$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa File: 422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa (raw, json) Hash identifier: uIlfcf8gZnkwxTcHJ/jD3nDyAETd4B38O1EtsNvDoxA= Subject key identifier: 46:E8:E4:ED:60:38:E4:A6:7F:A1:5E:7D:9B:9C:49:15:68:C0:B1:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34C992A80EF5DE730634F83AEE2E4343485B9A79 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa Signing time: Tue 10 Jun 2025 00:30:52 +0000 ROA not before: Tue 10 Jun 2025 00:30:52 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c9:92:a8:0e:f5:de:73:06:34:f8:3a:ee:2e:43:43:48:5b:9a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:30:52 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=b52c5b64e8d881899c7bfdf0203a02108664bd59cac0c521a632aa47b1df9c53, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:e3:de:37:c1:4d:a8:76:72:a6:6b:a4:57: c0:79:b1:ac:e6:da:0e:01:da:f1:51:44:73:92:d1: b6:1e:ad:c0:54:78:5f:ca:47:ef:e3:f9:b8:ee:e8: 25:f4:4d:96:f8:38:e8:7a:e7:75:94:cc:bd:dd:38: 41:63:06:fe:4c:56:b8:c8:82:26:f7:ec:95:b9:1f: 0a:f5:05:21:08:ce:59:87:77:64:6d:5c:d9:93:30: fa:f0:f3:79:21:43:cc:43:7a:fa:4c:6f:53:bf:3b: 09:da:14:c5:77:d5:21:60:f1:95:b9:09:73:f5:6a: 26:9a:07:53:a2:c0:3b:a2:5d:5b:81:98:8d:12:94: 93:2c:d0:b1:85:ac:51:bf:5c:cf:9b:c9:a0:5e:27: 24:cd:35:56:fc:4d:85:30:b5:76:7a:1a:a0:ae:c3: ab:23:e5:65:91:b2:90:cd:1c:9b:6b:6d:e6:0d:79: e6:7e:5f:2b:82:b3:64:f1:8d:27:c3:53:b7:db:03: d4:18:0d:9d:ca:37:f2:a5:a9:3e:53:54:43:1c:36: 9e:c4:02:b0:f9:46:ca:c8:32:92:fc:e5:71:e2:b3: 4f:7e:62:c0:20:bb:55:48:73:2c:e7:f1:eb:44:01: a2:f1:3d:33:ab:21:d5:fc:ae:36:e8:55:4d:74:a8: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E8:E4:ED:60:38:E4:A6:7F:A1:5E:7D:9B:9C:49:15:68:C0:B1:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 32:e4:74:8c:ff:32:37:82:18:77:fd:f4:2c:5f:98:03:bf:b7: 0a:59:c9:09:d5:08:2f:3d:f4:0e:ae:79:9e:46:76:c1:2e:3d: 08:8a:d3:b3:07:12:3a:2c:cd:12:90:e0:11:67:b3:49:87:18: a9:ff:d5:af:ec:7d:0a:31:dc:4a:e5:ab:34:f7:42:f2:c3:19: fa:a4:6e:e4:0c:23:86:5b:a6:1b:ee:41:14:56:79:f3:f9:a7: ae:09:a5:07:50:85:93:45:45:55:5d:6b:12:06:16:b9:3a:69: ac:b4:59:67:bd:f3:a0:e6:00:53:48:01:49:4e:0c:cd:b1:9c: f1:13:11:6a:78:55:b1:01:ae:a1:ee:9a:e5:84:c2:38:0e:cb: 98:b1:11:27:71:4d:5f:13:66:15:6b:c0:77:bd:52:03:d5:3c: cd:28:fa:69:be:74:3f:57:c8:3a:32:6a:58:33:0a:22:e5:2e: cb:e9:fb:74:74:15:ff:92:57:79:16:67:5c:b7:b6:2a:b4:97: 5c:79:9b:5e:3a:61:09:93:36:2a:3b:2c:0e:24:a8:a3:d4:74: 20:85:5d:2d:5d:4f:76:9b:7c:e5:25:62:d3:a4:dc:94:b7:79: 30:0a:c6:65:8e:65:b8:cb:77:3b:88:06:6f:70:13:1a:c5:d5: 53:4b:39:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNMmSqA713nMGNPg67i5DQ0hbmnkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMzA1MloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYjUyYzViNjRlOGQ4ODE4OTljN2Jm ZGYwMjAzYTAyMTA4NjY0YmQ1OWNhYzBjNTIxYTYzMmFhNDdiMWRmOWM1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzj3jfBTah2cqZrpFfAebGs5toO AdrxUURzktG2Hq3AVHhfykfv4/m47ugl9E2W+Djoeud1lMy93ThBYwb+TFa4yIIm 9+yVuR8K9QUhCM5Zh3dkbVzZkzD68PN5IUPMQ3r6TG9TvzsJ2hTFd9UhYPGVuQlz 9WommgdTosA7ol1bgZiNEpSTLNCxhaxRv1zPm8mgXickzTVW/E2FMLV2ehqgrsOr I+VlkbKQzRyba23mDXnmfl8rgrNk8Y0nw1O32wPUGA2dyjfypak+U1RDHDaexAKw +UbKyDKS/OVx4rNPfmLAILtVSHMs5/HrRAGi8T0zqyHV/K426FVNdKiRtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEbo5O1gOOSmf6FefZucSRVowLFgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyMmIyY2M3LThjZmUtNDEyMC04M2U5LTk3MWJkOWIwM2YyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEDAMA0GCSqGSIb3DQEBCwUAA4IBAQAy5HSM/zI3ghh3/fQs X5gDv7cKWckJ1QgvPfQOrnmeRnbBLj0IitOzBxI6LM0SkOARZ7NJhxip/9Wv7H0K MdxK5as090Lywxn6pG7kDCOGW6Yb7kEUVnnz+aeuCaUHUIWTRUVVXWsSBha5Omms tFlnvfOg5gBTSAFJTgzNsZzxExFqeFWxAa6h7prlhMI4DsuYsREncU1fE2YVa8B3 vVID1TzNKPppvnQ/V8g6MmpYMwoi5S7L6ft0dBX/kld5Fmdct7YqtJdceZteOmEJ kzYqOywOJKij1HQghV0tXU92m3zlJWLTpNyUt3kwCsZljmW4y3c7iAZvcBMaxdVT SzlC -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:55 2025 by rpki-client