$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa File: 880212bb-51a8-4111-9ffb-f1fce2a3315f.roa (raw, json) Hash identifier: y8kI/OU1MJHEZlSTV/KbCsYvThrOPwJ5c/mt6ChZspA= Subject key identifier: 88:6B:12:B2:9B:4E:C6:50:5E:B9:58:5C:F2:FB:EA:80:5B:60:EF:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 336019ECFD19FBA9072E0908C3639A4A2F80B809 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa Signing time: Fri 16 May 2025 15:20:05 +0000 ROA not before: Fri 16 May 2025 15:20:05 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:60:19:ec:fd:19:fb:a9:07:2e:09:08:c3:63:9a:4a:2f:80:b8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:20:05 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=300e779d5e3587dec6f16ec1a64fa3fd9c523ab87dd6841b0b8757263aec40e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:72:21:e3:b9:90:14:b4:c2:df:6d:e8:cd: 9d:fe:c4:66:90:7a:c3:0b:44:e5:c7:02:0d:c8:67: a5:42:59:0c:dd:e1:59:d2:9d:67:94:0e:e1:c0:f2: f7:27:e3:25:ec:1d:95:55:a9:3d:e5:fc:ea:7d:15: 94:9b:8c:8f:68:e2:c5:47:c6:ca:96:20:d2:69:0b: ee:66:19:63:7e:8c:75:c8:e2:e2:20:26:d7:28:0d: 4a:1b:c8:05:1f:28:b5:c8:6d:93:f6:14:92:2f:ef: 00:b8:86:c0:f8:92:1b:16:21:0b:f4:b9:a9:d8:57: 22:3a:24:3d:a9:6f:34:95:20:ee:75:92:84:e2:5e: 75:8b:f5:50:2b:25:d7:6d:a7:99:ff:18:59:4c:aa: b7:49:e9:8c:b2:c3:d4:86:9f:5d:2e:cf:ce:8f:b6: 59:11:58:2f:65:f7:d4:73:cd:eb:55:d7:e9:3d:9b: 05:c4:f3:7b:88:7b:91:51:fb:2a:9f:08:e6:b9:c4: f9:d3:96:52:67:62:0b:65:4e:a9:2c:33:50:e1:39: 65:1a:27:e4:b8:cc:90:3f:e7:ba:cc:76:18:47:68: 6b:bf:a7:39:eb:ce:54:53:78:45:e8:1e:20:12:c0: 25:cc:72:e6:2d:be:08:d4:6b:2b:61:90:1f:ce:d7: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6B:12:B2:9B:4E:C6:50:5E:B9:58:5C:F2:FB:EA:80:5B:60:EF:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:7000::/40 Signature Algorithm: sha256WithRSAEncryption 0c:fa:c5:76:e9:bd:2d:ad:38:d6:f9:69:50:31:08:b3:98:4f: 00:85:56:af:86:3e:25:d5:7c:fa:6c:11:82:11:c1:3c:4b:8e: bb:63:c6:c3:02:48:92:5c:29:75:aa:bf:db:80:f4:e6:3f:e5: 8e:c8:6b:04:83:23:e5:ba:0d:0a:b5:f3:9c:4c:ee:a4:ed:50: 6e:e0:96:18:86:df:8a:b2:95:ce:29:41:6e:25:40:47:31:d7: ae:52:92:ac:ba:4f:0c:09:1c:9a:b2:32:05:13:c0:b4:9a:18: 05:80:01:73:3f:21:0d:71:7d:c4:40:7b:2e:33:ec:24:36:0f: f3:b0:cd:74:ff:c8:ce:2b:cc:dd:8f:d7:38:f7:ad:17:b8:93: 48:bc:e9:49:32:da:ed:e8:89:12:06:94:50:9b:aa:45:1c:b5: 41:27:4f:03:5f:39:3e:b0:b7:20:69:2c:7a:96:52:03:dd:13: b1:01:26:ef:7a:bc:1d:8b:4e:cf:4a:c6:8e:6d:78:00:fc:13: 10:f2:3b:eb:09:2c:59:4b:9c:71:9f:7d:1c:e5:7f:4c:51:a6: 94:b1:3b:ee:11:fc:bf:fe:ff:09:2e:fb:e2:00:cd:b6:42:c6: 89:25:68:ef:d3:75:7e:80:ca:2a:33:4e:af:cb:bd:b1:ee:fc: 34:e8:57:6a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUM2AZ7P0Z+6kHLgkIw2OaSi+AuAkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjAwNVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMzAwZTc3OWQ1ZTM1ODdkZWM2ZjE2 ZWMxYTY0ZmEzZmQ5YzUyM2FiODdkZDY4NDFiMGI4NzU3MjYzYWVjNDBlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrJyIeO5kBS0wt9t6M2d/sRmkHrD C0TlxwINyGelQlkM3eFZ0p1nlA7hwPL3J+Ml7B2VVak95fzqfRWUm4yPaOLFR8bK liDSaQvuZhljfox1yOLiICbXKA1KG8gFHyi1yG2T9hSSL+8AuIbA+JIbFiEL9Lmp 2FciOiQ9qW80lSDudZKE4l51i/VQKyXXbaeZ/xhZTKq3SemMssPUhp9dLs/Oj7ZZ EVgvZffUc83rVdfpPZsFxPN7iHuRUfsqnwjmucT505ZSZ2ILZU6pLDNQ4TllGifk uMyQP+e6zHYYR2hrv6c5685UU3hF6B4gEsAlzHLmLb4I1GsrYZAfztf1hQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIhrErKbTsZQXrlYXPL76oBbYO+mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MDIxMmJiLTUxYTgtNDExMS05ZmZiLWYxZmNlMmEzMzE1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacHAwDQYJKoZIhvcNAQELBQADggEBAAz6xXbpvS2tONb5aVAx CLOYTwCFVq+GPiXVfPpsEYIRwTxLjrtjxsMCSJJcKXWqv9uA9OY/5Y7IawSDI+W6 DQq185xM7qTtUG7glhiG34qylc4pQW4lQEcx165Skqy6TwwJHJqyMgUTwLSaGAWA AXM/IQ1xfcRAey4z7CQ2D/OwzXT/yM4rzN2P1zj3rRe4k0i86Uky2u3oiRIGlFCb qkUctUEnTwNfOT6wtyBpLHqWUgPdE7EBJu96vB2LTs9Kxo5teAD8ExDyO+sJLFlL nHGffRzlf0xRppSxO+4R/L/+/wku++IAzbZCxoklaO/TdX6AyiozTq/LvbHu/DTo V2o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:00 2025 by rpki-client