$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa File: 836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa (raw, json) Hash identifier: VZug/aiMLIgbha5WCDio4opviYyjqUAHchq6YFZxSJE= Subject key identifier: E2:F3:BD:F3:4B:5C:AC:09:98:68:AA:F3:CC:FE:7A:E1:F4:19:8B:B1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: C03BAAB98F535FF2FB3DC3B6888FABE07C8678 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa Signing time: Wed 14 May 2025 00:51:32 +0000 ROA not before: Wed 14 May 2025 00:51:32 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c0:3b:aa:b9:8f:53:5f:f2:fb:3d:c3:b6:88:8f:ab:e0:7c:86:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:51:32 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=2e9c6f09d013be84808c91e162f0f6d7d4c41a440ecdac201384d65b00f96897, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:93:fe:ed:05:9a:a6:c3:f3:37:f1:d6:9c: fc:3b:98:5d:50:6d:e2:40:ba:bd:60:34:a0:00:04: ff:68:50:38:a6:b3:77:71:32:88:e0:d7:2b:33:9a: 48:fa:9d:d3:49:0d:3d:ab:40:03:aa:da:46:84:ab: 91:74:94:7e:93:3d:02:73:de:e0:81:b5:e6:a3:b4: 14:4b:2a:98:6e:d5:d3:fc:45:c0:c2:bf:f3:7b:f3: 04:fd:ab:8a:91:3e:7a:bd:7f:13:c3:b8:39:f5:cf: 37:00:17:b3:57:b5:d4:6d:6d:4a:fb:45:87:55:ec: 86:55:4b:49:2f:fe:5d:e4:02:fc:9e:69:79:b3:a7: 9a:ee:81:45:dc:35:ec:d1:61:e6:b4:89:bd:f7:c5: 5c:29:ea:ca:93:c5:3b:65:6e:42:30:ee:2d:49:db: f4:42:28:00:9f:78:e4:28:ef:12:fb:10:3e:3f:bf: 81:ff:9e:da:7c:86:03:27:85:49:93:fa:c2:b2:a8: 44:fa:54:c9:55:bd:54:22:91:a1:d7:5e:94:f7:f5: 50:8c:7a:4d:22:7f:29:6a:8f:de:5b:89:69:ce:07: f0:0a:f8:8e:e9:8a:95:87:64:09:bc:e8:77:52:7a: 1f:b0:f1:8f:7e:6e:67:72:be:4e:f4:2f:29:c4:5d: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F3:BD:F3:4B:5C:AC:09:98:68:AA:F3:CC:FE:7A:E1:F4:19:8B:B1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:880::/46 Signature Algorithm: sha256WithRSAEncryption 2d:dd:16:6d:d4:72:76:e9:c0:c9:75:0f:e5:94:56:12:3d:6f: d3:44:b4:8a:02:a7:8c:1f:04:7d:9e:80:e5:32:dd:8c:e9:03: d9:90:26:6a:fb:37:cc:e7:c1:fc:3c:99:ce:4d:5a:2a:77:fe: 89:db:bd:9a:09:5e:2c:03:1e:8b:b7:0d:cf:17:26:4e:80:61: 5e:92:29:58:8b:aa:3a:de:36:c2:ba:b2:17:59:20:88:8c:e5: 81:1c:3c:bd:b9:05:30:a7:dc:96:97:d3:54:08:bc:79:7f:eb: e8:7f:62:76:d3:2e:69:17:ea:0d:83:09:6f:a0:25:c1:36:b8: 5f:99:00:2a:a3:93:32:b8:b3:3d:db:a8:62:35:50:d3:e4:99: e9:05:4b:15:d0:28:fc:40:c4:8e:83:27:fc:db:64:a1:8c:22: c1:60:15:4d:aa:d0:20:3c:7f:31:38:06:8d:8e:7a:23:3c:63: 44:59:8a:cb:ee:53:ff:1c:c3:91:c6:da:1c:66:55:4e:17:ba: c4:9d:67:b4:4f:80:a2:a8:44:91:37:06:a2:0c:23:68:aa:67: 83:25:f9:38:c3:4a:18:b1:d8:9b:b9:43:06:28:e6:26:d3:e4: c6:b5:cd:45:47:7c:67:ed:d5:8c:7b:d6:70:21:00:93:b9:08: c0:6a:61:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAMA7qrmPU1/y+z3DtoiPq+B8hngwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNTEzMloX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMmU5YzZmMDlkMDEzYmU4NDgwOGM5 MWUxNjJmMGY2ZDdkNGM0MWE0NDBlY2RhYzIwMTM4NGQ2NWIwMGY5Njg5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv46T/u0FmqbD8zfx1pz8O5hdUG3i QLq9YDSgAAT/aFA4prN3cTKI4NcrM5pI+p3TSQ09q0ADqtpGhKuRdJR+kz0Cc97g gbXmo7QUSyqYbtXT/EXAwr/ze/ME/auKkT56vX8Tw7g59c83ABezV7XUbW1K+0WH VeyGVUtJL/5d5AL8nml5s6ea7oFF3DXs0WHmtIm998VcKerKk8U7ZW5CMO4tSdv0 QigAn3jkKO8S+xA+P7+B/57afIYDJ4VJk/rCsqhE+lTJVb1UIpGh116U9/VQjHpN In8pao/eW4lpzgfwCviO6YqVh2QJvOh3UnofsPGPfm5ncr5O9C8pxF1lVwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOLzvfNLXKwJmGiq88z+euH0GYuxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzNmZkYzNkLWJhYzItNGNlNC05NDdhLTg4MzA4ODFjYjhlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9wiAMA0GCSqGSIb3DQEBCwUAA4IBAQAt3RZt1HJ26cDJdQ/l lFYSPW/TRLSKAqeMHwR9noDlMt2M6QPZkCZq+zfM58H8PJnOTVoqd/6J272aCV4s Ax6Ltw3PFyZOgGFekilYi6o63jbCurIXWSCIjOWBHDy9uQUwp9yWl9NUCLx5f+vo f2J20y5pF+oNgwlvoCXBNrhfmQAqo5MyuLM926hiNVDT5JnpBUsV0Cj8QMSOgyf8 22ShjCLBYBVNqtAgPH8xOAaNjnojPGNEWYrL7lP/HMORxtocZlVOF7rEnWe0T4Ci qESRNwaiDCNoqmeDJfk4w0oYsdibuUMGKOYm0+TGtc1FR3xn7dWMe9ZwIQCTuQjA amFE -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:46 2025 by rpki-client