$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d857c82f-a402-44db-b300-f24b347c61d1.roa File: d857c82f-a402-44db-b300-f24b347c61d1.roa (raw, json) Hash identifier: xMm/GA4ChZA9lyS5hRnXa9JqkrXEicY2sImkAqCOWmI= Subject key identifier: B3:E2:6E:E2:12:30:51:B6:32:C9:7F:EF:E5:D2:CB:A8:F3:3F:77:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 669C20B0DB885F625AC31D0B51182A5CCA78019F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d857c82f-a402-44db-b300-f24b347c61d1.roa Signing time: Tue 25 Mar 2025 16:31:03 +0000 ROA not before: Tue 25 Mar 2025 16:31:03 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9c:20:b0:db:88:5f:62:5a:c3:1d:0b:51:18:2a:5c:ca:78:01:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:31:03 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=0809d369bd0a8295802ad142a845a17c87907e995141e713b9357806e24a59c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:63:d8:bd:4b:2a:26:c4:ce:d4:91:61:e6: 21:05:80:fe:8b:64:23:62:85:a8:c9:1b:0c:34:bd: 9e:f0:0e:c9:ba:73:d8:ae:08:4f:97:67:ee:b4:87: d9:68:28:8c:83:57:84:67:1e:1d:f2:b3:d4:4b:ff: 4c:43:d6:d4:8b:6e:65:b5:c4:0f:99:d2:31:c9:4c: 82:74:a2:42:43:40:f3:e5:08:8d:54:04:7c:19:b1: 94:51:b1:3c:dd:bf:51:99:29:79:7f:2c:dc:1e:10: 18:f8:3c:04:06:b5:81:a4:d4:6e:8f:d6:49:45:35: fb:20:27:35:e2:e0:1e:5b:1a:d3:a0:6c:0c:ac:ed: 8c:b0:fd:01:f2:70:ec:52:59:15:03:0e:91:b5:be: c0:a8:a2:1a:7c:ef:65:dc:69:91:42:99:df:42:80: 99:b7:a5:74:27:ba:67:9f:06:0f:57:6c:75:ab:b5: 46:09:6c:e0:0c:9b:b7:ad:9c:94:b9:5d:25:1f:01: d0:73:ff:f1:43:c1:64:2d:64:bc:b2:aa:3a:e2:d3: 47:ec:64:ab:24:2f:46:f7:46:8c:e0:eb:2f:fc:6a: a3:b7:4d:2f:bc:a7:04:c2:c5:1d:cf:20:7c:d3:49: 93:97:f2:81:40:36:ec:dd:6a:82:0c:39:52:56:2f: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E2:6E:E2:12:30:51:B6:32:C9:7F:EF:E5:D2:CB:A8:F3:3F:77:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d857c82f-a402-44db-b300-f24b347c61d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:c00::/38 Signature Algorithm: sha256WithRSAEncryption 8b:c1:3c:29:33:4e:58:cd:d8:c3:6f:4e:8e:55:51:13:15:4e: 47:36:64:3a:f1:f9:02:b2:73:df:e5:37:49:88:28:a1:2d:3b: d7:28:50:02:ce:b7:54:8a:b3:7e:5c:05:be:1a:6c:17:13:2c: 72:cc:d0:96:66:c0:da:26:0e:f9:57:2f:02:f5:17:f6:11:b7: db:df:c7:a1:3f:d0:8c:d3:1b:27:d3:9c:39:89:36:3f:39:59: c7:f3:34:0f:d7:f4:a7:fb:c6:be:39:d1:c7:82:24:63:80:a3: 9b:ab:62:39:c9:e0:b9:e1:31:d2:07:2f:01:32:cc:77:80:3b: aa:20:2a:54:c2:77:49:e0:47:88:2b:2f:19:f8:95:70:13:4b: a5:99:e9:8d:ae:4d:a6:86:0e:e5:60:14:ff:6a:4e:93:02:dd: df:5a:ae:9e:96:31:bb:8b:aa:e5:f7:db:12:aa:5a:c2:59:d9: 30:99:d2:2b:8c:4f:d6:46:f2:cd:18:77:ce:b3:69:ff:0c:29: 87:ac:a3:bc:0d:c8:4c:2a:79:c0:28:22:6a:4b:8e:b6:46:bb: 12:1c:ac:b5:f5:00:17:d8:1b:7d:5b:d4:bb:54:15:23:89:46: 26:6f:6a:0c:a8:e8:45:cb:44:31:3d:3a:28:b8:48:27:61:52: 36:47:6c:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZpwgsNuIX2Jawx0LURgqXMp4AZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MzEwM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMDgwOWQzNjliZDBhODI5NTgwMmFk MTQyYTg0NWExN2M4NzkwN2U5OTUxNDFlNzEzYjkzNTc4MDZlMjRhNTljMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g1j2L1LKibEztSRYeYhBYD+i2Qj YoWoyRsMNL2e8A7JunPYrghPl2futIfZaCiMg1eEZx4d8rPUS/9MQ9bUi25ltcQP mdIxyUyCdKJCQ0Dz5QiNVAR8GbGUUbE83b9RmSl5fyzcHhAY+DwEBrWBpNRuj9ZJ RTX7ICc14uAeWxrToGwMrO2MsP0B8nDsUlkVAw6Rtb7AqKIafO9l3GmRQpnfQoCZ t6V0J7pnnwYPV2x1q7VGCWzgDJu3rZyUuV0lHwHQc//xQ8FkLWS8sqo64tNH7GSr JC9G90aM4Osv/Gqjt00vvKcEwsUdzyB800mTl/KBQDbs3WqCDDlSVi9H6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLPibuISMFG2Msl/7+XSy6jzP3fRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NTdjODJmLWE0MDItNDRkYi1iMzAwLWYyNGIzNDdjNjFkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAwwDQYJKoZIhvcNAQELBQADggEBAIvBPCkzTljN2MNvTo5V URMVTkc2ZDrx+QKyc9/lN0mIKKEtO9coUALOt1SKs35cBb4abBcTLHLM0JZmwNom DvlXLwL1F/YRt9vfx6E/0IzTGyfTnDmJNj85WcfzNA/X9Kf7xr450ceCJGOAo5ur YjnJ4LnhMdIHLwEyzHeAO6ogKlTCd0ngR4grLxn4lXATS6WZ6Y2uTaaGDuVgFP9q TpMC3d9arp6WMbuLquX32xKqWsJZ2TCZ0iuMT9ZG8s0Yd86zaf8MKYeso7wNyEwq ecAoImpLjrZGuxIcrLX1ABfYG31b1LtUFSOJRiZvagyo6EXLRDE9Oii4SCdhUjZH bGQ= -----END CERTIFICATE-----Generated at Thu Apr 17 17:24:34 2025 by rpki-client