$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa File: 6982f3ac-c7ae-423c-a028-517d7541d973.roa (raw, json) Hash identifier: En+qKToodooVHgI855ThbupZdXn6ba9dgNxTzuhcvws= Subject key identifier: E4:F0:7F:FE:25:14:F4:0E:8C:0E:CC:10:27:55:1A:BE:9C:A4:D8:4B Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 6D6D1E68139915AED7EF3EB20B38ED425791022E Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa Signing time: Fri 16 May 2025 16:00:08 +0000 ROA not before: Fri 16 May 2025 16:00:08 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6d:1e:68:13:99:15:ae:d7:ef:3e:b2:0b:38:ed:42:57:91:02:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: May 16 16:00:08 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=dd4ad8b558899ba0f348ec2819b3af050ba9a70abe6c38b4dfa74f2bc68d147e, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:cc:b9:6d:2b:57:47:d9:2d:a8:c0:ed:d9: 80:a6:d0:1f:95:8b:dc:02:8d:8d:06:3b:b8:90:20: cb:c9:b4:0f:2b:d1:1d:2c:ee:dd:f9:46:b8:e1:b3: 5c:20:00:76:ef:d0:ee:35:86:e4:15:dc:34:d9:d6: d4:c0:a1:1f:60:42:5a:5f:7c:ae:81:6e:c4:23:d0: 50:5c:cd:30:3f:25:7b:91:98:53:ab:af:ae:0e:c2: 4e:29:e3:50:19:f9:9a:7b:a2:46:32:f2:36:86:b5: a4:e9:08:6f:af:bf:3a:11:56:dd:c6:69:dc:88:0d: a8:6f:45:f2:a5:7f:37:06:e3:51:94:a9:ed:05:e9: 7f:36:6a:72:6b:76:8a:95:19:7e:a1:20:35:47:15: bc:b4:6c:7f:22:5a:2c:27:e7:c5:4e:d9:85:33:19: 32:af:cd:5b:ac:ad:52:73:07:1a:34:4a:e4:87:b5: f7:b9:35:5f:5e:f0:bf:d0:84:4f:1f:af:95:15:e9: a5:07:3d:64:b6:a3:17:77:e7:93:2a:14:51:47:51: d7:76:ec:e7:02:15:49:e7:9f:23:be:78:90:9f:c9: fd:2f:e8:c9:0b:d6:b6:d3:5d:b0:0c:06:44:0b:e7: 38:3c:ae:6e:5c:86:65:1e:72:85:ad:74:59:f9:a3: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F0:7F:FE:25:14:F4:0E:8C:0E:CC:10:27:55:1A:BE:9C:A4:D8:4B X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/40 Signature Algorithm: sha256WithRSAEncryption 23:f6:3e:ed:80:b3:60:a5:38:2a:d3:2a:b9:b1:f3:0d:d3:d8: 02:d7:3c:09:97:1f:60:f3:d1:ce:b5:71:e9:aa:c2:d0:21:12: 5f:4e:f5:d6:e4:5a:f1:53:92:66:aa:14:bb:5a:b4:5a:79:1e: 88:6b:85:99:61:5c:4e:77:49:1b:e1:00:b2:10:e7:a3:7e:f1: ce:19:ed:dd:01:50:22:73:24:69:65:38:bf:08:56:ff:4d:d6: d2:25:e2:04:2c:9c:5e:70:93:ea:c6:61:d0:aa:5b:1e:a6:69: a7:6f:25:04:01:b2:b6:70:f1:7f:da:9b:4a:6a:7e:0d:90:39: 93:cd:99:65:df:79:e0:b2:17:fc:67:24:61:76:57:55:e2:7b: 74:53:a6:7f:64:6a:55:04:c4:2f:7f:f8:d6:4e:2e:ec:20:14: 58:42:02:04:b1:2b:91:90:64:ed:60:d3:fc:ad:c9:7c:5e:9a: 41:47:46:0d:a6:b7:a1:13:13:46:91:c1:6c:f3:f7:9e:01:f8: 79:02:81:b0:71:4d:70:5e:f8:15:c3:c3:8c:40:57:28:04:00: 69:7e:fa:af:4a:6f:a5:ea:0a:a9:1c:5e:0a:f2:69:19:65:d1: 77:49:27:19:86:27:de:ec:e3:47:f2:c7:cd:cb:8e:12:40:8f: 0e:c9:9a:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbW0eaBOZFa7X7z6yCzjtQleRAi4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDUxNjE2MDAwOFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZGQ0YWQ4YjU1ODg5OWJhMGYzNDhl YzI4MTliM2FmMDUwYmE5YTcwYWJlNmMzOGI0ZGZhNzRmMmJjNjhkMTQ3ZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zLMuW0rV0fZLajA7dmAptAflYvc Ao2NBju4kCDLybQPK9EdLO7d+Ua44bNcIAB279DuNYbkFdw02dbUwKEfYEJaX3yu gW7EI9BQXM0wPyV7kZhTq6+uDsJOKeNQGfmae6JGMvI2hrWk6Qhvr786EVbdxmnc iA2ob0XypX83BuNRlKntBel/Nmpya3aKlRl+oSA1RxW8tGx/IlosJ+fFTtmFMxky r81brK1ScwcaNErkh7X3uTVfXvC/0IRPH6+VFemlBz1ktqMXd+eTKhRRR1HXduzn AhVJ558jvniQn8n9L+jJC9a2012wDAZEC+c4PK5uXIZlHnKFrXRZ+aOGWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOTwf/4lFPQOjA7MECdVGr6cpNhLMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzY5ODJmM2FjLWM3YWUtNDIzYy1hMDI4LTUxN2Q3NTQxZDk3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAOzABAwDQYJKoZIhvcNAQELBQADggEBACP2Pu2As2ClOCrTKrmx 8w3T2ALXPAmXH2Dz0c61cemqwtAhEl9O9dbkWvFTkmaqFLtatFp5HohrhZlhXE53 SRvhALIQ56N+8c4Z7d0BUCJzJGllOL8IVv9N1tIl4gQsnF5wk+rGYdCqWx6maadv JQQBsrZw8X/am0pqfg2QOZPNmWXfeeCyF/xnJGF2V1Xie3RTpn9kalUExC9/+NZO LuwgFFhCAgSxK5GQZO1g0/ytyXxemkFHRg2mt6ETE0aRwWzz954B+HkCgbBxTXBe +BXDw4xAVygEAGl++q9Kb6XqCqkcXgryaRll0XdJJxmGJ97s40fyx83LjhJAjw7J mvo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:27 2025 by rpki-client