$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfd05aec-788a-41d2-879d-63b299e1cbde.roa File: bfd05aec-788a-41d2-879d-63b299e1cbde.roa (raw, json) Hash identifier: 8zAXNlOt4/+X8TqajJJCyjABn4EqkcNqlhSiNx98vxY= Subject key identifier: 79:FD:D2:6B:79:02:B1:30:0E:88:DD:F8:73:C8:1D:3D:A4:32:60:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12ECB51FA969C535931B28B86E8014C363C727BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfd05aec-788a-41d2-879d-63b299e1cbde.roa Signing time: Tue 25 Mar 2025 00:21:37 +0000 ROA not before: Tue 25 Mar 2025 00:21:37 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ec:b5:1f:a9:69:c5:35:93:1b:28:b8:6e:80:14:c3:63:c7:27:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:21:37 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=bfb0e9642c3776031a386f13e697dfb62994539675f1444019cee8b3b6c8970b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:78:d2:6b:db:a3:4f:e0:91:60:b8:a8:25: ce:a2:ca:0d:e0:53:d5:e0:f6:e1:ee:b8:6a:fd:32: 33:fd:cf:ff:5e:77:a8:84:7f:85:25:f4:19:4d:32: ac:07:d1:ed:e5:fc:44:5d:ed:d4:25:51:4b:97:90: ee:02:32:0c:40:79:97:11:1e:d1:67:39:98:24:7e: 8e:15:c1:d7:35:a1:a2:b1:c9:82:45:72:be:f4:d6: fa:8f:7c:1e:b9:43:7b:05:93:fa:f3:cf:da:fc:d8: 8c:15:e8:2b:7c:9a:a7:85:6e:e3:36:56:68:d7:24: b4:3d:d0:c2:8b:17:0e:bc:bb:c5:91:53:2c:de:64: 2b:31:6c:0a:06:da:5b:95:24:fd:ab:d6:71:bc:37: 4b:56:5b:97:21:bd:80:4a:c6:a7:a2:12:8f:e2:da: 91:ae:c5:b8:02:39:54:d2:c0:39:76:6b:7a:9d:6e: 8f:8d:98:28:cb:84:00:bb:fd:f9:be:9f:1f:8d:33: aa:b8:3c:d9:93:84:63:6b:90:08:3f:fb:7e:77:50: fe:86:f1:44:07:5e:f7:cb:3b:c4:d7:f5:06:7b:52: 44:39:fe:06:00:f9:cd:27:9d:86:5f:57:6d:bc:17: d7:61:6f:a1:a5:5e:6f:7a:d4:70:3c:65:19:51:90: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:D2:6B:79:02:B1:30:0E:88:DD:F8:73:C8:1D:3D:A4:32:60:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfd05aec-788a-41d2-879d-63b299e1cbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4840::/48 Signature Algorithm: sha256WithRSAEncryption 99:56:18:3a:0e:78:ca:1c:d5:a7:c3:1d:ac:6a:ad:86:4b:5e: 36:c8:2e:b9:f6:46:7d:c4:82:f0:12:b3:6a:78:82:ed:e5:e1: 06:a7:be:9b:de:b3:64:f5:0a:09:09:72:72:b4:97:c6:7e:9e: 1d:47:e6:35:cb:2c:86:ac:01:32:81:1f:d1:6b:47:a7:4a:8a: ff:b4:90:67:68:93:f8:fe:05:8b:bd:d5:b8:a0:2d:18:9c:7e: a4:1b:67:86:a9:5b:05:ee:2f:b9:ec:75:09:2b:4a:f3:43:81: 55:c8:f4:27:d4:65:da:5a:7a:00:2a:e8:2a:33:16:f1:e2:73: 54:1e:6d:bf:f9:97:83:07:9d:5e:4e:f7:cc:5a:28:9c:34:6a: 94:24:31:01:8a:fc:3b:8f:4d:30:cb:33:85:df:32:b4:3f:5b: 3c:ba:1e:42:ea:63:78:c7:e4:7d:aa:4d:8a:cd:df:b7:4c:51: d1:19:a5:f7:6a:a6:b1:8d:fe:9f:ef:da:30:e1:45:3b:2f:ed: 26:fb:51:cd:d5:30:74:59:6a:c7:a9:4e:4c:98:04:bb:21:9c: a1:0f:d4:da:8e:eb:ef:a1:84:ce:d1:59:6c:b5:71:44:52:27: e6:ae:36:61:2e:25:f4:49:da:ff:11:9a:40:40:60:1d:3e:b9: aa:d3:80:f7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEuy1H6lpxTWTGyi4boAUw2PHJ74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMjEzN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYmZiMGU5NjQyYzM3NzYwMzFhMzg2 ZjEzZTY5N2RmYjYyOTk0NTM5Njc1ZjE0NDQwMTljZWU4YjNiNmM4OTcwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FZ40mvbo0/gkWC4qCXOosoN4FPV 4Pbh7rhq/TIz/c//XneohH+FJfQZTTKsB9Ht5fxEXe3UJVFLl5DuAjIMQHmXER7R ZzmYJH6OFcHXNaGiscmCRXK+9Nb6j3weuUN7BZP688/a/NiMFegrfJqnhW7jNlZo 1yS0PdDCixcOvLvFkVMs3mQrMWwKBtpblST9q9ZxvDdLVluXIb2ASsanohKP4tqR rsW4AjlU0sA5dmt6nW6PjZgoy4QAu/35vp8fjTOquDzZk4Rja5AIP/t+d1D+hvFE B173yzvE1/UGe1JEOf4GAPnNJ52GX1dtvBfXYW+hpV5vetRwPGUZUZDWgQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHn90mt5ArEwDojd+HPIHT2kMmBAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmZDA1YWVjLTc4OGEtNDFkMi04NzlkLTYzYjI5OWUxY2JkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9EhAMA0GCSqGSIb3DQEBCwUAA4IBAQCZVhg6DnjKHNWnwx2s aq2GS142yC659kZ9xILwErNqeILt5eEGp76b3rNk9QoJCXJytJfGfp4dR+Y1yyyG rAEygR/Ra0enSor/tJBnaJP4/gWLvdW4oC0YnH6kG2eGqVsF7i+57HUJK0rzQ4FV yPQn1GXaWnoAKugqMxbx4nNUHm2/+ZeDB51eTvfMWiicNGqUJDEBivw7j00wyzOF 3zK0P1s8uh5C6mN4x+R9qk2Kzd+3TFHRGaX3aqaxjf6f79ow4UU7L+0m+1HN1TB0 WWrHqU5MmAS7IZyhD9TajuvvoYTO0VlstXFEUifmrjZhLiX0Sdr/EZpAQGAdPrmq 04D3 -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:35 2025 by rpki-client