$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa File: bbc222e6-116f-4448-906c-f1f4faecf1a2.roa (raw, json) Hash identifier: RcY/kh0/Uh1sgN5+JW9yoqQl8aFzC0OTX0E9e1IMvqc= Subject key identifier: 95:C4:5C:3F:28:05:4B:BD:7F:4C:AB:73:58:10:ED:40:4D:81:DF:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A51760BA0ACFFC983C661E6A68F25B062ADFE3E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa Signing time: Tue 25 Mar 2025 15:21:39 +0000 ROA not before: Tue 25 Mar 2025 15:21:39 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:51:76:0b:a0:ac:ff:c9:83:c6:61:e6:a6:8f:25:b0:62:ad:fe:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:21:39 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=d3dc602257b60722cefb878dcadd4ef45c573a0ffb074fb1b07f34765fb5df7e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:60:8d:8f:af:91:d8:91:b9:46:fd:27:69: c4:6b:bd:c8:36:2e:64:9d:e9:68:e4:e5:fa:e0:85: 2d:07:10:2a:9d:68:20:54:b5:01:f2:df:1b:89:f8: 93:da:a0:59:17:f4:5c:ba:9f:07:35:0e:71:4e:04: a5:7c:46:31:98:17:82:92:66:9d:7d:4d:57:4e:ba: de:bc:3a:eb:cc:ae:0e:56:f1:d4:73:80:40:c3:22: 88:08:70:61:b9:92:9f:90:7f:f1:69:a2:12:88:69: ee:6a:b8:69:9c:bc:cf:02:43:b5:64:72:e2:d3:9f: 90:6f:28:c4:20:06:f4:c4:58:e6:62:f2:4c:2f:b4: b7:24:8d:ed:f5:48:fb:9e:3d:b7:1f:88:95:47:32: bf:e5:41:9f:8f:b3:43:c9:35:ae:d4:cc:f7:1e:eb: e7:f6:3a:13:db:ce:73:aa:5f:f3:02:b3:cb:33:8e: 2d:31:1d:b5:86:11:1b:16:75:23:67:15:b3:52:17: 4d:6b:41:6f:de:7a:9c:64:fb:f3:55:bc:ab:89:eb: dd:c9:68:99:17:7c:65:f1:aa:8b:a7:eb:18:ea:0f: e9:36:8e:ad:d4:54:64:8c:4e:06:ea:bc:95:b7:a2: 8e:99:44:85:f6:59:cc:da:94:be:d9:91:bd:4d:f1: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C4:5C:3F:28:05:4B:BD:7F:4C:AB:73:58:10:ED:40:4D:81:DF:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:80c0::/46 Signature Algorithm: sha256WithRSAEncryption 90:33:3e:65:ca:76:8b:07:ce:5e:f7:13:52:d7:c4:1e:6f:e6: 15:3e:0c:fe:10:1e:71:a1:ca:72:09:b6:1c:a7:25:21:b5:00: 78:50:c9:8d:27:22:1d:ff:44:d3:69:63:40:21:d8:ca:6b:b5: ea:ea:ce:21:92:89:48:70:f4:4d:cc:7b:c5:b3:58:c1:70:c3: 99:68:3b:5b:05:7c:99:2b:a1:d2:12:5c:a0:7c:6f:40:16:2d: d5:b2:94:39:2a:45:19:b3:aa:ef:5f:a1:dd:5b:3d:4d:e0:d2: 40:d1:ca:06:6f:c7:21:1e:88:6a:b8:8a:4a:3d:b6:24:0f:79: 0f:2c:ca:70:18:b2:8f:56:79:a1:f1:dc:f1:ae:b6:7b:1c:c5: bc:cf:77:9c:fd:26:52:37:71:5d:e0:c9:a8:9b:39:28:07:f3: af:0d:ba:9e:16:21:db:43:fc:a7:53:a9:db:f1:2e:1d:c1:42: 7f:55:87:19:66:b5:7e:7d:42:b9:4d:bf:35:ce:9e:5f:eb:8c: 52:b8:31:13:fa:db:f1:6b:13:9e:fc:43:7c:8f:80:d3:4b:42: 6a:ef:76:95:0f:89:84:65:8d:ec:eb:5e:5a:e0:85:29:eb:a4: f5:65:f2:d5:ba:d3:6b:f2:4f:13:4a:bd:ef:42:04:53:0a:9f: e3:e0:ce:bd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUClF2C6Cs/8mDxmHmpo8lsGKt/j4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MjEzOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZDNkYzYwMjI1N2I2MDcyMmNlZmI4 NzhkY2FkZDRlZjQ1YzU3M2EwZmZiMDc0ZmIxYjA3ZjM0NzY1ZmI1ZGY3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYRgjY+vkdiRuUb9J2nEa73INi5k nelo5OX64IUtBxAqnWggVLUB8t8bifiT2qBZF/Rcup8HNQ5xTgSlfEYxmBeCkmad fU1XTrrevDrrzK4OVvHUc4BAwyKICHBhuZKfkH/xaaISiGnuarhpnLzPAkO1ZHLi 05+QbyjEIAb0xFjmYvJML7S3JI3t9Uj7nj23H4iVRzK/5UGfj7NDyTWu1Mz3Huvn 9joT285zql/zArPLM44tMR21hhEbFnUjZxWzUhdNa0Fv3nqcZPvzVbyrievdyWiZ F3xl8aqLp+sY6g/pNo6t1FRkjE4G6ryVt6KOmUSF9lnM2pS+2ZG9TfFLvQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJXEXD8oBUu9f0yrc1gQ7UBNgd/hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiYzIyMmU2LTExNmYtNDQ0OC05MDZjLWYxZjRmYWVjZjFhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaYDAMA0GCSqGSIb3DQEBCwUAA4IBAQCQMz5lynaLB85e9xNS 18Qeb+YVPgz+EB5xocpyCbYcpyUhtQB4UMmNJyId/0TTaWNAIdjKa7Xq6s4hkolI cPRNzHvFs1jBcMOZaDtbBXyZK6HSElygfG9AFi3VspQ5KkUZs6rvX6HdWz1N4NJA 0coGb8chHohquIpKPbYkD3kPLMpwGLKPVnmh8dzxrrZ7HMW8z3ec/SZSN3Fd4Mmo mzkoB/OvDbqeFiHbQ/ynU6nb8S4dwUJ/VYcZZrV+fUK5Tb81zp5f64xSuDET+tvx axOe/EN8j4DTS0Jq73aVD4mEZY3s615a4IUp66T1ZfLVutNr8k8TSr3vQgRTCp/j 4M69 -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:40 2025 by rpki-client