$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa File: afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa (raw, json) Hash identifier: +OmW6+USTCoptJvOnpEvxvKQ4s3fZMDMXDIx9ZEFnb8= Subject key identifier: 0B:70:48:BE:67:AC:4E:FA:14:3B:21:BC:F9:6D:EB:62:D6:0F:B4:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 79B028531C3D669CA89857098957D14F903CB3BD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa Signing time: Wed 02 Apr 2025 00:01:32 +0000 ROA not before: Wed 02 Apr 2025 00:01:32 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b0:28:53:1c:3d:66:9c:a8:98:57:09:89:57:d1:4f:90:3c:b3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:01:32 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=8d8379d373ee6610587c22a98b4bc275a4e6224eb3e6119e897adfea79146eeb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:89:fd:18:72:d8:8e:b2:7a:af:df:fa:0f: 50:a1:a3:5f:b4:54:f0:53:16:c9:a5:03:a7:1b:8e: 1f:1c:5c:d0:2c:4e:01:30:66:69:e8:41:ba:87:7f: ca:5a:42:c6:4d:76:de:a7:50:9a:51:ee:e9:96:f1: 41:9e:09:b4:70:17:0e:11:fd:af:36:1e:84:93:01: 62:45:b0:87:2c:40:e9:a2:a3:c5:10:9e:3c:3a:2d: cb:06:2d:eb:ff:54:ae:0b:31:ca:37:12:f8:60:70: a4:be:0d:f9:5d:85:c6:29:6a:d8:33:34:4d:fb:73: 5b:69:3d:87:e3:e9:3c:c5:9c:53:5e:4d:1e:c9:1d: 5d:c9:51:eb:57:d6:23:d0:5e:90:4e:08:2e:76:73: fd:02:4c:1e:98:03:48:ab:65:c6:e7:0e:1b:9a:3f: 24:2e:b5:33:34:48:04:84:40:53:31:df:25:3b:70: 25:f9:e1:83:06:f8:1a:83:cf:d4:fc:49:a9:8f:09: 27:5c:97:93:3d:41:19:c4:41:b4:a1:49:36:c5:15: f4:9e:7a:b1:df:49:9f:ae:ea:ff:55:f1:0a:29:8b: 83:47:01:76:0c:4c:88:a5:fc:03:80:ab:57:d2:29: a1:fa:4a:a5:7a:ba:43:89:e1:82:6f:56:13:d7:f7: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:70:48:BE:67:AC:4E:FA:14:3B:21:BC:F9:6D:EB:62:D6:0F:B4:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:8000::/36 Signature Algorithm: sha256WithRSAEncryption c3:91:cd:a3:6f:e5:10:15:84:ea:f0:9c:65:80:53:3e:fc:1a: 4d:df:7e:46:c0:bc:b0:2a:06:b4:d0:7f:48:20:ac:2b:bb:b8: e1:44:e0:85:6b:47:3f:42:73:c6:20:4a:9d:93:bb:ea:30:24: 65:88:53:49:b2:af:22:3a:18:84:74:82:f4:f3:29:eb:6b:0a: 4c:3d:64:ff:af:fe:d6:3a:72:7e:86:f2:f5:6e:58:01:17:ef: 20:37:50:81:53:a5:20:b3:2a:84:6b:3b:c1:86:90:6b:fc:ae: 26:9f:0c:c4:19:9a:b2:98:ec:17:be:66:e3:5a:fe:9e:93:20: cd:ef:86:ed:d1:29:39:c0:8c:32:f3:75:60:57:4c:b9:c2:c5: dd:48:e3:32:53:84:6c:b4:f0:52:80:ec:45:6c:96:72:1d:ec: d5:f9:81:3e:b8:74:c7:f4:2a:5c:ae:9f:f3:aa:c8:f0:15:20: 00:5a:04:1c:db:d0:ad:ca:e9:57:33:36:16:94:9d:63:2e:68: 7e:c5:32:e4:01:87:e5:9e:bc:0e:94:9e:05:54:b8:08:7c:44: 4f:0c:15:12:ec:14:9a:03:91:a0:73:e3:ea:95:32:58:85:db: 58:9b:52:ba:34:b1:0b:52:c4:9f:33:c5:6e:18:67:d0:b9:d9: 17:56:c8:1f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUebAoUxw9ZpyomFcJiVfRT5A8s70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDEzMloX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAOGQ4Mzc5ZDM3M2VlNjYxMDU4N2My MmE5OGI0YmMyNzVhNGU2MjI0ZWIzZTYxMTllODk3YWRmZWE3OTE0NmVlYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFuJ/Rhy2I6yeq/f+g9QoaNftFTw UxbJpQOnG44fHFzQLE4BMGZp6EG6h3/KWkLGTXbep1CaUe7plvFBngm0cBcOEf2v Nh6EkwFiRbCHLEDpoqPFEJ48Oi3LBi3r/1SuCzHKNxL4YHCkvg35XYXGKWrYMzRN +3NbaT2H4+k8xZxTXk0eyR1dyVHrV9Yj0F6QTggudnP9AkwemANIq2XG5w4bmj8k LrUzNEgEhEBTMd8lO3Al+eGDBvgag8/U/EmpjwknXJeTPUEZxEG0oUk2xRX0nnqx 30mfrur/VfEKKYuDRwF2DEyIpfwDgKtX0imh+kqlerpDieGCb1YT1/ffLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAtwSL5nrE76FDshvPlt62LWD7RpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmZDVhMmQwLTVlMTQtNDkzOS05ZTM5LTFmOWYyNmUyZjY3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGoAwDQYJKoZIhvcNAQELBQADggEBAMORzaNv5RAVhOrwnGWA Uz78Gk3ffkbAvLAqBrTQf0ggrCu7uOFE4IVrRz9Cc8YgSp2Tu+owJGWIU0myryI6 GIR0gvTzKetrCkw9ZP+v/tY6cn6G8vVuWAEX7yA3UIFTpSCzKoRrO8GGkGv8riaf DMQZmrKY7Be+ZuNa/p6TIM3vhu3RKTnAjDLzdWBXTLnCxd1I4zJThGy08FKA7EVs lnId7NX5gT64dMf0Klyun/OqyPAVIABaBBzb0K3K6VczNhaUnWMuaH7FMuQBh+We vA6UngVUuAh8RE8MFRLsFJoDkaBz4+qVMliF21ibUro0sQtSxJ8zxW4YZ9C52RdW yB8= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:38 2025 by rpki-client