$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa File: 17401e4c-0efe-451f-8a30-4d161fbab45f.roa (raw, json) Hash identifier: 8+ZoVM4Try7BNSkjd0KhOMiq/T05Ze8NzWgVbYLzzS8= Subject key identifier: 05:C5:F5:40:E5:B9:16:C8:98:DC:E9:00:FF:71:9A:77:DF:27:CE:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 286FC91FB978473C74873548F0B07428CC8D4255 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa Signing time: Tue 10 Jun 2025 00:01:45 +0000 ROA not before: Tue 10 Jun 2025 00:01:45 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6f:c9:1f:b9:78:47:3c:74:87:35:48:f0:b0:74:28:cc:8d:42:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:01:45 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=faafe5b1d08e742aefbebe8e279eb6cd5368192fdf0e1f00ddbe009ac8646a56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:6a:4c:53:c8:a2:12:aa:55:19:76:c7:1a: d7:e7:12:a7:d0:99:09:a2:3e:88:4e:3f:2d:dd:18: 74:c3:e4:f2:c3:52:2a:57:91:0b:4a:bf:33:55:b6: 20:79:dc:7d:63:06:77:db:35:b0:7b:f0:c5:29:8f: d7:7b:be:c7:eb:bf:2f:b8:fb:e4:27:17:96:9b:d3: 9f:e2:32:e7:23:2b:46:b6:36:19:28:a4:93:28:f2: 5b:76:21:e0:30:40:91:b1:7c:f6:c4:40:69:e6:4c: 1f:68:44:df:80:fe:d7:53:9f:83:40:ea:cd:9c:de: e9:17:42:a4:e5:37:5d:d9:e2:66:81:0d:f1:48:bc: 33:8a:be:89:66:42:38:c2:60:e1:b1:4b:c0:bb:c0: fe:d0:57:33:63:f3:22:1c:76:dc:0a:3d:da:a5:6c: dd:6a:6c:23:85:41:1f:8a:6b:bf:45:13:cc:ea:cb: 09:98:a4:d6:0e:c0:45:cc:cc:b8:8b:52:6a:7f:d8: 0a:03:a3:83:f1:09:c7:2f:88:89:d8:6c:a7:77:70: 73:d7:76:a4:02:4c:36:52:a6:7d:f2:f0:27:44:3b: d3:7d:6e:15:26:17:7e:2b:d9:d9:55:69:09:32:06: 64:23:cf:b8:c5:11:5e:74:7a:45:52:ad:62:76:a9: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:F5:40:E5:B9:16:C8:98:DC:E9:00:FF:71:9A:77:DF:27:CE:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4080::/46 Signature Algorithm: sha256WithRSAEncryption 13:11:c9:73:32:11:7e:1b:d6:02:aa:60:42:4f:b9:90:2c:9e: 46:3f:e5:c0:2c:87:7d:f1:a6:a9:91:2e:e3:30:87:f4:07:57: f1:68:04:8b:bb:37:1f:42:51:76:6e:63:e4:7e:8b:5b:5e:4d: c7:dd:47:da:49:24:d0:e1:ec:35:ff:0c:f3:30:05:9c:9a:7b: 91:81:1b:b7:9c:31:b1:62:ed:08:98:62:ef:12:96:ac:6a:8a: 7e:d0:88:35:5e:58:a6:ca:4a:b9:79:fa:d0:eb:54:3e:d6:96: 07:f6:30:2e:ad:b4:08:e2:77:6b:82:7b:8f:d7:cb:0e:0e:69: b6:69:9d:d8:c6:65:7d:92:89:2c:f8:a0:8d:19:57:b3:39:3a: b5:d0:a9:6e:05:2e:37:ba:44:5b:40:52:0b:0a:2e:f4:ec:6a: 90:22:81:4e:ab:f0:58:ce:0d:e7:53:1d:66:bb:0d:12:1b:73: 4e:0f:3d:18:c0:c1:74:93:99:d7:2a:b5:6b:13:c5:4c:7e:e2: 1b:f2:a5:2c:6f:47:0c:06:5c:31:a4:96:d3:c2:e2:5f:20:d1: 3b:d8:85:9c:f7:50:3b:c7:a0:57:39:33:cc:82:2f:12:99:13: a7:1e:0d:a1:8c:b5:ec:01:02:22:36:b2:12:12:b9:f0:7a:b2: 26:ed:49:25 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKG/JH7l4Rzx0hzVI8LB0KMyNQlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMDE0NVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZmFhZmU1YjFkMDhlNzQyYWVmYmVi ZThlMjc5ZWI2Y2Q1MzY4MTkyZmRmMGUxZjAwZGRiZTAwOWFjODY0NmE1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy9qTFPIohKqVRl2xxrX5xKn0JkJ oj6ITj8t3Rh0w+Tyw1IqV5ELSr8zVbYgedx9YwZ32zWwe/DFKY/Xe77H678vuPvk JxeWm9Of4jLnIytGtjYZKKSTKPJbdiHgMECRsXz2xEBp5kwfaETfgP7XU5+DQOrN nN7pF0Kk5Tdd2eJmgQ3xSLwzir6JZkI4wmDhsUvAu8D+0FczY/MiHHbcCj3apWzd amwjhUEfimu/RRPM6ssJmKTWDsBFzMy4i1Jqf9gKA6OD8QnHL4iJ2Gynd3Bz13ak Akw2UqZ98vAnRDvTfW4VJhd+K9nZVWkJMgZkI8+4xRFedHpFUq1idqlakQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAXF9UDluRbImNzpAP9xmnffJ85BMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3NDAxZTRjLTBlZmUtNDUxZi04YTMwLTRkMTYxZmJhYjQ1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba90CAMA0GCSqGSIb3DQEBCwUAA4IBAQATEclzMhF+G9YCqmBC T7mQLJ5GP+XALId98aapkS7jMIf0B1fxaASLuzcfQlF2bmPkfotbXk3H3UfaSSTQ 4ew1/wzzMAWcmnuRgRu3nDGxYu0ImGLvEpasaop+0Ig1Xlimykq5efrQ61Q+1pYH 9jAurbQI4ndrgnuP18sODmm2aZ3YxmV9koks+KCNGVezOTq10KluBS43ukRbQFIL Ci707GqQIoFOq/BYzg3nUx1muw0SG3NODz0YwMF0k5nXKrVrE8VMfuIb8qUsb0cM BlwxpJbTwuJfINE72IWc91A7x6BXOTPMgi8SmROnHg2hjLXsAQIiNrISErnwerIm 7Ukl -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:14 2025 by rpki-client