$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa File: 0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa (raw, json) Hash identifier: Si58Dsb07hnr1SvoKclhdI1+uMJdwfBWMGPyAruchc4= Subject key identifier: 9D:44:D1:59:79:C3:D2:29:F4:0E:AD:38:38:41:8B:90:7D:70:32:52 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 3A0A587994BBEAA0B7394841DA063651C8CFEF4C Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa Signing time: Wed 09 Jul 2025 00:00:36 +0000 ROA not before: Wed 09 Jul 2025 00:00:36 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0a:58:79:94:bb:ea:a0:b7:39:48:41:da:06:36:51:c8:cf:ef:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jul 9 00:00:36 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=8e1e4c7b5e164d18ccd5039e9878b297fc30ec55abededd20b0afaf5d874817f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:60:0b:c5:96:d3:0d:c3:af:4f:e8:d7:86: ba:5a:37:ba:28:b3:32:ec:63:e0:7c:69:56:26:90: fe:c2:38:68:73:04:8d:5c:38:5d:4c:35:0b:5a:20: 2a:8d:41:b7:70:e4:37:08:5b:ec:3e:3b:ed:52:d7: f5:32:ab:4d:41:e6:83:09:bd:07:f6:de:ae:46:df: 35:84:8a:34:5a:ad:fc:43:47:2f:f5:9e:73:6f:65: ee:2c:94:79:a3:e5:64:b2:20:ef:54:86:d8:da:d0: 2b:77:d3:58:66:e1:a5:09:fd:a1:04:6b:b5:09:0f: bf:f1:99:e4:48:45:96:1a:61:93:69:c5:7c:8b:4e: 60:75:de:2f:4f:3a:45:c0:01:64:f5:d4:0f:f8:c6: 37:89:64:b5:ef:5e:4b:75:c4:8c:e8:f8:cc:6f:e9: 34:b8:0f:74:0c:01:58:cb:8b:6c:20:57:a4:30:65: 87:cf:3b:43:55:9a:04:3f:b6:a8:3f:4d:24:8e:ed: 25:4e:be:3e:bb:20:14:a2:e6:e8:de:1b:36:16:5c: bb:99:da:46:f2:36:38:dc:d9:17:9c:de:8c:c8:00: 3c:a9:25:78:82:1b:35:26:e2:25:a0:8a:e3:2c:fb: a5:9f:cd:83:7b:84:bd:3b:70:a4:35:c1:25:bf:71: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:44:D1:59:79:C3:D2:29:F4:0E:AD:38:38:41:8B:90:7D:70:32:52 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014:800::/38 Signature Algorithm: sha256WithRSAEncryption 93:97:c2:ec:93:f0:32:de:9f:a7:49:99:45:3a:ab:ab:fa:d1: 16:2f:23:17:63:6c:5a:fb:71:77:a5:ab:0d:7d:12:e9:eb:34: 2c:02:e0:19:fc:41:46:11:b6:4e:c2:e0:d2:97:04:85:cb:18: fb:a6:e7:fd:2e:62:e2:aa:1d:bd:b7:55:8a:58:ae:58:0a:e1: 3c:05:07:c2:5f:33:1b:5e:21:c0:aa:fe:a9:5f:7a:b5:ff:6f: 98:99:18:00:5c:65:58:68:74:d9:e9:04:71:83:52:ee:39:eb: 41:fa:31:d9:10:2e:55:eb:89:13:f2:c2:95:a8:cc:80:d7:fd: 3a:3b:b3:64:76:9b:db:51:71:d3:20:ea:c5:8f:7d:a7:26:23: cd:f1:17:fe:56:0a:3e:9e:5f:ff:e7:c6:b6:16:db:2f:83:01: 98:b8:92:0e:08:cd:0c:0a:7f:a1:e3:de:98:d6:d2:78:4d:87: 2f:c9:dd:27:98:c3:74:cc:0f:68:7c:c5:f1:c0:78:b9:b0:ff: 77:ea:44:54:15:0a:2c:40:b2:0e:0c:09:5d:6d:06:7d:c1:43: 75:4d:31:c3:38:95:a5:5a:cd:f8:cf:9a:14:fe:05:b9:ca:28: 7b:9a:1e:b1:34:f3:27:34:56:77:a8:c1:a8:f3:e7:23:a4:ae: e2:c1:42:97 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOgpYeZS76qC3OUhB2gY2UcjP70wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDcwOTAwMDAzNloX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAOGUxZTRjN2I1ZTE2NGQxOGNjZDUw MzllOTg3OGIyOTdmYzMwZWM1NWFiZWRlZGQyMGIwYWZhZjVkODc0ODE3ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vxgC8WW0w3Dr0/o14a6Wje6KLMy 7GPgfGlWJpD+wjhocwSNXDhdTDULWiAqjUG3cOQ3CFvsPjvtUtf1MqtNQeaDCb0H 9t6uRt81hIo0Wq38Q0cv9Z5zb2XuLJR5o+VksiDvVIbY2tArd9NYZuGlCf2hBGu1 CQ+/8ZnkSEWWGmGTacV8i05gdd4vTzpFwAFk9dQP+MY3iWS1715LdcSM6PjMb+k0 uA90DAFYy4tsIFekMGWHzztDVZoEP7aoP00kju0lTr4+uyAUoubo3hs2Fly7mdpG 8jY43NkXnN6MyAA8qSV4ghs1JuIloIrjLPuln82De4S9O3CkNcElv3HtdQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ1E0Vl5w9Ip9A6tODhBi5B9cDJSMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzBmZWVkZDE4LTJiNzEtNDhkNS1hMmVlLTA3Y2E5MGI0ZDIwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAgwDQYJKoZIhvcNAQELBQADggEBAJOXwuyT8DLen6dJmUU6 q6v60RYvIxdjbFr7cXelqw19EunrNCwC4Bn8QUYRtk7C4NKXBIXLGPum5/0uYuKq Hb23VYpYrlgK4TwFB8JfMxteIcCq/qlferX/b5iZGABcZVhodNnpBHGDUu4560H6 MdkQLlXriRPywpWozIDX/To7s2R2m9tRcdMg6sWPfacmI83xF/5WCj6eX//nxrYW 2y+DAZi4kg4IzQwKf6Hj3pjW0nhNhy/J3SeYw3TMD2h8xfHAeLmw/3fqRFQVCixA sg4MCV1tBn3BQ3VNMcM4laVazfjPmhT+BbnKKHuaHrE08yc0Vneowajz5yOkruLB Qpc= -----END CERTIFICATE-----Generated at Tue Jul 22 19:29:32 2025 by rpki-client