$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d465d18a-2489-488a-92c7-49a70bd65555.roa File: d465d18a-2489-488a-92c7-49a70bd65555.roa (raw, json) Hash identifier: XkLS8s9YAUWyiqQ/u43eaqJf5xjJoouli+QwprRjqiI= Subject key identifier: 92:D7:C3:02:BF:CC:90:BF:57:5E:17:C0:CA:78:97:30:6B:65:78:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F18D520FB443D3349AEEB1DFD2FC2EA9BA007F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d465d18a-2489-488a-92c7-49a70bd65555.roa Signing time: Wed 14 May 2025 00:00:57 +0000 ROA not before: Wed 14 May 2025 00:00:57 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:18:d5:20:fb:44:3d:33:49:ae:eb:1d:fd:2f:c2:ea:9b:a0:07:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:00:57 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=979dda3c82e13fe0bcc5f32f6396ce713a3dcef2702d8aa6cf18b347f9226b3d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:45:5c:43:19:cf:4d:97:55:0b:ef:e0:84: 99:e4:51:ab:c3:bf:1c:5b:5d:a3:97:2f:df:64:01: e7:4a:d1:d2:0d:77:d7:81:ba:84:14:bd:a0:42:df: c3:43:8f:70:06:e5:5f:5f:51:73:e0:8a:c3:66:30: 00:32:b9:0a:f8:ba:da:d9:33:26:45:50:02:63:92: aa:cd:46:8c:2e:d4:93:57:7b:ec:a2:23:57:df:a5: ed:f6:28:a1:8b:35:5e:df:7d:f7:75:46:27:e6:8d: 02:9a:1e:7c:38:fb:36:14:b7:83:e7:ad:fa:ce:fb: 8f:63:82:28:ff:90:81:33:91:28:5d:6b:6d:9e:6e: f2:3d:ec:3e:7d:e7:4b:28:e6:2b:2b:15:26:01:19: 3c:55:f9:bb:21:6d:90:fd:ee:60:eb:d9:a9:91:e3: c9:0e:53:83:e9:dd:36:2b:e5:73:b6:06:e0:b4:a3: 74:c4:ac:88:6b:e0:49:f1:b4:38:34:e4:4f:27:ae: c2:db:bc:f3:6f:8a:0a:29:f4:ce:bf:2c:2f:e3:46: 24:6f:d1:82:0e:b5:68:58:3e:69:a6:bc:5b:5c:1c: 97:47:92:30:af:9d:59:c6:95:f8:72:ae:75:16:c4: 47:59:06:27:d5:72:b4:61:a6:74:1f:81:ac:e4:6e: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D7:C3:02:BF:CC:90:BF:57:5E:17:C0:CA:78:97:30:6B:65:78:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d465d18a-2489-488a-92c7-49a70bd65555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:840::/48 Signature Algorithm: sha256WithRSAEncryption 01:d5:e1:e6:70:46:49:fb:90:f9:37:16:72:67:c9:d8:03:f6: c3:21:48:af:e3:1c:c5:58:ae:3e:16:84:04:6c:63:36:75:ea: 16:d6:9c:a6:f9:6b:7c:07:4c:42:fc:ae:2b:29:a5:40:39:82: 96:70:4f:3e:1f:4b:5d:83:b4:54:45:dc:a2:cc:4d:47:2d:27: ce:8a:5d:6a:b9:13:38:d9:1c:58:f3:2b:d0:57:a3:95:f0:9b: 0a:9e:19:ce:aa:eb:1f:8d:cd:15:a5:01:80:fb:4f:a1:6d:93: 9a:9a:a2:78:9b:f5:f9:b9:b2:ea:34:85:b1:ed:4e:52:29:57: b2:ca:1e:b3:b6:2d:32:ea:87:dc:e5:76:df:40:0a:c3:01:60: 7a:ac:7d:39:88:e3:d9:e4:49:94:fb:32:29:f2:aa:73:f4:e4: 44:a6:25:0c:17:77:c5:92:45:1a:28:c5:7e:df:ac:05:88:4d: 7f:08:e7:3a:39:ef:0e:0c:1e:b6:4e:a6:29:b7:a4:48:55:3c: 77:11:30:20:74:25:c7:b2:12:ae:27:43:16:be:3c:a4:d5:cc: ba:51:b4:dc:26:7e:df:0e:a1:cf:74:b2:44:79:ab:4e:80:cc: 91:a6:3f:db:57:e5:49:94:ff:49:b4:da:f0:5b:a8:91:81:9b: c5:17:91:36 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHxjVIPtEPTNJrusd/S/C6pugB/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMDA1N1oX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAOTc5ZGRhM2M4MmUxM2ZlMGJjYzVm MzJmNjM5NmNlNzEzYTNkY2VmMjcwMmQ4YWE2Y2YxOGIzNDdmOTIyNmIzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJFXEMZz02XVQvv4ISZ5FGrw78c W12jly/fZAHnStHSDXfXgbqEFL2gQt/DQ49wBuVfX1Fz4IrDZjAAMrkK+Lra2TMm RVACY5KqzUaMLtSTV3vsoiNX36Xt9iihizVe3333dUYn5o0Cmh58OPs2FLeD5636 zvuPY4Io/5CBM5EoXWttnm7yPew+fedLKOYrKxUmARk8Vfm7IW2Q/e5g69mpkePJ DlOD6d02K+VztgbgtKN0xKyIa+BJ8bQ4NORPJ67C27zzb4oKKfTOvywv40Ykb9GC DrVoWD5pprxbXByXR5Iwr51ZxpX4cq51FsRHWQYn1XK0YaZ0H4Gs5G4pMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJLXwwK/zJC/V14XwMp4lzBrZXglMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0NjVkMThhLTI0ODktNDg4YS05MmM3LTQ5YTcwYmQ2NTU1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/whAMA0GCSqGSIb3DQEBCwUAA4IBAQAB1eHmcEZJ+5D5NxZy Z8nYA/bDIUiv4xzFWK4+FoQEbGM2deoW1pym+Wt8B0xC/K4rKaVAOYKWcE8+H0td g7RURdyizE1HLSfOil1quRM42RxY8yvQV6OV8JsKnhnOqusfjc0VpQGA+0+hbZOa mqJ4m/X5ubLqNIWx7U5SKVeyyh6zti0y6ofc5XbfQArDAWB6rH05iOPZ5EmU+zIp 8qpz9OREpiUMF3fFkkUaKMV+36wFiE1/COc6Oe8ODB62TqYpt6RIVTx3ETAgdCXH shKuJ0MWvjyk1cy6UbTcJn7fDqHPdLJEeatOgMyRpj/bV+VJlP9JtNrwW6iRgZvF F5E2 -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:20 2025 by rpki-client