$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa File: 2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa (raw, json) Hash identifier: G8pyIjakb6x7OONdpoG6s8ZsA6QI96kXojwHL9S8SK4= Subject key identifier: CC:E2:8C:95:52:C7:B8:FE:87:FC:61:EE:6A:02:3C:06:D3:A2:B1:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77FC9FD78910F99D31ECFF77A776CD6579B23EDC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa Signing time: Tue 10 Jun 2025 15:50:25 +0000 ROA not before: Tue 10 Jun 2025 15:50:25 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fc:9f:d7:89:10:f9:9d:31:ec:ff:77:a7:76:cd:65:79:b2:3e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:50:25 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ee58fd9e56b0a3d74613ae1ae519a1c9144aa0f95ff65d9bfff525e5d374e32d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f1:4b:c9:e3:e9:ad:51:aa:b5:58:b5:f8:93: cd:c5:fd:90:9f:df:4a:36:9f:24:75:dd:61:dc:f1: f1:d3:1a:b9:5f:cb:01:2a:c1:8c:92:fe:17:08:10: f0:78:59:5f:ed:a3:7b:ec:5d:3e:34:f7:5e:84:3d: 46:1c:c2:61:b4:cd:a7:1c:a1:ba:a1:f4:0f:90:cc: 04:cd:6a:f3:66:a5:b8:4a:9c:62:89:6c:a7:ab:64: dc:40:10:2c:1b:1a:59:e6:f1:86:ac:8f:20:78:e8: ec:51:6c:39:4c:0c:94:f5:44:3f:ff:77:3d:de:1c: c5:18:24:e4:21:d2:5c:ef:25:c1:f7:1d:42:79:56: fa:dd:38:23:7e:b7:dd:ca:83:0d:d4:44:49:f4:88: b8:6e:b4:9b:b9:1c:fd:76:1e:e2:4d:c5:a9:31:89: 0d:5f:39:8e:bc:71:24:79:9d:1e:7e:35:11:5b:7f: 6a:6d:59:61:7b:c8:a7:3f:5e:c1:51:d9:8a:89:2c: 71:cc:1e:2e:44:38:db:fd:c3:0c:4a:4f:29:7b:58: 11:bc:3b:a6:5a:8e:78:b1:c0:14:96:a9:51:03:a3: 5b:b4:0d:49:2a:44:98:66:c4:be:4f:1d:4c:ef:26: 64:77:61:68:93:d6:3b:53:6f:73:02:bb:5a:f7:bf: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:8C:95:52:C7:B8:FE:87:FC:61:EE:6A:02:3C:06:D3:A2:B1:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:800::/38 Signature Algorithm: sha256WithRSAEncryption b3:a3:fb:ef:77:f2:b4:85:c3:57:c8:df:7b:2b:bb:1a:a3:f4: 70:58:c4:1b:f3:71:c3:c5:b8:07:c8:84:47:61:cd:10:9f:24: c3:ce:bd:16:25:50:5e:5a:77:3a:d7:6f:32:ee:3d:7c:cc:93: 1b:a0:a2:35:fd:9a:74:8f:df:62:6e:bc:ec:30:6f:cc:8f:b2: e8:9e:ef:b5:44:bf:df:0d:3f:94:cd:38:d8:17:31:ba:94:59: 8a:97:e3:01:01:5d:ef:6b:73:84:1f:61:6d:ed:8b:c5:b6:f0: 0c:43:ab:6c:0f:05:73:ac:80:3f:92:53:ef:f4:a1:4c:d9:29: 1c:20:1b:4b:46:87:02:1b:54:4a:0a:9f:ef:b1:e5:ea:e2:49: 4e:8a:cb:b1:7d:7f:87:8a:81:db:85:32:01:0a:59:3d:48:4c: bc:2e:f7:d5:43:a7:24:3a:9a:1b:37:9d:84:0e:af:4e:ec:39: 90:e5:7c:78:e3:fb:9f:da:30:62:9e:e2:1b:61:17:bb:a2:46: 99:04:d4:ba:7d:a0:61:d8:39:b7:bc:1f:44:02:ef:51:8e:ce: 9e:04:66:58:70:66:4d:a0:10:29:0f:38:bc:7a:6c:80:e9:0d: 1a:d4:53:f2:cc:49:14:b3:08:c7:62:90:8d:47:45:f9:b8:93: c1:0d:7c:1e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd/yf14kQ+Z0x7P93p3bNZXmyPtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NTAyNVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZWU1OGZkOWU1NmIwYTNkNzQ2MTNh ZTFhZTUxOWExYzkxNDRhYTBmOTVmZjY1ZDliZmZmNTI1ZTVkMzc0ZTMyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/FLyePprVGqtVi1+JPNxf2Qn99K Np8kdd1h3PHx0xq5X8sBKsGMkv4XCBDweFlf7aN77F0+NPdehD1GHMJhtM2nHKG6 ofQPkMwEzWrzZqW4SpxiiWynq2TcQBAsGxpZ5vGGrI8geOjsUWw5TAyU9UQ//3c9 3hzFGCTkIdJc7yXB9x1CeVb63TgjfrfdyoMN1ERJ9Ii4brSbuRz9dh7iTcWpMYkN XzmOvHEkeZ0efjURW39qbVlhe8inP17BUdmKiSxxzB4uRDjb/cMMSk8pe1gRvDum Wo54scAUlqlRA6NbtA1JKkSYZsS+Tx1M7yZkd2Fok9Y7U29zArta97/L+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMzijJVSx7j+h/xh7moCPAbTorGPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyMTg2NDRmLWJjMTEtNDkyZC1iOWE5LThkMThkNWJlYmQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQgwDQYJKoZIhvcNAQELBQADggEBALOj++938rSFw1fI33sr uxqj9HBYxBvzccPFuAfIhEdhzRCfJMPOvRYlUF5adzrXbzLuPXzMkxugojX9mnSP 32JuvOwwb8yPsuie77VEv98NP5TNONgXMbqUWYqX4wEBXe9rc4QfYW3ti8W28AxD q2wPBXOsgD+SU+/0oUzZKRwgG0tGhwIbVEoKn++x5eriSU6Ky7F9f4eKgduFMgEK WT1ITLwu99VDpyQ6mhs3nYQOr07sOZDlfHjj+5/aMGKe4hthF7uiRpkE1Lp9oGHY Obe8H0QC71GOzp4EZlhwZk2gECkPOLx6bIDpDRrUU/LMSRSzCMdikI1HRfm4k8EN fB4= -----END CERTIFICATE-----Generated at Sun Jun 29 03:46:15 2025 by rpki-client