$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa File: 2304fccd-a194-40a7-978d-bdb25807cebe.roa (raw, json) Hash identifier: 8iHbp96JqS7He+TkmnQDcEEo296y+Lw1BgOQC5xvVcU= Subject key identifier: 71:7B:F1:EF:82:A2:90:51:2B:3B:FD:9E:36:9F:CA:6A:A0:AD:D2:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4194A86711D3C7EDBD70C54A5F849E8064C56AE0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa Signing time: Tue 17 Jun 2025 00:01:02 +0000 ROA not before: Tue 17 Jun 2025 00:01:02 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:94:a8:67:11:d3:c7:ed:bd:70:c5:4a:5f:84:9e:80:64:c5:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:01:02 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=8443612c31777063ff7b7c56e7aa243eb98de68f8603438fc660374da66ba886, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:ac:72:46:1c:fc:75:fd:22:07:c7:d3:66: 2b:35:ff:47:15:4c:c8:51:aa:ca:b4:67:c7:c3:bd: 88:4b:95:4c:8b:b1:82:74:ae:b0:b6:be:a1:e6:bf: f9:1f:03:58:73:8d:09:09:fd:4d:7b:d8:a8:fb:e6: b9:52:22:44:a5:22:2b:f8:ec:6b:0e:87:f8:05:22: ea:26:1f:d8:59:a1:b6:47:4a:ea:bb:11:e5:a7:81: b3:eb:db:88:16:ab:f3:17:b7:2e:13:42:94:b6:0a: 7a:5e:d2:9d:bb:84:f4:50:e4:84:4c:95:4f:ae:e9: ec:87:34:62:68:af:38:fa:99:65:4b:cc:0c:47:fc: 5c:2e:3d:ab:4b:c0:ad:9a:a9:96:b4:e0:46:03:69: 1b:36:8f:2b:56:91:a3:08:18:59:c0:d8:e3:73:25: 0e:62:af:3d:db:05:bc:e5:b4:b8:35:c1:98:d8:e7: b0:3d:41:e2:fe:cd:85:66:a2:72:c7:28:5f:ae:de: 86:fa:e9:ad:ac:2b:4c:c7:9a:70:7b:55:84:49:79: 3a:ef:d6:b1:5f:ff:b1:0b:4a:63:c9:2f:6b:35:dd: a8:d4:8a:39:6d:fb:87:b4:9c:18:f4:07:8d:8e:9d: f3:fc:c3:b2:dd:cf:71:1e:cf:6a:41:f1:0f:f2:37: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7B:F1:EF:82:A2:90:51:2B:3B:FD:9E:36:9F:CA:6A:A0:AD:D2:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption 96:f2:6a:c1:b8:f3:05:5d:10:82:cb:cf:41:07:de:84:29:16: e8:a0:ae:3d:02:53:17:e3:94:8c:04:81:0b:bf:b5:8d:aa:a6: ee:7d:2d:22:78:f4:8b:bd:aa:be:c5:33:ae:95:87:9e:7c:5e: 93:31:69:f1:dc:95:18:15:3c:e6:ae:7b:4a:b2:e2:ae:cb:60: 0b:0a:00:55:fa:f5:f3:21:6e:df:cc:57:a4:fb:92:d3:53:a6: d8:ee:df:52:a8:77:c8:c3:c9:52:ed:62:e0:b9:bf:52:87:91: 47:3e:f1:b1:d8:a3:ac:ec:a5:a2:37:6d:62:ef:b6:6f:20:f6: ba:c7:8e:bd:56:8f:65:e1:8b:bf:32:84:7c:e7:77:59:0d:9a: 6f:96:f2:cc:67:65:be:0e:d0:85:47:00:a3:f7:e3:18:c0:0f: b7:db:65:88:db:6d:05:a5:f8:6f:be:40:ab:0d:50:28:cd:0c: be:45:92:3d:58:64:18:bd:1a:f0:fc:57:f2:a5:53:f2:b1:c7: 1e:5a:c7:7e:4c:c6:0e:37:c7:05:54:85:cd:c0:a4:d7:5f:34: 97:5a:0c:6a:4e:60:c9:be:22:db:ae:42:35:65:37:2c:0a:cf: de:41:a1:86:8e:59:91:1a:44:5b:b6:aa:b5:60:ea:ab:10:e1: de:76:7f:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQZSoZxHTx+29cMVKX4SegGTFauAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDEwMloX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAODQ0MzYxMmMzMTc3NzA2M2ZmN2I3 YzU2ZTdhYTI0M2ViOThkZTY4Zjg2MDM0MzhmYzY2MDM3NGRhNjZiYTg4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJysckYc/HX9IgfH02YrNf9HFUzI UarKtGfHw72IS5VMi7GCdK6wtr6h5r/5HwNYc40JCf1Ne9io++a5UiJEpSIr+Oxr Dof4BSLqJh/YWaG2R0rquxHlp4Gz69uIFqvzF7cuE0KUtgp6XtKdu4T0UOSETJVP runshzRiaK84+pllS8wMR/xcLj2rS8CtmqmWtOBGA2kbNo8rVpGjCBhZwNjjcyUO Yq892wW85bS4NcGY2OewPUHi/s2FZqJyxyhfrt6G+umtrCtMx5pwe1WESXk679ax X/+xC0pjyS9rNd2o1Io5bfuHtJwY9AeNjp3z/MOy3c9xHs9qQfEP8jeQiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHF78e+CopBRKzv9njafymqgrdIrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDRmY2NkLWExOTQtNDBhNy05NzhkLWJkYjI1ODA3Y2ViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBAJbyasG48wVdEILLz0EH 3oQpFuigrj0CUxfjlIwEgQu/tY2qpu59LSJ49Iu9qr7FM66Vh558XpMxafHclRgV POaue0qy4q7LYAsKAFX69fMhbt/MV6T7ktNTptju31Kod8jDyVLtYuC5v1KHkUc+ 8bHYo6zspaI3bWLvtm8g9rrHjr1Wj2Xhi78yhHznd1kNmm+W8sxnZb4O0IVHAKP3 4xjAD7fbZYjbbQWl+G++QKsNUCjNDL5Fkj1YZBi9GvD8V/KlU/Kxxx5ax35Mxg43 xwVUhc3ApNdfNJdaDGpOYMm+ItuuQjVlNywKz95BoYaOWZEaRFu2qrVg6qsQ4d52 f5s= -----END CERTIFICATE-----Generated at Sun Jun 29 04:33:55 2025 by rpki-client