$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa File: 53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa (raw, json) Hash identifier: F7iNNWUjst2J7YZegRs+dFP7eU170FASCUUXQ/8ZnBU= Subject key identifier: 74:F6:78:8B:AA:95:A7:5A:1A:09:CE:E6:29:93:F3:BA:E2:4D:B2:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B9DABD3845055697C02393FFC107A28C3E16FFC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa Signing time: Fri 16 May 2025 00:10:12 +0000 ROA not before: Fri 16 May 2025 00:10:12 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9d:ab:d3:84:50:55:69:7c:02:39:3f:fc:10:7a:28:c3:e1:6f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:10:12 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=8d09099ca8822413e9b5b6d5903aed7bd1ed345a0a7ab1ef4effc3d858231998, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:66:3b:5e:a6:8d:a2:3c:0b:84:3e:ac:fc: a7:91:db:97:d7:2f:3a:3d:9b:2a:c0:d8:50:40:e3: 4c:d7:b4:f8:bf:a4:8c:ef:65:d8:36:37:5a:81:90: 83:52:38:39:8b:ab:37:d2:56:50:07:31:71:ae:df: 6a:77:41:d3:4c:67:38:d3:b4:52:e0:1b:f3:3b:7c: ed:6f:1c:34:7d:ce:33:6c:eb:66:39:24:1c:7a:1f: 7e:e5:8a:78:06:8e:17:e1:47:fb:11:0e:77:96:e0: 7f:af:b4:0e:17:ea:34:77:93:7b:29:90:2e:98:a4: 48:30:90:08:da:f7:e0:6e:e9:77:ec:08:a8:56:a2: 31:65:ab:21:78:29:aa:a7:82:70:55:e9:68:08:0b: de:44:03:b5:78:40:0d:91:e6:03:b1:7f:0e:b3:27: 5b:3b:16:f5:65:6d:e4:7d:f5:19:c1:79:43:34:83: a8:db:9c:51:00:4c:0d:44:c4:80:c2:81:39:c2:6b: b6:ad:d4:6f:6d:71:cc:32:74:07:fd:42:46:63:94: c4:1b:f9:5a:54:f0:60:83:09:14:47:c0:b9:e4:0c: 42:eb:09:ae:48:86:41:ed:4c:0b:4a:f9:bd:73:7e: f9:d9:5a:d4:03:10:58:d3:1b:35:e8:62:1c:85:83: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F6:78:8B:AA:95:A7:5A:1A:09:CE:E6:29:93:F3:BA:E2:4D:B2:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2000::/40 Signature Algorithm: sha256WithRSAEncryption 16:a8:6a:85:3c:3f:1f:38:45:34:6d:92:91:d7:98:f7:e9:e4: c1:c7:4e:98:a3:c8:0a:e2:52:c4:08:fd:c7:46:95:b0:f5:c4: 93:25:90:df:fc:59:41:04:cc:45:01:73:73:01:70:db:b8:f1: c6:09:20:de:61:18:24:58:69:0f:19:02:78:5c:03:3f:05:b6: 45:eb:d4:56:62:14:a2:cf:a5:cf:55:ac:6c:40:9c:82:27:90: b0:5f:f8:7e:bc:0e:00:f0:43:d4:23:64:bf:f3:a1:a7:5e:9c: fa:d9:b2:3d:4a:f6:5d:b6:69:f1:0b:60:0f:a0:ea:bf:a7:2a: a3:0a:f1:cd:7f:62:7d:f6:a2:73:50:40:83:9b:6e:7d:f8:dd: f7:12:41:95:33:37:2d:5d:6d:3f:12:2b:13:5d:20:d8:cf:63: 21:e7:14:b7:48:da:44:fe:5d:ef:36:48:ee:c5:2d:17:36:16: 67:4d:11:20:a8:14:51:d1:03:6a:a7:8f:95:ad:fb:1f:90:09: 21:1c:ff:b1:94:14:37:61:74:91:2c:bf:4b:54:a1:65:13:bc: e9:c6:3c:37:9d:23:52:3a:c6:dd:ab:61:79:04:19:cc:34:2b: ba:f7:4b:8d:5d:44:fa:2f:ba:8f:1f:67:89:b8:78:47:5e:e4: 27:41:15:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa52r04RQVWl8Ajk//BB6KMPhb/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMTAxMloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOGQwOTA5OWNhODgyMjQxM2U5YjVi NmQ1OTAzYWVkN2JkMWVkMzQ1YTBhN2FiMWVmNGVmZmMzZDg1ODIzMTk5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuARmO16mjaI8C4Q+rPynkduX1y86 PZsqwNhQQONM17T4v6SM72XYNjdagZCDUjg5i6s30lZQBzFxrt9qd0HTTGc407RS 4BvzO3ztbxw0fc4zbOtmOSQceh9+5Yp4Bo4X4Uf7EQ53luB/r7QOF+o0d5N7KZAu mKRIMJAI2vfgbul37AioVqIxZasheCmqp4JwVeloCAveRAO1eEANkeYDsX8Osydb Oxb1ZW3kffUZwXlDNIOo25xRAEwNRMSAwoE5wmu2rdRvbXHMMnQH/UJGY5TEG/la VPBggwkUR8C55AxC6wmuSIZB7UwLSvm9c3752VrUAxBY0xs16GIchYNjCwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHT2eIuqladaGgnO5imT87riTbLkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzZGM4YWNjLTBjMzAtNDJkMy1hYmZhLTU3OTJlYTViZjdkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/yAwDQYJKoZIhvcNAQELBQADggEBABaoaoU8Px84RTRtkpHX mPfp5MHHTpijyAriUsQI/cdGlbD1xJMlkN/8WUEEzEUBc3MBcNu48cYJIN5hGCRY aQ8ZAnhcAz8FtkXr1FZiFKLPpc9VrGxAnIInkLBf+H68DgDwQ9QjZL/zoadenPrZ sj1K9l22afELYA+g6r+nKqMK8c1/Yn32onNQQIObbn343fcSQZUzNy1dbT8SKxNd INjPYyHnFLdI2kT+Xe82SO7FLRc2FmdNESCoFFHRA2qnj5Wt+x+QCSEc/7GUFDdh dJEsv0tUoWUTvOnGPDedI1I6xt2rYXkEGcw0K7r3S41dRPovuo8fZ4m4eEde5CdB FSA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:44 2025 by rpki-client