$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa File: 21f525e8-dbad-41ae-a8f0-380e644cd76d.roa (raw, json) Hash identifier: m+8O1Dlhb8JXqLDTbdwBKrzPjudTuu4upePb9NFXHSc= Subject key identifier: 15:D2:A6:C1:1F:35:6F:05:0E:0C:B8:F4:D9:0E:AE:88:41:4B:60:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 651CBAD665CCACF0710EDB8D548B5BC69D9DF24D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa Signing time: Thu 26 Jun 2025 19:53:56 +0000 ROA not before: Thu 26 Jun 2025 19:53:56 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1c:ba:d6:65:cc:ac:f0:71:0e:db:8d:54:8b:5b:c6:9d:9d:f2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 19:53:56 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=5442dbf889cd4b9baadfce978a0f1622e8b8efd47b752fdb4e309330e743ca7e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:c1:b5:cd:83:75:b8:37:ab:be:05:00:51: 45:82:34:e2:24:87:7a:96:42:9a:92:c3:ad:3f:27: f8:c8:f0:a3:a3:26:d9:71:0a:d9:6d:6b:9a:bc:5f: 2d:3b:48:f7:a3:bc:01:29:d3:de:3e:40:68:4d:18: ff:da:17:45:0d:f4:2d:e6:62:0e:e8:7d:63:81:8a: cd:2d:5d:1a:4f:4f:95:73:b1:7b:ef:0d:bc:d3:82: a2:7a:30:f4:60:89:bc:90:80:da:c5:8c:0f:91:81: ed:d3:cb:fb:73:7c:d7:7b:98:41:8f:7d:a0:03:9b: 10:e9:16:ac:12:91:c3:ad:19:b0:f1:69:cf:c4:96: 96:f7:ad:e5:79:2b:ac:d9:60:27:58:d0:e0:25:71: b2:4d:23:25:87:d1:41:7f:8c:2a:01:f1:38:ef:55: 1b:34:6d:a1:6e:9e:4b:2d:59:9c:0f:c9:df:f4:93: a2:60:40:3c:b2:33:74:4a:75:ad:40:21:45:bb:5f: 8c:b0:a7:fc:38:a0:b9:ce:7a:aa:26:32:d1:db:26: 7d:2f:7b:52:ff:d0:eb:77:90:e9:01:65:4f:f1:7e: da:a1:7e:60:29:b2:0d:9c:0b:f5:4b:ef:88:1c:ed: 44:f5:60:8d:0c:4b:37:73:e6:f7:13:c6:10:ad:49: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:A6:C1:1F:35:6F:05:0E:0C:B8:F4:D9:0E:AE:88:41:4B:60:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4020::/46 Signature Algorithm: sha256WithRSAEncryption 05:4b:58:4e:32:07:cf:74:85:c9:52:10:84:ab:7c:2c:c7:ff: 84:bb:d0:aa:c1:cd:14:79:10:da:76:5f:35:41:c4:fb:f1:9f: 2d:05:98:73:9f:7f:ce:6c:68:b1:d7:8f:fc:2b:b8:d8:cb:a1: c4:6b:f4:8a:82:53:15:cd:df:f4:47:0a:13:5e:3e:1a:4f:8f: 6c:a0:57:4b:9d:b8:75:75:d9:12:3e:cd:6b:3f:f0:ec:69:26: 15:82:36:ef:eb:e6:b1:35:45:8f:62:9c:ce:b2:d2:bb:39:65: ae:ec:64:5d:0c:6d:26:84:84:dd:f1:24:be:20:2c:04:6b:33: 10:e5:02:9d:64:9a:6b:fb:8f:5d:23:5e:f8:a6:2f:1b:f7:98: 31:80:80:5c:fc:72:78:51:29:13:66:6e:eb:18:f9:9e:05:96: 5f:b9:b3:3b:27:fc:91:97:84:e2:7e:26:8a:36:33:c3:67:5b: ba:d2:df:68:63:40:fe:bb:cf:b5:30:ed:b3:24:15:55:39:da: 73:79:a6:fc:08:dc:af:50:84:ff:6c:ef:95:d6:bb:0d:52:ce: 48:31:7a:a3:2e:80:75:87:fd:c8:37:74:ee:80:05:97:72:ea: f0:86:62:f8:0e:de:06:50:e5:0d:de:77:ff:2f:a3:69:9e:bf: d8:2e:1a:58 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZRy61mXMrPBxDtuNVItbxp2d8k0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjE5NTM1NloX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNANTQ0MmRiZjg4OWNkNGI5YmFhZGZj ZTk3OGEwZjE2MjJlOGI4ZWZkNDdiNzUyZmRiNGUzMDkzMzBlNzQzY2E3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LbBtc2Ddbg3q74FAFFFgjTiJId6 lkKaksOtPyf4yPCjoybZcQrZbWuavF8tO0j3o7wBKdPePkBoTRj/2hdFDfQt5mIO 6H1jgYrNLV0aT0+Vc7F77w2804KiejD0YIm8kIDaxYwPkYHt08v7c3zXe5hBj32g A5sQ6RasEpHDrRmw8WnPxJaW963leSus2WAnWNDgJXGyTSMlh9FBf4wqAfE471Ub NG2hbp5LLVmcD8nf9JOiYEA8sjN0SnWtQCFFu1+MsKf8OKC5znqqJjLR2yZ9L3tS /9Drd5DpAWVP8X7aoX5gKbINnAv1S++IHO1E9WCNDEs3c+b3E8YQrUkYjQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBXSpsEfNW8FDgy49NkOrohBS2AuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIxZjUyNWU4LWRiYWQtNDFhZS1hOGYwLTM4MGU2NDRjZDc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80AgMA0GCSqGSIb3DQEBCwUAA4IBAQAFS1hOMgfPdIXJUhCE q3wsx/+Eu9Cqwc0UeRDadl81QcT78Z8tBZhzn3/ObGix14/8K7jYy6HEa/SKglMV zd/0RwoTXj4aT49soFdLnbh1ddkSPs1rP/DsaSYVgjbv6+axNUWPYpzOstK7OWWu 7GRdDG0mhITd8SS+ICwEazMQ5QKdZJpr+49dI174pi8b95gxgIBc/HJ4USkTZm7r GPmeBZZfubM7J/yRl4TifiaKNjPDZ1u60t9oY0D+u8+1MO2zJBVVOdpzeab8CNyv UIT/bO+V1rsNUs5IMXqjLoB1h/3IN3TugAWXcurwhmL4Dt4GUOUN3nf/L6Npnr/Y LhpY -----END CERTIFICATE-----Generated at Sun Jun 29 05:18:15 2025 by rpki-client