$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/be8702e9-72df-463a-bb7d-aa1daff3f574.roa File: be8702e9-72df-463a-bb7d-aa1daff3f574.roa (raw, json) Hash identifier: uvJYHfLDWYNYp9PV7byGFQCL6B2cDP3uAW8rxcLL8aQ= Subject key identifier: 19:43:8F:92:BC:D9:94:DE:BF:67:C2:FA:DD:7E:9F:90:0A:7C:A9:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C807E147651FB18B735C713A48E67C60CEFA635 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/be8702e9-72df-463a-bb7d-aa1daff3f574.roa Signing time: Tue 25 Mar 2025 00:41:21 +0000 ROA not before: Tue 25 Mar 2025 00:41:21 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:80:7e:14:76:51:fb:18:b7:35:c7:13:a4:8e:67:c6:0c:ef:a6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:41:21 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=f3c04c3e5f3e5863094a354969706c2806bec73efc0d32c4bcc9f4b3bc33da08, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:1c:d2:50:f3:07:13:f4:35:c6:09:2d:78: 00:49:ed:1b:66:80:d1:39:90:fc:0d:d7:84:7c:b9: 56:a5:a6:fb:8a:aa:34:37:2b:e9:a2:d8:cb:3f:3a: 60:36:0b:fa:fe:03:74:b8:00:ba:e9:d3:53:4c:59: c0:05:a5:df:b6:74:2e:ee:c9:05:94:b2:e9:7e:f4: 8e:aa:a2:f6:5f:b2:7c:ef:a2:2e:70:64:d8:1e:b9: d4:53:99:af:cb:00:5c:c9:d4:ad:12:1a:f2:4c:16: 39:68:3d:c9:2e:66:54:fc:51:f1:82:41:a8:f8:4d: ef:48:42:42:b3:33:fd:08:dc:8b:d9:0f:61:22:b7: 91:ca:03:9c:97:67:3e:d0:38:ed:be:fa:9a:5f:c1: ac:ea:1e:4f:c7:89:43:7f:e5:0d:04:3a:e0:6e:8e: d9:ef:20:29:a3:fe:cc:84:4e:fe:8e:d0:0c:b3:a2: 2a:71:b1:78:82:ab:7c:86:25:b8:78:0e:15:05:b7: 65:75:42:37:2d:65:18:aa:4c:97:39:bd:01:43:b0: 4d:f6:f9:3a:0c:41:2b:be:83:c9:76:4d:82:8d:83: 40:a1:c6:ce:62:29:ba:99:1c:bd:82:55:a8:30:20: 4e:33:aa:a6:6b:8b:08:64:e7:03:0d:99:38:cf:84: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:43:8F:92:BC:D9:94:DE:BF:67:C2:FA:DD:7E:9F:90:0A:7C:A9:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/be8702e9-72df-463a-bb7d-aa1daff3f574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a000::/40 Signature Algorithm: sha256WithRSAEncryption 9d:3d:df:49:f5:80:1c:87:8b:35:5f:d1:05:eb:3a:5a:2f:ed: 77:3e:27:0a:cb:f5:a8:b4:b1:f5:ac:e0:64:70:c1:67:fa:9e: 42:e3:a4:c0:ac:b5:56:13:a6:2b:7e:98:4d:f0:4b:88:54:13: 14:f5:a3:b2:46:3e:83:c7:ea:30:13:19:0e:68:ae:70:4a:51: d3:53:4d:7c:2a:3a:4c:41:5b:76:20:bb:a1:bc:29:a1:7e:1c: 06:7d:ed:22:eb:43:0b:7d:63:a4:66:51:54:c8:7f:70:f4:cb: 53:ef:e1:57:4c:5a:5c:0b:1c:06:e0:93:c6:5e:23:56:b7:f3: bd:09:91:d1:7a:75:35:bf:45:ab:1f:1b:1f:ed:f2:c6:36:da: 98:b2:c6:54:db:85:b2:38:8c:cc:34:46:a6:b1:c2:24:ed:ab: 03:c5:b7:5d:3a:2f:d2:00:5d:8f:04:68:a9:df:dc:3c:fc:90: 1d:fd:b3:13:06:d8:c6:21:61:51:b5:58:24:41:b6:f0:df:79: 53:33:ae:a1:4c:03:1b:70:42:b9:c4:9e:d4:17:9b:35:82:ba: 88:42:b1:ba:ff:a9:b0:a5:4e:70:1d:14:e9:c3:02:46:eb:7b: d6:6e:be:1b:1b:41:5c:77:a0:47:23:25:8d:e7:fb:b4:ad:27: 3b:3a:06:4e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULIB+FHZR+xi3NccTpI5nxgzvpjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNDEyMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjNjMDRjM2U1ZjNlNTg2MzA5NGEz NTQ5Njk3MDZjMjgwNmJlYzczZWZjMGQzMmM0YmNjOWY0YjNiYzMzZGEwODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvakc0lDzBxP0NcYJLXgASe0bZoDR OZD8DdeEfLlWpab7iqo0NyvpotjLPzpgNgv6/gN0uAC66dNTTFnABaXftnQu7skF lLLpfvSOqqL2X7J876IucGTYHrnUU5mvywBcydStEhryTBY5aD3JLmZU/FHxgkGo +E3vSEJCszP9CNyL2Q9hIreRygOcl2c+0DjtvvqaX8Gs6h5Px4lDf+UNBDrgbo7Z 7yApo/7MhE7+jtAMs6IqcbF4gqt8hiW4eA4VBbdldUI3LWUYqkyXOb0BQ7BN9vk6 DEErvoPJdk2CjYNAocbOYim6mRy9glWoMCBOM6qma4sIZOcDDZk4z4Qu4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBlDj5K82ZTev2fC+t1+n5AKfKmXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JlODcwMmU5LTcyZGYtNDYzYS1iYjdkLWFhMWRhZmYzZjU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/6AwDQYJKoZIhvcNAQELBQADggEBAJ0930n1gByHizVf0QXr Olov7Xc+JwrL9ai0sfWs4GRwwWf6nkLjpMCstVYTpit+mE3wS4hUExT1o7JGPoPH 6jATGQ5ornBKUdNTTXwqOkxBW3Ygu6G8KaF+HAZ97SLrQwt9Y6RmUVTIf3D0y1Pv 4VdMWlwLHAbgk8ZeI1a3870JkdF6dTW/RasfGx/t8sY22piyxlTbhbI4jMw0Rqax wiTtqwPFt106L9IAXY8EaKnf3Dz8kB39sxMG2MYhYVG1WCRBtvDfeVMzrqFMAxtw QrnEntQXmzWCuohCsbr/qbClTnAdFOnDAkbre9ZuvhsbQVx3oEcjJY3n+7StJzs6 Bk4= -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:35 2025 by rpki-client