$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d57e8e3c-8605-46f3-8465-e0a444cd661d.roa File: d57e8e3c-8605-46f3-8465-e0a444cd661d.roa (raw, json) Hash identifier: jRn4LXRt7PmIAZbkMu70pKL9gNM7IL4MvKIvGtG3pZE= Subject key identifier: DA:FF:E6:33:18:51:6A:EB:E4:8C:C5:35:18:E8:82:3D:A5:00:F5:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5344DFD883257FDE07D5F8D87CC20B0B57D9F0AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d57e8e3c-8605-46f3-8465-e0a444cd661d.roa Signing time: Tue 17 Jun 2025 00:00:16 +0000 ROA not before: Tue 17 Jun 2025 00:00:16 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:44:df:d8:83:25:7f:de:07:d5:f8:d8:7c:c2:0b:0b:57:d9:f0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:00:16 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=77e3369115c28514e60ecf474efa8a5ab9c7fd2ffaa0db376cd794a3c83f1687, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:a4:f0:b6:63:66:39:7b:eb:a3:e8:cb:9b: d1:8f:a7:fd:6f:a1:b4:68:99:a6:32:cc:ca:97:29: 59:e2:32:09:be:1b:97:47:ef:12:3c:35:47:47:b6: 93:ef:11:97:43:21:93:79:8d:df:a1:28:8d:ab:38: 62:95:99:89:f6:e8:be:04:2c:fd:c0:3f:26:3f:37: 45:bd:75:c6:7b:0c:50:ac:fd:97:e1:46:fa:32:5a: 3e:11:af:41:7b:3a:b6:94:a4:d2:b9:41:77:e3:72: 41:5a:80:17:46:c2:77:d2:0f:9d:95:25:96:0b:86: 8c:6d:51:61:56:f9:47:06:c1:43:8a:8e:21:dd:df: c3:b0:a7:84:fe:eb:34:45:41:58:96:5a:1e:79:21: 44:d1:ec:8b:97:6e:13:cc:ad:5c:fe:45:51:52:26: 4e:8d:4b:d4:0d:13:a8:c1:bd:63:13:4e:74:fa:7d: 7e:85:eb:65:c4:1d:44:7c:1f:b4:29:a5:7c:84:1c: 42:4d:a2:66:6a:60:bd:96:82:b4:52:86:40:1b:5d: 2e:12:ca:6b:59:9b:90:0f:eb:2a:f0:69:85:5f:b0: cf:8d:70:f8:72:58:bc:13:a3:4a:73:06:19:d2:7e: 26:f1:0e:8c:10:e2:9a:80:fb:e3:ff:d8:53:e4:ed: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:E6:33:18:51:6A:EB:E4:8C:C5:35:18:E8:82:3D:A5:00:F5:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d57e8e3c-8605-46f3-8465-e0a444cd661d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:8800::/40 Signature Algorithm: sha256WithRSAEncryption 8b:1c:3d:08:91:08:2a:c6:fd:fb:b2:00:b7:e9:6e:84:a6:26: 75:ff:6c:31:fa:3f:ad:0b:a5:ca:b6:a4:f8:a7:76:4f:3e:13: 10:d7:cf:82:4d:f8:fe:d4:e2:ed:7e:95:4c:2d:ce:36:3e:65: 83:d8:33:8d:4f:0c:7a:60:6e:ec:07:0c:0b:15:4a:6a:9c:c8: c3:0a:5d:ee:31:cc:2f:70:f3:74:4a:5a:65:35:3e:45:21:97: 69:12:72:90:06:df:72:3f:0e:46:13:bd:e7:af:89:02:77:26: ec:43:42:18:d0:b1:a5:ac:e0:57:54:ff:49:80:7a:53:fd:02: b9:53:a8:fa:da:cb:90:45:16:a0:66:75:8f:d0:f9:df:db:6a: 07:91:51:62:d3:a5:80:87:b4:e7:2c:f1:d9:0b:3d:5c:bd:b5: 30:d6:f1:89:f3:95:45:0c:27:9c:a0:39:3c:7c:60:c8:09:7b: 5d:59:a6:86:5e:4f:29:f8:ed:79:4d:a1:ae:56:8c:55:6d:1b: 55:7c:ef:f7:fb:b6:2f:3e:a7:de:c1:ca:46:c4:49:c0:45:9b: 0d:96:08:b8:23:46:a2:1b:ec:b3:8d:4f:48:9f:ae:04:31:10: 55:a4:21:e8:db:95:01:08:12:3c:8b:15:36:3b:d6:2f:23:46: 8f:f7:df:5e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU0Tf2IMlf94H1fjYfMILC1fZ8KowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDAxNloX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNANzdlMzM2OTExNWMyODUxNGU2MGVj ZjQ3NGVmYThhNWFiOWM3ZmQyZmZhYTBkYjM3NmNkNzk0YTNjODNmMTY4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rik8LZjZjl766Poy5vRj6f9b6G0 aJmmMszKlylZ4jIJvhuXR+8SPDVHR7aT7xGXQyGTeY3foSiNqzhilZmJ9ui+BCz9 wD8mPzdFvXXGewxQrP2X4Ub6Mlo+Ea9Bezq2lKTSuUF343JBWoAXRsJ30g+dlSWW C4aMbVFhVvlHBsFDio4h3d/DsKeE/us0RUFYlloeeSFE0eyLl24TzK1c/kVRUiZO jUvUDROowb1jE050+n1+hetlxB1EfB+0KaV8hBxCTaJmamC9loK0UoZAG10uEspr WZuQD+sq8GmFX7DPjXD4cli8E6NKcwYZ0n4m8Q6MEOKagPvj/9hT5O0EPQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNr/5jMYUWrr5IzFNRjogj2lAPU+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1N2U4ZTNjLTg2MDUtNDZmMy04NDY1LWUwYTQ0NGNkNjYxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaIgwDQYJKoZIhvcNAQELBQADggEBAIscPQiRCCrG/fuyALfp boSmJnX/bDH6P60Lpcq2pPindk8+ExDXz4JN+P7U4u1+lUwtzjY+ZYPYM41PDHpg buwHDAsVSmqcyMMKXe4xzC9w83RKWmU1PkUhl2kScpAG33I/DkYTveeviQJ3JuxD QhjQsaWs4FdU/0mAelP9ArlTqPray5BFFqBmdY/Q+d/bageRUWLTpYCHtOcs8dkL PVy9tTDW8YnzlUUMJ5ygOTx8YMgJe11ZpoZeTyn47XlNoa5WjFVtG1V87/f7ti8+ p97BykbEScBFmw2WCLgjRqIb7LONT0ifrgQxEFWkIejblQEIEjyLFTY71i8jRo/3 314= -----END CERTIFICATE-----Generated at Mon Jun 30 12:23:31 2025 by rpki-client