$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb6fb749-738a-45f9-8df3-b428dffee98a.roa File: fb6fb749-738a-45f9-8df3-b428dffee98a.roa (raw, json) Hash identifier: wLpZKLu0Ok/61kBXK7Keo0QvK32nygkkx63/8f/fZSc= Subject key identifier: D8:57:65:C2:EB:C3:BC:62:D1:3E:36:2A:0E:B2:5F:98:97:97:A4:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 79C573046F3531EF19072847619FEDD7AABFD06C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb6fb749-738a-45f9-8df3-b428dffee98a.roa Signing time: Mon 24 Mar 2025 15:20:14 +0000 ROA not before: Mon 24 Mar 2025 15:20:14 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c5:73:04:6f:35:31:ef:19:07:28:47:61:9f:ed:d7:aa:bf:d0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:20:14 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=952811444983e1da62431df3006058f1f73b680a15ee0aa47568b7bcbf9a9802, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:64:51:2f:10:eb:c3:63:f6:c4:7d:ae:e2: 84:1c:67:fa:a1:de:24:52:e8:8d:6a:6b:32:7e:59: e3:d6:e2:df:bd:c2:02:ca:5d:dd:f6:21:e1:d6:c5: 83:c0:79:58:53:2e:57:c3:1e:64:d1:c7:d6:83:ef: 58:5c:c9:cc:1a:d1:a2:bb:53:70:2e:20:22:82:5d: 23:7a:0d:16:81:5e:a3:3f:cc:2b:2f:0f:0b:23:78: db:bb:77:c8:e7:0f:03:49:d1:d0:30:1c:80:e1:85: 34:17:ef:52:37:f6:7b:43:cc:e1:c8:e1:03:76:da: 2b:8d:11:0e:d2:85:79:14:c4:57:76:ee:b7:91:e3: b5:53:bd:0c:08:dd:6c:ad:7e:a3:15:f7:6f:8b:6e: 83:0d:a9:50:b2:8a:1d:b7:7f:36:dd:2c:62:62:98: 59:02:a5:83:71:e0:ee:56:33:6e:0c:24:51:e2:17: a0:72:24:43:8b:70:96:53:8a:0b:84:12:4c:98:65: cf:0a:02:db:2b:0a:25:8a:c3:ff:33:5a:fc:6b:c5: 91:bd:1b:66:62:54:bb:a9:df:cd:ae:2c:2d:3f:55: d8:3b:35:50:0c:16:5c:c3:14:ed:df:85:6e:c4:77: 57:61:d3:a4:6c:4e:c9:17:4e:9d:70:aa:7d:83:57: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:65:C2:EB:C3:BC:62:D1:3E:36:2A:0E:B2:5F:98:97:97:A4:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb6fb749-738a-45f9-8df3-b428dffee98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:a080::/48 Signature Algorithm: sha256WithRSAEncryption 3d:46:29:64:5c:06:95:99:e5:2a:f6:b9:e0:34:0d:c7:86:5d: b2:42:36:b9:69:2d:e6:88:a9:d9:87:7c:fd:40:c4:0a:f9:e7: 52:8d:f4:08:f8:29:ea:44:d0:d6:8b:77:7e:de:8a:15:46:71: b9:30:18:89:cb:34:f9:d2:9f:3a:e1:16:e4:b1:25:76:ef:a5: 14:1a:49:43:b4:66:e1:12:99:c6:c3:85:62:1b:5d:70:d2:e7: 89:fb:a8:be:c4:51:97:cf:73:ba:67:2a:ec:4f:93:4a:06:ef: a7:64:3c:ed:e3:c0:15:7a:76:8a:ac:a3:b2:4e:a7:a7:61:e0: 8c:f9:14:a6:7e:d3:74:cc:2f:d7:3b:f3:6e:a3:d2:aa:eb:7e: 3d:27:ec:06:e3:7e:f8:b5:78:c5:10:d0:42:29:6e:bb:9a:9c: b3:7b:31:25:df:a8:e8:4c:f6:df:49:8c:26:70:70:e7:20:7e: 83:16:71:a8:82:02:23:85:37:6f:72:54:46:5b:e6:6f:62:54: 40:56:02:9f:0c:2f:50:16:f2:44:17:a8:c0:09:68:d9:41:cf: 8e:29:e8:b1:63:bb:0e:f7:fb:8e:be:75:ba:6a:d0:b1:0e:6d: 03:16:68:69:81:11:07:7f:fb:d7:7d:de:03:3e:ad:be:8d:db: 1a:12:b7:ce -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUecVzBG81Me8ZByhHYZ/t16q/0GwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MjAxNFoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAOTUyODExNDQ0OTgzZTFkYTYyNDMx ZGYzMDA2MDU4ZjFmNzNiNjgwYTE1ZWUwYWE0NzU2OGI3YmNiZjlhOTgwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgJkUS8Q68Nj9sR9ruKEHGf6od4k UuiNamsyflnj1uLfvcICyl3d9iHh1sWDwHlYUy5Xwx5k0cfWg+9YXMnMGtGiu1Nw LiAigl0jeg0WgV6jP8wrLw8LI3jbu3fI5w8DSdHQMByA4YU0F+9SN/Z7Q8zhyOED dtorjREO0oV5FMRXdu63keO1U70MCN1srX6jFfdvi26DDalQsoodt3823SxiYphZ AqWDceDuVjNuDCRR4hegciRDi3CWU4oLhBJMmGXPCgLbKwolisP/M1r8a8WRvRtm YlS7qd/NriwtP1XYOzVQDBZcwxTt34VuxHdXYdOkbE7JF06dcKp9g1ctGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNhXZcLrw7xi0T42Kg6yX5iXl6SCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiNmZiNzQ5LTczOGEtNDVmOS04ZGYzLWI0MjhkZmZlZTk4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOKCAMA0GCSqGSIb3DQEBCwUAA4IBAQA9RilkXAaVmeUq9rng NA3Hhl2yQja5aS3miKnZh3z9QMQK+edSjfQI+CnqRNDWi3d+3ooVRnG5MBiJyzT5 0p864RbksSV276UUGklDtGbhEpnGw4ViG11w0ueJ+6i+xFGXz3O6ZyrsT5NKBu+n ZDzt48AVenaKrKOyTqenYeCM+RSmftN0zC/XO/Nuo9Kq6349J+wG4374tXjFENBC KW67mpyzezEl36joTPbfSYwmcHDnIH6DFnGoggIjhTdvclRGW+ZvYlRAVgKfDC9Q FvJEF6jACWjZQc+OKeixY7sO9/uOvnW6atCxDm0DFmhpgREHf/vXfd4DPq2+jdsa ErfO -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:39 2025 by rpki-client