$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77bb777d-568d-4417-99b7-6c397eed3c63.roa File: 77bb777d-568d-4417-99b7-6c397eed3c63.roa (raw, json) Hash identifier: Z107p74WOSP4pw5NQq/V/YjDg/UqUKYKT+TfExOUokg= Subject key identifier: F7:9F:12:0B:0A:F4:6E:64:C8:35:EE:86:26:E9:E7:62:B3:0D:65:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5326982D19CD340FAADBB29DE962A5C9A5A102A0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77bb777d-568d-4417-99b7-6c397eed3c63.roa Signing time: Fri 16 May 2025 00:20:58 +0000 ROA not before: Fri 16 May 2025 00:20:58 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:26:98:2d:19:cd:34:0f:aa:db:b2:9d:e9:62:a5:c9:a5:a1:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:20:58 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=972d809d0aeb7af0d688caf232554721381f7a4ec5a98296fc3f80e83c84b89e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:e0:25:0f:07:7b:8d:c9:4f:53:f2:4e:d2: 0c:fa:9e:13:c5:f6:d6:d0:72:7a:35:b1:0c:b1:65: ba:f6:38:1c:5a:c7:2a:ed:8c:05:37:67:24:4d:6d: e5:55:7c:b4:b4:7c:6e:d1:02:fb:a2:5b:f8:53:78: 06:83:22:fa:5a:19:71:5c:7a:11:33:07:9b:42:b4: 9d:a4:4a:4a:16:0b:be:45:08:d6:1f:a7:63:3a:fa: a9:fe:b4:ac:36:4b:f2:ad:d7:23:ab:0e:b3:8f:79: 37:b8:8d:b9:83:bc:07:5c:ca:ba:74:ef:dc:09:95: 1c:ea:5e:ab:9c:73:56:7f:c2:9d:73:bc:11:ca:0d: 43:e1:db:5b:e5:6d:0e:87:08:aa:71:fd:d8:aa:bb: 74:a2:37:cc:07:6b:ae:1a:c9:f6:de:c7:b4:d4:9b: 1e:de:fd:d8:bc:b0:f7:4a:b6:aa:c3:b7:b0:2d:3f: b5:7a:df:70:e3:23:e6:54:38:66:3b:bb:7b:dd:23: fe:a6:e7:55:90:2f:49:1d:fb:b3:59:5b:83:05:66: a8:01:5d:42:f5:8d:ed:28:ce:90:49:06:4c:f2:7c: 08:ce:8c:22:ef:98:f7:3a:06:82:8f:9e:c6:1e:f8: 80:58:dc:94:a5:14:ec:a8:b5:0a:ea:56:2a:67:97: 79:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9F:12:0B:0A:F4:6E:64:C8:35:EE:86:26:E9:E7:62:B3:0D:65:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77bb777d-568d-4417-99b7-6c397eed3c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4880::/48 Signature Algorithm: sha256WithRSAEncryption 43:87:7e:fd:3f:44:cb:f0:a7:e7:b8:9f:81:71:36:b3:76:83: 0b:24:b0:d2:09:77:c5:4e:79:00:8b:67:6f:ec:8a:1c:a1:4a: b6:dc:96:e5:b1:81:08:ef:93:a7:bc:a4:8b:4b:ad:e3:61:a9: 87:33:19:cd:12:c9:f0:bf:82:d0:1f:d9:90:fe:34:88:8d:f7: b8:b1:e1:79:76:8e:32:cb:53:31:0d:5f:bf:b3:c9:72:f6:19: 30:fb:d0:cf:05:74:2d:21:ad:c5:2a:5a:86:4f:7e:c7:04:c4: 52:3b:8a:57:20:46:7b:cb:52:5a:bd:1d:0d:89:2a:e9:f3:67: 53:dd:ac:66:39:14:9f:52:cb:cb:81:c4:b2:03:81:40:63:ee: 8a:81:57:4e:6c:d4:c3:fa:8c:bf:c7:64:3a:39:e9:61:49:5f: b9:ca:66:a8:70:68:68:dc:86:9e:09:48:ac:29:e9:3b:f2:0e: 63:d7:54:51:9f:c4:1c:06:5d:21:1f:dd:f3:93:cc:2e:53:59: cb:bb:91:96:50:5b:18:6f:c0:c5:e8:03:61:d0:7c:20:38:4c: 52:84:c4:66:1e:4d:c5:2a:19:07:a6:e8:46:c7:05:bd:6d:d1: 2c:b0:e4:9c:3c:d6:03:97:19:3a:89:a5:8a:20:46:cd:1d:f5: df:4f:72:1f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUyaYLRnNNA+q27Kd6WKlyaWhAqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjA1OFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOTcyZDgwOWQwYWViN2FmMGQ2ODhj YWYyMzI1NTQ3MjEzODFmN2E0ZWM1YTk4Mjk2ZmMzZjgwZTgzYzg0Yjg5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m3gJQ8He43JT1PyTtIM+p4TxfbW 0HJ6NbEMsWW69jgcWscq7YwFN2ckTW3lVXy0tHxu0QL7olv4U3gGgyL6WhlxXHoR MwebQrSdpEpKFgu+RQjWH6djOvqp/rSsNkvyrdcjqw6zj3k3uI25g7wHXMq6dO/c CZUc6l6rnHNWf8Kdc7wRyg1D4dtb5W0Ohwiqcf3Yqrt0ojfMB2uuGsn23se01Jse 3v3YvLD3Sraqw7ewLT+1et9w4yPmVDhmO7t73SP+pudVkC9JHfuzWVuDBWaoAV1C 9Y3tKM6QSQZM8nwIzowi75j3OgaCj57GHviAWNyUpRTsqLUK6lYqZ5d50QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPefEgsK9G5kyDXuhibp52KzDWWkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YmI3NzdkLTU2OGQtNDQxNy05OWI3LTZjMzk3ZWVkM2M2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9EiAMA0GCSqGSIb3DQEBCwUAA4IBAQBDh379P0TL8KfnuJ+B cTazdoMLJLDSCXfFTnkAi2dv7IocoUq23JblsYEI75OnvKSLS63jYamHMxnNEsnw v4LQH9mQ/jSIjfe4seF5do4yy1MxDV+/s8ly9hkw+9DPBXQtIa3FKlqGT37HBMRS O4pXIEZ7y1JavR0NiSrp82dT3axmORSfUsvLgcSyA4FAY+6KgVdObNTD+oy/x2Q6 OelhSV+5ymaocGho3IaeCUisKek78g5j11RRn8QcBl0hH93zk8wuU1nLu5GWUFsY b8DF6ANh0HwgOExShMRmHk3FKhkHpuhGxwW9bdEssOScPNYDlxk6iaWKIEbNHfXf T3If -----END CERTIFICATE-----Generated at Mon Jun 2 06:23:59 2025 by rpki-client