2YxNWNjMWQzZjVjZmQ0ODRhY2I1MzQ0NmYzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7iEkPKKb7ca+OkKFXYG84oifT3I GrH9hBieGs9f4/uthiXAlNKrnz9wHVrZidJ7WR5oskRX4vFwJK1FtFV8lJqGb0xn svBhtvVkKGin5KCaGXKM7FF2pDFCs6tumViTAXK12YHVBMlISvRhYZTq0BqcO/fY 9+kRVr5arnJKFwUhfI3bD0mQ3k0eh9WPVjRHU7mA7ljZ0qkg+G7jAYZFSJ2Ro1tA W+kDKYhgxD+9gAPcX6omqkEyRwhVDCGtndF6q/Q818OTR43blsdnLvcLSjXLyeWX W+xvuJks63xPGoC1ZzxbpdjA4qd5KmgZUl91zLxvAe4dAcd1xlDFOAMIOQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFr0hQNwJkDE9kvgXHU761Zer822MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMDAwMGZjLTlkNDYtNDYxYy04MTU1LWU0MDllZjVmYWRjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfCAMA0GCSqGSIb3DQEBCwUAA4IBAQCTsbiTvzsbu945H5EJ gigTHGjB+BuQDXT5k7k0V1mQDJOOcbevn6jApRptxpk4RuLawRhyYfmNpDxxW39Z 9r3Ittf5BBpLtcGIv4pxOeR8uadrTsUHTjN8BppOLPBz7ZppoLk6qI9Rd49qwIGc aofn37XXlH5J8ldfRKhc1M6N4WYUgYp61Tyzd+UPZopQTkwnH2wGKgxokDma8Y2q y2IU+QmcnFfvEIwPkR7A7ARd3n9ERs0xGaF3TCAhubWu6auGzL6ORGGQ+P4z/mvg k6BmpRiH4gK/fGPda8geT/KjOi3trOgInOiFNElFvu/adbEwAw/C5QCUYA++FWTa vuVe -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:39 2025 by rpki-client