$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa File: 01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa (raw, json) Hash identifier: a3LGVLUyaLsadkdtLj3SPskHyTXW6ZIdk8+01sHVdgw= Subject key identifier: AC:A8:90:89:55:5A:A0:9E:D6:7D:AE:F0:1C:5A:35:1F:3F:DA:96:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FE5BAC226AB83F6078565AB979D028420146A5C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa Signing time: Fri 21 Mar 2025 00:01:31 +0000 ROA not before: Fri 21 Mar 2025 00:01:31 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e5:ba:c2:26:ab:83:f6:07:85:65:ab:97:9d:02:84:20:14:6a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:01:31 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:33:d9:4e:b8:62:74:db:28:25:6e:db:ff: f3:eb:92:ee:91:a5:97:ff:c8:fd:5d:e0:f5:d6:9a: ea:cb:29:09:fa:2b:d2:49:30:ee:e9:75:37:d9:fe: 76:3f:cc:15:7e:d3:52:59:c8:6f:e6:65:2d:b6:19: be:ad:40:4a:b9:29:4a:b8:bf:aa:60:3c:d2:98:13: 72:14:b8:5f:65:07:f2:95:b9:db:a2:61:67:19:4c: 9d:81:4d:df:cb:ed:a8:b8:05:d5:3b:db:02:f3:f4: dd:1e:ba:f1:a0:9a:bb:87:44:16:50:ff:5c:2b:44: 5b:53:df:86:c8:93:9d:e1:bb:24:0a:03:e3:3f:30: 09:35:61:41:ae:aa:87:6a:41:cb:99:0f:a4:9f:f9: 0f:5d:ea:c7:93:f3:9b:21:36:a3:6e:97:bd:1b:c3: 33:3f:ed:c6:df:aa:9c:37:3e:80:a1:c6:c3:ea:3e: 8b:e7:fe:11:be:5c:7f:6a:96:52:ee:07:06:a5:b0: b5:34:0d:d0:e3:4b:97:f6:38:dc:14:af:09:ea:fd: 94:c2:63:29:91:56:11:65:c2:d7:68:e1:70:36:a6: 59:40:b4:f4:b0:64:fa:2e:e0:a8:8d:04:1b:63:a5: 9f:f2:88:44:b1:54:dc:7f:9b:14:39:80:3b:b2:8b: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:90:89:55:5A:A0:9E:D6:7D:AE:F0:1C:5A:35:1F:3F:DA:96:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:4800::/40 Signature Algorithm: sha256WithRSAEncryption 24:c8:a3:85:6b:95:42:b4:e1:40:90:bf:67:26:4c:a7:7c:8c: b4:8f:3a:26:d0:69:26:20:27:7b:41:bc:09:62:03:51:11:be: f3:b0:07:9f:6a:e0:91:54:fe:8b:4c:9e:1a:32:db:d3:5e:7b: be:c9:50:01:e9:16:41:7c:8a:e0:03:a4:63:7e:3c:1c:d7:e7: 1e:49:38:36:25:d1:c3:64:c6:99:f5:3c:92:d4:81:f2:d5:cb: d8:4b:fd:0a:99:c1:ef:b5:62:0b:ca:ad:98:e4:fc:6f:4b:d7: d3:31:fa:a7:c2:57:60:62:08:1b:f2:2a:31:8f:9e:3b:86:67: c5:2a:22:00:5a:c6:a8:30:a2:34:15:ac:fb:c3:77:2d:9b:c9: 49:71:a2:b5:f8:29:7c:6d:7f:32:cd:7b:8b:6a:2b:8b:dd:4a: 7c:9b:9c:59:fd:5c:0c:61:59:9d:d3:d8:da:9c:16:64:ec:de: 97:ce:5b:d3:e3:63:a0:ce:ec:e3:f4:a9:12:c7:5e:9a:5c:27: 30:62:b9:4a:ee:45:2b:6f:b9:de:68:81:79:d5:dc:41:29:81: 35:72:3c:95:25:83:d4:de:16:bc:83:2f:53:45:8d:80:44:8e: d4:66:f1:3b:1f:98:60:bc:6a:e6:40:6c:5f:bf:02:3f:f6:b9: 81:c4:4f:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX+W6wiarg/YHhWWrl50ChCAUalwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDEzMVoX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAOGRkYTdjNDY1NGRiZTI2NDM1YzQ0 YTlmYmEwMGVlNjRmNjY0NDFlNDRiMDJjMmFiNTYxMzA2MWY3YTRhZmZiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX0z2U64YnTbKCVu2//z65LukaWX /8j9XeD11prqyykJ+ivSSTDu6XU32f52P8wVftNSWchv5mUtthm+rUBKuSlKuL+q YDzSmBNyFLhfZQfylbnbomFnGUydgU3fy+2ouAXVO9sC8/TdHrrxoJq7h0QWUP9c K0RbU9+GyJOd4bskCgPjPzAJNWFBrqqHakHLmQ+kn/kPXerHk/ObITajbpe9G8Mz P+3G36qcNz6AocbD6j6L5/4Rvlx/apZS7gcGpbC1NA3Q40uX9jjcFK8J6v2UwmMp kVYRZcLXaOFwNqZZQLT0sGT6LuCojQQbY6Wf8ohEsVTcf5sUOYA7sotcqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKyokIlVWqCe1n2u8BxaNR8/2pYUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxYWU1ZjljLWRjZTQtNGIyNi1hNzlmLWY2ZTZjOTExZjk3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYEgwDQYJKoZIhvcNAQELBQADggEBACTIo4VrlUK04UCQv2cm TKd8jLSPOibQaSYgJ3tBvAliA1ERvvOwB59q4JFU/otMnhoy29Nee77JUAHpFkF8 iuADpGN+PBzX5x5JODYl0cNkxpn1PJLUgfLVy9hL/QqZwe+1YgvKrZjk/G9L19Mx +qfCV2BiCBvyKjGPnjuGZ8UqIgBaxqgwojQVrPvDdy2byUlxorX4KXxtfzLNe4tq K4vdSnybnFn9XAxhWZ3T2NqcFmTs3pfOW9PjY6DO7OP0qRLHXppcJzBiuUruRStv ud5ogXnV3EEpgTVyPJUlg9TeFryDL1NFjYBEjtRm8TsfmGC8auZAbF+/Aj/2uYHE T+M= -----END CERTIFICATE-----Generated at Fri Apr 4 23:22:32 2025 by rpki-client