$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa File: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (raw, json) Hash identifier: S36YiYmI5eUM0T09dUVT97eg6W9XRWJ58EGb0eig47c= Subject key identifier: 02:2E:01:5C:FF:9D:9C:0A:07:5C:74:89:10:6D:46:43:A4:88:09:D0 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 5A217AA1485973526B32A5DDB558FAC58C484D4C Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa Signing time: Mon 31 Mar 2025 15:00:03 +0000 ROA not before: Mon 31 Mar 2025 15:00:03 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:21:7a:a1:48:59:73:52:6b:32:a5:dd:b5:58:fa:c5:8c:48:4d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001 Validity Not Before: Mar 31 15:00:03 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:18:84:e2:8e:9a:84:df:9c:21:a8:bc:57: 53:e2:ee:db:96:75:9d:d1:e3:01:ba:b4:b2:5b:02: bf:5f:0d:e3:50:7c:c8:c2:31:da:9e:90:21:3c:38: 0a:31:d1:c9:c5:b9:2f:10:70:97:51:73:eb:97:b3: 89:79:7c:b7:86:1e:40:62:cd:0f:ea:71:97:df:88: 0f:47:31:2f:c3:9a:d8:e8:d1:07:d7:54:a7:05:f7: e2:fa:38:6f:ab:2a:a4:47:0e:c9:0a:95:70:c1:94: 14:3e:6b:03:8c:47:a1:68:99:45:e6:03:7d:bc:fa: 97:2c:af:ae:73:3f:6e:4e:3a:68:2e:53:e7:01:61: a5:d8:b7:eb:4c:75:bd:15:30:96:c8:7a:47:35:1a: a5:57:7f:90:4d:36:0c:64:93:fe:0d:9a:11:7f:15: 6c:7d:a2:dd:47:4c:aa:33:ae:51:58:97:cf:ae:2a: 5e:cc:30:4a:d2:e8:0d:c1:1f:4b:1e:99:ea:d5:80: fb:0e:3c:70:73:e9:b4:b8:78:08:0c:84:23:4d:eb: c0:81:67:74:1b:a2:ed:3e:12:0c:86:c6:d7:a3:41: 0f:b3:bb:f0:d0:4a:e8:64:b5:9f:63:08:e1:c2:95: 51:a5:ff:d1:bf:31:ed:23:1a:01:c1:5f:d1:29:dc: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2E:01:5C:FF:9D:9C:0A:07:5C:74:89:10:6D:46:43:A4:88:09:D0 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500::/48 Signature Algorithm: sha256WithRSAEncryption be:9e:1e:e3:17:09:90:5f:69:01:f1:ed:c6:b9:8d:43:b2:ed: e3:5f:6c:07:34:9a:7c:97:82:59:8e:96:94:cc:80:fd:8a:b6: e3:0e:91:61:cf:49:7a:aa:74:05:c8:6a:5a:c0:c7:a9:c9:38: 08:3b:23:27:7b:d5:2f:3c:ae:fe:eb:2e:37:63:8a:db:fa:9c: 7f:fb:38:88:fa:2a:4a:32:12:2f:c5:a0:49:af:16:9e:23:51: ab:8b:e7:db:cd:9a:eb:d1:39:b7:85:14:d5:15:01:18:ce:8c: bd:17:e9:3c:f2:b0:63:67:e7:66:ee:88:d7:c9:4d:e7:60:3f: e1:69:97:8a:60:03:e3:4e:7b:12:99:a1:78:1c:7d:75:8b:2c: 7a:77:27:ec:b0:d1:b4:83:7e:06:07:aa:41:41:42:f7:4b:1c: e5:24:35:ef:8c:2a:85:ea:5c:bc:cd:fc:b5:d6:a3:b0:d5:1a: f4:e9:13:78:8c:6a:0e:0d:8d:00:47:c6:32:ff:7b:b1:a1:4a: 9e:ec:0a:3c:45:a5:2b:1e:84:6a:77:34:7c:d3:8b:99:5f:41: 42:13:a6:b6:7a:df:1a:20:75:92:23:36:25:74:e1:88:fc:ab: 31:ca:3e:a0:bc:c0:92:48:c7:13:11:c5:d5:5b:72:46:95:0c: c9:c0:5b:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWiF6oUhZc1JrMqXdtVj6xYxITUwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDMzMTE1MDAwM1oX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAMGVkMDlhY2NlNTMyZDU5MjUyMmMz NjBjZGY1ZGU3ZjU4YzRkMmU4OWI0ZDNjNWIyMTlmZWM0Y2QxNWRmZTUyNzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkcYhOKOmoTfnCGovFdT4u7blnWd 0eMBurSyWwK/Xw3jUHzIwjHanpAhPDgKMdHJxbkvEHCXUXPrl7OJeXy3hh5AYs0P 6nGX34gPRzEvw5rY6NEH11SnBffi+jhvqyqkRw7JCpVwwZQUPmsDjEehaJlF5gN9 vPqXLK+ucz9uTjpoLlPnAWGl2LfrTHW9FTCWyHpHNRqlV3+QTTYMZJP+DZoRfxVs faLdR0yqM65RWJfPripezDBK0ugNwR9LHpnq1YD7Djxwc+m0uHgIDIQjTevAgWd0 G6LtPhIMhsbXo0EPs7vw0EroZLWfYwjhwpVRpf/RvzHtIxoBwV/RKdzGowIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAIuAVz/nZwKB1x0iRBtRkOkiAnQMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzM2ODRlNTBjLWM1MGYtNGViYi1iMzI3LWUwNzU5MjQxMTk3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABlAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQC+nh7jFwmQX2kB8e3G uY1Dsu3jX2wHNJp8l4JZjpaUzID9irbjDpFhz0l6qnQFyGpawMepyTgIOyMne9Uv PK7+6y43Y4rb+px/+ziI+ipKMhIvxaBJrxaeI1Gri+fbzZrr0Tm3hRTVFQEYzoy9 F+k88rBjZ+dm7ojXyU3nYD/haZeKYAPjTnsSmaF4HH11iyx6dyfssNG0g34GB6pB QUL3SxzlJDXvjCqF6ly8zfy11qOw1Rr06RN4jGoODY0AR8Yy/3uxoUqe7Ao8RaUr HoRqdzR804uZX0FCE6a2et8aIHWSIzYldOGI/Ksxyj6gvMCSSMcTEcXVW3JGlQzJ wFsq -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:45 2025 by rpki-client