$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa File: 25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa (raw, json) Hash identifier: X8vFX/M0bZI5b9+DdOeUcC6/JQyTYngQ8LyJfbHYon8= Subject key identifier: CC:67:40:BE:2C:C8:12:8E:00:E6:58:38:AA:A4:1D:AC:8F:27:A8:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24A27C91A69C5019CE2F226DEADB77A14790C78D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa Signing time: Sat 22 Mar 2025 00:01:06 +0000 ROA not before: Sat 22 Mar 2025 00:01:06 +0000 ROA not after: Sat 26 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a2:7c:91:a6:9c:50:19:ce:2f:22:6d:ea:db:77:a1:47:90:c7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 22 00:01:06 2025 GMT Not After : Apr 26 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:7e:1b:2b:49:b3:5e:35:bf:4a:a2:5f:3b: d3:8c:fb:04:ac:94:0a:9b:6f:23:bb:bc:fa:6a:b9: de:3e:54:36:97:c2:c1:48:04:5e:2d:55:5d:db:db: d3:16:2c:6a:9f:1c:ee:bd:75:cc:b2:64:a7:00:58: 60:9f:a4:1f:45:ce:0f:e5:2f:b6:63:bf:d3:a4:d2: 3d:55:8d:07:b1:38:c5:84:f6:40:e0:c5:fe:e9:5e: cf:9d:1c:fd:5a:64:24:d6:5f:97:28:24:f9:2f:63: f4:fe:19:db:98:87:ff:96:98:a6:bb:3e:6d:3c:44: b0:7a:23:d4:e6:bb:5c:71:cb:80:bf:97:0e:1f:69: 4c:ae:15:0e:6a:21:6d:1e:65:90:ba:7e:2d:3d:77: 0f:82:b7:f2:00:b8:87:1c:8b:11:c2:fb:85:50:31: 10:1c:e8:6c:c2:62:04:f4:b5:c6:99:f0:b2:78:4c: 58:22:3f:87:10:c4:93:34:d1:37:b2:f8:ae:2c:59: 98:45:bf:0f:ea:09:d0:ba:b3:8b:e0:fd:6a:1a:9b: 70:00:13:96:af:e0:c6:09:d1:d2:71:74:a9:19:63: 28:5f:c0:3f:9b:23:58:5b:30:ef:a2:24:a3:74:cf: c9:6b:ff:82:68:e4:6b:8f:09:0b:66:fd:e2:37:61: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:67:40:BE:2C:C8:12:8E:00:E6:58:38:AA:A4:1D:AC:8F:27:A8:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/48 Signature Algorithm: sha256WithRSAEncryption 74:70:af:d9:41:a8:ce:31:ea:33:19:9b:92:a5:d7:d0:7a:e4: 71:a5:13:07:45:18:a2:fd:55:13:23:1e:71:0e:50:22:7c:9a: a6:93:51:e0:07:a4:10:9d:60:5e:04:00:de:d3:05:9f:0c:f5: 67:fa:70:73:50:3f:b9:92:77:3a:8c:5a:65:64:fe:6a:ad:57: 00:0c:0c:65:82:49:0a:a9:7a:06:e4:b5:85:04:d9:b7:5d:6b: 0a:be:c1:8d:f5:e7:49:52:f8:13:c3:f7:ea:f1:c5:36:f1:f3: b6:a2:16:d8:21:97:21:2b:82:d3:10:ff:6a:b2:7b:b9:78:fb: aa:bb:da:c3:c5:47:04:ad:53:75:cf:52:97:fc:b4:b6:c4:0d: 52:2d:45:09:6c:ae:88:fd:8c:fb:a9:0f:ee:ae:d7:d9:84:25: dd:e3:e0:3c:e7:e6:e6:ae:a2:9e:2a:14:eb:27:03:8f:11:bf: 23:32:f9:5e:e3:ab:4a:fc:e1:b2:ca:2a:a1:67:b3:d2:29:74: e5:b8:6f:ad:ed:ff:56:88:f8:85:66:88:33:d8:28:dd:40:cc: 29:fb:5c:a8:4c:70:8c:0a:aa:87:f9:f7:ed:ae:b0:ad:be:0f: 82:93:b5:ad:70:e0:e8:2c:64:af:37:fe:1d:b2:9f:fd:75:79: 3a:ec:c9:54 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJKJ8kaacUBnOLyJt6tt3oUeQx40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMjAwMDEwNloX DTI1MDQyNjIzNTk1OVowejFJMEcGA1UEBRNAY2NkOGM1OTBkOWNjMTg3YzYzMGU4 Zjg5MDNlNjAzOWIyYWE0ZmE0NDk4OTljNzVkMDFhMTU3ODJlNDFkNDc3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy5+GytJs141v0qiXzvTjPsErJQK m28ju7z6arnePlQ2l8LBSAReLVVd29vTFixqnxzuvXXMsmSnAFhgn6QfRc4P5S+2 Y7/TpNI9VY0HsTjFhPZA4MX+6V7PnRz9WmQk1l+XKCT5L2P0/hnbmIf/lpimuz5t PESweiPU5rtcccuAv5cOH2lMrhUOaiFtHmWQun4tPXcPgrfyALiHHIsRwvuFUDEQ HOhswmIE9LXGmfCyeExYIj+HEMSTNNE3sviuLFmYRb8P6gnQurOL4P1qGptwABOW r+DGCdHScXSpGWMoX8A/myNYWzDvoiSjdM/Ja/+CaORrjwkLZv3iN2FYDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMxnQL4syBKOAOZYOKqkHayPJ6haMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1ZDVhZDdlLWYyNWMtNDdjNi05YTllLTRlYzFkNDgyNDc2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9ggAMA0GCSqGSIb3DQEBCwUAA4IBAQB0cK/ZQajOMeozGZuS pdfQeuRxpRMHRRii/VUTIx5xDlAifJqmk1HgB6QQnWBeBADe0wWfDPVn+nBzUD+5 knc6jFplZP5qrVcADAxlgkkKqXoG5LWFBNm3XWsKvsGN9edJUvgTw/fq8cU28fO2 ohbYIZchK4LTEP9qsnu5ePuqu9rDxUcErVN1z1KX/LS2xA1SLUUJbK6I/Yz7qQ/u rtfZhCXd4+A85+bmrqKeKhTrJwOPEb8jMvle46tK/OGyyiqhZ7PSKXTluG+t7f9W iPiFZogz2CjdQMwp+1yoTHCMCqqH+fftrrCtvg+Ck7WtcODoLGSvN/4dsp/9dXk6 7MlU -----END CERTIFICATE-----Generated at Sat Apr 5 10:50:57 2025 by rpki-client