$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa File: 0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa (raw, json) Hash identifier: mT2wAR8/G0Kl6OVRkG9xG8C1BpProG8PZdkOaKAQflQ= Subject key identifier: DC:0E:88:54:74:A4:57:27:87:41:23:C2:BD:A2:EE:F7:F1:D6:AB:BD Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 34B2E73FD72A68E951B8B33111B9E9491BEB96C6 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa Signing time: Mon 31 Mar 2025 15:01:31 +0000 ROA not before: Mon 31 Mar 2025 15:01:31 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b2:e7:3f:d7:2a:68:e9:51:b8:b3:31:11:b9:e9:49:1b:eb:96:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000 Validity Not Before: Mar 31 15:01:31 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:4f:92:72:aa:18:f8:a4:7d:a3:67:6e:ec: 81:02:f2:ca:3e:b8:2e:99:42:71:26:e9:07:21:3a: 3b:d9:60:16:57:78:0d:54:9c:1b:44:92:76:99:23: 6c:ca:5e:26:51:ab:40:e9:b3:65:26:08:25:9e:48: 90:08:0b:df:77:fa:c5:f0:2a:13:5a:f9:ee:f4:68: 9d:33:c1:43:2a:2f:44:e6:40:48:e9:09:88:74:71: 58:4b:e6:5e:76:07:cf:7c:33:a2:17:a0:4f:86:9a: 9d:de:3f:81:4e:52:b8:a7:7e:14:2b:50:9f:d1:c9: f5:30:7f:3e:4b:58:75:1a:97:64:42:86:a8:5f:97: fb:10:4c:45:57:c7:8a:7e:5a:5f:61:f5:c5:29:00: 6d:5b:58:0b:91:4b:2c:90:e1:9c:88:f0:2f:3e:71: d5:47:b7:e7:f3:8f:00:35:ef:46:c0:eb:06:1d:35: 06:41:34:f4:76:3d:20:d2:69:f5:e7:92:5a:3a:14: f6:27:08:86:50:c3:aa:82:3e:ba:e0:93:7d:22:4e: d3:0a:a5:53:34:1e:ed:1d:1d:51:c8:c6:18:23:63: 1d:04:27:a4:98:17:4d:67:a7:bf:a5:8f:15:31:94: f5:81:30:a1:ab:df:5e:9e:e1:f6:c3:ca:8e:8b:89: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0E:88:54:74:A4:57:27:87:41:23:C2:BD:A2:EE:F7:F1:D6:AB:BD X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014:800::/38 Signature Algorithm: sha256WithRSAEncryption ab:40:6f:bd:3b:72:ed:3f:74:1c:18:23:ed:c7:51:23:2c:57: 9c:c5:56:ce:0c:07:9c:29:c1:45:34:65:b9:3d:05:f6:a4:27: 10:c7:57:ab:5b:83:c2:a1:df:aa:9a:64:9b:26:88:33:fc:8e: 25:73:ef:51:ef:34:0b:00:c6:4b:69:65:a8:0d:b9:4c:90:48: c9:cf:7f:ca:43:23:b4:c2:e2:e7:a9:7a:8d:10:d9:93:0c:3c: b5:63:e4:34:2d:5d:79:13:85:87:20:a9:d6:c0:2c:c4:c7:1e: 88:6d:b2:d0:f9:8f:75:81:9b:65:61:5b:2c:3f:55:46:db:07: c9:94:bc:00:30:24:d2:2f:80:d6:64:5b:78:99:eb:ab:c5:b7: b1:8e:e8:7c:ff:75:4c:23:ce:53:30:66:ec:11:42:0b:f2:1d: fd:95:92:76:79:2e:63:39:2c:f8:ee:1f:41:b3:df:87:8e:e6: cf:54:68:53:fa:e3:e3:5f:c3:ae:b7:52:33:e3:14:ce:d3:bc: 0c:c1:4a:79:d4:7c:91:4a:70:e2:a9:41:c9:af:53:13:96:3b: d6:12:41:50:24:e1:05:59:b6:ca:98:c3:35:78:58:3d:3d:ae: cf:13:c4:20:64:31:48:4c:40:ae:8e:14:34:eb:17:08:fc:53: 54:77:6b:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNLLnP9cqaOlRuLMxEbnpSRvrlsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDMzMTE1MDEzMVoX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAYjA0OGZlMjA3ZjY3OTJhMDNhMWJm YjhjZWZkZjNmMTk0ZjVjY2M4ZjM3NjA4Yjg4OGFjZGE5YzUxNjQwNTg4ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oNPknKqGPikfaNnbuyBAvLKPrgu mUJxJukHITo72WAWV3gNVJwbRJJ2mSNsyl4mUatA6bNlJgglnkiQCAvfd/rF8CoT Wvnu9GidM8FDKi9E5kBI6QmIdHFYS+ZedgfPfDOiF6BPhpqd3j+BTlK4p34UK1Cf 0cn1MH8+S1h1GpdkQoaoX5f7EExFV8eKflpfYfXFKQBtW1gLkUsskOGciPAvPnHV R7fn848ANe9GwOsGHTUGQTT0dj0g0mn155JaOhT2JwiGUMOqgj664JN9Ik7TCqVT NB7tHR1RyMYYI2MdBCekmBdNZ6e/pY8VMZT1gTChq99enuH2w8qOi4lywwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNwOiFR0pFcnh0Ejwr2i7vfx1qu9MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzBmZWVkZDE4LTJiNzEtNDhkNS1hMmVlLTA3Y2E5MGI0ZDIwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAgwDQYJKoZIhvcNAQELBQADggEBAKtAb707cu0/dBwYI+3H USMsV5zFVs4MB5wpwUU0Zbk9BfakJxDHV6tbg8Kh36qaZJsmiDP8jiVz71HvNAsA xktpZagNuUyQSMnPf8pDI7TC4uepeo0Q2ZMMPLVj5DQtXXkThYcgqdbALMTHHoht stD5j3WBm2VhWyw/VUbbB8mUvAAwJNIvgNZkW3iZ66vFt7GO6Hz/dUwjzlMwZuwR QgvyHf2VknZ5LmM5LPjuH0Gz34eO5s9UaFP64+Nfw663UjPjFM7TvAzBSnnUfJFK cOKpQcmvUxOWO9YSQVAk4QVZtsqYwzV4WD09rs8TxCBkMUhMQK6OFDTrFwj8U1R3 a1c= -----END CERTIFICATE-----Generated at Fri Apr 4 23:22:31 2025 by rpki-client