$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa File: b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa (raw, json) Hash identifier: lxISIvq3AtYxwpuJvrnvFCRz4s/tQFWHfIOTzHt0cqE= Subject key identifier: 88:B3:D7:B5:42:73:81:CD:E1:D9:1C:02:B5:D5:9B:F9:A0:9E:9E:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CB41DA4CB8525B130EBF11D39CF33F5DC4355D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa Signing time: Mon 16 Jun 2025 15:00:11 +0000 ROA not before: Mon 16 Jun 2025 15:00:11 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b4:1d:a4:cb:85:25:b1:30:eb:f1:1d:39:cf:33:f5:dc:43:55:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 16 15:00:11 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=26e3ec73d88e37a21933b5e6db4654b4ac377754e7e081365b5991cc79a57b27, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:56:f9:e5:af:96:a3:82:74:9a:fc:d7:46: ab:4d:24:95:f4:d1:1f:b6:51:d1:b1:cf:a4:56:a5: 7a:9d:31:8b:ba:fc:e9:14:80:9d:8b:4f:8a:97:df: 7a:7e:f5:8e:b3:5b:b8:f8:55:a6:05:f6:69:0d:94: ab:a2:97:e8:60:9c:81:34:1f:c4:5c:8d:1f:f0:e5: 8e:aa:83:b7:ee:c2:51:d7:21:aa:f7:eb:47:03:e3: 3e:42:38:67:49:e2:ca:e0:df:38:44:7d:90:d1:21: f7:fe:2d:99:14:b9:92:1e:ea:c3:85:c9:be:aa:41: ad:24:23:fb:1b:9d:ba:fa:09:02:5a:7e:92:fc:6f: 28:51:f5:38:a3:39:d7:f4:2e:f9:df:fa:b1:fc:a4: 35:54:b3:fe:46:fa:4d:8e:03:d5:44:00:52:93:8b: 37:cc:99:69:8c:0f:58:39:50:46:0f:18:b6:b2:36: 38:84:fc:6a:58:e6:db:fb:8a:5e:9f:1d:0b:8a:08: 66:ef:ec:11:8e:3a:53:85:4b:06:54:98:18:32:8b: 53:25:fd:a3:b9:30:df:7f:3c:e1:32:be:50:fd:e8: 86:b7:e3:00:af:5f:8c:74:3a:11:4b:b4:d3:c0:10: c6:ac:c8:64:8e:e2:97:d1:5a:77:c0:4b:ea:7e:e0: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B3:D7:B5:42:73:81:CD:E1:D9:1C:02:B5:D5:9B:F9:A0:9E:9E:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:c800::/40 Signature Algorithm: sha256WithRSAEncryption 5f:ab:66:ed:3a:ac:ca:ed:e1:e9:65:99:e2:8e:4c:00:8c:ae: 28:83:17:85:d4:de:56:e4:65:42:18:d2:51:0b:fc:c6:b1:03: 61:42:09:9e:76:84:9b:ce:b4:83:64:8a:0e:af:9e:51:4a:05: 21:ea:0f:e0:3a:24:d3:b9:14:1a:80:8e:62:3c:ee:ef:99:fd: d4:3f:5e:77:d0:d3:fb:19:92:a1:40:89:6e:1a:99:b0:54:c8: 32:b2:f9:bd:fd:b0:7f:89:21:01:8a:e2:ae:3f:e0:8c:d8:ea: dc:8a:25:f4:ff:1e:0d:87:bb:40:1c:dd:f7:0e:a7:05:a9:40: 65:24:03:53:6a:b1:78:12:b5:5c:94:c4:fd:bf:e4:69:f1:e2: ef:2f:33:b8:e3:c8:c1:38:cf:a4:d1:84:b4:47:a5:0e:a1:5c: 17:2e:3b:41:52:aa:a4:f8:2d:45:e1:b3:45:6d:6b:b6:20:e1: 2a:57:a0:73:e1:01:5a:bc:6f:bc:f3:fe:9c:2e:d4:50:88:9a: 7b:8a:c2:2d:f6:cb:4b:4e:8e:23:9a:7b:84:60:80:5c:08:80: 9b:c4:c4:09:e3:08:c6:de:3a:09:95:de:01:b7:0e:8b:9a:f2: 97:f2:36:98:d5:ae:1d:00:95:80:36:c0:64:50:15:ec:4a:0b: 0c:4a:8f:c6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTLQdpMuFJbEw6/EdOc8z9dxDVdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNjE1MDAxMVoX DTI1MDcyMTIzNTk1OVowejFJMEcGA1UEBRNAMjZlM2VjNzNkODhlMzdhMjE5MzNi NWU2ZGI0NjU0YjRhYzM3Nzc1NGU3ZTA4MTM2NWI1OTkxY2M3OWE1N2IyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqNW+eWvlqOCdJr810arTSSV9NEf tlHRsc+kVqV6nTGLuvzpFICdi0+Kl996fvWOs1u4+FWmBfZpDZSropfoYJyBNB/E XI0f8OWOqoO37sJR1yGq9+tHA+M+QjhnSeLK4N84RH2Q0SH3/i2ZFLmSHurDhcm+ qkGtJCP7G526+gkCWn6S/G8oUfU4oznX9C753/qx/KQ1VLP+RvpNjgPVRABSk4s3 zJlpjA9YOVBGDxi2sjY4hPxqWObb+4penx0Lighm7+wRjjpThUsGVJgYMotTJf2j uTDffzzhMr5Q/eiGt+MAr1+MdDoRS7TTwBDGrMhkjuKX0Vp3wEvqfuCUgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIiz17VCc4HN4dkcArXVm/mgnp6oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I0NjU1MDI1LWY5YWMtNDRmZi1iZDFkLTBlNDQ4YWI2Nzc0ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7cgwDQYJKoZIhvcNAQELBQADggEBAF+rZu06rMrt4ellmeKO TACMriiDF4XU3lbkZUIY0lEL/MaxA2FCCZ52hJvOtINkig6vnlFKBSHqD+A6JNO5 FBqAjmI87u+Z/dQ/XnfQ0/sZkqFAiW4ambBUyDKy+b39sH+JIQGK4q4/4IzY6tyK JfT/Hg2Hu0Ac3fcOpwWpQGUkA1NqsXgStVyUxP2/5Gnx4u8vM7jjyME4z6TRhLRH pQ6hXBcuO0FSqqT4LUXhs0Vta7Yg4SpXoHPhAVq8b7zz/pwu1FCImnuKwi32y0tO jiOae4RggFwIgJvExAnjCMbeOgmV3gG3Doua8pfyNpjVrh0AlYA2wGRQFexKCwxK j8Y= -----END CERTIFICATE-----Generated at Sun Jun 29 04:29:36 2025 by rpki-client