$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71870024-8ed4-4150-a104-52f4b8c56809.roa File: 71870024-8ed4-4150-a104-52f4b8c56809.roa (raw, json) Hash identifier: 2PKpo1OX1EGRz5UYI63UCI0UQX1R0L78FY2FIMDyyWE= Subject key identifier: 36:00:04:53:58:36:44:56:78:E8:24:45:20:6E:5B:A0:D2:2E:02:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A51FE99975B977691C6155A5AB6CB174339F00B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71870024-8ed4-4150-a104-52f4b8c56809.roa Signing time: Wed 25 Jun 2025 00:00:45 +0000 ROA not before: Wed 25 Jun 2025 00:00:45 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:51:fe:99:97:5b:97:76:91:c6:15:5a:5a:b6:cb:17:43:39:f0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 25 00:00:45 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=05409706e05939b1d9aac85b1bd43603ad0b484b1f62877ed996ab1e923af062, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:ff:8f:42:b6:56:80:05:be:47:ad:e3:7a: 19:f1:99:59:88:af:38:da:94:84:7d:a0:9c:fd:0b: 9c:04:f9:c8:8f:a1:cf:ee:fa:61:fa:89:d6:27:79: 12:c8:1d:1a:63:a2:ab:1c:a8:9f:ab:dc:0a:a7:3a: e0:a7:cd:de:89:d6:70:32:53:39:13:bf:c8:31:06: ef:98:bb:7f:9f:a1:dd:6d:55:26:ca:92:63:c8:20: 8d:f4:e3:69:88:7a:dd:4b:fe:4a:8a:76:7a:e7:8d: 7c:4c:79:19:cb:93:d5:2e:45:2d:a9:e1:5c:6d:d7: 9f:be:23:0b:cc:e2:4f:62:8a:17:6e:b4:c2:04:d6: a9:29:8c:46:81:fa:1a:0a:5c:4c:56:5b:29:d3:7f: 59:e5:2f:84:de:67:0c:48:57:b4:2c:c7:e6:c0:00: 3c:e9:57:43:58:25:22:03:b0:1f:04:ce:be:41:0f: 3d:63:de:eb:49:9e:d5:62:70:00:93:4a:f3:89:b4: 03:d3:1e:f7:55:c5:b6:4a:da:68:21:7b:42:1f:9c: 86:35:57:f1:fc:5b:a2:22:f0:a6:4e:b9:b5:36:37: 06:69:ae:e1:a0:63:3b:37:17:00:85:96:71:39:eb: 19:a7:66:c8:09:76:ed:af:fc:98:dd:18:6c:dc:ca: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:00:04:53:58:36:44:56:78:E8:24:45:20:6E:5B:A0:D2:2E:02:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71870024-8ed4-4150-a104-52f4b8c56809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:2000::/40 Signature Algorithm: sha256WithRSAEncryption 3d:f5:cd:5e:1d:68:5e:2e:ef:0a:21:2a:7e:79:2c:b1:27:6e: e0:08:b9:14:32:06:f4:f9:96:7e:0a:02:0f:65:10:ab:72:79: a1:97:23:8f:cd:b6:dc:2b:b0:29:5f:b2:f5:54:f0:d4:e4:58: 72:a4:59:b8:23:23:a2:77:0b:3f:98:e7:8b:5e:31:81:4c:f3: e3:94:9e:6a:6a:c8:67:5f:b9:52:b9:0f:f5:fb:42:e7:81:5d: b5:14:02:38:39:c4:94:9f:87:97:5d:70:c4:34:0f:b1:b1:d0: e9:05:32:b0:6a:53:5b:d9:95:92:03:b5:ed:97:c5:0c:82:5f: 78:db:2f:39:01:41:08:ac:c2:21:a0:81:1d:76:65:4c:cc:fa: 32:b6:0a:9e:7e:81:fe:71:d8:6c:9b:05:bd:56:36:97:9a:15: 2f:d8:b0:2f:51:ae:ee:e8:e7:86:2b:89:bc:32:f7:83:c3:b0: 64:d7:f6:e0:95:8f:1a:81:c9:af:be:a2:c5:6d:e8:57:ca:1d: 2b:94:26:9a:59:99:70:63:af:35:7a:79:f7:61:6b:e1:19:59: 3a:53:73:a9:a0:37:69:7d:61:95:cb:a1:0f:07:d8:a0:9d:b5: f5:0f:4c:ae:07:f7:c4:20:03:55:65:e5:9b:9b:a4:cc:1a:29: b7:b1:9e:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKlH+mZdbl3aRxhVaWrbLF0M58AswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNTAwMDA0NVoX DTI1MDczMDIzNTk1OVowejFJMEcGA1UEBRNAMDU0MDk3MDZlMDU5MzliMWQ5YWFj ODViMWJkNDM2MDNhZDBiNDg0YjFmNjI4NzdlZDk5NmFiMWU5MjNhZjA2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKT/j0K2VoAFvket43oZ8ZlZiK84 2pSEfaCc/QucBPnIj6HP7vph+onWJ3kSyB0aY6KrHKifq9wKpzrgp83eidZwMlM5 E7/IMQbvmLt/n6HdbVUmypJjyCCN9ONpiHrdS/5KinZ65418THkZy5PVLkUtqeFc bdefviMLzOJPYooXbrTCBNapKYxGgfoaClxMVlsp039Z5S+E3mcMSFe0LMfmwAA8 6VdDWCUiA7AfBM6+QQ89Y97rSZ7VYnAAk0rzibQD0x73VcW2StpoIXtCH5yGNVfx /FuiIvCmTrm1NjcGaa7hoGM7NxcAhZZxOesZp2bICXbtr/yY3Rhs3MoqsQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDYABFNYNkRWeOgkRSBuW6DSLgLOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxODcwMDI0LThlZDQtNDE1MC1hMTA0LTUyZjRiOGM1NjgwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauCAwDQYJKoZIhvcNAQELBQADggEBAD31zV4daF4u7wohKn55 LLEnbuAIuRQyBvT5ln4KAg9lEKtyeaGXI4/NttwrsClfsvVU8NTkWHKkWbgjI6J3 Cz+Y54teMYFM8+OUnmpqyGdfuVK5D/X7QueBXbUUAjg5xJSfh5ddcMQ0D7Gx0OkF MrBqU1vZlZIDte2XxQyCX3jbLzkBQQiswiGggR12ZUzM+jK2Cp5+gf5x2GybBb1W NpeaFS/YsC9Rru7o54Yribwy94PDsGTX9uCVjxqBya++osVt6FfKHSuUJppZmXBj rzV6efdha+EZWTpTc6mgN2l9YZXLoQ8H2KCdtfUPTK4H98QgA1Vl5ZubpMwaKbex ngc= -----END CERTIFICATE-----Generated at Sun Jun 29 14:16:40 2025 by rpki-client