$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa File: 206f10d0-0840-46e9-be47-09127e97b837.roa (raw, json) Hash identifier: DEZDNSy29IT57KIP5fGeyjbFIAilTkkckpsKWRQ9vvc= Subject key identifier: 80:FC:AF:2E:0E:77:8C:33:E1:07:69:1F:63:3F:ED:B7:88:D3:0F:A1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BE3BE3A6F046B792BCF572DA0419180FD87DD2E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa Signing time: Sat 07 Jun 2025 00:11:47 +0000 ROA not before: Sat 07 Jun 2025 00:11:47 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e3:be:3a:6f:04:6b:79:2b:cf:57:2d:a0:41:91:80:fd:87:dd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:11:47 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=aea6670d1ea81ecbab5ad94ad975743166d00ba2f4a9742e84cb40308f2bb3f7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:7d:9e:15:bb:3a:bb:b2:7e:24:c4:1f:ea: 35:f0:9b:71:95:1d:1d:45:12:3f:e9:b6:4a:97:2d: 8a:c5:63:b5:93:7a:d8:37:81:19:42:5e:fc:13:4b: a1:c5:72:40:0f:92:ed:2e:fd:05:e8:30:7e:87:dd: b1:d1:94:2c:c6:48:59:bf:46:e9:a5:1f:2f:4d:48: ce:9a:d9:2d:24:04:de:8e:b9:6b:e0:81:d9:55:a2: b1:35:72:53:86:98:1f:35:ce:87:76:cb:9c:b5:78: 9b:01:b9:70:02:86:6a:09:c5:9e:8a:f3:6d:84:29: ae:82:24:6d:eb:57:dc:b4:63:15:3f:b9:d6:83:d3: 73:32:9e:fa:7f:6f:4b:76:14:f8:9a:d2:06:57:69: 1f:39:33:70:4e:38:86:5b:2e:4a:bc:c0:64:f5:ee: 60:72:c2:b7:c8:b3:d8:04:21:40:ca:22:5e:24:93: 1b:8a:a0:9a:dc:7c:6c:11:2b:e9:bc:b8:b6:c8:20: e5:d7:ed:8c:7a:95:7f:39:0c:bb:21:31:e5:f3:9d: 31:22:0a:81:27:86:a4:c5:d0:3b:f5:01:39:41:b3: ce:80:ac:5e:62:5f:87:48:cc:2c:68:4b:ea:92:7c: 88:8a:55:02:69:b5:60:a7:b6:4b:7c:c6:40:b6:55: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:AF:2E:0E:77:8C:33:E1:07:69:1F:63:3F:ED:B7:88:D3:0F:A1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:70c0::/48 Signature Algorithm: sha256WithRSAEncryption b7:b0:f4:49:43:4e:90:4c:2a:35:e0:a8:30:8a:01:64:e3:63: 73:06:31:5e:e8:15:3d:19:6a:94:30:a4:5a:11:70:f6:76:9c: bb:b7:6e:d7:fa:84:9e:9b:95:db:d3:bf:2d:9e:3a:34:d4:fd: fd:2a:f2:1e:7c:a1:6c:36:44:fc:a8:78:76:26:c8:bb:df:d9: 27:0d:ba:24:d1:88:98:e5:fc:ce:67:59:c2:c4:30:55:35:95: c3:48:33:c8:3c:02:ff:c6:e3:21:ce:d1:1a:3d:0b:f0:2e:bb: f6:99:80:89:f1:2b:06:4b:22:b0:76:3e:92:2b:6b:13:de:50: 6f:67:56:d3:37:b3:54:31:23:44:94:ca:8b:43:da:93:d1:30: 49:e8:c3:77:f3:68:cb:13:2b:5f:4f:8e:68:e0:05:92:5c:dc: 7e:95:55:ea:14:c7:76:40:41:dc:fa:e7:00:db:4b:e9:56:78: 45:aa:13:b6:fd:cf:82:42:b7:45:95:5f:38:ff:cd:1f:95:fb: de:e3:82:76:b0:85:fa:57:38:d8:92:8a:d2:84:c0:51:b4:13: 7e:1d:a3:1e:9e:9d:8b:25:c8:11:a9:52:b5:5d:e8:06:8f:2f: fd:30:63:1e:dc:83:8c:cd:19:af:69:99:f6:b4:bf:61:93:78: 8b:fd:db:6d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUC+O+Om8Ea3krz1ctoEGRgP2H3S4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMTE0N1oX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAYWVhNjY3MGQxZWE4MWVjYmFiNWFk OTRhZDk3NTc0MzE2NmQwMGJhMmY0YTk3NDJlODRjYjQwMzA4ZjJiYjNmNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rJ9nhW7OruyfiTEH+o18JtxlR0d RRI/6bZKly2KxWO1k3rYN4EZQl78E0uhxXJAD5LtLv0F6DB+h92x0ZQsxkhZv0bp pR8vTUjOmtktJATejrlr4IHZVaKxNXJThpgfNc6HdsuctXibAblwAoZqCcWeivNt hCmugiRt61fctGMVP7nWg9NzMp76f29LdhT4mtIGV2kfOTNwTjiGWy5KvMBk9e5g csK3yLPYBCFAyiJeJJMbiqCa3HxsESvpvLi2yCDl1+2MepV/OQy7ITHl850xIgqB J4akxdA79QE5QbPOgKxeYl+HSMwsaEvqknyIilUCabVgp7ZLfMZAtlWX9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFID8ry4Od4wz4QdpH2M/7beI0w+hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNmYxMGQwLTA4NDAtNDZlOS1iZTQ3LTA5MTI3ZTk3YjgzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8nDAMA0GCSqGSIb3DQEBCwUAA4IBAQC3sPRJQ06QTCo14Kgw igFk42NzBjFe6BU9GWqUMKRaEXD2dpy7t27X+oSem5Xb078tnjo01P39KvIefKFs NkT8qHh2Jsi739knDbok0YiY5fzOZ1nCxDBVNZXDSDPIPAL/xuMhztEaPQvwLrv2 mYCJ8SsGSyKwdj6SK2sT3lBvZ1bTN7NUMSNElMqLQ9qT0TBJ6MN382jLEytfT45o 4AWSXNx+lVXqFMd2QEHc+ucA20vpVnhFqhO2/c+CQrdFlV84/80flfve44J2sIX6 VzjYkorShMBRtBN+HaMenp2LJcgRqVK1XegGjy/9MGMe3IOMzRmvaZn2tL9hk3iL /dtt -----END CERTIFICATE-----Generated at Sat Jun 14 06:42:28 2025 by rpki-client