$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30ec1984-4361-4a36-84f0-f08ade370c25.roa File: 30ec1984-4361-4a36-84f0-f08ade370c25.roa (raw, json) Hash identifier: 4wa7n70WcFmdI4BPODQMQ4gIL8tQP5LZrZWWQxpcwro= Subject key identifier: AF:68:33:02:C8:00:E1:78:A2:EC:08:BD:25:AC:64:98:42:78:E2:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4249D24E1C107692349D589AC17B74549FBD8D44 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30ec1984-4361-4a36-84f0-f08ade370c25.roa Signing time: Sat 07 Jun 2025 00:10:12 +0000 ROA not before: Sat 07 Jun 2025 00:10:12 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:49:d2:4e:1c:10:76:92:34:9d:58:9a:c1:7b:74:54:9f:bd:8d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:10:12 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=a889f55f53076a6b14739313dfb0cf01f4839b6311640e726a725f539e43b247, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:c0:76:95:7d:9a:79:28:65:1b:05:46:71: 5e:53:c9:5e:88:23:be:69:5e:9b:14:cc:27:27:24: 4a:06:80:b4:3f:85:d5:b8:3c:fb:6a:40:87:a2:08: 22:86:e8:81:da:e7:cd:e8:f1:03:4c:3b:05:8c:f9: 14:17:05:0c:c0:00:9a:fd:ed:e3:47:ca:8f:16:1d: 0a:b0:2b:c0:57:b0:9a:96:e1:54:0d:4e:98:cc:df: 12:0d:a0:38:48:e2:c9:4f:c2:e6:a0:a1:0b:4c:a6: 99:44:21:f7:e9:39:37:bf:3a:4e:12:6f:8d:90:21: b7:6a:a4:08:d1:10:6c:ac:e4:c6:dd:ea:c8:c2:d6: 06:56:4b:da:5c:ae:b6:cf:e7:af:c1:63:cb:62:38: c6:f5:58:f7:b9:71:8b:bf:10:8f:97:ea:5a:d0:84: 2d:80:7f:3e:03:23:5c:93:74:7c:e4:27:73:82:09: 36:47:9a:a4:91:d5:cb:b2:ed:19:b2:f9:8c:d8:ed: f3:07:32:d8:ee:d0:2c:7e:48:57:e9:1a:33:0f:76: 17:9e:b6:06:6f:c5:64:9e:34:19:3f:26:1e:0e:95: d9:af:21:b6:cb:12:be:95:28:d5:d7:20:b6:cd:ed: 56:2b:a8:4f:3a:10:cd:c5:b5:c0:c0:bc:d2:b4:92: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:68:33:02:C8:00:E1:78:A2:EC:08:BD:25:AC:64:98:42:78:E2:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30ec1984-4361-4a36-84f0-f08ade370c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:d8:5a:4a:8e:d4:5f:24:2f:21:9a:64:22:4c:85:8c:c2:e3: 48:be:cc:7e:8b:66:72:8b:94:91:fd:17:15:5e:0b:95:ae:11: 5c:e5:88:c1:68:75:1e:da:0e:41:1f:77:ef:47:5d:16:ae:6f: 26:56:7e:20:7a:8c:a4:be:d2:3c:74:05:1a:12:f1:20:5f:a7: 12:19:50:ff:93:79:c8:ef:a4:b7:12:38:11:63:be:b8:a4:fd: a3:77:76:33:89:61:d5:ce:77:ea:11:11:a3:89:fd:01:36:15: f9:cd:c6:58:09:1f:79:ab:26:bb:6f:36:6f:7c:2b:e5:5c:5b: a0:d3:a7:f2:e5:7c:1f:c3:ac:95:23:21:b2:ef:e9:63:80:ce: 82:5e:fc:c8:2b:2f:55:37:dc:9d:22:0a:2f:72:0c:99:68:a4: f3:04:23:b7:64:60:cd:95:fe:83:96:49:53:43:45:2f:1e:aa: 1b:d6:20:67:1c:8e:1d:53:c7:2c:68:c9:bf:2e:3d:2c:ea:6a: cb:b0:9a:22:29:61:d7:6c:b9:aa:db:53:76:52:66:87:57:3e: 38:7c:1b:6e:2e:3e:ed:0b:a8:f7:4f:d3:9c:36:43:66:6e:61: 82:b4:30:eb:74:28:f0:04:ca:a3:49:4b:b1:43:db:be:d4:89: f7:df:9c:5d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQknSThwQdpI0nViawXt0VJ+9jUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMTAxMloX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAYTg4OWY1NWY1MzA3NmE2YjE0NzM5 MzEzZGZiMGNmMDFmNDgzOWI2MzExNjQwZTcyNmE3MjVmNTM5ZTQzYjI0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb7AdpV9mnkoZRsFRnFeU8leiCO+ aV6bFMwnJyRKBoC0P4XVuDz7akCHoggihuiB2ufN6PEDTDsFjPkUFwUMwACa/e3j R8qPFh0KsCvAV7CaluFUDU6YzN8SDaA4SOLJT8LmoKELTKaZRCH36Tk3vzpOEm+N kCG3aqQI0RBsrOTG3erIwtYGVkvaXK62z+evwWPLYjjG9Vj3uXGLvxCPl+pa0IQt gH8+AyNck3R85Cdzggk2R5qkkdXLsu0ZsvmM2O3zBzLY7tAsfkhX6RozD3YXnrYG b8VknjQZPyYeDpXZryG2yxK+lSjV1yC2ze1WK6hPOhDNxbXAwLzStJJQ8QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK9oMwLIAOF4ouwIvSWsZJhCeOKQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwZWMxOTg0LTQzNjEtNGEzNi04NGYwLWYwOGFkZTM3MGMyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYWDAMA0GCSqGSIb3DQEBCwUAA4IBAQBI2FpKjtRfJC8hmmQi TIWMwuNIvsx+i2Zyi5SR/RcVXguVrhFc5YjBaHUe2g5BH3fvR10Wrm8mVn4geoyk vtI8dAUaEvEgX6cSGVD/k3nI76S3EjgRY764pP2jd3YziWHVznfqERGjif0BNhX5 zcZYCR95qya7bzZvfCvlXFug06fy5Xwfw6yVIyGy7+ljgM6CXvzIKy9VN9ydIgov cgyZaKTzBCO3ZGDNlf6DlklTQ0UvHqob1iBnHI4dU8csaMm/Lj0s6mrLsJoiKWHX bLmq21N2UmaHVz44fBtuLj7tC6j3T9OcNkNmbmGCtDDrdCjwBMqjSUuxQ9u+1In3 35xd -----END CERTIFICATE-----Generated at Sun Jun 15 07:06:14 2025 by rpki-client