$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0d2894-eaa1-4bae-b793-13a3b2528447.roa File: 5f0d2894-eaa1-4bae-b793-13a3b2528447.roa (raw, json) Hash identifier: /NKy+vkp3spWyysJQXsHTtzhOtgIyyF2kJlkpawGuz4= Subject key identifier: 83:CE:68:71:2F:56:A0:93:37:3C:A9:AF:F9:42:54:09:7B:34:4C:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55660123B15A17C847517FCCEC2A17BD4DD23125 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0d2894-eaa1-4bae-b793-13a3b2528447.roa Signing time: Tue 10 Jun 2025 15:01:14 +0000 ROA not before: Tue 10 Jun 2025 15:01:14 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:66:01:23:b1:5a:17:c8:47:51:7f:cc:ec:2a:17:bd:4d:d2:31:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:01:14 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=d32f6820faa2502340236308c0cd4edb78a7fe369eaf79df134b115656be233a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:f2:02:57:f0:28:86:2e:0b:94:c5:fe:01: 58:3b:43:4f:3f:23:2d:a2:15:dd:c1:0e:96:fb:cc: 29:ba:ca:68:a5:5c:2e:42:ac:b5:85:40:0d:05:f8: cf:04:0a:9a:15:b0:52:ea:0d:0f:2f:d9:c7:78:62: 17:31:c3:95:e7:20:cd:56:d6:9d:f9:5b:38:81:ee: 31:15:40:3d:b9:0a:0c:6c:48:1d:78:4f:50:94:37: eb:01:e1:39:51:83:ca:af:9f:a9:db:9d:70:5d:9c: f9:84:ec:c3:42:0f:88:e8:f6:01:6e:42:3e:c1:d4: 9c:9c:23:54:26:ea:90:ea:09:ed:71:a7:17:6d:dc: 56:c8:e5:b3:f8:ca:54:c4:b2:14:a3:2a:91:2e:97: ea:6b:fd:e1:61:16:90:bc:df:12:a1:95:2b:a0:31: 44:9a:64:8b:a1:7f:6c:a4:07:3c:45:b0:7e:89:ee: d2:96:f5:e2:5e:42:a8:33:6d:13:a2:6e:f2:c3:53: 50:ac:03:43:d6:85:45:c4:72:00:df:fe:79:22:5c: 4a:67:64:ae:41:48:1c:e5:71:34:4c:f0:8b:04:66: 50:3f:67:52:97:67:df:01:5c:f3:11:40:19:ba:00: 56:3f:99:68:99:24:1e:cd:41:36:27:eb:30:b6:de: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CE:68:71:2F:56:A0:93:37:3C:A9:AF:F9:42:54:09:7B:34:4C:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0d2894-eaa1-4bae-b793-13a3b2528447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:e080::/46 Signature Algorithm: sha256WithRSAEncryption cb:42:6b:14:3e:72:18:11:90:c3:ca:c5:b0:47:24:28:1f:d3: ef:6c:f6:11:b3:c5:a4:b2:5c:f8:d9:08:52:93:90:8b:1c:4f: a2:b3:24:f1:bc:42:3c:39:99:1f:8b:39:6a:77:22:61:59:39: 0b:08:9a:64:4d:61:17:be:9b:9b:56:e5:0c:85:e2:a4:00:38: 07:dc:9a:37:75:b2:77:e8:e5:8f:cd:e9:42:65:5e:60:84:ba: 73:bc:6a:8f:55:d6:30:a4:6f:10:6a:f5:09:1b:4e:7a:3f:f6: 1d:15:9e:1f:7c:61:70:92:e6:7a:35:48:0d:05:15:12:b8:41: 6f:11:9c:98:5d:ad:57:77:ae:ed:0a:b2:da:a4:86:2b:d4:37: 95:3a:fc:81:d1:b4:0d:66:10:3f:bf:c3:96:fa:8f:eb:9d:6c: 48:62:db:bc:8c:8b:a2:4c:4a:fb:36:10:07:82:d7:1f:39:00: 51:27:a7:95:5c:ec:a2:c7:8a:98:0e:6a:2f:f6:c4:06:26:d9: 6d:ad:dc:f2:b9:22:a9:38:d8:4b:7d:c2:65:b3:11:2e:e5:a0: 68:00:b0:a5:93:3d:13:23:4d:e0:ca:ef:10:d6:89:f7:b8:e3: 9f:8d:0b:1f:4b:10:d0:40:9f:cf:ac:4c:62:bc:69:6e:2e:f4: f3:30:e6:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVWYBI7FaF8hHUX/M7CoXvU3SMSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MDExNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZDMyZjY4MjBmYWEyNTAyMzQwMjM2 MzA4YzBjZDRlZGI3OGE3ZmUzNjllYWY3OWRmMTM0YjExNTY1NmJlMjMzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HryAlfwKIYuC5TF/gFYO0NPPyMt ohXdwQ6W+8wpuspopVwuQqy1hUANBfjPBAqaFbBS6g0PL9nHeGIXMcOV5yDNVtad +Vs4ge4xFUA9uQoMbEgdeE9QlDfrAeE5UYPKr5+p251wXZz5hOzDQg+I6PYBbkI+ wdScnCNUJuqQ6gntcacXbdxWyOWz+MpUxLIUoyqRLpfqa/3hYRaQvN8SoZUroDFE mmSLoX9spAc8RbB+ie7SlvXiXkKoM20Tom7yw1NQrAND1oVFxHIA3/55IlxKZ2Su QUgc5XE0TPCLBGZQP2dSl2ffAVzzEUAZugBWP5lomSQezUE2J+swtt5uEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIPOaHEvVqCTNzypr/lCVAl7NEwNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmMGQyODk0LWVhYTEtNGJhZS1iNzkzLTEzYTNiMjUyODQ0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba++CAMA0GCSqGSIb3DQEBCwUAA4IBAQDLQmsUPnIYEZDDysWw RyQoH9PvbPYRs8Wkslz42QhSk5CLHE+isyTxvEI8OZkfizlqdyJhWTkLCJpkTWEX vpubVuUMheKkADgH3Jo3dbJ36OWPzelCZV5ghLpzvGqPVdYwpG8QavUJG056P/Yd FZ4ffGFwkuZ6NUgNBRUSuEFvEZyYXa1Xd67tCrLapIYr1DeVOvyB0bQNZhA/v8OW +o/rnWxIYtu8jIuiTEr7NhAHgtcfOQBRJ6eVXOyix4qYDmov9sQGJtltrdzyuSKp ONhLfcJlsxEu5aBoALClkz0TI03gyu8Q1on3uOOfjQsfSxDQQJ/PrExivGluLvTz MOZE -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:18 2025 by rpki-client