$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa File: df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa (raw, json) Hash identifier: JRWdIcewlAkKZfOHTOKTK9DWO9B3lGSyuF2IrwudhQ0= Subject key identifier: AF:A7:26:BC:05:7C:23:15:9F:28:45:EE:1D:83:04:36:0C:79:92:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 109845E69A5C0884820CC866BB81498641F8AA2C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa Signing time: Fri 28 Mar 2025 00:00:17 +0000 ROA not before: Fri 28 Mar 2025 00:00:17 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:98:45:e6:9a:5c:08:84:82:0c:c8:66:bb:81:49:86:41:f8:aa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 28 00:00:17 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=4fb778de7ba29e0837dfb55aa81de7cd8711bf1a0e2c7d3ec299fa36877eb5ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:ea:c5:f3:34:4b:1d:26:23:bf:c0:08:ba: 96:1a:57:2e:16:c1:68:82:63:02:98:66:49:97:b0: 63:12:aa:9f:c2:5b:2d:0d:75:41:0a:74:bc:ca:31: e9:1a:53:2c:08:81:79:06:5b:fc:35:32:1c:df:f6: 4e:2f:2a:af:fd:31:46:37:e5:f1:c0:75:94:a1:55: 74:52:99:ee:f5:02:99:90:51:7e:7f:ad:9e:40:03: 12:70:81:fa:6c:de:37:e3:5f:06:49:a0:a3:4f:ce: ff:8a:c9:62:d6:86:25:01:a4:3d:17:44:59:ef:6f: e5:b0:77:1e:82:8f:d0:4f:3a:9f:e9:7b:87:d4:44: 29:fd:39:20:1b:86:37:81:ba:b8:bf:63:a4:15:42: b8:d2:4f:2a:28:24:8f:f0:6a:39:e8:23:59:1f:40: e4:59:24:21:22:39:13:fa:a4:3a:ae:23:46:2e:1e: 6f:b3:3a:66:ba:20:c9:db:0e:e5:e1:18:7c:e3:3b: 87:4d:11:ce:6f:df:1c:d3:21:42:e1:20:69:29:48: 11:7a:d4:54:cc:ea:e7:d0:9a:67:bc:bd:6c:a4:55: 18:8c:a4:9c:a2:ad:53:ee:7d:b9:8c:11:f5:e5:13: c9:a1:04:11:b9:78:f2:0f:da:ca:31:51:9b:ee:59: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:26:BC:05:7C:23:15:9F:28:45:EE:1D:83:04:36:0C:79:92:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:800::/40 Signature Algorithm: sha256WithRSAEncryption 51:f8:73:05:58:52:61:f9:08:97:12:2d:fd:f2:bd:07:97:d9: 6e:00:7e:e8:fd:bf:cc:05:46:60:cd:0a:26:f3:d5:7e:6e:ae: be:de:e4:68:bc:d9:ad:95:99:8d:25:9e:89:41:7f:bb:14:91: 5d:7f:f5:4e:ee:43:54:ec:ab:cf:e6:3f:df:5f:d5:1b:d3:ec: 46:5f:1a:81:33:93:83:01:ab:a1:3f:aa:b4:e2:dc:01:9a:ff: d8:1e:2a:27:fd:fd:40:1d:6b:5f:60:ce:cb:d7:44:43:57:4e: b6:d0:16:a0:5c:fb:ba:de:3a:31:cf:bd:1d:4e:3d:08:34:ba: 7e:1c:4a:f8:ec:a0:aa:9a:a6:8f:88:6a:8c:17:a5:b0:96:d8: a7:b0:5f:de:59:ac:70:e8:0e:d4:1f:7c:ee:ae:87:4c:dd:52: ef:4f:e0:bf:c5:61:4d:4a:fe:0f:9e:16:08:e4:b6:08:12:a7: 8f:01:31:ef:60:d4:82:11:71:9f:87:b5:cd:69:df:59:b0:3f: 82:d2:4b:cb:3e:b8:44:06:14:72:7b:08:b7:6f:62:7a:06:d0: 2e:1b:da:84:b7:61:23:0b:ce:99:88:8f:97:87:c7:90:4c:11: 05:9c:07:65:b8:3e:42:2d:d7:93:35:65:c8:90:7c:ca:ce:40: 2e:59:31:be -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEJhF5ppcCISCDMhmu4FJhkH4qiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyODAwMDAxN1oX DTI1MDUwMjIzNTk1OVowejFJMEcGA1UEBRNANGZiNzc4ZGU3YmEyOWUwODM3ZGZi NTVhYTgxZGU3Y2Q4NzExYmYxYTBlMmM3ZDNlYzI5OWZhMzY4NzdlYjVlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/zqxfM0Sx0mI7/ACLqWGlcuFsFo gmMCmGZJl7BjEqqfwlstDXVBCnS8yjHpGlMsCIF5Blv8NTIc3/ZOLyqv/TFGN+Xx wHWUoVV0Upnu9QKZkFF+f62eQAMScIH6bN43418GSaCjT87/isli1oYlAaQ9F0RZ 72/lsHcego/QTzqf6XuH1EQp/TkgG4Y3gbq4v2OkFUK40k8qKCSP8Go56CNZH0Dk WSQhIjkT+qQ6riNGLh5vszpmuiDJ2w7l4Rh84zuHTRHOb98c0yFC4SBpKUgRetRU zOrn0JpnvL1spFUYjKScoq1T7n25jBH15RPJoQQRuXjyD9rKMVGb7lme5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK+nJrwFfCMVnyhF7h2DBDYMeZLfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMGVhOGU1LTJkNTUtNDIxNC05ZTA2LTVlNmZmMzg1MDgzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoAgwDQYJKoZIhvcNAQELBQADggEBAFH4cwVYUmH5CJcSLf3y vQeX2W4Afuj9v8wFRmDNCibz1X5urr7e5Gi82a2VmY0lnolBf7sUkV1/9U7uQ1Ts q8/mP99f1RvT7EZfGoEzk4MBq6E/qrTi3AGa/9geKif9/UAda19gzsvXRENXTrbQ FqBc+7reOjHPvR1OPQg0un4cSvjsoKqapo+IaowXpbCW2KewX95ZrHDoDtQffO6u h0zdUu9P4L/FYU1K/g+eFgjktggSp48BMe9g1IIRcZ+Htc1p31mwP4LSS8s+uEQG FHJ7CLdvYnoG0C4b2oS3YSMLzpmIj5eHx5BMEQWcB2W4PkIt15M1ZciQfMrOQC5Z Mb4= -----END CERTIFICATE-----Generated at Thu Apr 17 17:57:44 2025 by rpki-client