$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa File: ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa (raw, json) Hash identifier: D8yXf2pzZ5rvfZOoX5/0RDkk216LQSu4BgybjtixKJQ= Subject key identifier: 2F:C4:66:DA:A6:DC:58:40:A2:67:68:6A:D0:35:31:DB:1F:6B:A6:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62DA34248922AA539BF955783BF1405E46585A96 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa Signing time: Tue 25 Mar 2025 16:21:38 +0000 ROA not before: Tue 25 Mar 2025 16:21:38 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:da:34:24:89:22:aa:53:9b:f9:55:78:3b:f1:40:5e:46:58:5a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:21:38 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=50ac8c5c656de77f9b21f6561f611348f31101e1c1322d62a2d96e0e7130cdf7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:ff:a7:e9:68:50:6a:46:d9:a8:26:5e:5c: 60:fa:c8:ad:f9:1d:47:79:50:62:f4:f5:56:f8:ba: dc:da:d5:2a:74:b3:a8:37:ce:9e:41:13:da:74:65: 8d:df:09:8d:91:08:c3:bc:3f:b1:57:a6:02:30:08: b3:6c:d3:e5:da:cc:15:b7:2c:a6:b4:bd:10:46:1a: 7f:88:3d:00:eb:56:15:63:49:77:28:cb:57:2b:b3: 9e:17:7b:0f:1e:13:77:7b:c9:e6:72:71:e6:ec:0f: 04:dc:c9:80:3d:1a:7c:6c:10:63:d0:f4:d8:12:60: 45:b0:f1:32:4a:6c:3e:f6:b3:74:c6:c3:d1:c6:34: 83:75:e1:17:04:88:ed:cd:ae:48:dd:a5:01:ed:39: 41:92:3d:6d:a3:b3:dc:f7:df:a1:08:55:23:ff:73: 51:f5:d7:22:bc:71:d3:6f:4b:e8:ad:a1:67:9f:4d: 53:a9:cf:5f:1f:e2:0b:f1:f3:87:9e:f2:19:d5:af: f7:73:3e:95:e2:05:06:7e:50:ff:56:67:9d:d0:b1: e7:62:62:a0:59:e7:76:64:0b:70:aa:35:1d:a4:45: c1:09:ea:61:86:0d:e0:9f:c3:af:a2:7a:29:a1:b3: f5:3a:31:b2:93:1c:3c:07:46:d1:50:35:f7:22:e3: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:66:DA:A6:DC:58:40:A2:67:68:6A:D0:35:31:DB:1F:6B:A6:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 76:15:e7:c7:f7:68:d4:d0:55:88:3f:6b:5b:85:64:94:77:09: f2:f6:c4:50:d2:3c:9c:c8:8e:96:e8:c4:4e:08:c5:b2:6e:1f: 3d:77:f8:cf:fc:6f:2c:db:0b:fc:53:cf:dc:ca:c6:e5:37:af: 8b:23:78:b4:82:f5:77:49:2c:10:f2:a0:d9:78:43:89:be:79: a3:ac:9c:30:56:06:3c:b4:12:82:9d:89:21:83:2b:7e:1b:11: 05:e1:12:f7:9c:04:f4:b7:a3:cd:6e:41:f2:cc:4b:50:26:50: 91:b4:73:a7:60:33:13:1c:86:e4:6a:00:c4:1c:ff:b5:8b:2a: 0a:51:67:5d:fd:af:35:13:d4:b8:6b:28:88:76:cd:e8:d2:03: 74:3a:76:23:b5:1c:95:1c:3a:5c:40:69:26:4a:b7:f4:65:77: 9e:0f:a6:eb:f1:4e:52:78:b4:29:58:68:2b:84:62:2f:1e:24: e4:f9:ef:9b:82:d3:94:1e:0b:4a:5e:69:8b:ad:79:a8:2f:2a: bb:81:bf:7d:4a:98:e8:d8:e6:1d:3b:c3:0b:46:a3:1f:e6:50: b1:c4:67:d2:d1:92:5e:08:1d:da:95:62:a5:ba:cd:ac:4a:ef: 35:5c:b8:1a:a2:db:22:91:7d:23:8f:80:7a:35:46:fc:53:93: 78:2e:8b:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYto0JIkiqlOb+VV4O/FAXkZYWpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MjEzOFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANTBhYzhjNWM2NTZkZTc3ZjliMjFm NjU2MWY2MTEzNDhmMzExMDFlMWMxMzIyZDYyYTJkOTZlMGU3MTMwY2RmNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDT/p+loUGpG2agmXlxg+sit+R1H eVBi9PVW+Lrc2tUqdLOoN86eQRPadGWN3wmNkQjDvD+xV6YCMAizbNPl2swVtyym tL0QRhp/iD0A61YVY0l3KMtXK7OeF3sPHhN3e8nmcnHm7A8E3MmAPRp8bBBj0PTY EmBFsPEySmw+9rN0xsPRxjSDdeEXBIjtza5I3aUB7TlBkj1to7Pc99+hCFUj/3NR 9dcivHHTb0voraFnn01Tqc9fH+IL8fOHnvIZ1a/3cz6V4gUGflD/Vmed0LHnYmKg Wed2ZAtwqjUdpEXBCephhg3gn8OvonopobP1OjGykxw8B0bRUDX3IuM2JwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC/EZtqm3FhAomdoatA1Mdsfa6b3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMWY2YmE3LWFlY2YtNDg3MS1hOWYyLTNlMjBmZjM1NzE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCAwDQYJKoZIhvcNAQELBQADggEBAHYV58f3aNTQVYg/a1uF ZJR3CfL2xFDSPJzIjpboxE4IxbJuHz13+M/8byzbC/xTz9zKxuU3r4sjeLSC9XdJ LBDyoNl4Q4m+eaOsnDBWBjy0EoKdiSGDK34bEQXhEvecBPS3o81uQfLMS1AmUJG0 c6dgMxMchuRqAMQc/7WLKgpRZ139rzUT1LhrKIh2zejSA3Q6diO1HJUcOlxAaSZK t/Rld54PpuvxTlJ4tClYaCuEYi8eJOT575uC05QeC0peaYuteagvKruBv31KmOjY 5h07wwtGox/mULHEZ9LRkl4IHdqVYqW6zaxK7zVcuBqi2yKRfSOPgHo1RvxTk3gu iyA= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:43 2025 by rpki-client