$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa File: 916d4cc7-71da-4d70-94e5-6749d742f22a.roa (raw, json) Hash identifier: ikmmv6HbEvQO44gWr7KzGwac5gNBQiZXPeGyInWvZ+s= Subject key identifier: 1B:89:36:61:A9:15:47:40:22:56:C7:10:58:B1:5E:15:3E:DA:B8:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 535C4C5D41FE2FE8627007E7C799A9644E5806F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa Signing time: Fri 16 May 2025 00:51:33 +0000 ROA not before: Fri 16 May 2025 00:51:33 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:70c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5c:4c:5d:41:fe:2f:e8:62:70:07:e7:c7:99:a9:64:4e:58:06:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:51:33 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=94b56102775de046e9a7fcf3a798770864dd7fe30993c5d9c88210ae3dab5b94, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:a3:ab:01:6d:1f:85:b7:7b:fa:c0:0e:2d: ef:3b:d7:c4:37:b6:ab:91:a2:fd:29:02:eb:bf:a6: d1:78:37:5b:71:8e:e4:7f:9f:96:b4:6f:33:fa:77: 52:44:19:02:29:e0:2d:18:72:ac:96:04:b7:fc:4a: 73:f9:52:48:b5:9f:29:ca:a4:76:de:bd:5f:76:5f: a6:71:1c:44:25:3f:d7:66:ef:88:d8:8d:0b:14:08: 5e:62:7c:93:8d:da:33:a5:b7:5b:e5:f1:cc:55:51: cf:ab:b9:aa:82:f8:bd:6b:49:b1:7d:39:5d:44:e2: b1:17:72:b0:12:fc:bd:9c:35:73:66:c8:94:3c:13: 62:32:eb:fd:37:ba:e0:aa:65:01:91:07:79:0f:db: 01:95:8d:82:86:93:11:37:20:8e:06:a8:99:bb:af: a7:f0:9b:54:40:46:ee:6b:7c:63:09:3b:92:35:55: b1:91:7f:00:3e:a9:d2:38:a6:11:02:de:58:85:1d: 7f:1f:74:2b:2c:84:f3:25:f8:1c:52:2a:25:7a:52: c0:51:34:a8:2a:0c:f2:e8:1f:de:52:79:62:37:2a: 4e:e4:a6:91:a3:de:10:89:6d:08:90:bf:56:95:48: 6f:72:3c:64:36:38:e5:d9:5b:99:a9:99:03:a6:42: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:89:36:61:A9:15:47:40:22:56:C7:10:58:B1:5E:15:3E:DA:B8:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:70c0::/46 Signature Algorithm: sha256WithRSAEncryption b8:cf:b5:b0:48:34:2a:9a:a4:41:2d:93:62:71:66:18:3c:07: 2c:3e:f9:b5:05:ca:43:d6:74:0a:9c:e2:e5:10:8f:fc:63:bb: 83:5d:95:f1:ff:b9:2c:7c:d8:5b:34:1d:90:0b:5a:ed:0d:69: 71:18:36:a1:4c:c6:32:cb:64:01:76:d6:96:f0:ca:be:ce:20: 53:16:28:cb:ae:fe:e6:d2:64:c6:82:98:85:c2:fb:0e:49:60: 5c:43:4b:91:a0:5f:e3:81:4f:90:2e:3d:dd:2b:9f:65:d6:56: 4c:16:b4:d0:aa:ab:0c:12:dc:f6:6e:c7:b6:99:ba:81:af:84: c9:c7:c6:09:15:e0:0d:90:95:0a:16:17:aa:a9:00:4f:85:09: 7b:07:f1:3e:3d:a5:3b:97:a9:02:2c:76:1a:7b:18:76:45:61: 57:a5:db:72:0d:d4:fa:d1:df:1a:3e:b0:f8:75:52:11:a4:f2: bf:b3:3d:f1:f4:11:b2:fa:d0:1f:d4:ae:12:c1:b7:bc:e7:5c: 85:e2:62:c1:24:bc:3b:b9:6c:d3:18:ea:f7:db:33:53:01:98: 5d:b0:43:d7:60:f9:b1:59:12:f5:33:f4:94:13:4d:41:71:7b: 3c:e1:c4:b1:39:d6:e7:c3:e9:89:62:47:b3:56:8b:23:e8:77: 9b:38:9a:18 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUU1xMXUH+L+hicAfnx5mpZE5YBvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNTEzM1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOTRiNTYxMDI3NzVkZTA0NmU5YTdm Y2YzYTc5ODc3MDg2NGRkN2ZlMzA5OTNjNWQ5Yzg4MjEwYWUzZGFiNWI5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr+jqwFtH4W3e/rADi3vO9fEN7ar kaL9KQLrv6bReDdbcY7kf5+WtG8z+ndSRBkCKeAtGHKslgS3/Epz+VJItZ8pyqR2 3r1fdl+mcRxEJT/XZu+I2I0LFAheYnyTjdozpbdb5fHMVVHPq7mqgvi9a0mxfTld ROKxF3KwEvy9nDVzZsiUPBNiMuv9N7rgqmUBkQd5D9sBlY2ChpMRNyCOBqiZu6+n 8JtUQEbua3xjCTuSNVWxkX8APqnSOKYRAt5YhR1/H3QrLITzJfgcUiolelLAUTSo Kgzy6B/eUnliNypO5KaRo94QiW0IkL9WlUhvcjxkNjjl2VuZqZkDpkJBIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBuJNmGpFUdAIlbHEFixXhU+2rjyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxNmQ0Y2M3LTcxZGEtNGQ3MC05NGU1LTY3NDlkNzQyZjIyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaXDAMA0GCSqGSIb3DQEBCwUAA4IBAQC4z7WwSDQqmqRBLZNi cWYYPAcsPvm1BcpD1nQKnOLlEI/8Y7uDXZXx/7ksfNhbNB2QC1rtDWlxGDahTMYy y2QBdtaW8Mq+ziBTFijLrv7m0mTGgpiFwvsOSWBcQ0uRoF/jgU+QLj3dK59l1lZM FrTQqqsMEtz2bse2mbqBr4TJx8YJFeANkJUKFheqqQBPhQl7B/E+PaU7l6kCLHYa exh2RWFXpdtyDdT60d8aPrD4dVIRpPK/sz3x9BGy+tAf1K4Swbe851yF4mLBJLw7 uWzTGOr32zNTAZhdsEPXYPmxWRL1M/SUE01BcXs84cSxOdbnw+mJYkezVosj6Heb OJoY -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:23 2025 by rpki-client