$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa File: 89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa (raw, json) Hash identifier: 0Kzf8tUaxu75wko/FjlxmQ2gegvr/RV91BukbPuXH4g= Subject key identifier: D4:FB:19:01:72:4E:22:48:5D:E8:56:BD:B2:11:56:E0:FF:A7:17:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 515E1B765CC419F71E337F4A7076AFA18D5B95A4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa Signing time: Fri 16 May 2025 15:40:15 +0000 ROA not before: Fri 16 May 2025 15:40:15 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5e:1b:76:5c:c4:19:f7:1e:33:7f:4a:70:76:af:a1:8d:5b:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:40:15 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=d44d0e29eee10904e176f53d863619a570709cd8508ade00fb3cfb3a95e01625, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:f8:6e:00:2f:7b:5e:ff:e7:bd:fa:96:fc: 0d:56:ef:ac:b9:ae:66:f4:da:4d:65:b3:0e:10:23: b1:02:eb:93:7c:2b:7f:cb:b7:aa:56:fd:fc:5b:e6: 10:8e:47:10:ee:a6:46:60:c3:e1:4f:cd:3e:fa:3b: 65:14:a0:06:c4:13:81:e0:2e:8c:c1:72:dc:e4:55: 58:2e:a9:db:be:d1:52:e1:6a:1f:07:5b:9d:1e:fa: f4:54:1b:bc:60:13:f9:69:03:1f:e0:11:5c:a8:90: c3:fd:bf:bc:34:ab:f1:52:8a:c2:70:01:0b:06:72: 19:87:49:15:ba:65:14:9d:81:a4:ce:99:ee:a7:8a: 31:8e:84:b3:8a:80:ab:ff:52:14:f8:fa:df:bd:0c: 45:f0:80:3d:34:05:74:05:ac:9c:26:a8:4d:07:b3: 21:89:4d:ee:9b:79:3f:b6:da:45:5c:a7:72:11:c7: 05:e5:f1:2b:6b:ba:59:58:c0:03:f1:3b:f0:1b:3b: e9:d0:b4:8b:ee:8b:0b:c8:c8:74:3e:29:a8:29:c3: aa:c3:ba:b4:8d:88:90:b5:22:2d:e2:f0:d5:ee:ef: d4:0b:d3:8b:6a:7b:aa:a6:c5:09:1c:27:da:9a:10: 8b:91:23:36:f4:6a:c9:d1:83:76:11:bd:92:65:48: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FB:19:01:72:4E:22:48:5D:E8:56:BD:B2:11:56:E0:FF:A7:17:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:400::/38 Signature Algorithm: sha256WithRSAEncryption 4d:24:a3:cd:34:20:0c:14:9c:42:cc:d2:44:da:e7:94:15:78: bd:90:c0:a2:8a:a5:b7:a3:9c:0f:cc:cf:12:96:90:20:29:dd: c2:da:23:c6:b0:0c:63:ca:94:4a:14:a6:19:e3:23:65:ed:ef: 8c:03:08:ab:ce:00:37:83:05:a4:7f:62:29:d7:e7:dd:06:b6: f9:c8:08:67:48:57:c6:6c:f8:3b:c8:c3:ef:00:03:0d:27:0e: f8:2d:6f:f2:5b:de:0b:09:72:4f:8b:79:86:4f:1f:65:15:71: 06:85:dc:23:fc:b8:6f:d2:d0:cd:7a:41:13:ee:30:b3:39:60: 2e:08:77:7b:e9:7c:70:93:84:12:49:7a:f9:01:eb:3a:fc:f8: d6:26:b7:c9:c2:8d:cc:55:fc:4a:ed:a7:6f:a0:27:d8:68:72: 2b:f9:96:ed:ce:86:c2:cd:61:d3:d6:94:3f:29:66:3a:ba:5c: 55:e8:41:8b:0b:c3:86:a4:ac:52:c7:44:34:9a:49:a8:0c:fb: b3:40:69:fd:37:fa:ba:dd:25:ee:3e:c1:10:01:a1:41:ba:bd: c6:76:be:4b:6f:3c:2a:c2:f4:f2:ad:c4:6a:38:98:16:8c:86: ef:fc:d9:81:4e:91:96:29:8a:83:7b:06:88:7f:af:3d:2f:94: 5c:4b:21:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUV4bdlzEGfceM39KcHavoY1blaQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NDAxNVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZDQ0ZDBlMjllZWUxMDkwNGUxNzZm NTNkODYzNjE5YTU3MDcwOWNkODUwOGFkZTAwZmIzY2ZiM2E5NWUwMTYyNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2T4bgAve17/5736lvwNVu+sua5m 9NpNZbMOECOxAuuTfCt/y7eqVv38W+YQjkcQ7qZGYMPhT80++jtlFKAGxBOB4C6M wXLc5FVYLqnbvtFS4WofB1udHvr0VBu8YBP5aQMf4BFcqJDD/b+8NKvxUorCcAEL BnIZh0kVumUUnYGkzpnup4oxjoSzioCr/1IU+PrfvQxF8IA9NAV0BaycJqhNB7Mh iU3um3k/ttpFXKdyEccF5fEra7pZWMAD8TvwGzvp0LSL7osLyMh0PimoKcOqw7q0 jYiQtSIt4vDV7u/UC9OLanuqpsUJHCfamhCLkSM29GrJ0YN2Eb2SZUgc8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNT7GQFyTiJIXehWvbIRVuD/pxd7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmM1NmQ2LWIwYWMtNDRhZC1iMDFmLTkzZGJjZDkyMTNmYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwQwDQYJKoZIhvcNAQELBQADggEBAE0ko800IAwUnELM0kTa 55QVeL2QwKKKpbejnA/MzxKWkCAp3cLaI8awDGPKlEoUphnjI2Xt74wDCKvOADeD BaR/YinX590GtvnICGdIV8Zs+DvIw+8AAw0nDvgtb/Jb3gsJck+LeYZPH2UVcQaF 3CP8uG/S0M16QRPuMLM5YC4Id3vpfHCThBJJevkB6zr8+NYmt8nCjcxV/Ertp2+g J9hociv5lu3OhsLNYdPWlD8pZjq6XFXoQYsLw4akrFLHRDSaSagM+7NAaf03+rrd Je4+wRABoUG6vcZ2vktvPCrC9PKtxGo4mBaMhu/82YFOkZYpioN7Boh/rz0vlFxL IRE= -----END CERTIFICATE-----Generated at Mon Jun 2 06:29:20 2025 by rpki-client