$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa File: 29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa (raw, json) Hash identifier: zNRc98aoTU7yHShYsBGcLZj0fh/TAFnHI8atiDGJ+jE= Subject key identifier: E8:5F:C0:F7:15:D8:7F:41:86:F1:20:C5:72:8A:54:7C:D0:3F:02:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CB5302A94100C3BA5AC287E396147614F2AA05E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa Signing time: Wed 14 May 2025 00:41:10 +0000 ROA not before: Wed 14 May 2025 00:41:10 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b5:30:2a:94:10:0c:3b:a5:ac:28:7e:39:61:47:61:4f:2a:a0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:41:10 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=fd4e2cd9669c75460ac072a6fda9b0a94f25da8a149ca6c649bde66e87ce6462, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:80:9c:ca:c4:5b:d1:c5:d6:fb:7e:af:67: 8c:48:ca:e2:9d:f5:c9:03:35:04:b6:d0:e9:4c:dc: 68:dc:b7:98:65:3a:78:67:93:49:69:56:4f:29:0f: 02:89:91:df:fb:ab:c4:68:f2:96:93:ca:e0:0b:56: ca:0c:7f:9b:62:66:75:71:72:39:56:64:4b:14:f1: a3:29:3f:ba:c0:07:d7:d6:67:26:c4:20:27:af:bd: ff:4c:10:b5:4f:c5:5c:e4:5e:56:08:7d:6c:04:65: 60:66:c4:5d:95:82:d4:51:22:6f:5e:a8:fb:0c:8a: 9d:e0:3e:c2:ad:30:38:87:ef:c0:aa:2e:11:ae:f1: 5c:0c:fd:68:19:74:bc:95:f9:a1:43:ce:7f:27:2b: a9:2b:c4:fb:34:49:3b:7b:6a:14:ea:a4:2a:89:b1: d1:0f:21:41:23:d9:b9:f5:32:24:33:44:e8:c2:6b: 13:28:7b:c1:d7:88:9a:34:3e:c9:ec:d2:bb:b5:c1: c1:ec:30:cf:3e:fb:31:fa:03:24:6d:5a:1c:54:fd: 43:3a:e2:41:c6:21:f2:ff:d9:9c:cc:ef:ef:f0:77: 33:f5:32:bc:0c:c7:26:10:10:55:a6:9b:3e:42:1b: e3:7d:aa:13:d3:8c:9e:d4:5e:e5:5f:02:14:fd:7f: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:C0:F7:15:D8:7F:41:86:F1:20:C5:72:8A:54:7C:D0:3F:02:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2880::/48 Signature Algorithm: sha256WithRSAEncryption bf:64:5d:4f:cc:7f:9f:fa:46:22:72:e8:38:4b:89:d3:33:95: 2e:d9:80:e1:28:20:3e:85:4e:77:3c:93:2f:a6:a6:bd:c5:83: 8a:c3:de:4b:50:bc:d2:6b:4a:5d:e4:93:82:57:34:6d:62:30: d4:d4:ec:aa:f0:d4:02:ac:e5:3b:1a:30:10:3a:53:8c:e1:70: 20:0e:84:fb:ad:6a:78:5d:59:d8:bd:c7:90:0b:4f:37:01:8a: 1b:ee:d6:90:19:b3:87:18:4c:eb:cd:5d:70:0d:2b:c6:42:a3: b1:6a:d3:ff:ed:00:9c:a0:c5:d9:10:33:c0:88:5b:cc:58:b8: 85:53:d1:1e:a6:43:17:0c:81:65:7d:f1:07:bb:aa:62:00:5e: bd:32:7a:6f:82:86:6a:19:21:de:bc:33:38:af:37:ba:9e:37: 7e:23:88:4a:1c:b0:3b:1a:58:99:dd:cd:97:a8:2e:2c:52:3a: a1:fb:01:7e:65:72:2c:7b:27:ee:95:c9:1c:9c:7e:de:4b:d4: 1c:6a:eb:30:04:4c:78:7b:d9:00:d6:d0:b8:c1:de:a0:0e:7c: c6:db:54:28:e9:ca:80:16:d9:83:e3:9b:99:a0:06:74:72:98: 5f:6a:45:9a:da:26:d7:1f:b4:2b:28:3e:d6:19:6e:dd:7c:85: 50:d7:d8:27 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTLUwKpQQDDulrCh+OWFHYU8qoF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDExMFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAZmQ0ZTJjZDk2NjljNzU0NjBhYzA3 MmE2ZmRhOWIwYTk0ZjI1ZGE4YTE0OWNhNmM2NDliZGU2NmU4N2NlNjQ2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3mAnMrEW9HF1vt+r2eMSMrinfXJ AzUEttDpTNxo3LeYZTp4Z5NJaVZPKQ8CiZHf+6vEaPKWk8rgC1bKDH+bYmZ1cXI5 VmRLFPGjKT+6wAfX1mcmxCAnr73/TBC1T8Vc5F5WCH1sBGVgZsRdlYLUUSJvXqj7 DIqd4D7CrTA4h+/Aqi4RrvFcDP1oGXS8lfmhQ85/JyupK8T7NEk7e2oU6qQqibHR DyFBI9m59TIkM0TowmsTKHvB14iaND7J7NK7tcHB7DDPPvsx+gMkbVocVP1DOuJB xiHy/9mczO/v8Hcz9TK8DMcmEBBVpps+QhvjfaoT04ye1F7lXwIU/X9TgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOhfwPcV2H9BhvEgxXKKVHzQPwIqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI5ZmU5N2Q5LWJlZmUtNGVhOS04MTUxLWQ3NmVhNmU5YTcwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yiAMA0GCSqGSIb3DQEBCwUAA4IBAQC/ZF1PzH+f+kYicug4 S4nTM5Uu2YDhKCA+hU53PJMvpqa9xYOKw95LULzSa0pd5JOCVzRtYjDU1Oyq8NQC rOU7GjAQOlOM4XAgDoT7rWp4XVnYvceQC083AYob7taQGbOHGEzrzV1wDSvGQqOx atP/7QCcoMXZEDPAiFvMWLiFU9EepkMXDIFlffEHu6piAF69MnpvgoZqGSHevDM4 rze6njd+I4hKHLA7GliZ3c2XqC4sUjqh+wF+ZXIseyfulckcnH7eS9QcauswBEx4 e9kA1tC4wd6gDnzG21Qo6cqAFtmD45uZoAZ0cphfakWa2ibXH7QrKD7WGW7dfIVQ 19gn -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:05 2025 by rpki-client