$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa File: f79388ce-7d40-4e2d-99a2-f64918866a6d.roa (raw, json) Hash identifier: lc9kTsH+W+qxIo5sXFTe1a9D1DOfAlrgGCIEhJxxO7I= Subject key identifier: BE:E0:94:97:C3:D7:E8:A1:52:14:4E:1F:DE:1B:20:80:97:8C:49:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D9670B1B4A5588C54980629FE019C8CF9EB50D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa Signing time: Mon 28 Apr 2025 15:00:12 +0000 ROA not before: Mon 28 Apr 2025 15:00:12 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:96:70:b1:b4:a5:58:8c:54:98:06:29:fe:01:9c:8c:f9:eb:50:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 28 15:00:12 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=46eb8e0494095d792355f69fc10876fbe04cc2d82c27e104566e0a8c40f98c37, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cf:c9:d0:5f:b0:41:48:65:14:a7:05:9f:3b: d6:dd:90:83:ea:45:68:56:13:5e:09:cd:33:bb:91: 30:f4:a9:3a:84:8d:b7:9b:8b:12:b7:22:f1:71:07: ed:5c:9b:da:1f:2d:4c:9f:e9:1a:00:8c:c5:10:c1: 0a:5d:25:ed:9c:bf:a0:44:25:11:d8:63:2c:4b:80: 5f:29:5c:ef:5c:74:f9:e8:c8:cb:e9:19:b4:b8:58: e4:aa:34:5e:d0:9f:c2:81:61:2d:69:43:3e:a4:20: 55:81:08:42:76:8a:fa:38:a6:e1:b4:39:5e:a9:aa: b9:59:b0:37:80:ab:39:48:f8:3b:e1:3b:02:66:55: c5:f4:9f:0b:ee:c1:40:62:c1:ad:6b:c5:6a:d6:32: d8:71:0e:7f:2f:df:8d:2e:6f:23:3a:f2:81:25:11: e7:14:29:5c:71:a8:7f:46:d9:9d:cb:9e:f1:77:c2: 51:f9:0b:8a:2a:4b:44:68:ee:47:65:0f:bf:60:7c: 00:ab:84:40:b7:75:f8:1a:cd:1c:9e:19:21:04:97: f1:70:c8:a7:fe:f2:b5:44:d6:4e:30:25:bf:9d:df: e9:47:45:52:43:9d:c5:a3:ed:20:50:aa:42:41:23: aa:33:d7:30:be:39:26:eb:75:8c:22:5b:de:91:38: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:94:97:C3:D7:E8:A1:52:14:4E:1F:DE:1B:20:80:97:8C:49:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:7000::/40 Signature Algorithm: sha256WithRSAEncryption ba:52:dc:1d:a0:2a:68:eb:c6:23:bf:02:3c:c8:a5:b7:af:45: 2d:aa:a6:07:ea:f0:f0:13:b3:59:f5:09:29:04:35:46:c6:ac: ab:f4:a2:34:5e:f5:73:67:2d:91:87:c2:a6:87:71:ee:e2:f4: 94:02:4c:ad:aa:4c:b3:e4:6e:74:c8:99:32:c8:ab:5f:5a:b0: ea:3c:82:d1:3e:be:6d:06:bc:bc:30:00:21:f8:4f:bb:79:ec: 75:59:41:a9:31:6e:58:27:f3:be:20:ec:26:e4:fe:bc:81:ec: f8:04:c0:73:34:1e:f3:e3:4d:32:22:f8:6b:52:c9:45:42:09: 6d:77:c4:32:fc:29:73:7d:0c:ff:8a:77:d3:85:03:c0:64:5e: 68:e2:cd:34:67:c3:9a:02:7d:83:15:bd:1d:3b:4a:d5:b8:a0: f3:43:b6:76:0b:94:7c:09:fc:82:41:2b:ef:76:6d:24:cb:8b: 58:13:ca:d2:5f:08:24:bc:1a:b7:71:58:54:eb:ea:d6:30:92: ca:33:11:2c:02:87:fb:64:4e:2c:50:57:4d:0d:35:48:fe:97: 04:17:2b:70:9e:90:39:40:e8:47:fa:70:87:fc:c9:30:74:14: fe:76:ef:12:6f:ba:4a:d1:83:45:27:65:a2:80:5d:29:a0:27: 5b:1f:69:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHZZwsbSlWIxUmAYp/gGcjPnrUNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyODE1MDAxMloX DTI1MDYwMjIzNTk1OVowejFJMEcGA1UEBRNANDZlYjhlMDQ5NDA5NWQ3OTIzNTVm NjlmYzEwODc2ZmJlMDRjYzJkODJjMjdlMTA0NTY2ZTBhOGM0MGY5OGMzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8M/J0F+wQUhlFKcFnzvW3ZCD6kVo VhNeCc0zu5Ew9Kk6hI23m4sStyLxcQftXJvaHy1Mn+kaAIzFEMEKXSXtnL+gRCUR 2GMsS4BfKVzvXHT56MjL6Rm0uFjkqjRe0J/CgWEtaUM+pCBVgQhCdor6OKbhtDle qaq5WbA3gKs5SPg74TsCZlXF9J8L7sFAYsGta8Vq1jLYcQ5/L9+NLm8jOvKBJRHn FClccah/Rtmdy57xd8JR+QuKKktEaO5HZQ+/YHwAq4RAt3X4Gs0cnhkhBJfxcMin /vK1RNZOMCW/nd/pR0VSQ53Fo+0gUKpCQSOqM9cwvjkm63WMIlvekTh5RQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL7glJfD1+ihUhROH94bIICXjEldMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3OTM4OGNlLTdkNDAtNGUyZC05OWEyLWY2NDkxODg2NmE2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba73AwDQYJKoZIhvcNAQELBQADggEBALpS3B2gKmjrxiO/AjzI pbevRS2qpgfq8PATs1n1CSkENUbGrKv0ojRe9XNnLZGHwqaHce7i9JQCTK2qTLPk bnTImTLIq19asOo8gtE+vm0GvLwwACH4T7t57HVZQakxblgn874g7Cbk/ryB7PgE wHM0HvPjTTIi+GtSyUVCCW13xDL8KXN9DP+Kd9OFA8BkXmjizTRnw5oCfYMVvR07 StW4oPNDtnYLlHwJ/IJBK+92bSTLi1gTytJfCCS8GrdxWFTr6tYwksozESwCh/tk TixQV00NNUj+lwQXK3CekDlA6Ef6cIf8yTB0FP527xJvukrRg0UnZaKAXSmgJ1sf afU= -----END CERTIFICATE-----Generated at Tue May 6 15:53:32 2025 by rpki-client