$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd615635-78d1-4128-b9c0-875d0c12c31d.roa File: dd615635-78d1-4128-b9c0-875d0c12c31d.roa (raw, json) Hash identifier: DOLLno3CoW8yhAOYBOyXdtQt+iilMy7KYktmEglXYdY= Subject key identifier: 32:43:09:2D:46:C8:21:BE:4F:C6:29:4A:DC:BA:16:0F:EF:5E:F1:12 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BA8C0A954FB6B124828C0E5E3E3672044AA0028 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd615635-78d1-4128-b9c0-875d0c12c31d.roa Signing time: Tue 25 Mar 2025 15:01:18 +0000 ROA not before: Tue 25 Mar 2025 15:01:18 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a8:c0:a9:54:fb:6b:12:48:28:c0:e5:e3:e3:67:20:44:aa:00:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:01:18 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=88bc949fa1881bf8cfdfb7dc61305a2e6e64e85da381f8f967093ded5cf16efa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:90:ef:de:32:40:f8:44:91:9c:e5:46:5a:85: eb:84:74:08:d6:0d:71:c0:9f:fb:45:83:07:66:7f: 54:45:e1:b3:d7:05:54:03:e0:72:2f:58:29:7f:f9: 5c:f6:a0:62:e8:48:04:96:fc:82:63:22:d8:8a:ea: a8:15:8e:20:83:7a:47:9a:99:b0:10:14:32:c7:f5: 14:52:d6:a4:ab:69:9d:ee:f8:b6:41:dc:17:30:e9: 7e:6c:e8:8c:c4:a4:13:9c:13:6d:46:ec:27:7a:8c: 36:23:d5:49:ab:6b:6a:d1:72:ed:54:6a:26:41:71: 1f:d3:18:44:75:ec:bd:17:01:18:01:81:f5:b0:10: 0e:0f:f2:04:f8:0a:0a:e1:99:25:26:09:cc:17:90: ca:74:ed:56:44:d1:52:41:57:ec:07:c5:e0:54:35: f3:19:96:6f:9e:7e:7a:de:f3:21:c8:f7:bb:e8:7f: 47:2f:db:03:63:37:7f:a2:5b:27:13:3b:f3:10:69: ea:5d:38:ef:97:3e:07:d2:1e:e3:4b:0c:47:c9:cb: f0:5a:0c:19:61:d5:0b:0f:d6:e4:ec:02:f0:df:e1: 99:f2:7d:3d:e1:82:71:10:dc:6d:c2:68:c4:c2:c4: b7:f9:4f:26:48:5d:6d:41:b8:20:15:f9:f0:dc:3f: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:09:2D:46:C8:21:BE:4F:C6:29:4A:DC:BA:16:0F:EF:5E:F1:12 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd615635-78d1-4128-b9c0-875d0c12c31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:a000::/40 Signature Algorithm: sha256WithRSAEncryption 6f:91:06:da:52:82:c6:f4:10:4e:33:7c:e3:18:c4:28:2a:18: 12:54:4a:5b:e3:40:5b:40:5c:91:a9:89:06:90:13:23:68:89: 88:ce:57:5d:53:1c:52:bd:20:32:b1:e4:82:45:df:f6:62:d8: 96:c1:dd:d1:e1:27:af:2c:d5:4b:c2:92:b2:8a:fd:a9:e5:80: 06:ed:67:9f:c3:d7:e9:40:55:02:11:bb:0e:75:0e:3f:a4:b2: ef:46:b0:1c:79:91:ad:1c:6b:ef:96:1b:1b:96:4e:fd:5a:0d: a7:a9:1b:6d:92:24:85:19:6a:49:fc:6c:7d:0a:c3:77:56:30: 8e:ac:a3:fb:89:4f:9f:96:d1:b4:82:3b:29:e3:fa:10:d9:27: aa:aa:0b:ce:b9:ad:8e:49:ba:f6:f9:6d:e5:fa:79:9b:94:16: 1d:7b:b8:6d:a6:d0:37:f7:9b:26:cd:d1:c3:99:95:cd:7d:b2: 8c:3f:86:43:1b:a3:51:5b:5d:6f:23:8a:63:ae:ec:70:3c:be: 2c:1b:d1:97:e5:d7:26:67:bb:7c:b7:df:61:53:92:67:b0:d5: 66:2e:a4:ef:5f:18:3e:70:10:2b:ea:75:de:d7:74:b6:4b:25: 96:ca:00:07:8e:fb:99:ea:1a:db:32:87:53:61:1e:dc:7f:77: e0:79:23:71 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO6jAqVT7axJIKMDl4+NnIESqACgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDExOFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAODhiYzk0OWZhMTg4MWJmOGNmZGZi N2RjNjEzMDVhMmU2ZTY0ZTg1ZGEzODFmOGY5NjcwOTNkZWQ1Y2YxNmVmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZDv3jJA+ESRnOVGWoXrhHQI1g1x wJ/7RYMHZn9UReGz1wVUA+ByL1gpf/lc9qBi6EgElvyCYyLYiuqoFY4gg3pHmpmw EBQyx/UUUtakq2md7vi2QdwXMOl+bOiMxKQTnBNtRuwneow2I9VJq2tq0XLtVGom QXEf0xhEdey9FwEYAYH1sBAOD/IE+AoK4ZklJgnMF5DKdO1WRNFSQVfsB8XgVDXz GZZvnn563vMhyPe76H9HL9sDYzd/olsnEzvzEGnqXTjvlz4H0h7jSwxHycvwWgwZ YdULD9bk7ALw3+GZ8n094YJxENxtwmjEwsS3+U8mSF1tQbggFfnw3D/s5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDJDCS1GyCG+T8YpSty6Fg/vXvESMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkNjE1NjM1LTc4ZDEtNDEyOC1iOWMwLTg3NWQwYzEyYzMxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8qAwDQYJKoZIhvcNAQELBQADggEBAG+RBtpSgsb0EE4zfOMY xCgqGBJUSlvjQFtAXJGpiQaQEyNoiYjOV11THFK9IDKx5IJF3/Zi2JbB3dHhJ68s 1UvCkrKK/anlgAbtZ5/D1+lAVQIRuw51Dj+ksu9GsBx5ka0ca++WGxuWTv1aDaep G22SJIUZakn8bH0Kw3dWMI6so/uJT5+W0bSCOynj+hDZJ6qqC865rY5Juvb5beX6 eZuUFh17uG2m0Df3mybN0cOZlc19sow/hkMbo1FbXW8jimOu7HA8viwb0Zfl1yZn u3y332FTkmew1WYupO9fGD5wECvqdd7XdLZLJZbKAAeO+5nqGtsyh1NhHtx/d+B5 I3E= -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:43 2025 by rpki-client