$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: N0FT5io+z+RyN4rPPPlH/GNkan+AjqCdWziIEWz7PUw= Subject key identifier: 35:E0:52:19:9D:59:70:71:0E:B5:72:4E:FE:E2:2F:B2:D9:0F:2A:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3968D6EAB860E838765CB2DF66B030FEDC54E0EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Fri 16 May 2025 00:21:00 +0000 ROA not before: Fri 16 May 2025 00:21:00 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:68:d6:ea:b8:60:e8:38:76:5c:b2:df:66:b0:30:fe:dc:54:e0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:21:00 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=0af52cd06dcabaf9a0ed11c35b2dc6e4e83a7f2d49da644c9d369cc30067329b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:9a:28:fa:63:28:5c:a9:bc:1b:2b:b1:42: f0:ea:1f:c9:83:99:6b:02:93:27:12:e1:ca:5a:4c: de:5c:64:e0:43:40:9b:6e:d4:2a:35:22:5a:b4:e3: aa:bb:7b:ac:23:bc:6a:b0:21:62:47:93:2c:38:4d: 56:56:7d:85:91:f7:99:a4:b7:95:8d:32:66:78:21: 8b:fb:5d:3d:55:e8:a8:9c:16:cf:c3:97:b5:79:e1: 52:b3:b5:6e:58:ac:2b:7c:77:c6:87:df:39:52:2b: dd:bb:8d:eb:37:55:8a:84:6f:93:db:f8:e7:a4:d0: fc:e5:2f:29:41:34:32:ee:18:af:0f:99:f8:fd:b0: 8f:86:75:ae:a6:2a:97:0b:57:82:89:57:41:bc:cd: f7:7f:50:c7:bd:c1:7c:c8:0e:f2:a3:34:e0:f8:03: ec:5c:b2:d0:92:9c:85:20:7a:37:19:b2:f2:ae:44: 9c:fa:be:6c:76:a1:0c:e2:93:e1:a5:a0:b9:52:a5: 04:b4:ba:a9:d1:b5:20:46:54:c5:08:bb:6e:b5:88: 6e:7c:5a:ec:0f:cd:8c:e5:dd:a5:58:24:0a:69:56: 47:b6:09:91:97:c2:a5:71:47:4f:c9:ad:1a:0a:1e: ee:be:fd:0c:21:91:55:90:b9:02:86:f6:d5:b4:2c: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E0:52:19:9D:59:70:71:0E:B5:72:4E:FE:E2:2F:B2:D9:0F:2A:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption ac:1c:40:c4:2f:2d:ed:12:97:5f:06:12:f5:72:d4:c0:7a:5b: 3b:19:bb:71:de:0e:ed:87:e1:51:8c:da:c0:4a:04:2e:6c:a5: 30:2f:e7:81:a8:6e:15:0b:99:8a:dc:2f:de:96:4f:be:8f:7c: 25:e2:52:2c:19:71:f7:5e:12:cb:72:9f:73:41:62:b0:78:9c: 3f:8b:8e:7d:e9:6f:2a:5d:b5:e6:20:39:4d:e6:55:1b:8c:5c: 32:dd:90:c3:bf:28:1e:75:68:33:fe:e2:48:0c:87:ea:aa:48: fa:71:77:31:95:68:03:78:c6:82:0b:c1:d4:9b:35:8c:56:98: e9:5f:3a:31:d4:bb:30:a3:3c:45:97:53:54:64:fc:11:de:48: 22:32:57:c7:30:30:94:c5:e7:cf:18:f3:ec:9b:a9:9d:bd:af: 7b:4f:53:f6:0e:02:e7:31:36:23:d7:16:36:ac:09:09:1f:24: 4e:85:ac:9d:9b:90:cc:b1:2f:77:f0:e0:20:7a:62:f8:1f:f7: 46:da:17:c4:c5:18:e1:b5:b0:c6:81:70:da:20:35:df:7f:04: 85:5a:d5:aa:f9:9b:31:ae:2b:f0:a2:80:56:10:ae:35:e1:c8: ff:80:c1:d1:09:6b:74:df:96:37:cc:42:8c:96:be:b9:00:45: c5:ce:d0:c7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOWjW6rhg6Dh2XLLfZrAw/txU4O4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjEwMFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMGFmNTJjZDA2ZGNhYmFmOWEwZWQx MWMzNWIyZGM2ZTRlODNhN2YyZDQ5ZGE2NDRjOWQzNjljYzMwMDY3MzI5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P2aKPpjKFypvBsrsULw6h/Jg5lr ApMnEuHKWkzeXGTgQ0CbbtQqNSJatOOqu3usI7xqsCFiR5MsOE1WVn2FkfeZpLeV jTJmeCGL+109VeionBbPw5e1eeFSs7VuWKwrfHfGh985Uivdu43rN1WKhG+T2/jn pND85S8pQTQy7hivD5n4/bCPhnWupiqXC1eCiVdBvM33f1DHvcF8yA7yozTg+APs XLLQkpyFIHo3GbLyrkSc+r5sdqEM4pPhpaC5UqUEtLqp0bUgRlTFCLtutYhufFrs D82M5d2lWCQKaVZHtgmRl8KlcUdPya0aCh7uvv0MIZFVkLkChvbVtCzYpQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDXgUhmdWXBxDrVyTv7iL7LZDyqbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQCsHEDELy3tEpdfBhL1 ctTAels7Gbtx3g7th+FRjNrASgQubKUwL+eBqG4VC5mK3C/elk++j3wl4lIsGXH3 XhLLcp9zQWKweJw/i4596W8qXbXmIDlN5lUbjFwy3ZDDvygedWgz/uJIDIfqqkj6 cXcxlWgDeMaCC8HUmzWMVpjpXzox1LswozxFl1NUZPwR3kgiMlfHMDCUxefPGPPs m6mdva97T1P2DgLnMTYj1xY2rAkJHyROhaydm5DMsS938OAgemL4H/dG2hfExRjh tbDGgXDaIDXffwSFWtWq+ZsxrivwooBWEK414cj/gMHRCWt035Y3zEKMlr65AEXF ztDH -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:07 2025 by rpki-client