$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32c6f2e6-113c-4d40-a541-26a09c985dde.roa File: 32c6f2e6-113c-4d40-a541-26a09c985dde.roa (raw, json) Hash identifier: uRFAPFRL0Cc5fr8G1wXX4CHt+/poSlb8L9c0MFEHaEg= Subject key identifier: 23:8B:D5:C4:AF:D6:A3:2F:4B:12:78:C9:A8:27:CF:E9:9A:D4:9C:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A8F96F5F04F594842FAFC0D5A45791B3C3BA3CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32c6f2e6-113c-4d40-a541-26a09c985dde.roa Signing time: Wed 14 May 2025 00:41:06 +0000 ROA not before: Wed 14 May 2025 00:41:06 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8f:96:f5:f0:4f:59:48:42:fa:fc:0d:5a:45:79:1b:3c:3b:a3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:41:06 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=0072d1fe0f3624f40a4c55638dc3a467e633b0350578c751957f2abbd34a9d26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:66:39:8c:b4:bd:f0:34:8a:24:0e:d0:b4: 98:86:da:f1:5e:9f:e1:8d:98:2c:5e:ce:be:60:7b: 23:d4:0d:7f:fe:55:b5:ef:dd:69:ed:b0:3a:c2:f0: 57:db:19:c2:ee:4a:76:35:79:58:35:76:7a:ee:1d: c5:99:48:7f:7d:a5:7f:b8:25:9e:f1:66:17:cf:cd: 14:65:68:e9:35:09:f5:4c:60:0c:99:ed:aa:fd:cd: 1d:ab:8c:d5:53:42:d7:d6:5e:3f:f1:02:e0:f8:05: 5f:9d:c9:bc:23:95:4b:fb:2e:19:00:bd:1c:17:57: ce:22:55:16:9d:0d:78:91:b1:f8:35:dc:11:0c:83: ba:81:ee:26:79:14:1f:cd:d5:a8:3d:41:ff:75:3a: e4:85:bb:40:d0:c7:15:9e:e1:6f:14:d9:84:d2:2b: 94:76:f7:b4:25:ba:e8:c9:47:ec:cd:05:d1:e0:83: 8c:4a:68:66:df:60:a2:59:ae:89:f2:c8:5b:29:2a: 69:0c:43:17:cb:be:96:29:8f:1d:f3:97:11:ca:69: d2:24:c0:06:53:38:43:45:58:b0:35:3a:e0:12:5b: 8e:b5:cf:c4:ba:27:32:b6:00:e3:07:af:37:12:49: 6f:d9:21:c8:d5:aa:e2:ff:a4:82:e9:62:2f:c2:6e: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:D5:C4:AF:D6:A3:2F:4B:12:78:C9:A8:27:CF:E9:9A:D4:9C:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32c6f2e6-113c-4d40-a541-26a09c985dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2800::/40 Signature Algorithm: sha256WithRSAEncryption 42:d0:d8:9f:3a:4a:0b:ef:70:3c:bb:3f:76:a5:62:3d:6e:c3: ab:01:5d:4d:8c:08:c7:1b:e2:20:6d:79:cf:16:a3:3c:41:00: 8c:0e:8d:c7:f3:56:a7:11:67:3b:e3:93:07:8b:08:3c:5a:eb: 17:4d:79:d8:13:ed:a2:d4:a4:95:51:4c:86:09:a0:34:d6:b3: 24:9f:51:70:00:18:af:e1:ff:f5:4b:3d:9c:79:27:81:9a:14: b2:c6:f6:6b:97:31:08:d5:83:32:bb:a5:e1:0e:26:dd:e4:36: ef:b0:9a:9b:52:f0:09:8d:da:13:b8:29:ee:43:f8:15:69:db: 82:98:60:f2:39:96:04:0e:50:9b:78:49:e5:d5:33:78:32:3a: 99:d9:42:b8:9d:c5:51:58:99:5d:23:b6:13:05:83:89:f4:00: 7d:e0:10:e2:1d:39:cb:d6:0e:b7:e1:7c:ff:ec:8c:1e:21:c9: 98:e5:d3:fd:15:f7:d0:bb:96:83:4f:bb:9a:c0:93:03:16:b7: 69:c4:de:81:f1:cd:18:d5:ab:2b:ed:af:48:97:d6:ba:f2:2a: 05:d2:07:97:39:15:93:2e:2f:0e:a2:9c:4c:a8:92:36:0b:d6: f0:ad:42:86:86:b2:e0:0c:87:51:51:85:ea:c4:77:81:f6:44: 6b:5a:2f:44 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUao+W9fBPWUhC+vwNWkV5Gzw7o8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDEwNloX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMDA3MmQxZmUwZjM2MjRmNDBhNGM1 NTYzOGRjM2E0NjdlNjMzYjAzNTA1NzhjNzUxOTU3ZjJhYmJkMzRhOWQyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLtmOYy0vfA0iiQO0LSYhtrxXp/h jZgsXs6+YHsj1A1//lW1791p7bA6wvBX2xnC7kp2NXlYNXZ67h3FmUh/faV/uCWe 8WYXz80UZWjpNQn1TGAMme2q/c0dq4zVU0LX1l4/8QLg+AVfncm8I5VL+y4ZAL0c F1fOIlUWnQ14kbH4NdwRDIO6ge4meRQfzdWoPUH/dTrkhbtA0McVnuFvFNmE0iuU dve0JbroyUfszQXR4IOMSmhm32CiWa6J8shbKSppDEMXy76WKY8d85cRymnSJMAG UzhDRViwNTrgEluOtc/EuicytgDjB683Eklv2SHI1ari/6SC6WIvwm5K3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCOL1cSv1qMvSxJ4yagnz+ma1JxSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyYzZmMmU2LTExM2MtNGQ0MC1hNTQxLTI2YTA5Yzk4NWRkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/ygwDQYJKoZIhvcNAQELBQADggEBAELQ2J86SgvvcDy7P3al Yj1uw6sBXU2MCMcb4iBtec8WozxBAIwOjcfzVqcRZzvjkweLCDxa6xdNedgT7aLU pJVRTIYJoDTWsySfUXAAGK/h//VLPZx5J4GaFLLG9muXMQjVgzK7peEOJt3kNu+w mptS8AmN2hO4Ke5D+BVp24KYYPI5lgQOUJt4SeXVM3gyOpnZQridxVFYmV0jthMF g4n0AH3gEOIdOcvWDrfhfP/sjB4hyZjl0/0V99C7loNPu5rAkwMWt2nE3oHxzRjV qyvtr0iX1rryKgXSB5c5FZMuLw6inEyokjYL1vCtQoaGsuAMh1FRherEd4H2RGta L0Q= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:43 2025 by rpki-client