$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef42740-1a47-414a-a917-5efdd54829dd.roa File: fef42740-1a47-414a-a917-5efdd54829dd.roa (raw, json) Hash identifier: 1KostiEuOA20a/1jpoh7eDsPDIMm6P0/kaC6mwpARJM= Subject key identifier: F6:19:D6:66:A4:4A:45:EC:48:AA:84:41:C7:C0:3F:B6:88:E4:C0:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AD0D3E94E76E78321A310CD21217E33AD636030 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef42740-1a47-414a-a917-5efdd54829dd.roa Signing time: Thu 22 May 2025 00:36:48 +0000 ROA not before: Thu 22 May 2025 00:36:48 +0000 ROA not after: Thu 26 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d0:d3:e9:4e:76:e7:83:21:a3:10:cd:21:21:7e:33:ad:63:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 00:36:48 2025 GMT Not After : Jun 26 23:59:59 2025 GMT Subject: serialNumber=d31dfe4b4a10a087d2c79055c0b526f020bc0b6e470d5479f993f73c13ac26b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:f9:88:76:62:f7:ac:04:1c:d7:b5:e6:22: 9f:06:fe:de:12:77:40:c7:f2:40:7d:ad:85:27:95: 10:da:8a:ad:d0:15:fe:f7:d7:85:5d:41:9f:b9:89: a6:3f:0c:42:7e:d8:bd:5f:94:e5:5a:95:34:d3:b6: 26:3c:56:bc:90:e2:5c:84:97:40:78:1c:58:a8:d7: ed:98:a6:6b:37:f7:70:78:18:d9:ff:8e:4f:dc:c4: a8:9f:65:33:c7:53:1b:91:0d:49:bf:3b:79:ea:a9: 14:7e:2e:b2:36:44:ad:df:5f:15:b1:40:2c:10:30: 40:18:7e:71:21:ea:c9:d9:5e:73:82:e7:d0:56:bc: 0c:c3:2a:1d:5f:06:6e:7b:cf:1a:8f:5a:b1:6a:44: 30:a9:86:76:ee:a8:26:3f:8f:ec:16:e3:13:32:c9: a9:8e:a5:e7:46:f0:d1:43:ee:35:8e:11:c5:94:f5: 2e:75:2a:b1:1a:d6:de:1c:e9:9f:a5:e6:3c:5e:7d: 79:2e:25:fe:6c:d0:ad:1c:ad:15:d9:f8:97:31:1d: 60:8e:16:67:14:0f:ec:01:20:bb:e8:ed:60:49:fc: 5f:27:fd:29:7b:0a:43:bb:2e:88:f0:1f:5e:f5:53: ea:f3:a0:a9:f9:02:3c:ac:00:88:50:6f:0b:bd:65: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:D6:66:A4:4A:45:EC:48:AA:84:41:C7:C0:3F:B6:88:E4:C0:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef42740-1a47-414a-a917-5efdd54829dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:8000::/40 Signature Algorithm: sha256WithRSAEncryption 6d:95:59:91:d4:13:26:ae:0d:98:4f:ba:af:13:eb:8f:8d:ba: 17:fa:56:52:be:b4:e3:b9:c3:91:ce:ab:71:83:00:17:b2:89: b9:15:75:89:15:a9:b0:93:6a:76:3f:88:2d:6b:d4:c1:b1:6e: 42:c5:03:2d:bc:ca:2c:db:68:29:8b:19:63:7f:51:35:0a:ce: bf:95:c1:ca:5a:17:06:6b:93:76:71:5a:ba:01:26:0c:85:75: 83:08:d4:ff:4c:ba:82:f3:ce:87:c7:33:30:67:d8:8a:80:58: 2c:3d:93:d0:86:48:2e:0a:00:72:c2:1c:46:8f:0e:2d:c6:e1: 59:77:b3:b7:83:d7:3b:7f:e9:d8:5d:80:a9:c4:f3:47:7c:c6: 94:d2:bb:69:a1:3e:38:52:df:bd:4a:b7:69:46:7c:16:51:7b: 4f:ca:b1:d0:72:76:2c:ef:34:4b:46:97:07:87:75:d8:82:51: 71:a4:16:f1:58:c0:a8:7c:32:d8:a7:fb:5e:90:ff:a6:23:74: 0d:e3:f6:3f:bf:b9:81:0f:2f:36:a3:d9:23:58:ad:9d:00:04: 9d:81:03:65:36:be:2c:42:63:b5:39:c0:73:0f:f0:65:9c:de: 35:8c:35:0b:dd:98:0a:85:c9:42:7e:01:d6:ba:3d:55:61:40: 61:77:c6:be -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUStDT6U5254MhoxDNISF+M61jYDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMjAwMzY0OFoX DTI1MDYyNjIzNTk1OVowejFJMEcGA1UEBRNAZDMxZGZlNGI0YTEwYTA4N2QyYzc5 MDU1YzBiNTI2ZjAyMGJjMGI2ZTQ3MGQ1NDc5Zjk5M2Y3M2MxM2FjMjZiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8P5iHZi96wEHNe15iKfBv7eEndA x/JAfa2FJ5UQ2oqt0BX+99eFXUGfuYmmPwxCfti9X5TlWpU007YmPFa8kOJchJdA eBxYqNftmKZrN/dweBjZ/45P3MSon2Uzx1MbkQ1Jvzt56qkUfi6yNkSt318VsUAs EDBAGH5xIerJ2V5zgufQVrwMwyodXwZue88aj1qxakQwqYZ27qgmP4/sFuMTMsmp jqXnRvDRQ+41jhHFlPUudSqxGtbeHOmfpeY8Xn15LiX+bNCtHK0V2fiXMR1gjhZn FA/sASC76O1gSfxfJ/0pewpDuy6I8B9e9VPq86Cp+QI8rACIUG8LvWVoDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPYZ1makSkXsSKqEQcfAP7aI5MDxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZlZjQyNzQwLTFhNDctNDE0YS1hOTE3LTVlZmRkNTQ4MjlkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7YAwDQYJKoZIhvcNAQELBQADggEBAG2VWZHUEyauDZhPuq8T 64+Nuhf6VlK+tOO5w5HOq3GDABeyibkVdYkVqbCTanY/iC1r1MGxbkLFAy28yizb aCmLGWN/UTUKzr+VwcpaFwZrk3ZxWroBJgyFdYMI1P9MuoLzzofHMzBn2IqAWCw9 k9CGSC4KAHLCHEaPDi3G4Vl3s7eD1zt/6dhdgKnE80d8xpTSu2mhPjhS371Kt2lG fBZRe0/KsdBydizvNEtGlweHddiCUXGkFvFYwKh8Mtin+16Q/6YjdA3j9j+/uYEP Lzaj2SNYrZ0ABJ2BA2U2vixCY7U5wHMP8GWc3jWMNQvdmAqFyUJ+Ada6PVVhQGF3 xr4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:36 2025 by rpki-client