$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa File: 485da602-98f5-4e2b-890f-c254a3071aeb.roa (raw, json) Hash identifier: alBXwKwpKtpqkDg7KOImBY3Ip1j0iDt+A9Y8JxtM++k= Subject key identifier: DD:92:7F:9F:2E:ED:EE:CD:7C:0C:5D:42:27:F1:DC:F9:3F:8C:37:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4DDE698C011424A1C10FE25CD97C9CEEB22486 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa Signing time: Wed 07 May 2025 00:00:15 +0000 ROA not before: Wed 07 May 2025 00:00:15 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:de:69:8c:01:14:24:a1:c1:0f:e2:5c:d9:7c:9c:ee:b2:24:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 7 00:00:15 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=6265d00b3f091659a0b195b070b4ed39fb4a96d6eeb53315cd84a360fd886667, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:e2:d3:2d:3e:be:d9:66:c7:4a:cf:b4:d8: 28:e7:fc:a6:8d:8d:2f:21:f2:b9:a5:6c:c0:24:a4: 8a:8f:eb:0d:ea:9e:7e:7c:bf:06:5a:96:c6:5c:27: a9:d0:26:8a:83:a1:78:6a:db:69:11:e8:a2:13:f0: ce:0d:b5:87:51:a5:c3:38:b3:55:5c:a7:cb:26:9e: 04:c4:49:5b:cd:4a:1a:be:de:06:dc:29:4a:e4:74: 1e:9e:20:4e:d5:60:3f:d6:8f:23:09:97:0b:d8:a7: 6d:21:09:c8:7a:92:72:21:88:a8:1e:48:9d:bf:b1: bb:e2:b3:7e:0d:9d:8d:98:77:69:36:05:25:d7:da: 05:28:be:54:f9:51:01:12:d7:6d:ba:0f:b0:e8:d4: 01:14:08:4d:46:09:df:c5:76:40:d1:d2:b5:46:32: 96:45:ae:be:fd:c2:17:7c:24:17:89:14:29:8d:9c: d6:b6:03:d4:af:5f:cf:4e:96:03:81:65:20:9e:2a: 0a:3b:65:6e:07:9d:3f:c3:0a:fc:ef:fd:9f:c8:41: 7c:26:d8:ee:fa:54:ec:2c:dd:4f:fa:69:ae:ca:30: c0:fd:8b:2e:c7:99:ff:52:5d:3e:0b:59:7a:f8:b8: 02:bb:55:51:19:b7:b6:a5:fd:45:88:b8:7d:cd:df: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:92:7F:9F:2E:ED:EE:CD:7C:0C:5D:42:27:F1:DC:F9:3F:8C:37:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a::/36 Signature Algorithm: sha256WithRSAEncryption 0f:91:a2:03:9d:87:2a:e8:4b:8e:49:58:4d:77:09:56:66:70: c0:1c:1c:b0:fa:1e:45:39:83:87:4a:4c:51:97:2b:15:63:77: 3a:a2:cd:91:68:52:d8:1c:29:ef:ae:62:43:b2:71:94:e3:80: 71:3e:9a:e3:63:2c:87:38:ab:9a:af:c4:42:7b:f0:97:c8:12: 51:2d:9c:7b:8b:58:6f:d8:37:b1:35:51:47:c7:9e:a9:ff:43: 22:78:cb:b7:ec:d7:ae:2a:aa:44:90:db:80:39:09:3d:a7:94: e2:52:5a:77:6f:e6:83:e6:e4:bc:cf:f5:1d:90:d9:12:00:9c: 69:b4:37:6d:90:91:45:a4:7e:9e:1f:9a:55:91:fb:e6:ed:54: 4a:ce:de:a6:de:09:00:07:a3:7d:1c:72:96:13:b4:7a:04:9f: 2e:9d:9f:6d:7a:77:ba:92:ae:55:f7:e9:ed:a5:ac:74:31:63: f1:96:1c:c9:c7:2f:57:75:97:8a:08:65:eb:0b:7c:1f:6c:14: 62:9a:4b:ad:da:3f:aa:24:e6:2a:94:8c:3a:b8:ac:d3:9f:e8: 72:d5:6e:0d:8a:0c:ec:4c:98:52:e9:dc:88:bb:66:d4:39:67: 8e:22:08:76:db:ed:4d:28:5a:bf:e9:66:35:c5:f2:f9:4e:30: 67:16:28:49 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITTd5pjAEUJKHBD+Jc2Xyc7rIkhjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUwNTA3MDAwMDE1WhcN MjUwNjExMjM1OTU5WjB6MUkwRwYDVQQFE0A2MjY1ZDAwYjNmMDkxNjU5YTBiMTk1 YjA3MGI0ZWQzOWZiNGE5NmQ2ZWViNTMzMTVjZDg0YTM2MGZkODg2NjY3MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1OLTLT6+2WbHSs+02Cjn/KaNjS8h 8rmlbMAkpIqP6w3qnn58vwZalsZcJ6nQJoqDoXhq22kR6KIT8M4NtYdRpcM4s1Vc p8smngTESVvNShq+3gbcKUrkdB6eIE7VYD/WjyMJlwvYp20hCch6knIhiKgeSJ2/ sbvis34NnY2Yd2k2BSXX2gUovlT5UQES1226D7Do1AEUCE1GCd/FdkDR0rVGMpZF rr79whd8JBeJFCmNnNa2A9SvX89OlgOBZSCeKgo7ZW4HnT/DCvzv/Z/IQXwm2O76 VOws3U/6aa7KMMD9iy7Hmf9SXT4LWXr4uAK7VVEZt7al/UWIuH3N35qnAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQU3ZJ/ny7t7s18DF1CJ/Hc+T+MN44wHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NDg1ZGE2MDItOThmNS00ZTJiLTg5MGYtYzI1NGEzMDcxYWViLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBtoqADANBgkqhkiG9w0BAQsFAAOCAQEAD5GiA52HKuhLjklYTXcJ VmZwwBwcsPoeRTmDh0pMUZcrFWN3OqLNkWhS2Bwp765iQ7JxlOOAcT6a42Mshzir mq/EQnvwl8gSUS2ce4tYb9g3sTVRR8eeqf9DInjLt+zXriqqRJDbgDkJPaeU4lJa d2/mg+bkvM/1HZDZEgCcabQ3bZCRRaR+nh+aVZH75u1USs7ept4JAAejfRxylhO0 egSfLp2fbXp3upKuVffp7aWsdDFj8ZYcyccvV3WXighl6wt8H2wUYppLrdo/qiTm KpSMOris05/octVuDYoM7EyYUunciLtm1DlnjiIIdtvtTShav+lmNcXy+U4wZxYo SQ== -----END CERTIFICATE-----Generated at Mon Jun 2 06:16:09 2025 by rpki-client