$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66d9e388-aa28-4860-9a9f-792c475c3583.roa File: 66d9e388-aa28-4860-9a9f-792c475c3583.roa (raw, json) Hash identifier: +9LUNycVGHDMT0/3GDvZETX8iVeiZ2+47uCbpwGvdRg= Subject key identifier: FE:4F:84:8B:67:1B:ED:4F:DB:EC:88:42:86:C0:F0:88:63:29:00:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75136DE1D1B39DE64A267C973209E6BD91C46C4F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66d9e388-aa28-4860-9a9f-792c475c3583.roa Signing time: Thu 26 Jun 2025 20:09:18 +0000 ROA not before: Thu 26 Jun 2025 20:09:18 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:13:6d:e1:d1:b3:9d:e6:4a:26:7c:97:32:09:e6:bd:91:c4:6c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:09:18 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=b203c463d390588010c97cedf0f7fa1d2059d17d2524a79a2a090ba0c6591416, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:36:8a:2c:a1:bd:f1:96:79:47:3d:88:08: a7:52:5a:57:53:d5:3a:74:d0:42:47:ac:56:40:16: 86:ef:2c:56:0e:eb:2e:9d:70:20:90:8c:f0:d9:34: ab:5d:66:b0:24:0a:b5:60:a1:87:eb:8a:eb:b2:5b: 0a:4d:02:9c:a1:6b:f3:97:aa:38:e6:96:ff:3f:55: 82:c9:e2:b8:56:67:8a:f7:a9:71:64:41:4f:7b:e7: 29:f7:17:22:55:73:b9:55:f1:15:11:a0:04:63:f4: b6:a8:bb:d8:67:d7:33:92:25:9a:a0:b0:5a:ab:02: ec:b4:7a:1b:b4:da:d6:19:06:4a:3d:c5:91:25:7b: c4:e2:9b:1a:38:38:8b:de:43:f9:db:69:1c:98:b2: ed:a5:8d:f2:27:e9:3d:50:61:cf:f6:d8:ae:08:f5: 89:fe:66:b7:be:3f:c2:a3:7b:c8:00:d6:67:5e:0c: fb:9c:0b:39:3d:76:c4:11:4f:cb:18:7f:c4:19:13: 3b:bf:8c:0b:dd:3a:7d:ff:b5:25:1d:c7:35:dc:96: 62:b1:01:fc:97:4c:fd:de:99:51:3f:e7:63:58:76: 08:0e:ec:b3:b8:b7:fd:90:fc:ec:41:6e:2b:d4:67: 43:e8:3f:da:c0:95:ed:57:aa:ac:46:0c:5a:f2:8b: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4F:84:8B:67:1B:ED:4F:DB:EC:88:42:86:C0:F0:88:63:29:00:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66d9e388-aa28-4860-9a9f-792c475c3583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c080::/46 Signature Algorithm: sha256WithRSAEncryption 1a:c2:e3:8d:d8:2d:c8:7a:7e:21:87:4e:38:6e:d8:d4:ee:3d: 70:06:74:3b:e8:6b:c9:e8:13:11:08:b4:95:56:3b:2f:28:51: 5c:05:e1:58:02:70:2b:d8:dc:14:4a:12:e4:7a:13:b0:ed:7f: 69:95:e6:c2:6f:30:71:9e:f2:e4:96:fd:58:d2:05:e5:01:c8: fc:4c:16:c6:76:d4:7f:d3:ea:dc:34:8f:0b:ed:43:0b:dc:06: 5c:09:3c:ee:72:c4:0f:56:2f:bc:7d:9c:d1:c5:bb:34:d8:38: 24:3a:13:35:ea:ad:03:9e:1d:04:1b:72:21:51:39:e6:b7:8f: b5:03:cc:b9:47:ec:59:e7:f5:69:40:19:9c:62:94:a8:c8:35: 26:75:69:ff:08:12:2f:8e:b9:bc:bf:96:71:7f:42:ee:33:09: ba:4c:2a:c2:04:27:fa:78:01:bb:70:87:3b:54:3f:69:b4:f5: 15:8e:83:5f:45:23:6f:b4:44:18:f0:6d:26:d5:a8:b2:e1:20: 28:b9:cd:8f:d8:90:f4:91:af:a4:dd:f6:d6:79:53:ec:e7:c9: da:d5:39:26:13:07:78:92:d2:91:b2:cc:5d:7f:21:d4:28:54: eb:f5:5d:17:4b:7a:33:cd:b8:98:24:38:54:2d:13:e7:26:b3: ba:c0:13:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdRNt4dGzneZKJnyXMgnmvZHEbE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDkxOFoX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNAYjIwM2M0NjNkMzkwNTg4MDEwYzk3 Y2VkZjBmN2ZhMWQyMDU5ZDE3ZDI1MjRhNzlhMmEwOTBiYTBjNjU5MTQxNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1c2iiyhvfGWeUc9iAinUlpXU9U6 dNBCR6xWQBaG7yxWDusunXAgkIzw2TSrXWawJAq1YKGH64rrslsKTQKcoWvzl6o4 5pb/P1WCyeK4VmeK96lxZEFPe+cp9xciVXO5VfEVEaAEY/S2qLvYZ9czkiWaoLBa qwLstHobtNrWGQZKPcWRJXvE4psaODiL3kP522kcmLLtpY3yJ+k9UGHP9tiuCPWJ /ma3vj/Co3vIANZnXgz7nAs5PXbEEU/LGH/EGRM7v4wL3Tp9/7UlHcc13JZisQH8 l0z93plRP+djWHYIDuyzuLf9kPzsQW4r1GdD6D/awJXtV6qsRgxa8ovMwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP5PhItnG+1P2+yIQobA8IhjKQA2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2ZDllMzg4LWFhMjgtNDg2MC05YTlmLTc5MmM0NzVjMzU4My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88CAMA0GCSqGSIb3DQEBCwUAA4IBAQAawuON2C3Ien4hh044 btjU7j1wBnQ76GvJ6BMRCLSVVjsvKFFcBeFYAnAr2NwUShLkehOw7X9plebCbzBx nvLklv1Y0gXlAcj8TBbGdtR/0+rcNI8L7UML3AZcCTzucsQPVi+8fZzRxbs02Dgk OhM16q0Dnh0EG3IhUTnmt4+1A8y5R+xZ5/VpQBmcYpSoyDUmdWn/CBIvjrm8v5Zx f0LuMwm6TCrCBCf6eAG7cIc7VD9ptPUVjoNfRSNvtEQY8G0m1aiy4SAouc2P2JD0 ka+k3fbWeVPs58na1TkmEwd4ktKRssxdfyHUKFTr9V0XS3ozzbiYJDhULRPnJrO6 wBOy -----END CERTIFICATE-----Generated at Sun Jun 29 14:16:37 2025 by rpki-client