$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa File: 24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa (raw, json) Hash identifier: ph9aC5biWQaUhOFeXyP7ZfixB1sgALMt87NDoSjo9dk= Subject key identifier: 70:46:3E:3C:6D:9C:AB:53:95:4A:53:19:1D:CE:0E:81:E3:68:3B:AD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2270A0231F014FC3FB199981376325B4683E7CF2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa Signing time: Fri 06 Jun 2025 00:00:19 +0000 ROA not before: Fri 06 Jun 2025 00:00:19 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:70:a0:23:1f:01:4f:c3:fb:19:99:81:37:63:25:b4:68:3e:7c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 6 00:00:19 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=611015ea5e31fbb433fe3b5586d10b4cd4b9c6850d16f440c0bbab82e06a078c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:a7:ab:fb:ff:6d:1e:c0:ff:df:63:93:98: d7:5f:51:4d:c2:a2:ce:f6:9c:28:85:0a:c3:a4:36: ca:65:5a:a6:d0:a2:18:b9:5d:37:17:42:9c:71:55: 6b:5d:d7:1e:0b:a7:6e:c8:0e:23:d0:71:f4:15:a9: 74:02:db:b0:8a:97:55:99:82:c3:c8:17:71:a8:3f: 56:fb:33:f1:56:77:d7:cc:16:e7:45:c6:5f:d7:14: 9f:76:3b:71:3e:15:a2:57:7a:80:a1:19:f6:28:34: 6e:17:b9:0f:60:22:95:71:f6:2b:41:11:fb:d7:47: 61:63:46:32:a1:39:a0:4a:c1:f0:fe:8f:b0:7c:3c: 74:4d:63:55:60:ac:be:1f:74:2f:8c:8d:d0:b8:a2: 38:da:c2:0d:f1:81:03:12:37:39:46:f5:6c:f1:ff: 66:2e:ba:b5:c4:d3:30:2b:eb:a9:5a:8a:ba:53:2f: 91:76:51:0a:ef:5a:0f:93:52:2c:43:10:cf:2d:ed: 28:4d:f3:03:f5:8a:7c:a4:24:38:42:4d:26:6e:20: 96:18:ac:c5:c0:48:88:83:41:f7:e9:d1:c5:05:ad: 72:99:95:bc:42:cf:45:27:6d:fe:af:ba:1e:b5:0e: 0a:d1:c6:53:d1:1d:e1:c0:d6:6f:cf:94:d1:3e:f2: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:3E:3C:6D:9C:AB:53:95:4A:53:19:1D:CE:0E:81:E3:68:3B:AD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/48 Signature Algorithm: sha256WithRSAEncryption 44:e3:ee:2a:ce:ce:a7:94:ee:80:b7:a9:1a:36:22:be:f4:38: 01:65:3f:93:30:22:c0:2e:60:b9:d5:e9:b4:6c:80:e1:79:6c: 6c:5d:bd:53:de:4c:e4:1a:74:c2:4d:24:d9:6f:4b:27:0d:55: 3d:95:bc:39:6e:23:99:00:49:62:2a:ea:48:da:79:01:5b:b9: c2:9a:bc:15:52:9d:20:a9:57:5c:4d:22:b0:99:aa:b7:13:cb: 1e:b2:ff:53:b4:dc:63:e7:d3:53:9e:8e:82:0c:64:5d:87:d6: 5f:6a:cf:56:33:70:2a:d3:b7:7d:dc:bb:af:46:f6:c0:79:ed: 5c:b1:9b:4c:89:a9:4d:3c:76:91:93:e6:31:cf:d7:4f:22:54: 2b:bd:2f:f3:3a:a8:82:11:8a:d0:82:fc:5f:e2:c5:4b:82:2a: 79:3a:6a:d5:bb:c3:cc:0e:8e:af:f0:65:b9:a7:44:a2:f1:9b: 58:cb:96:eb:76:29:71:10:b0:02:46:61:58:c2:f3:d3:f5:fe: 29:74:d6:e2:4d:0f:fd:23:ac:71:f1:85:a0:05:12:2e:80:7e: dd:e0:9d:31:5d:a5:79:f9:d9:13:02:e9:f8:91:bb:78:ef:ff: 4e:22:37:67:63:b2:24:60:d7:27:51:5d:0f:1e:7e:f0:bf:67: 68:d3:26:ad -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUInCgIx8BT8P7GZmBN2MltGg+fPIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNjAwMDAxOVoX DTI1MDcxMTIzNTk1OVowejFJMEcGA1UEBRNANjExMDE1ZWE1ZTMxZmJiNDMzZmUz YjU1ODZkMTBiNGNkNGI5YzY4NTBkMTZmNDQwYzBiYmFiODJlMDZhMDc4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnOnq/v/bR7A/99jk5jXX1FNwqLO 9pwohQrDpDbKZVqm0KIYuV03F0KccVVrXdceC6duyA4j0HH0Fal0AtuwipdVmYLD yBdxqD9W+zPxVnfXzBbnRcZf1xSfdjtxPhWiV3qAoRn2KDRuF7kPYCKVcfYrQRH7 10dhY0YyoTmgSsHw/o+wfDx0TWNVYKy+H3QvjI3QuKI42sIN8YEDEjc5RvVs8f9m Lrq1xNMwK+upWoq6Uy+RdlEK71oPk1IsQxDPLe0oTfMD9Yp8pCQ4Qk0mbiCWGKzF wEiIg0H36dHFBa1ymZW8Qs9FJ23+r7oetQ4K0cZT0R3hwNZvz5TRPvICYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHBGPjxtnKtTlUpTGR3ODoHjaDutMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0ZTJlMDI0LTRiZDMtNGY2Yi04NzRjLTBlZjdhNGNiZWJjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9uAAMA0GCSqGSIb3DQEBCwUAA4IBAQBE4+4qzs6nlO6At6ka NiK+9DgBZT+TMCLALmC51em0bIDheWxsXb1T3kzkGnTCTSTZb0snDVU9lbw5biOZ AEliKupI2nkBW7nCmrwVUp0gqVdcTSKwmaq3E8sesv9TtNxj59NTno6CDGRdh9Zf as9WM3Aq07d93LuvRvbAee1csZtMialNPHaRk+Yxz9dPIlQrvS/zOqiCEYrQgvxf 4sVLgip5OmrVu8PMDo6v8GW5p0Si8ZtYy5brdilxELACRmFYwvPT9f4pdNbiTQ/9 I6xx8YWgBRIugH7d4J0xXaV5+dkTAun4kbt47/9OIjdnY7IkYNcnUV0PHn7wv2do 0yat -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:29 2025 by rpki-client