$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa File: 4d62567a-b0b0-4bb9-96ac-078c8832194f.roa (raw, json) Hash identifier: 078vLqmR2hHVHZQJBJx75Wtne6VVvFOhDpSD+L76gdA= Subject key identifier: 6F:6F:33:C1:6D:DC:6E:2F:AD:FF:FE:5A:A9:A1:0A:06:98:FD:A8:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3597694A54EB749BA75F6A5E5D91EC2E54E38140 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa Signing time: Tue 10 Jun 2025 15:41:58 +0000 ROA not before: Tue 10 Jun 2025 15:41:58 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:97:69:4a:54:eb:74:9b:a7:5f:6a:5e:5d:91:ec:2e:54:e3:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:41:58 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=8e3f40a6a5972314bed587bee4a45ec9b124004d8fb26a2201e338f6dfe9fb67, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:5f:ce:2a:ea:c0:32:69:b9:1d:64:8e:ee: f6:8a:df:d9:bf:16:5c:ab:e8:da:cb:fc:54:e1:bc: 52:34:52:9f:0d:e6:46:95:e7:97:13:a2:67:12:90: ba:49:6d:8f:47:0f:37:68:82:d7:c2:37:4a:77:91: fc:fc:16:9a:9f:3f:7e:56:47:c8:bd:2d:ec:32:5e: 07:84:70:5d:e9:fe:59:5f:1c:fb:ea:04:51:f8:87: 6c:eb:6d:99:2f:1f:b7:b8:3b:45:63:e2:97:45:9e: b7:d1:46:e9:ba:5a:25:58:7a:84:74:30:15:e3:09: e6:59:44:bd:d7:66:1a:bf:6a:6a:16:32:5a:79:95: 98:7b:9e:ab:fe:c8:5c:ed:cd:b1:55:4c:49:ae:50: 8b:6c:12:92:4a:1d:65:c7:f6:d3:f5:82:ee:1d:8b: e3:e6:76:cb:9e:29:d2:03:91:f7:27:ca:30:7a:54: 54:41:f3:4a:f0:34:e9:d8:f7:85:65:d8:1c:d3:16: aa:4a:7b:2f:98:89:2a:d6:e7:ea:59:43:f7:b1:9f: cd:2b:7b:05:0e:d3:b6:b8:ab:0a:26:23:30:06:72: d3:fd:c4:7e:a6:ec:02:03:4b:15:cb:5a:9a:78:b0: 54:ba:4d:06:55:ef:08:88:c6:96:95:a3:61:78:0d: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6F:33:C1:6D:DC:6E:2F:AD:FF:FE:5A:A9:A1:0A:06:98:FD:A8:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8000::/38 Signature Algorithm: sha256WithRSAEncryption 4a:9b:db:ee:4f:5c:d4:04:b8:22:3a:91:dc:96:2f:97:f4:47: c9:48:39:f0:ab:b2:cf:a1:77:63:ef:1a:fb:cf:19:97:ca:75: 87:16:07:0a:2a:c5:8d:22:0c:94:9f:46:2f:f9:0f:1b:f0:a3: 47:fa:d8:ea:13:45:89:1d:c9:3f:54:90:2e:bc:5f:1c:8a:35: 75:5d:5d:bb:46:2c:a0:50:89:de:85:67:0b:98:5d:e1:69:7e: 8d:a4:95:ad:68:9e:71:fb:33:62:a6:08:2e:ed:6a:8f:e5:1f: be:86:1a:3f:a1:f4:ce:2e:7e:b3:0b:97:2e:d9:e1:77:09:4b: 96:bd:7c:97:ef:24:30:2a:b1:e2:bf:53:c9:d0:f0:6e:1c:8d: 2c:f3:cd:6d:b4:db:fe:98:76:04:a9:2e:05:d3:16:d3:b1:91: 68:15:4e:83:5d:94:15:77:ee:9b:d3:a1:7f:15:85:ba:94:5b: c9:c0:e0:3d:e6:49:cd:ed:35:6f:68:b8:20:88:3d:b6:7a:04: 4c:f2:47:c7:da:66:d5:b9:f3:52:a3:18:16:8f:09:b0:6f:66: 97:80:c4:ee:08:81:35:2c:cb:94:3e:aa:b5:19:f7:35:1e:69: ec:37:12:d3:0d:be:a8:c9:d3:dd:0a:e8:42:6c:eb:90:61:57: 32:ac:66:6b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNZdpSlTrdJunX2peXZHsLlTjgUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NDE1OFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOGUzZjQwYTZhNTk3MjMxNGJlZDU4 N2JlZTRhNDVlYzliMTI0MDA0ZDhmYjI2YTIyMDFlMzM4ZjZkZmU5ZmI2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyllfzirqwDJpuR1kju72it/ZvxZc q+jay/xU4bxSNFKfDeZGleeXE6JnEpC6SW2PRw83aILXwjdKd5H8/Baanz9+VkfI vS3sMl4HhHBd6f5ZXxz76gRR+Ids622ZLx+3uDtFY+KXRZ630UbpulolWHqEdDAV 4wnmWUS912Yav2pqFjJaeZWYe56r/shc7c2xVUxJrlCLbBKSSh1lx/bT9YLuHYvj 5nbLninSA5H3J8owelRUQfNK8DTp2PeFZdgc0xaqSnsvmIkq1ufqWUP3sZ/NK3sF DtO2uKsKJiMwBnLT/cR+puwCA0sVy1qaeLBUuk0GVe8IiMaWlaNheA2+9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG9vM8Ft3G4vrf/+WqmhCgaY/agPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkNjI1NjdhLWIwYjAtNGJiOS05NmFjLTA3OGM4ODMyMTk0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIAwDQYJKoZIhvcNAQELBQADggEBAEqb2+5PXNQEuCI6kdyW L5f0R8lIOfCrss+hd2PvGvvPGZfKdYcWBwoqxY0iDJSfRi/5Dxvwo0f62OoTRYkd yT9UkC68XxyKNXVdXbtGLKBQid6FZwuYXeFpfo2kla1onnH7M2KmCC7tao/lH76G Gj+h9M4ufrMLly7Z4XcJS5a9fJfvJDAqseK/U8nQ8G4cjSzzzW202/6YdgSpLgXT FtOxkWgVToNdlBV37pvToX8VhbqUW8nA4D3mSc3tNW9ouCCIPbZ6BEzyR8faZtW5 81KjGBaPCbBvZpeAxO4IgTUsy5Q+qrUZ9zUeaew3EtMNvqjJ090K6EJs65BhVzKs Zms= -----END CERTIFICATE-----Generated at Sat Jun 14 06:29:18 2025 by rpki-client