$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa File: a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa (raw, json) Hash identifier: nI6WgXNC2qXrzZTW+fV05elPI4DtP1kNS2W0Afv+1ng= Subject key identifier: 88:B3:74:46:1D:CA:74:09:2D:59:50:CF:8E:05:0B:14:AD:6B:89:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E4DEBA2CA71A5D8E77C3FC6DB588E0720B551B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa Signing time: Tue 25 Mar 2025 00:51:19 +0000 ROA not before: Tue 25 Mar 2025 00:51:19 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4d:eb:a2:ca:71:a5:d8:e7:7c:3f:c6:db:58:8e:07:20:b5:51:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:51:19 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=5e6452275726c3f1d9393c0411a7a56fead24f1e5111dcf5b0118a5c4908abe3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:36:d6:ae:6e:09:63:55:a0:5c:2f:17:0f: 47:81:91:75:29:ce:2e:57:f6:06:f0:63:aa:6a:a7: ff:93:c1:2b:21:b7:ef:ca:c1:ca:11:0a:69:59:1b: c5:88:7a:cf:0b:00:e2:c5:46:01:e2:b1:c3:03:89: 7b:05:f1:88:e9:d2:a8:80:b0:cf:e2:ab:c0:46:e2: 27:9f:e4:00:c5:90:7e:c3:19:31:c4:9c:06:a9:0e: 14:e9:9c:89:84:d3:03:98:ca:3a:8b:63:60:d6:fb: 4d:df:0c:ab:25:c9:30:40:28:c2:8f:de:01:05:57: e0:4f:ab:45:b0:a4:7e:16:27:e6:2b:3f:5d:74:52: 67:77:60:d1:73:85:95:0f:1c:70:73:3a:da:77:18: 57:e3:bf:c0:b0:d5:1f:b8:6e:54:03:87:8d:d5:9a: c9:fe:c8:94:2e:80:93:39:a7:d7:ae:35:ba:9b:ca: 7b:04:75:fd:02:b5:7e:07:a1:de:fc:71:b4:a7:7f: 3a:0c:d0:44:09:2c:0a:cd:a3:28:11:9f:ef:77:9d: 18:77:7a:3b:64:93:b2:e9:97:6a:4c:ea:49:9a:57: 66:b8:62:7a:3d:e7:d0:a4:17:63:05:bc:30:b1:6a: 30:4b:55:4a:67:6f:7a:7c:d4:c9:c1:d7:bd:4d:4d: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B3:74:46:1D:CA:74:09:2D:59:50:CF:8E:05:0B:14:AD:6B:89:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4000::/40 Signature Algorithm: sha256WithRSAEncryption a0:ad:f0:45:65:45:98:25:a4:81:39:51:13:26:c8:a3:ac:32: 0f:14:3b:ac:68:dc:26:31:dc:43:b2:04:e1:14:02:88:f2:39: d2:a3:46:f8:a4:83:ca:42:b7:dd:96:d8:a2:35:e8:4a:c8:08: d1:31:e9:8b:31:23:b2:b2:a0:04:b9:32:31:78:6b:97:55:f8: 54:ec:bd:6f:6e:76:a3:ed:9e:02:a8:5a:f6:64:ca:2d:d2:b4: d2:77:c6:36:3d:42:fe:7b:53:37:7c:dc:e1:49:80:ff:ff:68: 00:84:60:00:15:54:94:c8:05:e3:6c:cc:58:b1:05:cc:04:bd: 0b:14:b0:f0:09:04:ba:83:b1:39:09:2c:9a:19:7e:5f:9b:10: 4d:d1:2f:f4:2e:f3:8a:d7:51:3e:23:cc:be:3e:1f:c1:31:c2: 55:7b:40:05:f8:c4:a8:b8:4b:9a:af:b0:bd:21:60:10:a1:71: 19:c2:91:8c:10:9a:6f:d9:71:93:b8:fb:2c:79:17:38:17:ad: f2:e5:b5:d9:f1:6a:2e:7b:d4:c3:63:e1:00:6d:24:b6:1b:97: 22:59:f3:5f:9d:c6:80:0c:b1:ce:2a:c7:bb:67:c5:fa:63:88: 26:f4:b5:88:43:e9:1f:ec:3b:54:7d:20:dd:3d:22:3a:43:48: 5c:90:d3:82 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULk3rospxpdjnfD/G21iOByC1UbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTExOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANWU2NDUyMjc1NzI2YzNmMWQ5Mzkz YzA0MTFhN2E1NmZlYWQyNGYxZTUxMTFkY2Y1YjAxMThhNWM0OTA4YWJlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEI21q5uCWNVoFwvFw9HgZF1Kc4u V/YG8GOqaqf/k8ErIbfvysHKEQppWRvFiHrPCwDixUYB4rHDA4l7BfGI6dKogLDP 4qvARuInn+QAxZB+wxkxxJwGqQ4U6ZyJhNMDmMo6i2Ng1vtN3wyrJckwQCjCj94B BVfgT6tFsKR+FifmKz9ddFJnd2DRc4WVDxxwczradxhX47/AsNUfuG5UA4eN1ZrJ /siULoCTOafXrjW6m8p7BHX9ArV+B6He/HG0p386DNBECSwKzaMoEZ/vd50Yd3o7 ZJOy6ZdqTOpJmldmuGJ6PefQpBdjBbwwsWowS1VKZ296fNTJwde9TU1KMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIizdEYdynQJLVlQz44FCxSta4k9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3ZWNlZTQ5LTdkNjQtNDljOC1iMWQwLTU4Y2MyYTFmMTZiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8kAwDQYJKoZIhvcNAQELBQADggEBAKCt8EVlRZglpIE5URMm yKOsMg8UO6xo3CYx3EOyBOEUAojyOdKjRvikg8pCt92W2KI16ErICNEx6YsxI7Ky oAS5MjF4a5dV+FTsvW9udqPtngKoWvZkyi3StNJ3xjY9Qv57Uzd83OFJgP//aACE YAAVVJTIBeNszFixBcwEvQsUsPAJBLqDsTkJLJoZfl+bEE3RL/Qu84rXUT4jzL4+ H8ExwlV7QAX4xKi4S5qvsL0hYBChcRnCkYwQmm/ZcZO4+yx5FzgXrfLltdnxai57 1MNj4QBtJLYblyJZ81+dxoAMsc4qx7tnxfpjiCb0tYhD6R/sO1R9IN09IjpDSFyQ 04I= -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:31 2025 by rpki-client