$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa File: 9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa (raw, json) Hash identifier: Ln3EDR/uIvKHpZxH4+Zdk66qgzaGxP3XgXDs4q8mAHE= Subject key identifier: FF:24:C4:41:DE:ED:7E:AD:A3:BF:65:D2:2E:40:CB:6C:2E:DA:1E:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AE874506DF3B79943A22A4689B9B1BE577C94ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa Signing time: Fri 16 May 2025 00:30:17 +0000 ROA not before: Fri 16 May 2025 00:30:17 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e8:74:50:6d:f3:b7:99:43:a2:2a:46:89:b9:b1:be:57:7c:94:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:30:17 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=489cb503a9dc26bf7aba8c4fe74d731fc4b168f3e30adfc3695c96721f03dfd7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:77:dd:bc:4c:bd:d8:01:82:21:43:33:f1: 7f:93:0b:99:a1:1d:22:f6:2d:53:9c:73:8b:a8:82: 12:fe:c5:b4:36:c7:b8:97:2e:13:be:53:38:49:0c: 20:b4:99:33:7a:29:b7:b0:2a:80:16:1c:8a:bc:20: 22:b1:c1:ce:c1:70:8d:84:05:4e:47:1d:70:2e:85: 68:9b:45:14:5c:ec:b3:bd:2e:ff:73:e3:1e:d6:6a: 00:36:e5:eb:0b:64:ae:7a:e8:86:4c:6e:d3:ca:08: 92:df:0d:2e:fb:3b:14:ee:86:d3:5c:ff:89:ae:f9: 6b:6c:e0:e4:ac:6d:1c:1c:00:13:cf:ee:ce:eb:cc: 7b:63:fb:22:b3:c6:74:e7:24:94:9e:45:1c:d3:db: cd:ef:a3:42:4e:e9:12:aa:71:6d:19:9e:10:72:99: f8:b8:af:b4:55:f4:f8:ca:48:3d:b2:7f:92:95:e9: 21:c3:a3:06:b2:12:4e:29:15:dc:d2:cd:79:2b:8c: 49:61:2f:dc:3e:b7:ba:58:29:50:d7:f5:32:93:19: 79:b3:a1:78:15:95:35:d8:49:9b:5a:ea:ba:e3:d4: 1f:b2:51:46:ce:88:5d:80:c8:8b:16:04:26:05:5e: eb:a6:09:c0:25:6f:b9:37:55:d3:70:4f:0b:60:e2: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:C4:41:DE:ED:7E:AD:A3:BF:65:D2:2E:40:CB:6C:2E:DA:1E:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:70c0::/48 Signature Algorithm: sha256WithRSAEncryption a3:d3:28:13:34:76:1d:a1:a8:cf:d4:a1:1a:9b:43:40:b5:7d: 70:2a:6d:7d:bf:c8:31:90:0e:ec:1a:a5:a1:08:43:95:3d:26: d0:78:c8:09:9d:e5:a4:93:2f:b5:41:0e:dd:f0:76:4b:4e:ad: e5:8f:98:cd:c2:61:63:2a:29:88:b9:dd:0f:27:02:c1:ab:cf: 3b:61:fe:03:5e:74:1a:4e:b5:9f:a2:e0:ec:2a:09:a3:61:6f: 45:63:b1:b5:af:87:e2:41:ff:93:b5:9c:c7:0f:f2:cd:c9:4f: d5:74:b5:0d:72:d8:79:e8:53:30:52:e8:cd:08:3c:f1:f5:67: 40:d9:93:6d:7e:9f:4d:db:6c:33:b0:07:ca:99:54:b4:b2:d1: a4:86:2f:55:ae:53:6c:d6:56:32:ff:10:fa:44:dd:f4:c4:61: 3e:17:b6:49:32:80:5c:e4:2f:e2:7a:c8:0f:14:bd:80:cc:11: 69:e8:c4:29:12:85:45:da:fe:32:87:be:99:a3:55:dd:bc:f7: f5:03:f2:58:bc:2e:f8:6c:c7:8c:93:26:a5:a7:5d:1d:81:c5: 36:3f:1b:25:fb:a6:4c:6c:20:ad:6f:0b:71:a4:3a:fd:b6:09: 28:c7:64:03:e5:e7:13:fa:ca:96:03:9d:48:01:bd:96:c2:0d: c3:ed:4d:b1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUauh0UG3zt5lDoipGibmxvld8lO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMzAxN1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANDg5Y2I1MDNhOWRjMjZiZjdhYmE4 YzRmZTc0ZDczMWZjNGIxNjhmM2UzMGFkZmMzNjk1Yzk2NzIxZjAzZGZkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOB33bxMvdgBgiFDM/F/kwuZoR0i 9i1TnHOLqIIS/sW0Nse4ly4TvlM4SQwgtJkzeim3sCqAFhyKvCAiscHOwXCNhAVO Rx1wLoVom0UUXOyzvS7/c+Me1moANuXrC2SueuiGTG7TygiS3w0u+zsU7obTXP+J rvlrbODkrG0cHAATz+7O68x7Y/sis8Z05ySUnkUc09vN76NCTukSqnFtGZ4Qcpn4 uK+0VfT4ykg9sn+Slekhw6MGshJOKRXc0s15K4xJYS/cPre6WClQ1/Uykxl5s6F4 FZU12EmbWuq649QfslFGzohdgMiLFgQmBV7rpgnAJW+5N1XTcE8LYOIQsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP8kxEHe7X6to79l0i5Ay2wu2h6iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMWFiYzJlLWQzMDUtNDIxNi04MWQ4LTNkMGY3OTJkNzljNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAHDAMA0GCSqGSIb3DQEBCwUAA4IBAQCj0ygTNHYdoajP1KEa m0NAtX1wKm19v8gxkA7sGqWhCEOVPSbQeMgJneWkky+1QQ7d8HZLTq3lj5jNwmFj KimIud0PJwLBq887Yf4DXnQaTrWfouDsKgmjYW9FY7G1r4fiQf+TtZzHD/LNyU/V dLUNcth56FMwUujNCDzx9WdA2ZNtfp9N22wzsAfKmVS0stGkhi9VrlNs1lYy/xD6 RN30xGE+F7ZJMoBc5C/iesgPFL2AzBFp6MQpEoVF2v4yh76Zo1XdvPf1A/JYvC74 bMeMkyalp10dgcU2Pxsl+6ZMbCCtbwtxpDr9tgkox2QD5ecT+sqWA51IAb2Wwg3D 7U2x -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:21 2025 by rpki-client