$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa File: 93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa (raw, json) Hash identifier: hSIwT4P9Ufq3EukfYmm/JJFuZHoRU0HtRcUHrcuoxYM= Subject key identifier: 68:4E:26:EB:8E:0D:35:7F:64:9E:ED:B6:A7:05:49:5E:E2:D8:B5:03 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C6B2806DBCC27B03504B258ECD3E7683BF3BA16 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa Signing time: Tue 25 Mar 2025 16:10:46 +0000 ROA not before: Tue 25 Mar 2025 16:10:46 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6b:28:06:db:cc:27:b0:35:04:b2:58:ec:d3:e7:68:3b:f3:ba:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:10:46 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=aeadf331117663d0b21eaa77c0244ce5c647667e1bf9da4a11cdc380e063fe80, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:57:65:c1:50:90:0a:da:93:17:20:2b:d4: 52:d6:8e:fe:12:bc:d3:57:39:3c:7c:ce:ab:9a:04: 7c:95:57:c8:21:16:fd:68:00:f0:af:8c:b7:90:cd: 0f:f6:a9:73:4e:25:d0:d7:dd:5a:7f:84:43:27:1c: e7:16:b0:84:26:1a:b2:06:23:eb:64:47:7b:6a:0b: 00:6f:43:86:19:d8:89:39:0a:4d:ec:40:9d:30:46: 1c:7a:62:7e:68:25:a4:e5:52:01:b8:67:ad:ba:5e: 6b:00:fb:03:e8:0f:42:c1:c7:84:1e:27:9d:52:75: 8b:1b:35:d0:28:50:5e:30:33:fd:f8:8f:f0:c9:b5: fb:eb:de:08:26:2a:17:98:b9:4f:fe:6e:e1:c6:c8: a1:70:47:8b:ff:d4:99:ef:a3:2a:b1:6c:c8:f8:41: 18:60:a4:16:b9:d9:61:d0:45:c4:71:61:b2:45:7e: 3e:96:b2:7d:9f:20:1f:17:c5:37:18:e4:4e:9a:6d: 5e:7b:3a:26:69:76:b1:1b:13:e5:2a:f0:0a:ec:71: b4:49:93:1e:f6:b4:0a:2f:28:05:41:0c:02:28:08: 0b:87:e6:cc:e0:6b:8b:8a:10:2e:11:97:78:79:e0: d8:75:52:4e:a5:51:3a:f7:64:ed:ca:f9:83:bd:72: 81:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:26:EB:8E:0D:35:7F:64:9E:ED:B6:A7:05:49:5E:E2:D8:B5:03 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2800::/40 Signature Algorithm: sha256WithRSAEncryption 4b:97:bc:ae:10:7a:f6:b6:37:71:f9:42:18:f7:95:d4:f4:4b: 12:51:70:32:0a:f2:16:e5:75:92:5b:9c:99:28:54:b2:fb:fb: 5d:1a:90:66:f4:db:0e:a6:8d:ca:14:8e:b8:99:b8:21:e0:32: 8d:5f:ea:9a:c2:77:f4:09:f5:ba:a7:01:0c:c5:9a:47:ee:90: 9f:81:97:92:a7:d7:d5:ce:03:48:e1:ee:c0:16:e0:82:f7:88: d7:af:87:64:99:41:28:39:be:7d:7b:c6:7c:5d:37:da:59:e5: 3e:11:8e:84:47:3f:d2:52:57:5f:a5:b5:2a:10:15:d3:b1:35: aa:34:47:a9:21:68:e6:44:9f:46:c0:fb:00:2d:ea:04:48:66: 18:5b:b6:8a:4e:0a:ea:f3:51:e1:98:7b:f4:35:d3:88:07:50: c8:a2:a2:3e:b4:e3:40:54:68:46:aa:a7:4a:05:d0:b1:b0:e3: 60:6d:5a:cb:62:4b:ef:25:c0:13:9b:51:4c:9a:ee:ca:15:b6: 5f:75:58:32:ef:d7:d3:c8:36:6f:b9:c6:e1:bb:40:81:a8:95: 2c:de:67:12:1e:2a:0d:40:e9:1f:9c:bd:c7:ad:a0:23:92:bf: bb:b1:2c:27:e0:70:c6:89:52:07:fc:4a:31:d0:8f:ac:79:8c: e7:36:61:91 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHGsoBtvMJ7A1BLJY7NPnaDvzuhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTA0NloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYWVhZGYzMzExMTc2NjNkMGIyMWVh YTc3YzAyNDRjZTVjNjQ3NjY3ZTFiZjlkYTRhMTFjZGMzODBlMDYzZmU4MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlglXZcFQkArakxcgK9RS1o7+ErzT Vzk8fM6rmgR8lVfIIRb9aADwr4y3kM0P9qlzTiXQ191af4RDJxznFrCEJhqyBiPr ZEd7agsAb0OGGdiJOQpN7ECdMEYcemJ+aCWk5VIBuGetul5rAPsD6A9CwceEHied UnWLGzXQKFBeMDP9+I/wybX7694IJioXmLlP/m7hxsihcEeL/9SZ76MqsWzI+EEY YKQWudlh0EXEcWGyRX4+lrJ9nyAfF8U3GOROmm1eezomaXaxGxPlKvAK7HG0SZMe 9rQKLygFQQwCKAgLh+bM4GuLihAuEZd4eeDYdVJOpVE692TtyvmDvXKBKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGhOJuuODTV/ZJ7ttqcFSV7i2LUDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzZDBkYjNjLTJlYzctNDJiOC1hOTNjLWI1OThhZGZjMDBjMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ygwDQYJKoZIhvcNAQELBQADggEBAEuXvK4Qeva2N3H5Qhj3 ldT0SxJRcDIK8hbldZJbnJkoVLL7+10akGb02w6mjcoUjriZuCHgMo1f6prCd/QJ 9bqnAQzFmkfukJ+Bl5Kn19XOA0jh7sAW4IL3iNevh2SZQSg5vn17xnxdN9pZ5T4R joRHP9JSV1+ltSoQFdOxNao0R6khaOZEn0bA+wAt6gRIZhhbtopOCurzUeGYe/Q1 04gHUMiioj6040BUaEaqp0oF0LGw42BtWstiS+8lwBObUUya7soVtl91WDLv19PI Nm+5xuG7QIGolSzeZxIeKg1A6R+cvcetoCOSv7uxLCfgcMaJUgf8SjHQj6x5jOc2 YZE= -----END CERTIFICATE-----Generated at Thu Apr 17 17:24:35 2025 by rpki-client