$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa File: ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa (raw, json) Hash identifier: 0hl/E82YQVsZ2gt8qQ4pKrfXumJBmIemWrkjwokUfDs= Subject key identifier: D6:86:CF:87:74:D9:2B:59:92:AA:3B:F0:C4:9B:76:63:86:D2:00:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73058EEA801C131872983B62CC237CA117D3EBDE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa Signing time: Tue 25 Mar 2025 15:10:19 +0000 ROA not before: Tue 25 Mar 2025 15:10:19 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:9040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:05:8e:ea:80:1c:13:18:72:98:3b:62:cc:23:7c:a1:17:d3:eb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:10:19 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=bcf33f694df69f2fdca43e31e5500913e481698f9b43912b3ee2f7738e2c44a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:84:8a:8e:74:99:b9:9e:27:20:cd:aa:82: 5d:9d:3f:d1:7b:99:52:26:91:6d:9a:9a:ba:d8:c0: 9b:19:6b:29:84:47:b5:22:a7:4d:1e:95:92:75:45: 05:f0:b2:4d:28:58:71:fa:ee:7c:1a:1d:66:6b:c8: 36:ec:7b:37:6b:42:6a:d7:66:a4:4f:b4:04:fb:d2: 84:2a:ad:2a:94:b8:ea:cb:1e:93:73:31:ef:41:1e: 1a:12:6c:aa:a9:69:e5:3d:c2:f1:82:f4:71:17:f3: 71:b6:f2:fe:19:ef:06:6c:4e:65:df:1c:06:f9:7f: 49:a2:ac:ae:fb:ca:ac:51:87:3a:b0:49:7d:53:d8: 11:25:df:df:66:bc:c0:3f:7d:ff:2b:f9:10:0b:85: e9:e4:f7:43:94:3d:91:2f:b6:94:04:8c:e1:f8:af: 0c:1e:c2:46:d5:85:8a:11:a7:43:8e:90:46:e7:16: 0e:48:74:b5:80:e0:79:18:ad:de:b0:b5:c4:1d:65: 49:0b:6c:34:f3:e0:57:6f:55:89:42:f4:49:5d:32: 49:e6:28:33:dd:e7:2f:c6:4a:b7:f9:ba:06:48:e0: a5:c3:dc:84:d9:c6:8b:b1:d3:f5:8c:e6:4e:ea:30: 6b:7c:ed:35:35:7d:ac:13:a8:cb:d4:0f:b1:a6:e1: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:CF:87:74:D9:2B:59:92:AA:3B:F0:C4:9B:76:63:86:D2:00:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:9040::/46 Signature Algorithm: sha256WithRSAEncryption 71:9c:11:9e:d1:46:43:49:ea:c3:7b:46:48:89:39:e2:ed:dc: dd:82:e8:b6:4f:9e:76:74:ad:8f:a4:5e:7f:4f:c0:58:15:4f: 84:bc:1a:cc:0b:50:79:96:89:e9:fb:03:38:1a:d7:cb:0e:b8: ac:e5:4c:94:96:93:27:7d:bb:13:23:ff:d8:40:d7:bf:fe:89: 2d:de:a7:16:bf:d2:b8:92:b2:4b:7b:94:79:00:b6:39:4e:6e: d6:0e:1e:7d:e3:79:7a:c8:b7:7c:0c:8a:09:c2:46:3e:23:26: c5:9f:39:6d:79:84:d4:53:1b:c9:a9:b2:64:70:0c:b2:4f:2a: 51:01:76:41:83:6f:20:f3:09:47:2d:a4:7d:24:ae:1c:64:90: 70:9f:60:d2:87:61:02:2d:b4:a2:4f:69:f8:f1:ba:3e:11:6c: ac:99:7c:90:25:53:f3:cd:6c:69:f0:ce:f9:e0:73:0c:9d:a3: 87:fb:fa:6c:99:7d:77:38:ff:fb:76:2b:47:16:f5:52:c2:ef: 68:d0:7a:1e:6a:49:6c:a1:e9:4d:29:67:1d:87:c4:d6:76:0b: 0c:26:b3:1c:9e:9c:3b:86:73:1f:c2:36:ae:ca:f9:55:5c:ef: 41:c0:1a:3e:ee:6b:fd:ac:04:cb:4e:9a:f1:b6:5d:a1:46:c0: 4f:ee:f2:f1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcwWO6oAcExhymDtizCN8oRfT694wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MTAxOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYmNmMzNmNjk0ZGY2OWYyZmRjYTQz ZTMxZTU1MDA5MTNlNDgxNjk4ZjliNDM5MTJiM2VlMmY3NzM4ZTJjNDRhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE6Eio50mbmeJyDNqoJdnT/Re5lS JpFtmpq62MCbGWsphEe1IqdNHpWSdUUF8LJNKFhx+u58Gh1ma8g27Hs3a0Jq12ak T7QE+9KEKq0qlLjqyx6TczHvQR4aEmyqqWnlPcLxgvRxF/NxtvL+Ge8GbE5l3xwG +X9Joqyu+8qsUYc6sEl9U9gRJd/fZrzAP33/K/kQC4Xp5PdDlD2RL7aUBIzh+K8M HsJG1YWKEadDjpBG5xYOSHS1gOB5GK3esLXEHWVJC2w08+BXb1WJQvRJXTJJ5igz 3ecvxkq3+boGSOClw9yE2caLsdP1jOZO6jBrfO01NX2sE6jL1A+xpuHywQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNaGz4d02StZkqo78MSbdmOG0gAVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlN2YxM2U3LTFjYWUtNDdiYS05MDA2LTg0MWE0ZDRkOWU1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaZBAMA0GCSqGSIb3DQEBCwUAA4IBAQBxnBGe0UZDSerDe0ZI iTni7dzdgui2T552dK2PpF5/T8BYFU+EvBrMC1B5lonp+wM4GtfLDris5UyUlpMn fbsTI//YQNe//okt3qcWv9K4krJLe5R5ALY5Tm7WDh5943l6yLd8DIoJwkY+IybF nzlteYTUUxvJqbJkcAyyTypRAXZBg28g8wlHLaR9JK4cZJBwn2DSh2ECLbSiT2n4 8bo+EWysmXyQJVPzzWxp8M754HMMnaOH+/psmX13OP/7ditHFvVSwu9o0Hoeakls oelNKWcdh8TWdgsMJrMcnpw7hnMfwjauyvlVXO9BwBo+7mv9rATLTprxtl2hRsBP 7vLx -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:03 2025 by rpki-client