$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa File: 3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa (raw, json) Hash identifier: O/ygv2ZxRwx8exEkPszpNk2QcO355vM6xqF7FnQEvPk= Subject key identifier: 1A:1A:12:C9:EB:A0:C2:A1:C2:A4:CD:26:28:60:46:20:F0:C1:46:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0DB35D69C337883DD4012158C2AC1BB573EF87D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa Signing time: Tue 10 Jun 2025 00:01:33 +0000 ROA not before: Tue 10 Jun 2025 00:01:33 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b3:5d:69:c3:37:88:3d:d4:01:21:58:c2:ac:1b:b5:73:ef:87:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:01:33 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=90b090ac796b6fd86e56ee819edc312a228b7ef326aa6d0683f033ec22b62638, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e9:e1:d1:39:55:64:ab:a0:e4:cf:e7:b4:50: d2:e6:20:78:07:f0:98:41:08:0b:e8:60:92:eb:8d: f8:ca:7c:65:c3:5d:df:00:42:91:04:98:ac:4b:28: 56:aa:17:c5:45:1c:03:79:3a:9a:2d:ec:ce:29:f7: a2:29:f9:9b:2b:b5:53:a0:43:bf:1c:e1:23:8c:d6: b0:69:16:f3:72:42:6a:c2:da:90:67:c4:b2:90:24: af:ea:42:68:b6:3d:b4:87:34:be:22:67:3b:7b:9a: 97:bc:12:17:16:13:4b:7e:d8:04:d5:db:b1:bc:3f: 8f:47:a7:82:ef:ac:a6:84:1a:3e:1d:a4:8c:b7:94: 65:ad:47:f5:1b:23:04:ff:7e:34:6d:8b:bb:53:21: 7f:85:0b:b1:40:50:dc:40:be:87:a5:4c:33:13:d5: d5:2d:d1:4e:ca:31:38:ab:02:49:c4:75:17:9f:a2: f7:be:9f:5e:8e:5b:7e:e8:63:8f:c6:9c:a2:40:fb: 3f:c6:a4:1b:d9:16:70:b1:3c:22:e7:09:ae:f1:0d: c7:a8:d6:4c:48:50:c9:31:c8:70:8b:14:5b:b4:50: e8:20:d2:fa:00:8f:76:f3:e8:38:e8:4e:9a:31:9f: cf:cf:9f:e9:e4:e1:64:ce:df:c6:e8:c3:15:c7:7b: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1A:12:C9:EB:A0:C2:A1:C2:A4:CD:26:28:60:46:20:F0:C1:46:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c83247b-ea4f-4a4c-b63a-ebae9574dde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8880::/46 Signature Algorithm: sha256WithRSAEncryption b1:4d:9a:2f:ac:90:15:9a:70:8c:46:fd:12:b4:41:2f:a2:82: ff:08:c3:bc:97:1d:fe:6b:be:cc:5f:c1:62:f4:b3:0e:4d:bb: 5d:a6:de:cd:cf:e9:ec:ea:6a:77:8a:cf:b8:a2:0e:d0:9e:7d: 5d:3c:01:1d:8b:2e:ff:9e:46:6b:f1:43:3d:e6:0d:41:86:8e: e4:01:ad:47:e7:da:17:d5:24:92:22:04:ed:6b:bf:49:ea:61: 71:e7:a9:79:18:b2:6c:fe:26:10:ac:99:7b:8b:d4:e1:66:9e: 48:f8:f7:0e:56:d0:b3:99:58:7c:17:c1:62:d6:ce:fe:dc:22: 89:c4:63:5a:ec:c1:62:9c:1d:d5:99:ad:74:06:16:8c:f2:b9: c2:a9:29:ef:37:d1:5f:95:a2:ce:f8:a7:e3:50:11:06:aa:6f: ba:27:2e:ae:f2:4f:f2:14:d3:39:6e:bd:77:5a:6b:e6:41:1c: ac:c4:74:74:e6:6f:82:dc:28:ce:94:36:6e:6d:85:77:23:c8: 2f:48:18:d2:83:5c:78:36:ee:4a:62:67:5e:50:1c:87:0e:d6: 32:c1:12:25:7d:39:12:34:2f:e5:8e:ab:7d:80:28:9c:f4:d3: 08:d9:ec:0f:58:a0:3e:e3:23:b6:d8:79:57:4c:a3:79:a5:36: 55:1d:42:2c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDbNdacM3iD3UASFYwqwbtXPvh9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMDEzM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOTBiMDkwYWM3OTZiNmZkODZlNTZl ZTgxOWVkYzMxMmEyMjhiN2VmMzI2YWE2ZDA2ODNmMDMzZWMyMmI2MjYzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5enh0TlVZKug5M/ntFDS5iB4B/CY QQgL6GCS6434ynxlw13fAEKRBJisSyhWqhfFRRwDeTqaLezOKfeiKfmbK7VToEO/ HOEjjNawaRbzckJqwtqQZ8SykCSv6kJotj20hzS+Imc7e5qXvBIXFhNLftgE1dux vD+PR6eC76ymhBo+HaSMt5RlrUf1GyME/340bYu7UyF/hQuxQFDcQL6HpUwzE9XV LdFOyjE4qwJJxHUXn6L3vp9ejlt+6GOPxpyiQPs/xqQb2RZwsTwi5wmu8Q3HqNZM SFDJMchwixRbtFDoINL6AI928+g46E6aMZ/Pz5/p5OFkzt/G6MMVx3vLCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBoaEsnroMKhwqTNJihgRiDwwUYEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNjODMyNDdiLWVhNGYtNGE0Yy1iNjNhLWViYWU5NTc0ZGRlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+4iAMA0GCSqGSIb3DQEBCwUAA4IBAQCxTZovrJAVmnCMRv0S tEEvooL/CMO8lx3+a77MX8Fi9LMOTbtdpt7Nz+ns6mp3is+4og7Qnn1dPAEdiy7/ nkZr8UM95g1Bho7kAa1H59oX1SSSIgTta79J6mFx56l5GLJs/iYQrJl7i9ThZp5I +PcOVtCzmVh8F8Fi1s7+3CKJxGNa7MFinB3Vma10BhaM8rnCqSnvN9FflaLO+Kfj UBEGqm+6Jy6u8k/yFNM5br13WmvmQRysxHR05m+C3CjOlDZubYV3I8gvSBjSg1x4 Nu5KYmdeUByHDtYywRIlfTkSNC/ljqt9gCic9NMI2ewPWKA+4yO22HlXTKN5pTZV HUIs -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:10 2025 by rpki-client