$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa File: 1b56d794-06a2-4803-b98b-e9a84d35ff73.roa (raw, json) Hash identifier: kZRV2YYUiG6kqGTeY3QByQ6Y0VHXAwvdkYh9LdqPXXs= Subject key identifier: C7:1A:4C:0D:72:DE:81:0A:4C:AB:4E:AC:68:25:EB:AA:8C:D5:9D:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 159D6928E73AC7643D712B37C595F26C502CBE07 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa Signing time: Wed 14 May 2025 00:40:18 +0000 ROA not before: Wed 14 May 2025 00:40:18 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9d:69:28:e7:3a:c7:64:3d:71:2b:37:c5:95:f2:6c:50:2c:be:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:40:18 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=098e59cc93e1ba059269f9ddf4de7cebe88cf839fc900c2924edff92e99b3868, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:82:73:c5:f4:4c:ef:dd:e1:4e:3a:6f:13: 8f:98:10:d5:6e:7b:88:e8:a1:a2:8a:70:aa:91:2e: ec:62:bc:7c:cb:c3:6d:88:e4:16:e6:1a:d2:65:96: 9f:db:54:8b:4c:57:a9:54:f4:8a:9c:b5:97:a5:84: 8d:23:5a:c2:b8:ff:ab:5f:8c:36:f1:3d:db:6a:8d: 9a:1e:4f:e0:20:c1:0d:81:bc:8b:28:11:f9:7a:54: 5f:9e:09:e6:8e:3c:a5:9b:d9:e4:b0:06:4b:3a:24: b9:2d:91:e7:c8:da:6c:b1:3d:ea:44:e8:88:fb:4f: e0:19:7c:a7:c1:49:a5:d2:fb:59:d4:2e:06:f6:26: 06:ea:a2:37:ed:bd:87:5f:09:c9:14:7c:ca:30:2f: a5:aa:b0:11:6a:dd:22:fe:d1:03:24:3b:5a:29:14: fc:96:d7:0b:cc:74:90:e0:65:b6:e9:d8:5e:da:aa: 60:8e:0b:b3:9e:9b:54:9b:9a:2e:ab:da:6c:99:2c: 6b:a2:a4:c3:d8:a1:66:ab:0f:91:be:e0:05:24:cc: 32:0a:a0:43:23:b4:13:60:58:88:9f:6e:0a:d4:1d: f1:3d:c7:06:b7:97:a7:7a:70:b3:69:d0:e4:29:ef: 4f:86:6e:7b:ec:fd:3b:f9:62:e6:0f:24:f2:50:cf: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1A:4C:0D:72:DE:81:0A:4C:AB:4E:AC:68:25:EB:AA:8C:D5:9D:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8840::/48 Signature Algorithm: sha256WithRSAEncryption 61:f5:5e:fd:8f:b4:50:00:28:d0:30:3a:7b:fe:0b:8c:90:b0: fd:e6:0a:19:5b:ef:ab:32:6e:44:eb:29:2e:55:b8:d0:7b:cf: f4:ed:63:8f:52:69:69:92:33:98:c3:47:ea:ca:cc:aa:87:0d: c3:14:f4:53:d2:67:6f:90:15:48:fd:4a:e8:6f:67:b8:e9:4d: 3f:40:9c:2c:77:54:8c:68:51:e0:89:14:30:d4:a4:ca:f9:69: 1b:40:4a:69:19:19:bf:f0:93:da:de:71:86:fd:6a:1d:fd:82: 6c:6a:92:8a:0c:ac:67:e1:7f:6d:da:90:5f:76:e2:53:9a:a0: 00:d9:5c:c0:21:ac:7d:0d:b3:30:e6:b1:71:09:26:fb:a7:d0: 53:8b:f7:0e:60:8c:c7:79:31:d6:07:06:b5:ec:5a:49:37:9e: 1c:8b:f6:28:27:f7:bd:9b:79:61:53:9e:cb:e0:99:20:ee:0b: 39:6e:c5:62:ec:16:92:46:78:e2:87:19:63:bf:d8:b6:fe:c6: 62:75:d4:73:eb:a2:f4:fc:af:78:7f:d9:5d:fe:03:61:a7:7e: 4b:28:6f:bb:11:1f:84:96:83:86:6b:92:7b:16:2b:55:a3:79: 19:55:ea:a2:fc:30:cc:11:f3:fa:6e:04:50:4b:e2:99:af:97: f1:df:e0:59 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFZ1pKOc6x2Q9cSs3xZXybFAsvgcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDAxOFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMDk4ZTU5Y2M5M2UxYmEwNTkyNjlm OWRkZjRkZTdjZWJlODhjZjgzOWZjOTAwYzI5MjRlZGZmOTJlOTliMzg2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPqCc8X0TO/d4U46bxOPmBDVbnuI 6KGiinCqkS7sYrx8y8NtiOQW5hrSZZaf21SLTFepVPSKnLWXpYSNI1rCuP+rX4w2 8T3bao2aHk/gIMENgbyLKBH5elRfngnmjjylm9nksAZLOiS5LZHnyNpssT3qROiI +0/gGXynwUml0vtZ1C4G9iYG6qI37b2HXwnJFHzKMC+lqrARat0i/tEDJDtaKRT8 ltcLzHSQ4GW26dhe2qpgjguznptUm5ouq9psmSxroqTD2KFmqw+RvuAFJMwyCqBD I7QTYFiIn24K1B3xPccGt5enenCzadDkKe9Phm577P07+WLmDyTyUM++8QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMcaTA1y3oEKTKtOrGgl66qM1Z1AMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiNTZkNzk0LTA2YTItNDgwMy1iOThiLWU5YTg0ZDM1ZmY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4hAMA0GCSqGSIb3DQEBCwUAA4IBAQBh9V79j7RQACjQMDp7 /guMkLD95goZW++rMm5E6ykuVbjQe8/07WOPUmlpkjOYw0fqysyqhw3DFPRT0mdv kBVI/Urob2e46U0/QJwsd1SMaFHgiRQw1KTK+WkbQEppGRm/8JPa3nGG/Wod/YJs apKKDKxn4X9t2pBfduJTmqAA2VzAIax9DbMw5rFxCSb7p9BTi/cOYIzHeTHWBwa1 7FpJN54ci/YoJ/e9m3lhU57L4Jkg7gs5bsVi7BaSRnjihxljv9i2/sZiddRz66L0 /K94f9ld/gNhp35LKG+7ER+EloOGa5J7FitVo3kZVeqi/DDMEfP6bgRQS+KZr5fx 3+BZ -----END CERTIFICATE-----Generated at Mon Jun 2 06:15:17 2025 by rpki-client