$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/116071fa-fa33-4a2f-9343-0d57551a9223.roa File: 116071fa-fa33-4a2f-9343-0d57551a9223.roa (raw, json) Hash identifier: 7VmfzOipjYTa/asaep5ZH4Y/dobYTRAxo99wk/yuiqg= Subject key identifier: E5:E3:F4:10:92:E1:63:B2:3E:50:E1:C7:19:81:63:5C:97:4F:43:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F6950C792A5611490A45D4AB7261C52E2579C80 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/116071fa-fa33-4a2f-9343-0d57551a9223.roa Signing time: Wed 14 May 2025 00:40:12 +0000 ROA not before: Wed 14 May 2025 00:40:12 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:69:50:c7:92:a5:61:14:90:a4:5d:4a:b7:26:1c:52:e2:57:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:40:12 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=2cbcde0fde2defbc2828a139eb6723ec5ae7d91d0e1cf5f7d9ed90d844c690d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:9f:53:1b:7b:8f:a6:a8:f1:d4:1b:d0:ec: a7:2e:0b:35:2a:fc:a0:9b:4a:d4:18:47:75:78:30: a3:44:a1:ca:be:3b:c9:82:06:aa:4f:8f:a2:3b:81: 80:a2:47:9b:5f:d7:6e:a3:ba:fa:7e:a5:80:60:35: b1:ea:aa:23:f9:96:33:89:3b:96:d6:45:ae:1c:14: b0:35:2f:09:d7:77:7c:b7:3b:d5:2b:67:36:c7:ad: 39:55:d6:b6:01:d7:4b:63:23:b3:0e:db:19:d5:03: 63:bb:97:19:56:4c:0c:ce:3f:0e:c1:06:18:81:9a: 17:64:dd:b4:20:46:61:49:d2:08:fd:8d:de:df:63: 8a:bf:1a:6b:c1:0d:b5:f1:ba:7a:94:bf:e5:37:dd: 66:18:dc:57:b6:85:64:f1:24:94:b5:36:15:27:f2: e1:61:81:a4:b0:67:5a:f6:91:cf:6a:2b:f1:18:c2: ee:74:9c:0c:82:a3:25:2d:99:db:34:72:3e:d8:eb: 8a:61:05:f7:84:c7:e7:53:09:a7:66:ba:42:a7:8a: 6f:87:f0:3d:a8:8a:6a:34:42:61:64:fc:a9:61:20: b5:d2:13:33:cb:6a:c4:33:65:ed:26:ac:43:4e:a8: 5d:36:03:1b:f6:62:bf:d0:2e:9f:71:ef:83:c7:65: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:F4:10:92:E1:63:B2:3E:50:E1:C7:19:81:63:5C:97:4F:43:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/116071fa-fa33-4a2f-9343-0d57551a9223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6060::/48 Signature Algorithm: sha256WithRSAEncryption 99:95:83:8d:7f:97:2d:41:80:1e:9a:67:f2:d3:25:b0:01:b2: c5:db:c1:0f:a4:39:b1:6a:7e:b6:dd:00:75:b1:6b:22:75:b2: 58:3e:14:73:10:c3:ec:69:68:1b:53:b2:20:00:1a:6a:ca:4b: 9a:8d:10:bb:df:b7:e4:3c:cd:95:82:1f:04:59:c2:6d:de:ba: c8:13:98:0d:ce:c7:9a:fa:70:fb:9f:08:f8:af:d0:24:d2:83: ca:41:76:1e:21:92:5a:c7:28:1d:ef:09:15:08:fd:dd:05:a9: 53:e0:f5:88:eb:f3:1e:18:7c:3c:e3:e9:1b:45:83:0d:aa:bb: ec:88:65:b6:96:52:58:4d:8d:88:4c:6a:a8:b5:f4:7d:d6:c6: fb:dc:dc:17:36:ad:4a:5e:d7:d5:83:ef:07:44:10:c2:31:e5: 28:21:72:ff:0e:9b:56:6d:80:9f:44:75:a1:92:6e:1f:05:82: 54:88:35:86:d5:20:1b:ae:1d:03:74:64:0b:bd:3b:cb:5e:cf: 87:40:f8:53:54:11:0e:76:d9:93:e6:41:30:88:20:2c:51:89: d5:0a:dd:fc:14:8a:0a:4b:ca:05:22:59:a1:f7:a6:4d:d5:51: 92:be:c7:48:82:b3:37:ec:ca:18:28:27:b6:7f:a7:2a:22:04: 52:c1:79:0d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUL2lQx5KlYRSQpF1KtyYcUuJXnIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDAxMloX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMmNiY2RlMGZkZTJkZWZiYzI4Mjhh MTM5ZWI2NzIzZWM1YWU3ZDkxZDBlMWNmNWY3ZDllZDkwZDg0NGM2OTBkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaSfUxt7j6ao8dQb0OynLgs1Kvyg m0rUGEd1eDCjRKHKvjvJggaqT4+iO4GAokebX9duo7r6fqWAYDWx6qoj+ZYziTuW 1kWuHBSwNS8J13d8tzvVK2c2x605Vda2AddLYyOzDtsZ1QNju5cZVkwMzj8OwQYY gZoXZN20IEZhSdII/Y3e32OKvxprwQ218bp6lL/lN91mGNxXtoVk8SSUtTYVJ/Lh YYGksGda9pHPaivxGMLudJwMgqMlLZnbNHI+2OuKYQX3hMfnUwmnZrpCp4pvh/A9 qIpqNEJhZPypYSC10hMzy2rEM2XtJqxDTqhdNgMb9mK/0C6fce+Dx2ULqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOXj9BCS4WOyPlDhxxmBY1yXT0PYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzExNjA3MWZhLWZhMzMtNGEyZi05MzQzLTBkNTc1NTFhOTIyMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGBgMA0GCSqGSIb3DQEBCwUAA4IBAQCZlYONf5ctQYAemmfy 0yWwAbLF28EPpDmxan623QB1sWsidbJYPhRzEMPsaWgbU7IgABpqykuajRC737fk PM2Vgh8EWcJt3rrIE5gNzsea+nD7nwj4r9Ak0oPKQXYeIZJaxygd7wkVCP3dBalT 4PWI6/MeGHw84+kbRYMNqrvsiGW2llJYTY2ITGqotfR91sb73NwXNq1KXtfVg+8H RBDCMeUoIXL/DptWbYCfRHWhkm4fBYJUiDWG1SAbrh0DdGQLvTvLXs+HQPhTVBEO dtmT5kEwiCAsUYnVCt38FIoKS8oFIlmh96ZN1VGSvsdIgrM37MoYKCe2f6cqIgRS wXkN -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:44 2025 by rpki-client