$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75fce456-5901-4b20-bd6e-e79945bb44d1.roa File: 75fce456-5901-4b20-bd6e-e79945bb44d1.roa (raw, json) Hash identifier: BLMQSTjQEuJbbggI1bMZZVAKk4GOEaYA4qOwUnykJ/0= Subject key identifier: 40:42:FC:A8:0F:02:05:D2:A6:8E:6F:48:0A:C6:37:BC:21:B5:8F:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 532C6E1CB82F622F79C068C3588359A297EB52F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75fce456-5901-4b20-bd6e-e79945bb44d1.roa Signing time: Tue 18 Mar 2025 00:00:41 +0000 ROA not before: Tue 18 Mar 2025 00:00:41 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2c:6e:1c:b8:2f:62:2f:79:c0:68:c3:58:83:59:a2:97:eb:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 18 00:00:41 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:72:b4:0f:91:e2:5b:ea:28:07:0f:c4:43: 86:4a:33:61:98:fa:50:e8:90:75:1d:a2:ad:50:ab: 04:0f:5b:70:48:7f:00:64:c5:8e:75:b6:26:f3:ce: f6:2f:85:53:56:bf:0b:2f:6f:8c:00:3d:72:fb:3b: 47:d1:a0:24:40:4c:c9:f4:6e:5f:88:82:a3:11:f0: 6d:3d:ac:38:40:dc:64:46:be:6b:4b:9f:b3:d8:f9: 1b:c6:17:11:0d:46:9f:71:37:8b:ae:0b:dc:20:20: 61:0d:27:69:82:72:56:2a:21:8a:e9:44:9c:11:6c: 99:01:65:fd:45:54:dd:17:ba:52:60:48:27:45:3e: 22:c0:ed:df:75:86:e6:8e:45:ec:ab:1d:67:c7:46: aa:7a:89:2c:7c:dc:42:de:fc:fc:f8:0e:2e:19:1d: be:1e:71:a4:2c:ea:95:91:21:40:47:30:09:cd:d7: b1:06:b8:e1:20:5b:dc:68:3f:03:ac:a5:c1:a8:3d: cf:4e:12:f8:c0:56:d4:25:98:cc:ab:f9:33:c3:5a: 73:64:9e:fa:d5:63:32:87:67:e4:e6:e6:d2:1a:a8: 9d:f0:57:e0:62:6a:59:ff:ad:44:41:5a:70:20:fe: cd:a5:2d:6f:09:62:5f:cb:12:3c:20:c7:a0:08:d0: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:FC:A8:0F:02:05:D2:A6:8E:6F:48:0A:C6:37:BC:21:B5:8F:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75fce456-5901-4b20-bd6e-e79945bb44d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:a000::/48 Signature Algorithm: sha256WithRSAEncryption 16:2f:c4:cd:59:aa:d9:17:b5:8a:32:7a:19:36:5b:73:42:9c: 06:3d:39:2e:ee:10:b6:6e:5c:18:21:0b:58:b3:e5:88:bc:5a: ed:e9:e1:04:58:1a:91:b9:7e:ca:c6:90:31:05:58:e7:e1:89: dd:c9:ea:54:70:c2:bc:44:f6:97:fa:83:b4:ae:b2:ee:6b:ae: e8:f1:8b:ea:af:2e:8f:80:fc:68:43:aa:59:97:5e:c5:6b:00: 4f:84:ce:e9:a6:9b:49:20:52:c5:f2:7b:eb:07:4b:86:9a:b4: c0:53:6d:86:58:1a:33:34:80:29:ab:97:12:77:0a:98:9e:7b: 3a:2a:35:5f:24:9d:cc:b3:64:2e:e6:89:ed:ec:11:34:4e:4d: e7:a0:1f:16:74:17:e5:b9:23:9f:79:bc:75:10:f3:f6:9e:a1: d6:49:c6:07:61:d7:b8:33:9d:22:ca:84:73:e5:fc:bd:15:89: 54:8e:e6:a0:b4:e6:87:9c:dd:bd:7d:70:a6:1c:61:2f:5b:38: 17:ab:b7:04:8f:3b:93:83:13:87:92:6e:da:63:f2:9e:7e:27: f9:3a:02:8a:3d:3e:52:0a:fb:10:2b:20:04:cc:50:f6:e1:07: 24:6f:71:9c:3e:09:81:b6:64:6c:7c:92:6a:d5:c5:86:b7:14: 9c:a7:45:14 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUyxuHLgvYi95wGjDWINZopfrUvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMxODAwMDA0MVoX DTI1MDQyMjIzNTk1OVowejFJMEcGA1UEBRNANTcwYjJhYTE0Mjc4NmQyZWIzODVm Nzc4NjE1NDhjNmM3MTAyOTQ3MjM5ZTllYjFkOGMzZjNlNTA4YWM3MWE2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnblytA+R4lvqKAcPxEOGSjNhmPpQ 6JB1HaKtUKsED1twSH8AZMWOdbYm8872L4VTVr8LL2+MAD1y+ztH0aAkQEzJ9G5f iIKjEfBtPaw4QNxkRr5rS5+z2PkbxhcRDUafcTeLrgvcICBhDSdpgnJWKiGK6USc EWyZAWX9RVTdF7pSYEgnRT4iwO3fdYbmjkXsqx1nx0aqeoksfNxC3vz8+A4uGR2+ HnGkLOqVkSFARzAJzdexBrjhIFvcaD8DrKXBqD3PThL4wFbUJZjMq/kzw1pzZJ76 1WMyh2fk5ubSGqid8FfgYmpZ/61EQVpwIP7NpS1vCWJfyxI8IMegCNDbDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEBC/KgPAgXSpo5vSArGN7whtY+QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1ZmNlNDU2LTU5MDEtNGIyMC1iZDZlLWU3OTk0NWJiNDRkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9qAAMA0GCSqGSIb3DQEBCwUAA4IBAQAWL8TNWarZF7WKMnoZ NltzQpwGPTku7hC2blwYIQtYs+WIvFrt6eEEWBqRuX7KxpAxBVjn4YndyepUcMK8 RPaX+oO0rrLua67o8Yvqry6PgPxoQ6pZl17FawBPhM7ppptJIFLF8nvrB0uGmrTA U22GWBozNIApq5cSdwqYnns6KjVfJJ3Ms2Qu5ont7BE0Tk3noB8WdBfluSOfebx1 EPP2nqHWScYHYde4M50iyoRz5fy9FYlUjuagtOaHnN29fXCmHGEvWzgXq7cEjzuT gxOHkm7aY/Kefif5OgKKPT5SCvsQKyAEzFD24Qckb3GcPgmBtmRsfJJq1cWGtxSc p0UU -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:21 2025 by rpki-client