$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa File: 56a3ec11-278f-484a-aee2-dc1f64294598.roa (raw, json) Hash identifier: bkM3blv9b5DUxUkq98p39F5mfNM089DlQlgvyZzYlNk= Subject key identifier: 05:99:73:87:6C:05:22:85:65:1D:1E:AF:7E:EC:10:95:6A:C2:8F:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: A4C89F447B9363AE36D968F8D78D005A616FBB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa Signing time: Tue 10 Jun 2025 00:41:02 +0000 ROA not before: Tue 10 Jun 2025 00:41:02 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a4:c8:9f:44:7b:93:63:ae:36:d9:68:f8:d7:8d:00:5a:61:6f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:41:02 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9748a28cf71a449e327e6a5ead4f400510477fb8ce76664d4f9c80db550d2940, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:a2:a8:60:18:f5:ce:aa:28:d0:d8:b4:64: 9c:5a:f5:be:01:80:90:2f:28:36:96:65:4c:d6:e5: 28:60:a3:05:38:e7:f3:be:e3:4c:be:50:77:dc:c9: 2d:2b:87:21:82:cb:68:1a:e3:d1:d4:f8:c8:78:c2: 0c:78:d4:72:52:36:21:bc:e4:7b:29:c8:84:17:7d: 88:e8:36:fa:39:89:f3:10:1c:5b:88:da:b8:98:28: 8c:5f:9c:8a:c2:c2:37:3d:8c:90:01:72:31:6f:89: a2:e8:c8:4b:40:84:ff:07:dc:cb:9d:69:58:35:24: a0:12:78:62:2f:e1:ad:c0:ed:09:ba:5b:3f:3f:a8: 27:5d:75:4b:c5:db:12:c2:8c:41:b7:c8:14:b1:04: c5:b5:48:76:0f:60:51:71:1e:8a:9f:c6:af:65:77: a0:95:8b:52:41:ad:4f:2e:8c:d8:0f:e2:99:d7:7d: 70:f3:32:af:d2:12:66:e6:98:e0:02:68:e7:e8:57: 66:0d:a5:25:02:4f:7d:93:51:8f:07:c3:ec:fb:27: d2:2a:01:07:a0:45:6c:b8:8a:72:47:2a:3b:4e:16: c7:d0:7c:fb:72:df:ee:7e:57:39:b8:1d:b2:d9:e4: b2:c8:72:b3:42:e6:85:dc:1f:6b:fc:28:5d:13:ef: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:99:73:87:6C:05:22:85:65:1D:1E:AF:7E:EC:10:95:6A:C2:8F:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4040::/46 Signature Algorithm: sha256WithRSAEncryption 85:b6:ab:e8:a6:9e:67:d8:f0:25:cc:85:b3:1a:de:5c:29:bd: 49:c7:89:02:9c:95:1f:6c:ef:70:99:3c:ce:17:b0:13:c4:66: ed:48:a9:60:0b:91:c2:2e:5a:59:b0:be:50:28:28:71:fa:e2: 56:bb:0a:40:fa:a0:02:15:2f:1a:7a:8d:4d:36:ba:51:f8:5a: a5:46:ac:25:7c:06:7c:8e:2c:00:88:83:aa:33:40:66:93:3f: f4:56:ed:da:ab:3e:67:6b:19:40:fe:43:44:88:b4:10:32:96: fa:83:c4:8f:90:9e:f5:8a:3c:c5:5e:15:2c:0f:c1:41:fa:d3: ce:9f:6d:74:1e:ed:c6:56:a4:d4:bc:ba:0d:4f:e2:9d:bb:d1: 50:b6:5e:15:80:6d:f4:03:50:e9:f0:bd:a4:7e:1f:d5:89:cd: 3a:6d:c2:21:1e:46:3f:ee:02:68:cd:bf:c6:c9:fd:f3:fe:87: 7a:2f:a8:39:4b:54:1e:d3:d2:09:e2:93:54:42:42:85:da:a1: 47:25:5a:9f:ea:ce:8b:8e:d5:76:96:26:1f:2d:60:49:58:ac: a6:41:36:a1:65:43:0f:83:3b:9d:1e:17:74:2d:b1:b5:6a:7d: 39:d4:8a:7b:34:13:48:63:b1:cf:1d:b1:88:2a:c5:f3:1b:02: 48:58:07:64 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAKTIn0R7k2OuNtlo+NeNAFphb7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNDEwMloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOTc0OGEyOGNmNzFhNDQ5ZTMyN2U2 YTVlYWQ0ZjQwMDUxMDQ3N2ZiOGNlNzY2NjRkNGY5YzgwZGI1NTBkMjk0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7CiqGAY9c6qKNDYtGScWvW+AYCQ Lyg2lmVM1uUoYKMFOOfzvuNMvlB33MktK4chgstoGuPR1PjIeMIMeNRyUjYhvOR7 KciEF32I6Db6OYnzEBxbiNq4mCiMX5yKwsI3PYyQAXIxb4mi6MhLQIT/B9zLnWlY NSSgEnhiL+GtwO0Juls/P6gnXXVLxdsSwoxBt8gUsQTFtUh2D2BRcR6Kn8avZXeg lYtSQa1PLozYD+KZ131w8zKv0hJm5pjgAmjn6FdmDaUlAk99k1GPB8Ps+yfSKgEH oEVsuIpyRyo7ThbH0Hz7ct/uflc5uB2y2eSyyHKzQuaF3B9r/ChdE+8kGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAWZc4dsBSKFZR0er37sEJVqwo+RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2YTNlYzExLTI3OGYtNDg0YS1hZWUyLWRjMWY2NDI5NDU5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba90BAMA0GCSqGSIb3DQEBCwUAA4IBAQCFtqvopp5n2PAlzIWz Gt5cKb1Jx4kCnJUfbO9wmTzOF7ATxGbtSKlgC5HCLlpZsL5QKChx+uJWuwpA+qAC FS8aeo1NNrpR+FqlRqwlfAZ8jiwAiIOqM0Bmkz/0Vu3aqz5naxlA/kNEiLQQMpb6 g8SPkJ71ijzFXhUsD8FB+tPOn210Hu3GVqTUvLoNT+Kdu9FQtl4VgG30A1Dp8L2k fh/Vic06bcIhHkY/7gJozb/Gyf3z/od6L6g5S1Qe09IJ4pNUQkKF2qFHJVqf6s6L jtV2liYfLWBJWKymQTahZUMPgzudHhd0LbG1an051Ip7NBNIY7HPHbGIKsXzGwJI WAdk -----END CERTIFICATE-----Generated at Sat Jun 14 06:28:22 2025 by rpki-client