$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/100dc422-4bdf-42ad-b997-95e95f89c2ff.roa File: 100dc422-4bdf-42ad-b997-95e95f89c2ff.roa (raw, json) Hash identifier: RYtMCb7pxpx9SX9RVmz6Wo27pLhihD6+Au6Y7fkTHfQ= Subject key identifier: C3:BB:C9:E7:E7:AA:8B:67:4F:CF:38:3E:7B:93:57:FE:1C:F4:13:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45FA72B029AF28C0C5993AF132838D3D957FED4C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/100dc422-4bdf-42ad-b997-95e95f89c2ff.roa Signing time: Tue 10 Jun 2025 00:51:18 +0000 ROA not before: Tue 10 Jun 2025 00:51:18 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:72:b0:29:af:28:c0:c5:99:3a:f1:32:83:8d:3d:95:7f:ed:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:51:18 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a39751e75627264a65b400f47da5a7e4fb1eeb0098cc04ea5da9d949ad4c707b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:8f:c0:49:63:c5:e8:45:81:3c:1c:85:9c: 2e:77:79:a2:53:f2:e1:66:3a:0f:c9:d7:5b:b1:a6: 19:ed:1f:69:1d:8a:97:49:dd:40:fb:6a:e5:11:7a: 47:5e:72:77:0b:bb:90:a7:26:92:75:dc:d2:bc:89: 13:21:9e:4e:b4:56:81:c7:99:aa:38:87:b5:e3:d5: 0c:67:ae:96:1c:30:71:e5:63:fc:3c:42:e4:9f:76: e5:37:b4:68:5d:b7:fd:5d:d0:29:59:78:56:56:e2: f0:97:a5:2f:e8:7d:c3:e4:20:e2:be:fe:30:2d:40: bb:45:5b:b6:99:c4:0d:23:42:44:a8:e0:22:61:d3: 7f:92:2d:ac:ee:40:bf:19:34:90:23:c1:16:ba:b5: b5:b7:fa:66:c7:e2:eb:0c:87:5f:49:9a:9e:ab:e4: 6d:a6:f5:1f:d9:26:68:d6:6e:1e:df:31:c6:78:bf: d3:6f:d1:2d:cc:79:a0:75:41:7e:a1:bd:18:b7:67: 61:68:a2:ee:6e:84:2b:0f:fc:d4:c5:75:ba:39:72: 5d:35:f5:5f:58:7d:b4:38:b1:3e:5d:9a:a4:b8:2b: 84:a7:b6:96:1f:0e:b6:62:e0:04:ed:17:a4:9c:34: 54:96:0c:fa:de:98:1e:47:31:4b:1f:a3:4b:bf:91: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BB:C9:E7:E7:AA:8B:67:4F:CF:38:3E:7B:93:57:FE:1C:F4:13:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/100dc422-4bdf-42ad-b997-95e95f89c2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:7000::/40 Signature Algorithm: sha256WithRSAEncryption 73:31:91:68:66:5e:f4:41:6e:d2:df:ae:7a:97:85:fb:f2:90: 09:b7:cc:9d:64:e0:57:8e:63:53:82:7c:c7:85:a8:f4:d9:66: dd:a2:74:98:6d:64:32:76:dd:10:c9:ef:72:b1:82:54:6b:a0: f8:1a:e6:37:f5:03:ff:e3:bf:c3:56:3a:ea:27:f5:ca:1f:48: 2b:19:c1:22:e9:8c:14:85:04:7e:bb:e2:43:5c:35:12:28:de: 1a:d4:b1:a5:29:c3:c6:d3:f5:56:64:65:2f:0d:00:00:12:f3: 5b:2a:95:fc:80:5a:df:7f:77:19:8f:cc:4c:b3:ac:85:92:29: 38:65:cb:3c:c7:37:21:67:43:73:18:56:f3:51:c1:65:90:bc: a3:0b:62:5c:d6:d7:1b:35:7f:8f:ef:4d:ff:23:42:c2:c0:58: 97:60:ba:f9:4c:7e:e5:25:3c:cc:99:44:e0:44:83:f7:7e:24: c0:5b:4f:06:b0:da:60:26:6f:8a:2e:ad:96:25:65:cc:54:dc: 2a:6c:ae:2c:f9:08:93:0a:aa:c8:5a:e3:a3:28:b7:8b:06:f4: d9:f9:80:69:10:59:2d:6f:da:c3:ad:29:dd:54:e0:d7:44:23: b0:c3:2f:aa:ce:4e:e4:a9:38:ff:1f:da:74:f8:87:d0:c1:f0: 89:b1:43:51 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURfpysCmvKMDFmTrxMoONPZV/7UwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNTExOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYTM5NzUxZTc1NjI3MjY0YTY1YjQw MGY0N2RhNWE3ZTRmYjFlZWIwMDk4Y2MwNGVhNWRhOWQ5NDlhZDRjNzA3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOSPwEljxehFgTwchZwud3miU/Lh ZjoPyddbsaYZ7R9pHYqXSd1A+2rlEXpHXnJ3C7uQpyaSddzSvIkTIZ5OtFaBx5mq OIe149UMZ66WHDBx5WP8PELkn3blN7RoXbf9XdApWXhWVuLwl6Uv6H3D5CDivv4w LUC7RVu2mcQNI0JEqOAiYdN/ki2s7kC/GTSQI8EWurW1t/pmx+LrDIdfSZqeq+Rt pvUf2SZo1m4e3zHGeL/Tb9EtzHmgdUF+ob0Yt2dhaKLuboQrD/zUxXW6OXJdNfVf WH20OLE+XZqkuCuEp7aWHw62YuAE7ReknDRUlgz63pgeRzFLH6NLv5E7YwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMO7yefnqotnT884PnuTV/4c9BP1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwMGRjNDIyLTRiZGYtNDJhZC1iOTk3LTk1ZTk1Zjg5YzJmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+3AwDQYJKoZIhvcNAQELBQADggEBAHMxkWhmXvRBbtLfrnqX hfvykAm3zJ1k4FeOY1OCfMeFqPTZZt2idJhtZDJ23RDJ73KxglRroPga5jf1A//j v8NWOuon9cofSCsZwSLpjBSFBH674kNcNRIo3hrUsaUpw8bT9VZkZS8NAAAS81sq lfyAWt9/dxmPzEyzrIWSKThlyzzHNyFnQ3MYVvNRwWWQvKMLYlzW1xs1f4/vTf8j QsLAWJdguvlMfuUlPMyZROBEg/d+JMBbTwaw2mAmb4ourZYlZcxU3Cpsriz5CJMK qsha46Mot4sG9Nn5gGkQWS1v2sOtKd1U4NdEI7DDL6rOTuSpOP8f2nT4h9DB8Imx Q1E= -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:48 2025 by rpki-client