$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa File: e0ae0175-f350-4493-ae35-4deb479e034e.roa (raw, json) Hash identifier: DntScQ+wa9MsT+BsoT1su/MgIjPj7xdFcLlVfVltbGo= Subject key identifier: 54:6E:9F:5A:93:34:3A:96:74:8E:27:12:B6:79:32:92:54:B2:2D:0C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AE88AE079EA509AEB5FA097E46A4FDFE26DFC94 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa Signing time: Wed 12 Mar 2025 16:36:43 +0000 ROA not before: Wed 12 Mar 2025 16:36:43 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e8:8a:e0:79:ea:50:9a:eb:5f:a0:97:e4:6a:4f:df:e2:6d:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 12 16:36:43 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:a9:b5:97:82:bd:59:0a:e3:97:a2:6d:3f: 5b:b0:64:4c:13:3b:5a:92:32:d1:12:8b:c1:e2:be: c8:ae:05:7f:bb:0e:3b:6f:1b:30:ac:c2:41:12:b8: 78:2f:d7:4d:6c:fc:3d:ef:24:53:4a:23:b5:56:3a: 81:27:3c:9f:03:a9:a3:9a:7e:7f:8f:50:76:04:33: 88:1f:18:21:02:75:1e:1b:9a:8e:8b:60:13:09:79: 5e:34:14:1d:d9:35:01:30:72:ef:73:fa:c2:f8:c5: e7:a9:ff:40:d9:8a:26:6c:4b:d9:14:e5:7b:3b:1a: 62:00:43:3e:33:e7:35:f2:79:a3:5b:c0:5b:00:2b: c6:3d:0c:c7:fa:c0:9c:ea:69:0b:95:89:32:f9:1f: 7a:98:04:e5:15:cf:93:dc:63:27:83:fb:af:27:72: 1e:4b:98:e7:70:ea:18:ac:36:55:81:0e:cb:fb:5d: 22:66:b0:07:1b:a2:7d:9b:cd:b7:8e:40:5c:9c:c2: 47:47:91:45:79:e7:13:e1:73:a3:21:e2:eb:4e:27: a3:0f:a5:17:8e:d9:14:a6:8b:7d:43:d7:4e:59:21: 83:3d:c1:3d:0b:d0:14:5e:1b:9f:fb:93:37:2e:9a: 10:21:3a:d1:45:01:62:79:ab:68:68:b7:77:10:11: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6E:9F:5A:93:34:3A:96:74:8E:27:12:B6:79:32:92:54:B2:2D:0C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24:8000::/36 Signature Algorithm: sha256WithRSAEncryption 4d:84:1f:e6:34:85:e4:e8:2f:b7:e3:3f:f1:71:3f:b3:3e:b8: c4:6c:07:c3:d0:78:8a:78:db:96:34:d5:3f:65:0d:1d:a4:71: e3:84:a5:28:a6:84:7c:2f:f5:99:fb:f4:e8:97:32:92:ac:7a: ff:19:a9:63:1b:c9:23:41:12:fe:7a:33:2f:15:62:39:de:db: b4:37:ff:ad:3f:34:4f:80:fe:bc:5c:e9:dd:8c:af:b9:7d:b6: 64:31:f6:89:09:a7:a9:00:e9:f2:bb:b0:f0:c4:d0:eb:ce:cf: e1:58:ce:7c:ac:1f:68:80:0c:bc:66:05:99:28:60:dd:a0:b1: 98:ef:12:65:e0:e3:21:70:25:74:51:5b:32:8c:67:d3:8b:50: 7b:79:eb:05:b3:11:34:62:cc:0d:4f:59:83:3d:96:46:b1:d9: 2e:46:67:db:6e:f8:43:bc:45:ca:30:ee:1c:28:33:a6:29:69: e5:73:f3:55:f1:a6:b6:77:cf:ab:77:6c:4f:4d:8e:a6:0c:87: 12:7a:fa:6c:f1:34:45:cb:87:69:3a:31:f6:28:7a:cb:f7:c9: 54:01:af:aa:c8:0b:d3:b8:34:ee:d0:ba:5f:c1:5e:25:e5:98: a5:25:da:78:86:e8:b7:bd:49:fd:02:a6:91:06:aa:17:a3:d6: 31:c2:e6:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGuiK4HnqUJrrX6CX5GpP3+Jt/JQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMxMjE2MzY0M1oX DTI1MDQxNjIzNTk1OVowejFJMEcGA1UEBRNAODdlMGQ0ZmZmNDlkYWY3ZjA4ZDg3 N2VmYjg3NjY5OThiMmMxMjhlMTIxYzU0Y2EzNzgwMzA3NzIzZDE4OWI2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocGptZeCvVkK45eibT9bsGRMEzta kjLREovB4r7IrgV/uw47bxswrMJBErh4L9dNbPw97yRTSiO1VjqBJzyfA6mjmn5/ j1B2BDOIHxghAnUeG5qOi2ATCXleNBQd2TUBMHLvc/rC+MXnqf9A2YombEvZFOV7 OxpiAEM+M+c18nmjW8BbACvGPQzH+sCc6mkLlYky+R96mATlFc+T3GMng/uvJ3Ie S5jncOoYrDZVgQ7L+10iZrAHG6J9m823jkBcnMJHR5FFeecT4XOjIeLrTiejD6UX jtkUpot9Q9dOWSGDPcE9C9AUXhuf+5M3LpoQITrRRQFieatoaLd3EBE4KQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFRun1qTNDqWdI4nErZ5MpJUsi0MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwYWUwMTc1LWYzNTAtNDQ5My1hZTM1LTRkZWI0NzllMDM0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJIAwDQYJKoZIhvcNAQELBQADggEBAE2EH+Y0heToL7fjP/Fx P7M+uMRsB8PQeIp425Y01T9lDR2kceOEpSimhHwv9Zn79OiXMpKsev8ZqWMbySNB Ev56My8VYjne27Q3/60/NE+A/rxc6d2Mr7l9tmQx9okJp6kA6fK7sPDE0OvOz+FY znysH2iADLxmBZkoYN2gsZjvEmXg4yFwJXRRWzKMZ9OLUHt56wWzETRizA1PWYM9 lkax2S5GZ9tu+EO8Rcow7hwoM6YpaeVz81XxprZ3z6t3bE9NjqYMhxJ6+mzxNEXL h2k6MfYoesv3yVQBr6rIC9O4NO7Qul/BXiXlmKUl2niG6Le9Sf0CppEGqhej1jHC 5rw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:51:41 2025 by rpki-client