$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa File: ad80375d-e709-447c-8867-372df16e6e62.roa (raw, json) Hash identifier: lFA98L1HkWdQblNB3x3Rk/FXrhkCQpF3IP7IDfBjaxo= Subject key identifier: 59:C0:F7:F6:30:60:28:85:B5:4D:CD:0F:AC:8A:D9:06:71:37:6B:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 772079BFEA1152D6C780CC714873DD583FAEB911 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa Signing time: Tue 25 Mar 2025 15:11:53 +0000 ROA not before: Tue 25 Mar 2025 15:11:53 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:20:79:bf:ea:11:52:d6:c7:80:cc:71:48:73:dd:58:3f:ae:b9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:11:53 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=35a2db6a9b2bb2f32b4fb4316963e07a9b4a1509012f07228d46fee356dc6129, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:d1:56:52:f6:e0:db:e5:6f:96:da:3d:70: 01:da:8c:03:23:1d:a2:55:ec:1b:f3:55:b7:eb:dc: dc:f6:f9:af:83:f3:38:5d:3a:e1:cb:bd:d3:c0:bf: e7:3d:a3:18:c7:ed:28:94:2c:5b:ae:a1:10:d1:68: 9e:38:3f:36:36:f0:55:29:ea:4a:3b:67:8c:85:5d: 86:5f:d8:82:cc:71:e3:65:96:94:0e:7b:d3:40:7d: cd:e3:11:9f:f5:5d:0e:3d:ba:44:9e:a0:ea:cb:74: b2:45:e7:8c:93:26:ce:73:b8:8c:6b:6e:5b:c4:5a: 24:aa:a5:89:7f:89:9a:37:91:02:87:00:c3:f8:ad: c5:5a:f6:f0:5c:d0:e8:0f:11:b3:bf:a1:24:c2:2e: a6:a1:95:7d:a6:ee:8a:76:3d:0a:49:39:8b:c3:72: a9:ed:d9:74:e6:94:48:dc:33:14:76:26:de:3f:4c: 11:e6:1b:d3:cc:32:17:05:af:38:39:5a:96:29:1a: 71:21:1b:6b:0c:66:dd:a1:97:33:1c:52:0f:76:52: 4a:ab:99:9e:34:a5:5d:14:05:a5:98:36:11:30:29: 21:83:7e:3a:c3:c2:2a:3d:4e:ba:8c:63:dc:d7:51: 22:f0:6c:a5:d2:e6:b1:81:be:97:da:b5:88:69:73: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C0:F7:F6:30:60:28:85:B5:4D:CD:0F:AC:8A:D9:06:71:37:6B:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8000::/40 Signature Algorithm: sha256WithRSAEncryption 27:40:c3:c7:aa:ea:bb:24:86:51:93:cf:6f:f2:d2:08:6a:57: 4b:a2:40:79:6f:93:0c:c6:ad:a0:99:4d:6e:0d:ae:de:02:17: 36:55:27:ed:57:ae:16:4d:25:e8:86:73:db:95:30:d4:e8:47: 8e:f0:d5:15:ca:77:1f:50:8e:b1:2d:31:11:4e:ac:14:8c:ed: a5:77:3c:f8:84:ea:3a:60:9a:49:fa:8c:a5:57:94:ef:e4:35: 72:cb:f2:1e:32:2d:91:1e:16:2e:ac:e2:86:b7:ae:a8:24:f0: 87:28:db:32:7b:08:24:24:98:b8:7e:78:5d:15:7f:9c:a9:21: 4e:d7:ac:ef:b2:3e:f1:7b:b5:bc:24:82:60:82:af:b0:0c:7b: 28:b5:d7:c0:18:ce:f4:bb:be:ee:3a:b1:c4:44:f9:57:b9:56: 30:14:36:97:98:dc:9b:77:64:23:a0:c7:af:67:96:f2:b4:13: 9e:ce:6b:86:25:08:1e:a2:2c:72:14:65:4e:38:e8:32:ba:b6: 73:b6:30:e8:84:22:dc:82:08:b6:e6:3c:18:3e:95:2a:92:d7: 13:bc:1f:20:2a:82:b4:3d:cf:0b:f4:fc:36:9d:af:4c:18:e3: 15:ca:79:93:0a:e8:c9:23:3b:73:d7:93:57:3d:97:17:e3:d5: 55:bb:51:6f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdyB5v+oRUtbHgMxxSHPdWD+uuREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MTE1M1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMzVhMmRiNmE5YjJiYjJmMzJiNGZi NDMxNjk2M2UwN2E5YjRhMTUwOTAxMmYwNzIyOGQ0NmZlZTM1NmRjNjEyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QTRVlL24Nvlb5baPXAB2owDIx2i Vewb81W369zc9vmvg/M4XTrhy73TwL/nPaMYx+0olCxbrqEQ0WieOD82NvBVKepK O2eMhV2GX9iCzHHjZZaUDnvTQH3N4xGf9V0OPbpEnqDqy3SyReeMkybOc7iMa25b xFokqqWJf4maN5EChwDD+K3FWvbwXNDoDxGzv6Ekwi6moZV9pu6Kdj0KSTmLw3Kp 7dl05pRI3DMUdibeP0wR5hvTzDIXBa84OVqWKRpxIRtrDGbdoZczHFIPdlJKq5me NKVdFAWlmDYRMCkhg346w8IqPU66jGPc11Ei8Gyl0uaxgb6X2rWIaXNyEQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFnA9/YwYCiFtU3ND6yK2QZxN2uAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkODAzNzVkLWU3MDktNDQ3Yy04ODY3LTM3MmRmMTZlNmU2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAIAwDQYJKoZIhvcNAQELBQADggEBACdAw8eq6rskhlGTz2/y 0ghqV0uiQHlvkwzGraCZTW4Nrt4CFzZVJ+1XrhZNJeiGc9uVMNToR47w1RXKdx9Q jrEtMRFOrBSM7aV3PPiE6jpgmkn6jKVXlO/kNXLL8h4yLZEeFi6s4oa3rqgk8Ico 2zJ7CCQkmLh+eF0Vf5ypIU7XrO+yPvF7tbwkgmCCr7AMeyi118AYzvS7vu46scRE +Ve5VjAUNpeY3Jt3ZCOgx69nlvK0E57Oa4YlCB6iLHIUZU446DK6tnO2MOiEItyC CLbmPBg+lSqS1xO8HyAqgrQ9zwv0/Dadr0wY4xXKeZMK6MkjO3PXk1c9lxfj1VW7 UW8= -----END CERTIFICATE-----Generated at Thu Apr 17 17:46:01 2025 by rpki-client