$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa File: 32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa (raw, json) Hash identifier: QL+0zZQTacPPnbVESxut3exMDRFn6SwR+lhJwkUlUK0= Subject key identifier: 9E:AE:25:1E:E9:AE:4A:60:C1:CE:96:60:E4:75:A0:75:3F:C0:80:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23DBC22232DACC8BCDA631F1773BCD8ABB1C1873 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa Signing time: Wed 04 Jun 2025 00:00:19 +0000 ROA not before: Wed 04 Jun 2025 00:00:19 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:db:c2:22:32:da:cc:8b:cd:a6:31:f1:77:3b:cd:8a:bb:1c:18:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 4 00:00:19 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=1a754041557b20c59eb10659edfe06bb5ba920000f20ae47b7fbbd6c8d9a1505, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:92:68:91:11:52:45:ef:ca:5d:82:66:8c: 41:2f:4b:aa:d5:ae:c5:dc:ab:23:5e:0f:27:4b:6f: 11:34:51:bc:6f:fc:09:33:0d:83:e7:81:16:a1:40: 4c:00:c7:93:74:73:6c:c2:00:73:e0:c7:b1:9d:0a: 3c:8b:85:00:4c:65:e0:f1:45:7c:e5:24:35:19:ee: 25:18:5f:d2:a6:50:89:e3:12:a1:14:6d:de:8b:46: ad:00:db:bb:f2:05:ec:ef:8c:65:d2:5e:f6:55:2c: ed:ed:8b:6b:b8:07:84:69:6e:68:82:3f:18:26:67: 5a:3a:e1:fc:36:60:0a:4b:f8:0b:93:6e:8f:13:f6: 5a:f8:44:ed:18:2f:d1:d7:94:f6:24:34:57:2f:81: b6:bf:88:1d:4f:1a:88:ba:b6:2d:84:b5:60:74:a0: 7a:a4:1e:92:d0:28:27:58:c4:76:19:af:ae:69:92: 21:7f:a7:f6:35:3b:23:b4:9b:c3:9f:ed:4c:20:f8: 17:03:7c:4c:b0:8f:40:ae:33:d2:56:26:ab:17:37: 35:66:49:83:c2:e5:bd:f6:21:1a:22:70:6a:92:f0: 8d:5b:2e:31:00:e1:32:d8:4e:57:06:fb:74:8b:75: da:71:c0:a6:ae:f2:af:fc:03:03:6c:d7:86:24:3d: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:25:1E:E9:AE:4A:60:C1:CE:96:60:E4:75:A0:75:3F:C0:80:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:a000::/40 Signature Algorithm: sha256WithRSAEncryption 36:85:57:49:0c:3d:4f:c2:33:01:18:64:03:06:64:63:db:84: 20:dd:58:40:4e:26:cc:96:5b:5e:30:86:b2:43:3b:89:dc:8c: a6:07:cb:da:85:5f:85:2d:fa:00:3b:81:f5:78:1c:72:9e:71: 65:27:ae:e9:3c:c8:fe:21:91:ae:3a:b8:3b:b0:5e:7d:93:e9: 95:26:74:ea:ee:83:4d:49:41:a3:fd:fb:62:38:37:c8:ed:1a: 00:c3:60:98:58:78:6b:de:2c:0b:df:c8:fc:1f:2f:12:35:a7: d9:6c:84:3e:a1:0c:55:ba:1f:6a:18:98:6e:12:af:93:bb:7b: 0a:78:c9:d1:54:0a:75:dc:86:48:e2:b8:31:13:e3:ea:c5:90: 28:f1:84:a5:d4:e8:71:cc:2c:0e:aa:b2:a4:c5:86:c0:c0:06: 04:0c:f6:49:fa:ce:fd:aa:7d:d0:15:d1:e8:ff:2d:69:b4:30: 83:0a:f6:9a:74:96:3f:ba:b0:40:08:10:a0:56:83:b7:2a:19: 04:31:2b:08:95:3c:53:fb:4f:85:90:45:f9:2c:b7:75:d1:cd: cf:57:30:47:1f:4a:71:63:bf:a7:4b:21:1d:88:03:75:cf:3d: 60:7e:04:f8:fd:34:a9:33:21:7d:fc:6c:aa:7a:75:20:dd:b1: 68:8e:c8:0e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUI9vCIjLazIvNpjHxdzvNirscGHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNDAwMDAxOVoX DTI1MDcwOTIzNTk1OVowejFJMEcGA1UEBRNAMWE3NTQwNDE1NTdiMjBjNTllYjEw NjU5ZWRmZTA2YmI1YmE5MjAwMDBmMjBhZTQ3YjdmYmJkNmM4ZDlhMTUwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRaSaJERUkXvyl2CZoxBL0uq1a7F 3KsjXg8nS28RNFG8b/wJMw2D54EWoUBMAMeTdHNswgBz4MexnQo8i4UATGXg8UV8 5SQ1Ge4lGF/SplCJ4xKhFG3ei0atANu78gXs74xl0l72VSzt7YtruAeEaW5ogj8Y JmdaOuH8NmAKS/gLk26PE/Za+ETtGC/R15T2JDRXL4G2v4gdTxqIurYthLVgdKB6 pB6S0CgnWMR2Ga+uaZIhf6f2NTsjtJvDn+1MIPgXA3xMsI9ArjPSViarFzc1ZkmD wuW99iEaInBqkvCNWy4xAOEy2E5XBvt0i3XaccCmrvKv/AMDbNeGJD3QIwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ6uJR7prkpgwc6WYOR1oHU/wIA9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyZTRlY2U2LWQzNWUtNDFjZi04ZGExLTNiNzczM2U0NmU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYKAwDQYJKoZIhvcNAQELBQADggEBADaFV0kMPU/CMwEYZAMG ZGPbhCDdWEBOJsyWW14whrJDO4ncjKYHy9qFX4Ut+gA7gfV4HHKecWUnruk8yP4h ka46uDuwXn2T6ZUmdOrug01JQaP9+2I4N8jtGgDDYJhYeGveLAvfyPwfLxI1p9ls hD6hDFW6H2oYmG4Sr5O7ewp4ydFUCnXchkjiuDET4+rFkCjxhKXU6HHMLA6qsqTF hsDABgQM9kn6zv2qfdAV0ej/LWm0MIMK9pp0lj+6sEAIEKBWg7cqGQQxKwiVPFP7 T4WQRfkst3XRzc9XMEcfSnFjv6dLIR2IA3XPPWB+BPj9NKkzIX38bKp6dSDdsWiO yA4= -----END CERTIFICATE-----Generated at Sat Jun 14 05:46:35 2025 by rpki-client