$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa File: b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa (raw, json) Hash identifier: hQzZkISG8zOhOwfZOHa+PIEbWgFP0c9wbvJ/OZN/fPU= Subject key identifier: 0D:0A:9C:17:E7:EE:53:2C:1F:FE:84:17:C8:57:B9:28:C8:D2:43:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C63FC57C335E921771787A8B7149C832686B946 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa Signing time: Fri 21 Mar 2025 00:00:12 +0000 ROA not before: Fri 21 Mar 2025 00:00:12 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:63:fc:57:c3:35:e9:21:77:17:87:a8:b7:14:9c:83:26:86:b9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 21 00:00:12 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:10:47:7f:c9:65:87:0c:33:4f:21:20:f7: a1:20:a9:ff:17:3f:61:ce:f5:8e:4f:9b:56:3e:f4: 38:1d:61:8c:e6:1b:58:2e:44:9b:b8:31:14:a6:6f: 1a:1a:00:8e:e7:d0:68:ab:b0:7e:e6:3a:4f:b0:88: f2:2f:ed:ae:89:ff:41:00:aa:c2:0d:24:f7:43:72: 9f:fd:50:31:06:9e:ce:f3:26:9b:98:91:84:f8:0c: b6:bb:68:96:32:48:69:3e:98:40:d1:61:9d:eb:ba: da:f8:d9:eb:40:c5:04:c7:04:a6:4a:32:c4:62:1c: cb:2e:c8:0b:29:83:5c:8d:55:77:4c:36:5b:99:d5: cd:43:9f:2c:51:53:6b:ff:43:cf:d6:83:91:12:44: 48:8a:18:a5:8c:ba:ad:83:90:b9:58:a8:ae:67:df: 5e:cd:5f:dc:ea:4e:56:e1:6f:18:c3:f0:3f:d9:36: 76:5f:87:05:ee:68:fb:86:a4:4a:e3:7c:2f:81:fa: b2:e9:c7:0c:14:12:3e:e5:db:92:f2:cf:5e:09:ec: 79:60:c7:a3:c4:7f:5b:9c:2f:e9:d4:7e:b8:4d:a8: 49:68:3a:93:c5:0d:3d:19:b7:87:c5:97:31:78:1f: b9:d4:12:62:76:11:10:70:9a:8b:53:70:7f:ba:5f: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:9C:17:E7:EE:53:2C:1F:FE:84:17:C8:57:B9:28:C8:D2:43:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:7000::/48 Signature Algorithm: sha256WithRSAEncryption 2a:a4:9b:74:7e:84:91:6a:ee:70:54:92:cb:aa:94:82:80:4e: eb:0e:0e:93:02:7e:e7:90:b4:75:7a:09:4a:ed:22:ee:29:e5: cb:4f:6e:9a:66:1d:da:d4:2e:f2:71:36:d7:35:e5:33:48:a6: 46:e3:29:ad:4c:b7:84:e5:37:39:d2:d2:e0:23:18:95:31:bd: c9:b7:a0:eb:e0:2d:06:9b:58:8e:be:1c:1c:32:dd:ec:43:9d: b0:27:13:db:32:41:46:d8:67:45:d1:d3:b0:c2:c2:7a:fe:10: 7c:bd:58:5b:aa:b6:af:40:82:a1:28:3e:c4:50:a2:3e:5f:45: 34:27:0b:a1:4c:b8:46:d6:58:80:b2:c9:6b:05:ec:77:e6:f2: 68:c0:4c:6e:8c:70:5e:72:d7:ec:3b:09:28:e8:b4:c8:ce:09: 57:58:30:72:b9:eb:4b:d4:88:5e:c4:7e:b5:02:aa:fb:d0:0b: bc:ad:24:9f:b5:b8:bb:1f:fa:0b:16:4c:f5:61:e7:64:08:9d: 42:bb:fc:4c:7b:c8:73:42:bd:5e:3a:0d:e2:9a:7d:23:b1:be: 72:07:e5:00:a2:28:f2:51:9d:50:08:d0:6d:99:04:a2:64:b4: de:9e:5c:5c:de:6f:f9:0f:29:c6:e3:c0:b1:26:b5:94:c2:96: dc:15:87:10 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHGP8V8M16SF3F4eotxScgyaGuUYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDAxMloX DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNAZDFjMjliNTMyYzk3MTA4YjM5NzYw MmU2OTVlMDc2NzU5MzkyNjNiM2FmMGU0NjVkYTVmNDFjYzI5MzUxODllMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFsQR3/JZYcMM08hIPehIKn/Fz9h zvWOT5tWPvQ4HWGM5htYLkSbuDEUpm8aGgCO59Boq7B+5jpPsIjyL+2uif9BAKrC DST3Q3Kf/VAxBp7O8yabmJGE+Ay2u2iWMkhpPphA0WGd67ra+NnrQMUExwSmSjLE YhzLLsgLKYNcjVV3TDZbmdXNQ58sUVNr/0PP1oOREkRIihiljLqtg5C5WKiuZ99e zV/c6k5W4W8Yw/A/2TZ2X4cF7mj7hqRK43wvgfqy6ccMFBI+5duS8s9eCex5YMej xH9bnC/p1H64TahJaDqTxQ09GbeHxZcxeB+51BJidhEQcJqLU3B/ul/i4QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA0KnBfn7lMsH/6EF8hXuSjI0kOLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3NzJmNDU5LTcyZmUtNGM3ZC04ZjhjLTYxY2NlNWE5NDRjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9nAAMA0GCSqGSIb3DQEBCwUAA4IBAQAqpJt0foSRau5wVJLL qpSCgE7rDg6TAn7nkLR1eglK7SLuKeXLT26aZh3a1C7ycTbXNeUzSKZG4ymtTLeE 5Tc50tLgIxiVMb3Jt6Dr4C0Gm1iOvhwcMt3sQ52wJxPbMkFG2GdF0dOwwsJ6/hB8 vVhbqravQIKhKD7EUKI+X0U0JwuhTLhG1liAsslrBex35vJowExujHBectfsOwko 6LTIzglXWDByuetL1IhexH61Aqr70Au8rSSftbi7H/oLFkz1YedkCJ1Cu/xMe8hz Qr1eOg3imn0jsb5yB+UAoijyUZ1QCNBtmQSiZLTenlxc3m/5DynG48CxJrWUwpbc FYcQ -----END CERTIFICATE-----Generated at Sat Apr 5 10:50:59 2025 by rpki-client