$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa File: afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa (raw, json) Hash identifier: smDHFXtd0/MHsEjiaDSDgyvJZfrJlM5YkZoGfHHfOQI= Subject key identifier: B0:26:36:49:55:BE:DC:2E:E9:5F:8E:B6:FA:1B:E9:23:0D:23:E6:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05B26DB590F48218FA13C7FF8190F8248FFD0488 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa Signing time: Tue 25 Mar 2025 15:30:27 +0000 ROA not before: Tue 25 Mar 2025 15:30:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:f080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b2:6d:b5:90:f4:82:18:fa:13:c7:ff:81:90:f8:24:8f:fd:04:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:30:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=815b01f2eb605cb7df082a2e0fc01eb0a58eb87f1b264725fdb8d192ba64b6eb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:46:0e:46:64:87:41:3a:37:cc:19:04:64: b6:f0:dc:f3:80:40:f3:a7:58:66:da:a5:19:10:95: f4:4c:09:c1:f1:04:22:04:a8:ae:ac:bc:07:dd:29: 91:ed:91:40:0e:3b:00:10:80:5a:5c:2d:55:47:e4: 12:13:db:5a:97:33:95:c5:b4:40:35:15:ce:0e:75: bc:d2:8a:41:be:71:fe:e1:82:a1:83:c7:dd:3c:18: ec:fa:c7:d0:28:80:6a:45:17:ec:6a:0b:18:d6:3f: 78:50:68:6b:1a:f8:c8:9d:22:2c:21:2c:90:dd:78: bf:f2:69:02:5a:ab:30:1b:f3:f7:12:98:1e:50:6c: 22:db:9c:07:40:c5:d5:fd:99:fc:78:91:8c:26:4e: 8c:1e:e8:8b:6b:76:0b:3a:a8:81:85:66:de:13:d8: bd:85:7b:c8:8a:13:4e:33:8e:c8:0a:d3:86:c8:71: 14:da:0c:aa:f4:5d:e5:bc:a5:a4:88:0e:a4:74:47: d5:00:c7:9e:1f:ab:f3:cc:c7:28:da:f6:35:9c:86: 34:a4:c7:37:4e:54:e4:c0:a1:1c:8e:0b:2f:29:e9: 54:70:fb:ce:ee:52:d5:e1:86:f9:de:68:69:ea:78: 29:96:a3:f9:1a:dd:86:10:4b:76:87:5d:bb:be:9e: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:26:36:49:55:BE:DC:2E:E9:5F:8E:B6:FA:1B:E9:23:0D:23:E6:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:f080::/46 Signature Algorithm: sha256WithRSAEncryption 6d:c7:97:9c:21:2f:fc:d7:8a:0c:c1:66:91:35:c8:22:45:7e: 48:65:03:53:41:40:08:6a:47:86:ac:15:df:13:61:68:27:5a: 39:84:5c:55:15:29:72:3c:c8:ba:79:2b:d3:75:33:28:c1:98: b7:81:3d:31:ab:11:bf:20:b2:c7:0e:92:3e:69:1e:4a:2c:c7: fb:00:43:ea:e0:1c:fd:a8:7f:e8:bc:c8:be:41:e1:83:3f:e1: c6:2e:80:29:54:f9:62:f2:21:b3:b9:93:84:73:86:96:d8:68: a8:17:38:be:02:f2:dc:96:65:c1:d2:f5:d1:6c:27:dd:1c:68: e2:38:5c:cf:98:e8:35:ba:59:08:fc:c8:3c:ea:05:d1:51:ec: ac:44:b5:00:63:df:a5:4c:99:40:b7:36:e8:f4:57:31:21:c0: 44:22:23:13:ed:17:ec:43:8d:62:b3:30:e7:66:40:8e:e7:9d: 10:68:e4:01:db:1f:57:a3:5e:95:41:70:07:cd:35:c6:30:0e: f1:0c:1f:3b:02:56:4c:09:d8:8a:dc:97:3b:85:b8:ca:72:4e: ae:48:2b:a2:b9:63:23:1a:79:26:9f:d4:df:48:e6:38:68:76: 4e:e3:b2:02:47:65:73:ff:7c:0b:eb:0f:e4:e7:0c:7f:6d:f9: e7:89:a1:3e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBbJttZD0ghj6E8f/gZD4JI/9BIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MzAyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAODE1YjAxZjJlYjYwNWNiN2RmMDgy YTJlMGZjMDFlYjBhNThlYjg3ZjFiMjY0NzI1ZmRiOGQxOTJiYTY0YjZlYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGtGDkZkh0E6N8wZBGS28NzzgEDz p1hm2qUZEJX0TAnB8QQiBKiurLwH3SmR7ZFADjsAEIBaXC1VR+QSE9talzOVxbRA NRXODnW80opBvnH+4YKhg8fdPBjs+sfQKIBqRRfsagsY1j94UGhrGvjInSIsISyQ 3Xi/8mkCWqswG/P3EpgeUGwi25wHQMXV/Zn8eJGMJk6MHuiLa3YLOqiBhWbeE9i9 hXvIihNOM47ICtOGyHEU2gyq9F3lvKWkiA6kdEfVAMeeH6vzzMco2vY1nIY0pMc3 TlTkwKEcjgsvKelUcPvO7lLV4Yb53mhp6ngplqP5Gt2GEEt2h127vp4rTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLAmNklVvtwu6V+Otvob6SMNI+bPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmY2FjMDdhLWU2Y2EtNDE1Mi05YTI0LWNlNzVmM2Y1ZDExMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+/CAMA0GCSqGSIb3DQEBCwUAA4IBAQBtx5ecIS/814oMwWaR NcgiRX5IZQNTQUAIakeGrBXfE2FoJ1o5hFxVFSlyPMi6eSvTdTMowZi3gT0xqxG/ ILLHDpI+aR5KLMf7AEPq4Bz9qH/ovMi+QeGDP+HGLoApVPli8iGzuZOEc4aW2Gio Fzi+AvLclmXB0vXRbCfdHGjiOFzPmOg1ulkI/Mg86gXRUeysRLUAY9+lTJlAtzbo 9FcxIcBEIiMT7RfsQ41iszDnZkCO550QaOQB2x9Xo16VQXAHzTXGMA7xDB87AlZM CdiK3Jc7hbjKck6uSCuiuWMjGnkmn9TfSOY4aHZO47ICR2Vz/3wL6w/k5wx/bfnn iaE+ -----END CERTIFICATE-----Generated at Thu Apr 17 17:57:46 2025 by rpki-client