$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa File: 1186c93f-0bd5-4480-aec0-f19df528c312.roa (raw, json) Hash identifier: UClDeRgmm+l0T8qvlz7g0YweG7ZjgZA5LCjd8bqoo+g= Subject key identifier: FE:74:D7:9A:FB:D6:4D:B3:93:A5:26:E3:38:EC:D1:18:AA:7D:4E:39 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 542C98EF3EE0350B734CA67773D00B0571CC0544 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa Signing time: Fri 27 Jun 2025 00:01:01 +0000 ROA not before: Fri 27 Jun 2025 00:01:01 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da23::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2c:98:ef:3e:e0:35:0b:73:4c:a6:77:73:d0:0b:05:71:cc:05:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 27 00:01:01 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=ecdde6fe83a9697c5d0687ebe1850e47f966d7674bf363d29f7a12fe5e58bc39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:cf:ef:2d:94:60:06:29:59:97:e2:90:75: 6a:ea:2a:1d:0b:10:89:6d:6a:ae:70:21:da:04:5d: 79:8b:d3:19:77:98:bf:48:7d:84:5d:4a:6a:7a:fd: 53:ff:af:7b:6f:4a:1d:6f:79:05:64:3c:b3:95:64: 70:9f:3c:c5:d6:b9:c8:3d:d0:0b:04:72:74:ff:02: 21:32:ae:c7:93:34:f7:af:67:20:36:3c:15:a9:ee: f7:d6:fd:f2:3e:ad:11:c7:83:4a:78:cc:b0:22:cd: 47:b6:af:2f:30:ef:67:a6:2f:05:e3:ef:8f:30:41: 8e:d2:47:76:94:43:b2:5f:8d:ce:b2:3e:a0:e3:dd: 84:43:1e:68:e4:ef:0e:56:ce:cf:a9:3d:c5:48:f3: 7e:4f:fb:de:a1:3c:37:ea:16:2b:64:13:d1:c9:54: 8e:bb:fb:50:db:e3:61:d0:2e:06:79:8a:25:31:d7: 2b:99:5b:18:d5:27:e5:39:d0:39:06:42:ed:a8:9d: 23:5c:21:1f:dd:f4:e0:f1:dc:4a:72:60:d8:99:f9: dd:9e:2d:97:c9:7c:b8:f4:b8:e6:63:92:98:68:53: 09:80:83:36:54:7f:99:87:21:7e:e7:fb:dc:5b:58: 48:3b:be:11:26:86:7d:09:7d:82:6c:af:cf:43:46: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:D7:9A:FB:D6:4D:B3:93:A5:26:E3:38:EC:D1:18:AA:7D:4E:39 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da23::/36 Signature Algorithm: sha256WithRSAEncryption aa:19:c5:4d:36:fc:d3:94:2b:54:c6:d1:34:51:47:c4:bd:a5: 8d:4f:59:2c:6f:7b:d8:b2:3b:5f:12:7c:94:33:fd:b5:ab:25: d1:2c:de:a3:d8:46:86:c7:7f:48:1a:8a:fb:91:15:0e:f9:6a: 31:42:6e:c9:fe:10:7d:95:6d:31:18:c9:ac:81:18:54:e9:83: 66:4c:ad:28:49:16:35:59:c7:50:e3:1f:ed:8c:6b:da:d8:2e: 3e:6b:9d:72:29:1b:1f:46:cc:ba:24:a8:d2:eb:17:be:1d:7e: 24:00:19:dc:cc:52:b2:cf:9a:69:05:b2:96:6c:40:58:11:c9: 57:a9:2e:bc:45:d9:55:57:47:05:7b:bf:06:34:56:b5:3b:5c: 76:8c:cd:1c:1f:a2:3f:c6:41:e0:78:ce:b9:fa:11:00:b7:c9: 6e:a6:dc:de:bc:20:38:97:f3:c6:73:71:8a:ec:f2:81:7d:f9: fb:de:94:88:52:88:9f:e4:9a:ad:5c:d0:c4:78:2c:80:78:8c: b4:fd:31:03:72:48:13:59:66:08:8a:e5:32:fb:62:e8:55:a1: 1b:a1:44:ee:70:76:12:8f:fb:17:0e:13:85:e4:92:31:f8:7f: f9:2a:e8:a4:65:b6:21:60:09:5a:76:bd:27:ef:ee:90:ab:21: ce:cf:2f:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVCyY7z7gNQtzTKZ3c9ALBXHMBUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNzAwMDEwMVoX DTI1MDgwMTIzNTk1OVowejFJMEcGA1UEBRNAZWNkZGU2ZmU4M2E5Njk3YzVkMDY4 N2ViZTE4NTBlNDdmOTY2ZDc2NzRiZjM2M2QyOWY3YTEyZmU1ZTU4YmMzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBHP7y2UYAYpWZfikHVq6iodCxCJ bWqucCHaBF15i9MZd5i/SH2EXUpqev1T/697b0odb3kFZDyzlWRwnzzF1rnIPdAL BHJ0/wIhMq7HkzT3r2cgNjwVqe731v3yPq0Rx4NKeMywIs1Htq8vMO9npi8F4++P MEGO0kd2lEOyX43Osj6g492EQx5o5O8OVs7PqT3FSPN+T/veoTw36hYrZBPRyVSO u/tQ2+Nh0C4GeYolMdcrmVsY1SflOdA5BkLtqJ0jXCEf3fTg8dxKcmDYmfndni2X yXy49LjmY5KYaFMJgIM2VH+ZhyF+5/vcW1hIO74RJoZ9CX2CbK/PQ0bO0wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP5015r71k2zk6Um4zjs0RiqfU45MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzExODZjOTNmLTBiZDUtNDQ4MC1hZWMwLWYxOWRmNTI4YzMxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIwAwDQYJKoZIhvcNAQELBQADggEBAKoZxU02/NOUK1TG0TRR R8S9pY1PWSxve9iyO18SfJQz/bWrJdEs3qPYRobHf0gaivuRFQ75ajFCbsn+EH2V bTEYyayBGFTpg2ZMrShJFjVZx1DjH+2Ma9rYLj5rnXIpGx9GzLokqNLrF74dfiQA GdzMUrLPmmkFspZsQFgRyVepLrxF2VVXRwV7vwY0VrU7XHaMzRwfoj/GQeB4zrn6 EQC3yW6m3N68IDiX88ZzcYrs8oF9+fvelIhSiJ/kmq1c0MR4LIB4jLT9MQNySBNZ ZgiK5TL7YuhVoRuhRO5wdhKP+xcOE4XkkjH4f/kq6KRltiFgCVp2vSfv7pCrIc7P L38= -----END CERTIFICATE-----Generated at Sun Jun 29 07:44:42 2025 by rpki-client