$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08d6a815-c62c-48d3-872d-9a2734403bca.roa File: 08d6a815-c62c-48d3-872d-9a2734403bca.roa (raw, json) Hash identifier: RH+YM4iCYcUVtuB6E8crqCAwcN5KRG2OaEvGTuXCiKs= Subject key identifier: 7D:E6:27:12:46:7B:50:18:D8:D4:27:46:23:14:74:BF:35:C6:38:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 54C28384262471AB4332D992A8118292C5182FB5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08d6a815-c62c-48d3-872d-9a2734403bca.roa Signing time: Mon 09 Jun 2025 15:20:09 +0000 ROA not before: Mon 09 Jun 2025 15:20:09 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c2:83:84:26:24:71:ab:43:32:d9:92:a8:11:82:92:c5:18:2f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:20:09 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=75bb9e9979c8323bd257a20da2e8bde31f1bad5c46abb4be5884bf081f295395, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:4a:89:b0:4a:05:9e:c8:c0:da:a8:0a:d9: 4d:94:bd:4a:ec:6b:f8:fe:50:f0:a7:1f:ac:42:36: 74:2e:d9:36:2b:18:b4:5e:d8:d3:21:80:b9:17:d5: 55:3e:93:64:f7:78:17:d0:7b:64:34:9f:cb:a1:a6: 0c:6d:41:fb:91:05:bc:0c:29:fe:4b:a3:db:64:0d: 5a:a2:74:0e:3c:b9:5f:f0:22:d8:d4:34:93:7b:37: db:c5:8b:b2:32:aa:87:af:4d:15:33:1f:bf:79:ec: 3b:82:51:8c:68:86:6c:6c:a8:c7:1f:e4:49:46:45: 8f:d3:db:7f:42:cd:9d:a2:86:03:2a:61:2f:6d:7d: eb:1b:25:6e:2b:6a:01:9c:85:40:ed:b4:53:a6:f0: 34:b6:84:09:66:cd:53:0c:07:ea:56:0c:eb:c3:31: e3:20:0a:8b:a4:8d:1c:1a:c6:7f:ef:88:e7:fc:23: 31:24:cc:49:5e:e8:b7:e1:a4:37:2c:ac:75:e7:36: e7:ed:78:ac:4d:d0:91:38:f7:01:36:f6:3b:b0:38: 62:ca:90:11:1b:6e:8e:7a:9f:64:a1:3b:4d:58:f4: 01:65:3a:a0:36:bf:f3:1f:ed:7b:bf:fc:96:73:75: 7c:f3:46:db:74:30:58:b1:39:25:f2:d1:cd:d7:44: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:27:12:46:7B:50:18:D8:D4:27:46:23:14:74:BF:35:C6:38:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08d6a815-c62c-48d3-872d-9a2734403bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4060::/48 Signature Algorithm: sha256WithRSAEncryption b7:ae:1c:e2:bf:2c:e6:68:29:fc:fd:89:ba:51:73:1b:e7:c7: 82:50:4d:63:ec:66:da:88:79:f1:8a:24:a5:28:7c:15:b6:36: a2:8a:eb:ee:ac:df:87:05:72:8f:e2:0b:2d:d3:1e:ce:fe:c7: 25:80:56:73:ff:01:99:05:f8:4b:62:81:81:e9:d8:32:e2:fa: bf:d6:94:2a:f9:06:8d:ec:41:c3:a4:96:7d:62:9b:af:68:01: 5b:34:cd:2b:0b:47:fa:6e:e3:bc:b6:b5:e3:0b:60:69:6c:4b: 50:b3:98:2b:ad:5a:e9:d4:f7:0f:4f:2a:74:6f:91:6c:ed:08: 2a:8b:a1:c5:77:15:03:31:90:24:93:b9:ec:2f:ee:93:5e:f5: 60:60:78:a5:c6:78:ba:34:30:d3:a6:40:f3:f1:15:a9:c1:0f: b8:4c:0b:10:d6:49:b2:a5:75:15:cd:a0:5b:ae:84:07:71:cf: de:52:18:c0:d7:90:97:71:c6:bd:60:ca:f0:4f:4f:c3:cb:69: 1d:a5:55:cd:52:76:b3:6a:7a:79:c6:c7:cb:66:42:3a:f4:1f: 70:7f:a7:54:d6:88:19:d7:26:79:a0:71:c7:2f:1d:81:e7:62: a4:80:7c:ae:6c:62:3e:32:9a:36:48:42:cd:86:17:42:dc:e4: 2f:6f:e4:3d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVMKDhCYkcatDMtmSqBGCksUYL7UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjAwOVoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANzViYjllOTk3OWM4MzIzYmQyNTdh MjBkYTJlOGJkZTMxZjFiYWQ1YzQ2YWJiNGJlNTg4NGJmMDgxZjI5NTM5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5KibBKBZ7IwNqoCtlNlL1K7Gv4 /lDwpx+sQjZ0Ltk2Kxi0XtjTIYC5F9VVPpNk93gX0HtkNJ/LoaYMbUH7kQW8DCn+ S6PbZA1aonQOPLlf8CLY1DSTezfbxYuyMqqHr00VMx+/eew7glGMaIZsbKjHH+RJ RkWP09t/Qs2dooYDKmEvbX3rGyVuK2oBnIVA7bRTpvA0toQJZs1TDAfqVgzrwzHj IAqLpI0cGsZ/74jn/CMxJMxJXui34aQ3LKx15zbn7XisTdCROPcBNvY7sDhiypAR G26Oep9koTtNWPQBZTqgNr/zH+17v/yWc3V880bbdDBYsTkl8tHN10THKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH3mJxJGe1AY2NQnRiMUdL81xjhTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4ZDZhODE1LWM2MmMtNDhkMy04NzJkLTlhMjczNDQwM2JjYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BgMA0GCSqGSIb3DQEBCwUAA4IBAQC3rhzivyzmaCn8/Ym6 UXMb58eCUE1j7GbaiHnxiiSlKHwVtjaiiuvurN+HBXKP4gst0x7O/sclgFZz/wGZ BfhLYoGB6dgy4vq/1pQq+QaN7EHDpJZ9YpuvaAFbNM0rC0f6buO8trXjC2BpbEtQ s5grrVrp1PcPTyp0b5Fs7Qgqi6HFdxUDMZAkk7nsL+6TXvVgYHilxni6NDDTpkDz 8RWpwQ+4TAsQ1kmypXUVzaBbroQHcc/eUhjA15CXcca9YMrwT0/Dy2kdpVXNUnaz anp5xsfLZkI69B9wf6dU1ogZ1yZ5oHHHLx2B52KkgHyubGI+Mpo2SELNhhdC3OQv b+Q9 -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:11 2025 by rpki-client