$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa File: fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa (raw, json) Hash identifier: WuCwlcgVN/0FCqs6Y5ilQ1l25DZ9qttUo9Hr0CUJPlM= Subject key identifier: 28:C6:BF:F8:A4:A4:FD:5F:BE:79:BA:81:53:BD:D7:9D:5B:A7:1D:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42430926594CA55199EF638D3FF61C8FB2989C16 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa Signing time: Tue 25 Mar 2025 16:11:27 +0000 ROA not before: Tue 25 Mar 2025 16:11:27 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:43:09:26:59:4c:a5:51:99:ef:63:8d:3f:f6:1c:8f:b2:98:9c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:11:27 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=fc124ea1dde4e6fc4c923f002b017ee167f59a70c50376eebf00c76378903f78, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:47:b3:b6:55:24:72:42:d3:3e:c6:84:2d: dc:d9:4d:7c:67:b3:9f:4d:01:c3:5c:c8:21:9e:12: e6:4d:fc:92:6c:e7:01:f5:2f:62:84:61:eb:93:c4: fb:2b:03:a6:69:a2:4b:8d:c0:75:ef:47:88:db:e5: 3f:af:17:e6:93:81:ce:d6:54:60:66:bd:f6:90:07: e6:d3:5d:0f:42:bb:b1:89:e6:e0:b3:f1:26:ca:f8: b2:2a:c4:6e:c1:d1:a6:47:c1:a1:68:20:da:32:51: 80:31:e8:2e:e9:81:24:d1:1e:57:0e:40:b9:dd:f3: f4:f0:e4:b9:18:68:13:e1:d6:47:09:81:c3:e8:d9: 8b:70:1d:7d:e7:7b:2d:d7:8c:b4:40:50:a9:f5:40: a8:56:e0:f7:72:15:80:54:6e:1e:85:35:a9:d3:a0: 2b:d1:c8:62:b9:13:7f:20:21:57:66:fd:7f:17:c8: 70:93:d3:dd:6d:98:36:d3:80:89:ce:84:e0:cf:34: 9f:42:0c:55:62:bd:aa:e0:58:f1:63:cd:53:19:24: 61:6a:0d:50:e6:03:e1:67:d4:e9:45:3e:18:32:0a: 5f:30:a6:51:a0:dd:10:a8:e4:09:58:47:8d:ac:ee: 17:30:16:f7:76:b2:47:5b:03:35:4a:c7:20:1e:02: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C6:BF:F8:A4:A4:FD:5F:BE:79:BA:81:53:BD:D7:9D:5B:A7:1D:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:f000::/40 Signature Algorithm: sha256WithRSAEncryption 22:3b:3b:07:c0:2d:04:4e:9e:90:9c:7a:cc:86:13:79:23:0c: ac:df:a0:d7:49:59:9d:2e:da:2b:ea:11:c2:3d:2a:f5:b4:48: d1:91:d4:15:83:8f:c1:27:54:a4:d4:58:4b:bf:0b:66:82:5b: cc:1d:15:17:dc:4a:6e:f1:f9:b4:f7:b3:f7:fd:3f:c4:a2:52: 3c:0e:1a:26:e9:13:df:87:ac:bc:a7:05:70:12:a1:64:b2:50: 54:38:c3:b1:d8:d6:61:7c:48:59:ab:ee:80:f7:0b:c6:46:1d: d0:05:50:70:f4:b5:34:4f:8d:72:35:af:7c:a6:1b:0a:08:a6: d4:c9:15:9d:f5:15:7d:a0:b7:a1:8e:1b:6f:94:f7:93:74:30: 7a:53:7b:d8:f6:bf:04:17:be:2b:bc:07:6c:78:7f:84:ca:6a: 96:40:a0:d7:cc:d1:99:cf:1e:90:88:ba:22:62:d9:a6:b4:24: b0:8c:c5:60:8a:0c:5a:db:d3:af:08:cf:0a:b7:7f:c5:a5:7f: ae:95:13:e7:8d:9e:18:3f:0b:9d:22:38:b9:d4:8c:b1:37:9c: 53:4d:07:79:8d:34:05:c6:b7:aa:e2:ed:22:af:b3:6a:9f:15: dd:34:c4:7a:a6:ea:e3:05:72:89:2c:ba:6c:d5:ab:9e:cf:08: 70:96:62:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQkMJJllMpVGZ72ONP/Ycj7KYnBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTEyN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZmMxMjRlYTFkZGU0ZTZmYzRjOTIz ZjAwMmIwMTdlZTE2N2Y1OWE3MGM1MDM3NmVlYmYwMGM3NjM3ODkwM2Y3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsJHs7ZVJHJC0z7GhC3c2U18Z7Of TQHDXMghnhLmTfySbOcB9S9ihGHrk8T7KwOmaaJLjcB170eI2+U/rxfmk4HO1lRg Zr32kAfm010PQruxiebgs/EmyviyKsRuwdGmR8GhaCDaMlGAMegu6YEk0R5XDkC5 3fP08OS5GGgT4dZHCYHD6NmLcB1953st14y0QFCp9UCoVuD3chWAVG4ehTWp06Ar 0chiuRN/ICFXZv1/F8hwk9PdbZg204CJzoTgzzSfQgxVYr2q4FjxY81TGSRhag1Q 5gPhZ9TpRT4YMgpfMKZRoN0QqOQJWEeNrO4XMBb3drJHWwM1SscgHgJGnQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCjGv/ikpP1fvnm6gVO9151bpx24MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZlZjNhYmY2LWYyZTAtNDRlOC1hN2IzLTFjODdjOWMxZDI2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOPAwDQYJKoZIhvcNAQELBQADggEBACI7OwfALQROnpCcesyG E3kjDKzfoNdJWZ0u2ivqEcI9KvW0SNGR1BWDj8EnVKTUWEu/C2aCW8wdFRfcSm7x +bT3s/f9P8SiUjwOGibpE9+HrLynBXASoWSyUFQ4w7HY1mF8SFmr7oD3C8ZGHdAF UHD0tTRPjXI1r3ymGwoIptTJFZ31FX2gt6GOG2+U95N0MHpTe9j2vwQXviu8B2x4 f4TKapZAoNfM0ZnPHpCIuiJi2aa0JLCMxWCKDFrb068Izwq3f8Wlf66VE+eNnhg/ C50iOLnUjLE3nFNNB3mNNAXGt6ri7SKvs2qfFd00xHqm6uMFcoksumzVq57PCHCW Ypw= -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:54 2025 by rpki-client