$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5dbb8706-2b6a-4c27-971b-618ec8194218.roa File: 5dbb8706-2b6a-4c27-971b-618ec8194218.roa (raw, json) Hash identifier: 80V2BpmVXK4jmb+vMX5V6w+Uq+qdMJd/fllnn/baZOg= Subject key identifier: 38:26:90:01:EC:11:52:14:7D:61:48:20:07:F1:C9:F5:E5:2E:44:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EF9D0E9030A04E1215CACE5320E98DF37C680DB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5dbb8706-2b6a-4c27-971b-618ec8194218.roa Signing time: Fri 16 May 2025 00:50:43 +0000 ROA not before: Fri 16 May 2025 00:50:43 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f9:d0:e9:03:0a:04:e1:21:5c:ac:e5:32:0e:98:df:37:c6:80:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:50:43 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=11f5e5a2c867d0b985c8e8838d925db7aa722469afda0032207da3e89874ac58, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:47:05:30:89:17:b7:4c:72:74:f0:b9:5f: 78:be:4d:a7:69:a8:14:d6:5a:41:77:28:90:18:e5: 56:1b:54:3a:ae:1c:49:9c:cf:e4:3c:21:0c:4e:90: cf:ca:c3:7c:54:7b:2e:17:66:63:b1:ce:c1:e2:ed: 7c:4a:50:16:dd:9f:0f:06:6a:cd:eb:55:62:fd:3d: 70:78:9e:3a:7b:a3:24:26:a5:a7:2d:ca:73:e3:99: b6:c2:1b:5f:2e:2b:1a:4f:eb:38:ed:99:96:de:b2: 2c:47:eb:55:90:b8:ad:1c:ef:e3:9d:2e:02:c7:3b: 13:58:36:d9:8b:c1:ef:90:9e:a0:ac:8f:41:76:eb: 79:dd:81:3d:8e:20:c4:65:be:e0:ce:4c:69:57:a2: 18:bf:e6:e0:66:40:86:f8:97:a4:4b:26:db:79:cd: d2:23:3e:ac:7b:8f:ce:2f:4f:cc:b5:a2:72:bf:a9: 8a:5d:ca:9e:a1:0b:15:18:bf:dd:a9:7e:ea:58:65: e4:03:ef:34:47:3c:f8:c4:18:4b:ee:af:00:1f:12: 72:3b:e0:f9:6a:7f:ce:9a:f4:b9:aa:ce:f8:b5:37: 61:a5:99:ea:12:65:2c:a6:74:59:83:9b:40:1a:64: 14:0a:70:b8:da:97:4c:75:2d:e0:04:e8:ac:07:f0: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:26:90:01:EC:11:52:14:7D:61:48:20:07:F1:C9:F5:E5:2E:44:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5dbb8706-2b6a-4c27-971b-618ec8194218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:880::/46 Signature Algorithm: sha256WithRSAEncryption 74:e4:57:6c:3e:65:35:e1:9b:e2:de:34:59:8d:e7:24:38:6a: 49:5a:29:02:5a:9e:3f:d7:6d:57:53:79:c1:9c:d2:8f:2c:75: 59:69:47:01:b3:5d:5e:36:5f:64:4f:f3:14:d4:53:b3:5a:a3: 01:04:36:13:30:41:93:e8:51:ac:dd:e6:41:3c:81:6f:d1:43: 33:c6:61:ed:27:d8:58:bb:2a:85:d0:0e:10:c6:33:27:c6:b5: 80:08:a8:84:e8:b6:57:bf:5b:6f:89:d8:7a:38:42:c7:11:01: dd:18:7c:26:ff:67:6a:82:92:21:65:3f:28:0f:85:e6:22:c3: 3a:ec:33:82:9f:84:c5:97:cb:50:ef:30:35:70:c3:92:f6:78: 8c:ed:ed:c6:8e:65:56:11:63:20:7a:34:38:68:0a:b6:dd:2e: a7:6d:7c:84:bb:34:a1:bc:60:db:7b:e0:c7:31:65:28:e3:f3: 5e:a4:2e:47:3c:f9:b2:37:d0:87:60:8b:f0:22:5e:a4:5b:5f: 33:6d:c8:e5:d0:8d:89:ae:61:18:2f:57:71:0b:4f:d3:0f:16: b4:b4:2b:4c:25:f9:16:0e:04:bc:60:1c:e3:f2:23:63:a2:ba: 06:8d:01:f5:f9:30:2b:22:b1:cf:2e:0e:38:13:c8:80:18:ff: 77:46:41:03 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPvnQ6QMKBOEhXKzlMg6Y3zfGgNswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNTA0M1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMTFmNWU1YTJjODY3ZDBiOTg1Yzhl ODgzOGQ5MjVkYjdhYTcyMjQ2OWFmZGEwMDMyMjA3ZGEzZTg5ODc0YWM1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeVHBTCJF7dMcnTwuV94vk2naagU 1lpBdyiQGOVWG1Q6rhxJnM/kPCEMTpDPysN8VHsuF2Zjsc7B4u18SlAW3Z8PBmrN 61Vi/T1weJ46e6MkJqWnLcpz45m2whtfLisaT+s47ZmW3rIsR+tVkLitHO/jnS4C xzsTWDbZi8HvkJ6grI9Bdut53YE9jiDEZb7gzkxpV6IYv+bgZkCG+JekSybbec3S Iz6se4/OL0/MtaJyv6mKXcqeoQsVGL/dqX7qWGXkA+80Rzz4xBhL7q8AHxJyO+D5 an/OmvS5qs74tTdhpZnqEmUspnRZg5tAGmQUCnC42pdMdS3gBOisB/DQLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDgmkAHsEVIUfWFIIAfxyfXlLkSkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkYmI4NzA2LTJiNmEtNGMyNy05NzFiLTYxOGVjODE5NDIxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaQiAMA0GCSqGSIb3DQEBCwUAA4IBAQB05FdsPmU14Zvi3jRZ jeckOGpJWikCWp4/121XU3nBnNKPLHVZaUcBs11eNl9kT/MU1FOzWqMBBDYTMEGT 6FGs3eZBPIFv0UMzxmHtJ9hYuyqF0A4QxjMnxrWACKiE6LZXv1tvidh6OELHEQHd GHwm/2dqgpIhZT8oD4XmIsM67DOCn4TFl8tQ7zA1cMOS9niM7e3GjmVWEWMgejQ4 aAq23S6nbXyEuzShvGDbe+DHMWUo4/NepC5HPPmyN9CHYIvwIl6kW18zbcjl0I2J rmEYL1dxC0/TDxa0tCtMJfkWDgS8YBzj8iNjoroGjQH1+TArIrHPLg44E8iAGP93 RkED -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:45 2025 by rpki-client