$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa File: eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa (raw, json) Hash identifier: nFEp3I0GbxjVR0/Rt0sJWkt44OTx2XBVt/Zsxbb+o/E= Subject key identifier: AF:53:DC:9B:2D:D5:11:55:B7:F2:F6:FA:97:11:6E:E9:FC:5D:6E:03 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F5BAEB653E5BE1D5C4C829B7B347AD35FE9D874 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa Signing time: Tue 17 Jun 2025 00:00:01 +0000 ROA not before: Tue 17 Jun 2025 00:00:01 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5b:ae:b6:53:e5:be:1d:5c:4c:82:9b:7b:34:7a:d3:5f:e9:d8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:00:01 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=3cda0d393f5345ebe8f797e15ab7ecfe5c9a450e3d5451ea1abb807b1ff8d59c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:08:44:09:3a:37:e0:5f:56:fd:8f:08:d0: 68:73:15:5f:59:4b:1d:20:02:37:a7:2e:49:94:56: 48:b7:d5:e4:cb:e2:5b:ac:06:d6:8e:c3:80:b3:7a: 70:8b:d3:4f:b6:5b:fb:b7:4e:79:8c:1a:cf:93:f2: 2d:f1:a2:87:4a:c4:b0:da:ba:fe:1d:88:da:fb:85: f3:16:d1:60:7d:95:89:9f:71:76:5e:82:36:d1:e0: 36:55:87:1a:93:f7:e1:5e:bf:db:6f:f8:9e:44:81: 7c:e4:82:cc:c5:11:ba:a3:17:97:1d:95:c6:bf:21: a3:51:e1:9d:11:f0:fc:10:ca:bd:ef:1f:aa:b4:7f: 72:19:13:8f:d1:90:0d:b2:27:37:e2:ea:d0:ed:5b: c2:0b:f9:7e:fa:72:0a:3a:97:2f:3a:65:c7:51:b4: 1c:3f:fd:f5:7c:9d:46:0a:2b:9d:28:e3:af:bb:60: fc:ea:2e:ae:7b:e7:ab:29:3c:ab:3a:7b:36:47:f8: 5e:f7:b0:37:37:93:fb:f4:4f:3b:84:95:65:18:2b: 23:b0:6b:58:53:be:63:30:b5:21:ef:c1:1d:f4:72: 07:f8:26:71:a6:5e:65:38:de:7a:a2:59:ae:7e:e7: 65:b0:d6:cf:1b:e0:18:93:55:37:62:8e:29:4a:f5: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:53:DC:9B:2D:D5:11:55:B7:F2:F6:FA:97:11:6E:E9:FC:5D:6E:03 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:8000::/40 Signature Algorithm: sha256WithRSAEncryption 44:de:98:02:1d:98:0d:f6:74:9a:72:04:ae:1b:11:88:71:63: d6:b6:2d:f8:61:15:b9:bd:7c:4f:62:02:3c:09:d5:01:53:6c: d6:0d:4b:30:55:74:fd:b2:cd:22:20:76:e6:7a:92:97:e2:50: e6:28:39:88:af:3c:ba:8c:42:04:c1:44:3c:83:7c:30:c9:b7: cd:1c:2b:c9:6b:a4:02:4a:f3:28:92:ae:ba:ed:f1:ed:5b:27: 79:83:b5:48:aa:17:52:c9:a5:ff:f5:e3:a6:94:d8:eb:60:c3: a7:d4:63:42:73:2c:99:ac:71:16:02:f1:91:f3:40:31:7a:17: d7:96:e1:b2:3f:d1:28:e0:ed:ce:5a:d2:35:98:c4:52:6d:ce: 19:20:7b:19:08:a9:cd:df:de:53:aa:f8:a8:28:a2:0d:22:d7: b4:ec:0f:51:c9:cd:c3:83:4c:15:13:6b:8b:04:ec:8e:a1:f3: 0b:95:d5:97:95:7b:7a:18:f2:7c:59:6f:6c:c6:03:73:d1:cc: 0b:06:5e:cb:0b:2d:6a:e6:4a:2a:44:80:c9:e5:66:f4:f4:47: 7e:64:a0:37:d9:36:cf:50:02:08:a4:ad:d3:9d:e3:53:23:f8: 3d:33:67:68:a0:04:2f:f1:89:a6:ae:99:f5:83:ce:92:e5:e4: 63:8a:23:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH1uutlPlvh1cTIKbezR601/p2HQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDAwMVoX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAM2NkYTBkMzkzZjUzNDVlYmU4Zjc5 N2UxNWFiN2VjZmU1YzlhNDUwZTNkNTQ1MWVhMWFiYjgwN2IxZmY4ZDU5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1UIRAk6N+BfVv2PCNBocxVfWUsd IAI3py5JlFZIt9Xky+JbrAbWjsOAs3pwi9NPtlv7t055jBrPk/It8aKHSsSw2rr+ HYja+4XzFtFgfZWJn3F2XoI20eA2VYcak/fhXr/bb/ieRIF85ILMxRG6oxeXHZXG vyGjUeGdEfD8EMq97x+qtH9yGROP0ZANsic34urQ7VvCC/l++nIKOpcvOmXHUbQc P/31fJ1GCiudKOOvu2D86i6ue+erKTyrOns2R/he97A3N5P79E87hJVlGCsjsGtY U75jMLUh78Ed9HIH+CZxpl5lON56olmufudlsNbPG+AYk1U3Yo4pSvXAnQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK9T3Jst1RFVt/L2+pcRbun8XW4DMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhYzNlYWY5LWQ4MzctNGY3Zi1iZGIyLTBkMmQzMTU4M2ZkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba74AwDQYJKoZIhvcNAQELBQADggEBAETemAIdmA32dJpyBK4b EYhxY9a2LfhhFbm9fE9iAjwJ1QFTbNYNSzBVdP2yzSIgduZ6kpfiUOYoOYivPLqM QgTBRDyDfDDJt80cK8lrpAJK8yiSrrrt8e1bJ3mDtUiqF1LJpf/146aU2Otgw6fU Y0JzLJmscRYC8ZHzQDF6F9eW4bI/0Sjg7c5a0jWYxFJtzhkgexkIqc3f3lOq+Kgo og0i17TsD1HJzcODTBUTa4sE7I6h8wuV1ZeVe3oY8nxZb2zGA3PRzAsGXssLLWrm SipEgMnlZvT0R35koDfZNs9QAgikrdOd41Mj+D0zZ2igBC/xiaaumfWDzpLl5GOK I30= -----END CERTIFICATE-----Generated at Sun Jun 29 01:23:14 2025 by rpki-client