$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b32b6b6a-d0ef-46e3-a090-87e6f059ee91.roa File: b32b6b6a-d0ef-46e3-a090-87e6f059ee91.roa (raw, json) Hash identifier: qhURltDZlmiJJ+IzsB0YHwNN9Xd7zZ3sBSagk4yBV+I= Subject key identifier: E4:5A:2F:A2:F1:C4:81:A4:36:E8:DF:B1:B0:23:1D:F2:89:A3:01:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37FE92A0BE2526DD8FDF9E2172ECC1CEA9C2B0C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b32b6b6a-d0ef-46e3-a090-87e6f059ee91.roa Signing time: Tue 25 Mar 2025 00:21:39 +0000 ROA not before: Tue 25 Mar 2025 00:21:39 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fe:92:a0:be:25:26:dd:8f:df:9e:21:72:ec:c1:ce:a9:c2:b0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:21:39 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=d380c242e3931d6a47fb6b56dc7e902cead214273968a1fbca48dee99d648b66, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:cd:2f:ba:95:fc:07:36:90:f7:7c:eb:0d: 26:1d:05:6e:4c:a0:76:1c:5e:63:79:f6:0e:fe:76: 26:0b:3a:bc:c6:14:39:a3:01:11:d5:30:dc:58:b0: 96:4f:38:f0:34:ca:dd:5a:87:b4:26:06:75:10:60: 75:90:83:52:c9:0a:11:c0:43:36:49:64:4f:5a:9d: 10:c2:95:ff:46:ba:8f:14:3c:4a:6b:9b:23:56:32: ba:e6:12:30:d6:db:3e:c7:c9:18:b4:98:65:3f:95: 9c:7a:b4:b3:7f:54:0d:b5:85:a9:c0:7b:46:d3:cf: 2d:54:da:c3:42:52:f5:48:38:24:9c:c5:e7:0d:e2: d9:e8:38:c9:97:ea:4d:a1:95:d4:fd:20:fa:4e:9a: 71:3b:70:a0:06:72:5e:72:4e:ae:f0:39:77:07:9d: e8:39:d4:8d:8d:27:6c:01:cf:8b:8c:c4:16:32:cd: 7d:15:53:2f:c5:2e:bf:a3:65:17:a4:0d:f5:a4:22: 1c:c5:35:ba:2a:e8:f9:75:ad:79:17:64:b1:5a:38: d3:01:e9:34:4c:00:f6:64:ab:dc:ea:11:b0:20:c8: 32:1d:fd:43:05:77:3d:86:8e:a9:41:b4:ea:ee:21: e7:64:7e:0a:48:03:ad:c9:9f:71:59:69:5d:ca:a2: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:2F:A2:F1:C4:81:A4:36:E8:DF:B1:B0:23:1D:F2:89:A3:01:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b32b6b6a-d0ef-46e3-a090-87e6f059ee91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 57:76:1f:84:60:6c:a4:71:ac:af:d9:06:18:5f:0c:66:1d:a3: de:c8:59:e8:8d:f3:80:cc:bf:4e:05:76:85:2d:ba:ab:39:59: 54:f3:be:85:e2:5c:da:86:07:9d:fa:db:f0:b7:e3:f0:f9:32: 1c:0a:b5:4f:25:2e:33:52:fb:e4:ae:b1:6e:5f:49:c6:87:2f: 34:ba:05:6e:43:5b:a5:29:6b:39:a4:57:c8:c5:bf:3b:b8:0e: f1:25:70:80:e6:39:65:8a:0a:1a:8b:bb:dc:6c:2c:74:ef:e5: cd:f1:a8:df:b0:8e:87:65:77:29:07:89:ea:35:28:9e:fb:43: 1d:ca:6f:f8:c5:a2:6b:81:b0:07:be:bd:c0:da:2a:ea:91:fb: 0c:5e:fb:86:f6:66:34:3a:1d:4c:7c:4d:22:59:2b:5f:74:aa: ca:f8:c0:56:7a:cf:3d:27:d9:80:80:11:89:0b:9b:ed:6b:0f: f3:97:93:c1:0d:d7:40:fe:00:93:a5:0b:77:4f:5a:f4:37:80: f2:82:13:ec:4e:49:5b:54:6f:d9:21:6a:c2:eb:e9:ee:a6:f2: 95:95:f0:1c:ef:2a:c4:38:2a:4e:82:a8:12:cd:c6:79:c6:f4: 7d:1a:e4:e1:d3:10:a6:65:37:1d:6c:99:14:56:70:12:fd:52: c4:9f:e9:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUN/6SoL4lJt2P354hcuzBzqnCsMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMjEzOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZDM4MGMyNDJlMzkzMWQ2YTQ3ZmI2 YjU2ZGM3ZTkwMmNlYWQyMTQyNzM5NjhhMWZiY2E0OGRlZTk5ZDY0OGI2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v7NL7qV/Ac2kPd86w0mHQVuTKB2 HF5jefYO/nYmCzq8xhQ5owER1TDcWLCWTzjwNMrdWoe0JgZ1EGB1kINSyQoRwEM2 SWRPWp0QwpX/RrqPFDxKa5sjVjK65hIw1ts+x8kYtJhlP5WcerSzf1QNtYWpwHtG 088tVNrDQlL1SDgknMXnDeLZ6DjJl+pNoZXU/SD6TppxO3CgBnJeck6u8Dl3B53o OdSNjSdsAc+LjMQWMs19FVMvxS6/o2UXpA31pCIcxTW6Kuj5da15F2SxWjjTAek0 TAD2ZKvc6hGwIMgyHf1DBXc9ho6pQbTq7iHnZH4KSAOtyZ9xWWldyqI91QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFORaL6LxxIGkNujfsbAjHfKJowHrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzMmI2YjZhLWQwZWYtNDZlMy1hMDkwLTg3ZTZmMDU5ZWU5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEjAMA0GCSqGSIb3DQEBCwUAA4IBAQBXdh+EYGykcayv2QYY XwxmHaPeyFnojfOAzL9OBXaFLbqrOVlU876F4lzahged+tvwt+Pw+TIcCrVPJS4z UvvkrrFuX0nGhy80ugVuQ1ulKWs5pFfIxb87uA7xJXCA5jlligoai7vcbCx07+XN 8ajfsI6HZXcpB4nqNSie+0Mdym/4xaJrgbAHvr3A2irqkfsMXvuG9mY0Oh1MfE0i WStfdKrK+MBWes89J9mAgBGJC5vtaw/zl5PBDddA/gCTpQt3T1r0N4DyghPsTklb VG/ZIWrC6+nupvKVlfAc7yrEOCpOgqgSzcZ5xvR9GuTh0xCmZTcdbJkUVnAS/VLE n+le -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:01 2025 by rpki-client