$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa File: 3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa (raw, json) Hash identifier: hzoIEj1sbswGUUovcAtU/CSbtlpfk7HmDxoIBU/QnCo= Subject key identifier: 15:A8:83:F5:26:1B:E4:3D:07:75:69:18:4C:F2:1B:30:50:F2:EB:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13C550F56EFDBB89B040E1576B85B9E942EEBE9C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa Signing time: Tue 10 Jun 2025 15:11:06 +0000 ROA not before: Tue 10 Jun 2025 15:11:06 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c5:50:f5:6e:fd:bb:89:b0:40:e1:57:6b:85:b9:e9:42:ee:be:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:11:06 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a8fd296db235aa4b7c5a0ea13f9d15ade74f8c7ab676079a226d4c5d8117e309, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:b5:6c:9e:00:50:36:c4:d0:2f:36:ec:df: 6e:86:79:3f:e9:b9:aa:f6:45:74:1e:6d:bc:9b:13: 95:7d:60:c7:fa:81:29:eb:46:10:0f:56:27:81:03: 5f:5f:f3:fe:d9:60:07:10:2d:f7:ee:b0:85:0c:88: ce:84:cc:6c:14:13:07:ad:b9:54:0f:76:3e:36:4c: 90:d3:d8:be:68:f7:29:fd:e0:8a:87:ec:a2:fa:ea: 8d:57:f7:91:df:0f:50:06:5b:0f:eb:f0:72:d9:46: 5e:28:76:3c:1e:32:7a:81:3e:a3:7b:f7:16:49:44: 08:d3:99:44:98:f7:6a:c0:1e:d0:ce:8b:a3:88:84: d5:99:e5:95:04:e5:fa:d3:07:71:42:a4:a0:e8:28: fa:9a:c9:82:c5:77:87:76:2b:54:a7:1f:68:26:0b: 1c:1d:6d:e3:16:5b:ea:00:83:8e:b3:77:a7:29:65: fb:ad:e6:86:60:83:ba:0e:12:7e:f7:17:1d:d1:55: a7:ff:63:ec:ce:df:85:7e:a8:cd:2a:e3:24:ac:1f: 1c:3b:34:7b:e7:3d:01:0e:a6:6b:30:2c:51:c9:c5: 29:3b:04:ca:80:30:ed:d0:85:7f:c1:06:ac:f6:97: a4:47:a2:34:b2:6a:fe:84:6e:29:4a:1a:64:aa:84: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:83:F5:26:1B:E4:3D:07:75:69:18:4C:F2:1B:30:50:F2:EB:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:4800::/40 Signature Algorithm: sha256WithRSAEncryption 5f:c8:22:a7:80:aa:02:f6:0e:8c:36:dc:17:a5:68:9a:e0:d0: 87:17:91:27:1a:c7:93:f7:a3:70:ca:72:f4:75:08:f9:33:4a: 2a:24:f8:b4:70:47:fc:05:8c:84:ce:28:03:0f:c9:d0:39:ca: 23:20:32:a8:06:a8:51:a2:ca:a3:ce:42:91:43:e2:b9:f1:d3: a2:71:47:ab:1e:01:9e:87:c2:52:41:9f:c0:68:e0:05:fa:3e: 11:4e:a0:70:07:1c:b8:2f:9f:c2:e8:34:62:7d:9a:8b:ae:c0: f1:62:e5:16:ae:9e:84:bd:0c:dc:e3:55:92:59:61:d1:3a:46: 5e:08:ea:eb:26:e7:93:45:a9:06:ec:96:6f:41:9b:74:68:bf: 0d:a9:a1:81:62:6a:86:c1:7a:9a:50:d4:b3:34:85:e4:a1:f3: cf:a6:92:b4:d6:b5:c5:66:06:95:c1:f2:af:9d:c7:55:f8:b4: 5b:44:66:63:d5:68:77:e3:5b:9e:87:e5:df:68:0f:84:5c:99: 14:a4:d9:b4:d1:1f:c0:ef:c0:f9:c2:0c:ca:0b:69:7a:10:c8: 22:8a:e3:4b:d5:2d:b2:83:1b:af:e8:8d:ec:f8:9c:14:f4:29: 12:7b:b8:bf:ba:17:4a:06:35:93:9a:9f:a7:27:85:eb:73:90: 29:49:89:a2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUE8VQ9W79u4mwQOFXa4W56ULuvpwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MTEwNloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYThmZDI5NmRiMjM1YWE0YjdjNWEw ZWExM2Y5ZDE1YWRlNzRmOGM3YWI2NzYwNzlhMjI2ZDRjNWQ4MTE3ZTMwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b61bJ4AUDbE0C827N9uhnk/6bmq 9kV0Hm28mxOVfWDH+oEp60YQD1YngQNfX/P+2WAHEC337rCFDIjOhMxsFBMHrblU D3Y+NkyQ09i+aPcp/eCKh+yi+uqNV/eR3w9QBlsP6/By2UZeKHY8HjJ6gT6je/cW SUQI05lEmPdqwB7QzoujiITVmeWVBOX60wdxQqSg6Cj6msmCxXeHditUpx9oJgsc HW3jFlvqAIOOs3enKWX7reaGYIO6DhJ+9xcd0VWn/2Pszt+FfqjNKuMkrB8cOzR7 5z0BDqZrMCxRycUpOwTKgDDt0IV/wQas9pekR6I0smr+hG4pShpkqoQaaQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBWog/UmG+Q9B3VpGEzyGzBQ8utdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlOWNjNmFmLWJjMmMtNGRjYS04OTE1LTBjZGRmMjVjYzhkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaEgwDQYJKoZIhvcNAQELBQADggEBAF/IIqeAqgL2Dow23Bel aJrg0IcXkScax5P3o3DKcvR1CPkzSiok+LRwR/wFjITOKAMPydA5yiMgMqgGqFGi yqPOQpFD4rnx06JxR6seAZ6HwlJBn8Bo4AX6PhFOoHAHHLgvn8LoNGJ9mouuwPFi 5RaunoS9DNzjVZJZYdE6Rl4I6usm55NFqQbslm9Bm3Rovw2poYFiaobBeppQ1LM0 heSh88+mkrTWtcVmBpXB8q+dx1X4tFtEZmPVaHfjW56H5d9oD4RcmRSk2bTRH8Dv wPnCDMoLaXoQyCKK40vVLbKDG6/ojez4nBT0KRJ7uL+6F0oGNZOan6cnhetzkClJ iaI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:25:16 2025 by rpki-client