$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa File: 7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa (raw, json) Hash identifier: 4BIHUB7U/t/m6tKl/Uz0N+xIfmFsyfjxf8l3ySTdQDU= Subject key identifier: E3:C8:10:E8:EE:7D:84:F6:77:4B:14:48:17:91:13:88:BE:69:FC:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E4AB536C40881B953D683625D23EEAB2034DE3B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa Signing time: Fri 16 May 2025 00:51:29 +0000 ROA not before: Fri 16 May 2025 00:51:29 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4a:b5:36:c4:08:81:b9:53:d6:83:62:5d:23:ee:ab:20:34:de:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:51:29 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=6313e86a503d538fa8d3ab572eaeafe973ef728c4b6bb850c86a064636d79f7d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:f4:57:09:31:96:46:a5:08:04:cd:5e:91: f3:31:bb:91:bb:e8:5b:10:c9:4c:66:4b:3e:a6:79: 9e:de:7e:71:3f:c8:40:7e:b1:26:f0:0e:ce:bb:1e: 51:68:a3:c4:d3:cc:39:f6:f0:0c:d4:57:ac:17:40: 50:f8:22:5d:da:5f:7f:b2:42:84:83:37:47:3a:3d: aa:88:59:65:2f:9c:44:f3:2f:88:b0:77:e5:ed:39: b3:c8:7e:12:e1:e5:d9:34:08:a1:60:08:a8:8a:05: 45:ae:1e:b2:bd:74:99:a5:50:18:44:7e:05:ce:a1: 4d:44:4e:32:25:51:af:34:c3:e5:bf:7a:f7:6b:6c: 53:a5:dd:66:3f:aa:f9:f9:36:57:62:8e:e1:16:6c: f2:b9:1c:7a:5b:7e:3d:43:06:39:4f:5d:e1:f7:ad: eb:ec:4f:0b:ba:a8:a4:11:b6:7c:bb:70:cd:69:34: f9:08:1f:03:3f:12:42:b2:5e:25:2d:d5:ca:a2:56: e1:51:a7:32:1e:29:8d:a3:5b:b6:ba:a0:0c:bb:d3: c2:bc:b8:ae:2f:f4:c8:5a:9b:c2:67:b3:30:58:9b: e4:64:96:43:b1:ba:05:b8:68:51:b8:14:ca:28:2e: 9e:24:1e:73:f7:52:5b:9f:c3:f0:3d:f0:87:a6:85: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C8:10:E8:EE:7D:84:F6:77:4B:14:48:17:91:13:88:BE:69:FC:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:9000::/40 Signature Algorithm: sha256WithRSAEncryption 36:37:ce:6d:be:4c:d3:6a:f2:93:b3:2a:1d:d6:d2:28:cc:60: 24:64:fb:58:fa:e7:fb:b7:48:8f:7d:23:c6:6b:c1:16:74:af: 6e:12:81:ec:f7:80:ef:42:e0:fa:25:af:69:12:85:e6:a1:e6: 35:e6:04:0d:78:52:05:a8:6e:a6:72:38:6e:22:4b:8b:af:22: 48:b1:93:1c:67:d7:49:63:b0:55:41:f7:68:be:35:a2:b2:6a: 15:ff:61:bd:b6:76:f2:17:10:76:61:7c:59:9c:24:5a:04:26: 32:fd:6d:59:1b:bf:4f:cb:8b:58:75:75:5c:f3:77:01:3a:0e: ff:db:bd:9e:e3:e4:4e:68:5c:d8:65:25:dc:45:05:16:8d:17: 3b:4f:61:b1:3d:c0:14:0f:19:72:3e:d9:07:e3:20:d9:0b:b1: 17:be:c6:b0:9b:77:7b:bc:c8:e6:81:9f:c7:65:a0:83:04:6e: 97:cb:bf:9e:28:ca:93:72:0d:12:99:2f:33:42:8d:7b:1d:cb: ba:c3:71:4e:b3:cb:5e:8d:25:77:86:d1:0b:04:98:75:11:f8: 07:47:87:6b:b4:3f:7d:27:2e:a6:93:c5:11:4a:67:61:07:05: 67:eb:b8:7b:0d:a3:e3:86:40:32:b5:52:7e:08:12:ed:9e:08: 0f:f3:93:25 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTkq1NsQIgblT1oNiXSPuqyA03jswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNTEyOVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANjMxM2U4NmE1MDNkNTM4ZmE4ZDNh YjU3MmVhZWFmZTk3M2VmNzI4YzRiNmJiODUwYzg2YTA2NDYzNmQ3OWY3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lb0VwkxlkalCATNXpHzMbuRu+hb EMlMZks+pnme3n5xP8hAfrEm8A7Oux5RaKPE08w59vAM1FesF0BQ+CJd2l9/skKE gzdHOj2qiFllL5xE8y+IsHfl7TmzyH4S4eXZNAihYAioigVFrh6yvXSZpVAYRH4F zqFNRE4yJVGvNMPlv3r3a2xTpd1mP6r5+TZXYo7hFmzyuRx6W349QwY5T13h963r 7E8LuqikEbZ8u3DNaTT5CB8DPxJCsl4lLdXKolbhUacyHimNo1u2uqAMu9PCvLiu L/TIWpvCZ7MwWJvkZJZDsboFuGhRuBTKKC6eJB5z91Jbn8PwPfCHpoWQTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOPIEOjufYT2d0sUSBeRE4i+afxoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkNTc5NmNlLTQyZjYtNDI3Yy1hNzliLWZkMmUzZWVmNWY5Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba95AwDQYJKoZIhvcNAQELBQADggEBADY3zm2+TNNq8pOzKh3W 0ijMYCRk+1j65/u3SI99I8ZrwRZ0r24Sgez3gO9C4Polr2kSheah5jXmBA14UgWo bqZyOG4iS4uvIkixkxxn10ljsFVB92i+NaKyahX/Yb22dvIXEHZhfFmcJFoEJjL9 bVkbv0/Li1h1dVzzdwE6Dv/bvZ7j5E5oXNhlJdxFBRaNFztPYbE9wBQPGXI+2Qfj INkLsRe+xrCbd3u8yOaBn8dloIMEbpfLv54oypNyDRKZLzNCjXsdy7rDcU6zy16N JXeG0QsEmHUR+AdHh2u0P30nLqaTxRFKZ2EHBWfruHsNo+OGQDK1Un4IEu2eCA/z kyU= -----END CERTIFICATE-----Generated at Mon Jun 2 06:12:26 2025 by rpki-client