$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa File: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (raw, json) Hash identifier: TD2vtxZtVv9WlYe1BQ9c7uVYlhJVRmPc/DaPr+gYpXo= Subject key identifier: 76:1C:25:15:E1:98:1D:82:70:95:F0:46:4D:33:8A:21:0E:53:E4:C3 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 2F3479E5FE3A4ACAA0E60A5EE438D12E214A13C0 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa Signing time: Sat 05 Apr 2025 00:00:02 +0000 ROA not before: Sat 05 Apr 2025 00:00:02 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:34:79:e5:fe:3a:4a:ca:a0:e6:0a:5e:e4:38:d1:2e:21:4a:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000 Validity Not Before: Apr 5 00:00:02 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:83:f4:e5:f3:34:73:19:f5:2a:8d:59:2b: bc:85:af:46:5a:da:6c:b3:cb:93:07:51:ec:ee:85: 0c:90:d7:6e:f4:86:83:28:a5:7b:a1:25:52:e8:16: 36:86:a1:84:f6:f9:c4:6f:16:5f:40:36:b1:4e:01: 59:aa:17:fe:95:40:bf:4b:ea:31:ec:a2:7a:a0:5b: 19:7f:b5:ba:89:b1:fd:cb:60:fd:08:d4:55:b5:78: f6:b9:21:e9:e9:0e:2b:9c:86:70:76:5a:09:b6:84: 08:ff:84:96:f7:0c:54:03:06:a7:2c:a7:7c:e7:92: 48:4e:2a:11:b4:d2:5e:b7:ab:81:f2:8c:c1:6c:1b: b6:0f:3e:66:e2:65:70:1f:61:25:31:2e:0d:b9:67: ec:48:3f:f9:8e:64:f3:2c:23:f2:f9:9f:e7:4e:81: 68:a3:9f:6f:bf:a0:ed:23:bd:1b:a1:c8:08:eb:1e: 90:04:e1:d9:49:b3:aa:f5:f1:39:68:d1:bb:45:aa: b5:58:69:cb:de:55:19:f5:89:a3:65:d4:96:df:70: d9:3f:f0:ac:9e:6b:fe:95:f7:5d:57:64:58:d9:28: 7e:6f:34:63:68:b3:8f:e8:d9:bc:7c:c3:ae:33:55: ab:cb:8f:ee:b4:9d:05:97:4e:03:82:d6:64:00:3f: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:25:15:E1:98:1D:82:70:95:F0:46:4D:33:8A:21:0E:53:E4:C3 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 43:7b:f9:40:b6:c3:9b:29:2d:f5:7d:25:de:b3:ec:af:73:75: 1f:30:0a:8a:b5:3c:d1:9a:04:bb:a2:1a:0a:1b:db:4e:fe:96: c1:f1:da:9e:18:c9:86:eb:c9:52:3c:28:97:70:67:fa:66:fe: da:22:a2:22:70:ba:79:65:b6:8a:7f:5b:06:eb:3c:c3:f3:44: ad:6d:e1:c5:cf:61:97:09:a6:48:2e:59:5a:17:49:03:a0:e7: 67:05:4d:e4:6a:61:78:62:ca:45:b8:c5:b9:9f:33:db:92:5f: 6d:ae:cd:57:f3:08:4d:d2:2c:36:d5:5f:60:d1:8d:c2:4c:53: 72:34:9f:31:df:88:23:07:61:7c:e0:52:25:c4:aa:d3:c9:1f: 60:54:e0:89:06:99:31:15:81:58:d0:77:16:10:33:8b:38:bc: d0:27:9f:27:4e:3e:fc:22:0b:77:7c:d3:7d:1b:e7:7c:71:50: dd:e8:fc:2e:92:2e:ee:e0:ee:e4:81:ec:6f:33:c8:a7:b4:9d: d3:39:56:d9:f7:40:c7:32:7f:29:6d:17:45:6a:d8:75:53:18: 59:58:e0:6e:cd:46:37:c8:51:b7:22:5e:71:fc:d9:c6:74:1e: 43:6c:18:32:3f:23:90:09:9a:f9:fb:e3:22:1a:4f:f0:c1:a0: ed:0c:53:f7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULzR55f46Ssqg5gpe5DjRLiFKE8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQwNTAwMDAwMloX DTI1MDUxMDIzNTk1OVowejFJMEcGA1UEBRNAOGMxY2UyZmFjMjA3YTMwMGJmYzkw OTE1Yzg1NTE5YmIzODM2YmU5MzQ0YWM5MjBjYjI2YjZjOTUzOGM0ZTI5YjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcuD9OXzNHMZ9SqNWSu8ha9GWtps s8uTB1Hs7oUMkNdu9IaDKKV7oSVS6BY2hqGE9vnEbxZfQDaxTgFZqhf+lUC/S+ox 7KJ6oFsZf7W6ibH9y2D9CNRVtXj2uSHp6Q4rnIZwdloJtoQI/4SW9wxUAwanLKd8 55JITioRtNJet6uB8ozBbBu2Dz5m4mVwH2ElMS4NuWfsSD/5jmTzLCPy+Z/nToFo o59vv6DtI70bocgI6x6QBOHZSbOq9fE5aNG7Raq1WGnL3lUZ9YmjZdSW33DZP/Cs nmv+lfddV2RY2Sh+bzRjaLOP6Nm8fMOuM1Wry4/utJ0Fl04DgtZkAD/kJwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHYcJRXhmB2CcJXwRk0ziiEOU+TDMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2NjNjcxYzc5LTIxZjAtNGZmZi1iODk4LTU5NTk2NmVjZDFhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABnAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQBDe/lAtsObKS31fSXe s+yvc3UfMAqKtTzRmgS7ohoKG9tO/pbB8dqeGMmG68lSPCiXcGf6Zv7aIqIicLp5 ZbaKf1sG6zzD80StbeHFz2GXCaZILllaF0kDoOdnBU3kamF4YspFuMW5nzPbkl9t rs1X8whN0iw21V9g0Y3CTFNyNJ8x34gjB2F84FIlxKrTyR9gVOCJBpkxFYFY0HcW EDOLOLzQJ58nTj78Igt3fNN9G+d8cVDd6Pwuki7u4O7kgexvM8intJ3TOVbZ90DH Mn8pbRdFath1UxhZWOBuzUY3yFG3Il5x/NnGdB5DbBgyPyOQCZr5++MiGk/wwaDt DFP3 -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:31 2025 by rpki-client