$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa File: 76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa (raw, json) Hash identifier: XKJZhqFx8Bmrb73jxRoJrYcvRrG7b6vxP28JALpViTI= Subject key identifier: 56:3E:4D:FB:4C:B2:3D:21:E4:C1:11:79:8C:B5:8D:BA:EF:83:6A:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 508B024200F7183B85F0D908CF4F085C39A35420 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa Signing time: Tue 10 Jun 2025 15:01:13 +0000 ROA not before: Tue 10 Jun 2025 15:01:13 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8b:02:42:00:f7:18:3b:85:f0:d9:08:cf:4f:08:5c:39:a3:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:01:13 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=7e2455d73e3bc38a7a7e0bb10b3ab50c5feebd3d8431d4d0c2fb80247607ba10, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:61:ec:1d:e8:a5:dd:f0:fe:1f:11:7f:29: 4c:f2:c8:bc:c4:96:40:56:15:00:b5:cd:cf:3d:a2: b7:35:fc:9f:19:d6:2c:7b:4b:af:14:f8:4c:76:7f: 66:29:46:ce:38:58:98:cd:97:ca:11:d9:3e:28:e3: 3e:fc:6f:32:d4:c0:28:a9:2d:24:15:00:4f:ab:2b: ad:79:5b:6d:16:eb:32:2c:02:2b:f1:23:89:f3:44: d8:56:97:00:d4:3e:b3:9a:47:d8:f1:22:d2:5d:5a: 86:83:78:e5:82:34:8d:18:26:e1:ef:79:a8:fe:0c: 17:07:3d:70:8a:62:fb:17:eb:b6:fa:33:d9:8e:22: 85:46:39:b3:df:26:c7:28:6d:a8:2c:d7:7f:d6:15: 86:bc:50:f0:45:1e:63:0f:68:7a:1c:e3:37:a1:62: cc:61:99:4a:c7:d5:1d:37:5b:35:05:ad:4a:25:1b: 4a:62:bb:71:52:46:40:79:7c:80:82:48:67:f8:4b: 84:1c:a5:8f:12:14:19:83:15:3e:f1:95:28:88:0d: 2e:10:12:75:0b:f3:c2:a3:58:63:fc:e3:44:e1:86: d7:4f:53:59:8b:21:6e:bf:99:a4:48:92:fe:e8:b4: 6b:ec:41:16:18:cf:49:c2:df:de:84:29:35:08:ce: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3E:4D:FB:4C:B2:3D:21:E4:C1:11:79:8C:B5:8D:BA:EF:83:6A:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8000::/40 Signature Algorithm: sha256WithRSAEncryption 4b:40:5a:79:9e:87:df:60:31:87:a1:f9:5f:ac:4d:af:0c:3c: 6f:6c:61:44:f3:3b:53:18:0b:bf:31:20:f6:63:f5:1c:25:d3: 76:67:e2:a7:95:3b:1d:91:7b:32:e5:67:ef:26:79:6c:76:c1: 1d:1f:5a:1a:1f:fe:42:f2:62:6a:f9:ae:13:0b:2e:4f:16:33: b6:df:03:f2:36:cc:77:17:2d:84:4b:cc:f0:3c:91:b6:14:6f: 8b:24:e1:52:52:c2:10:55:c0:09:61:b2:0c:5f:7e:d0:d1:31: 2e:47:ef:da:3b:75:25:f1:f8:5c:1f:66:14:d6:75:16:fa:2b: 1a:fa:92:57:2d:85:fd:7e:78:a6:a7:93:f7:37:94:cc:99:4b: 8f:f2:de:b6:9d:09:79:76:95:03:61:9b:d8:82:9c:b8:1c:53: 85:d8:99:92:26:01:d0:4e:78:56:33:c7:a3:7b:69:1c:10:13: e0:e5:cc:de:46:ef:43:4f:ae:99:1b:62:eb:2c:06:12:db:c5: 01:3a:e5:75:a2:d9:16:e6:5e:8e:8e:ed:dc:21:07:62:66:fe: 51:51:16:cd:84:dd:ee:1e:aa:ad:77:23:f4:b4:a5:a6:5f:16: 6a:7a:87:41:06:3b:6a:cf:cf:32:1c:bd:b5:af:81:eb:c5:67: fb:de:1b:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUIsCQgD3GDuF8NkIz08IXDmjVCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MDExM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAN2UyNDU1ZDczZTNiYzM4YTdhN2Uw YmIxMGIzYWI1MGM1ZmVlYmQzZDg0MzFkNGQwYzJmYjgwMjQ3NjA3YmExMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFh7B3opd3w/h8RfylM8si8xJZA VhUAtc3PPaK3NfyfGdYse0uvFPhMdn9mKUbOOFiYzZfKEdk+KOM+/G8y1MAoqS0k FQBPqyuteVttFusyLAIr8SOJ80TYVpcA1D6zmkfY8SLSXVqGg3jlgjSNGCbh73mo /gwXBz1wimL7F+u2+jPZjiKFRjmz3ybHKG2oLNd/1hWGvFDwRR5jD2h6HOM3oWLM YZlKx9UdN1s1Ba1KJRtKYrtxUkZAeXyAgkhn+EuEHKWPEhQZgxU+8ZUoiA0uEBJ1 C/PCo1hj/ONE4YbXT1NZiyFuv5mkSJL+6LRr7EEWGM9Jwt/ehCk1CM7WDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFY+TftMsj0h5MEReYy1jbrvg2p9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2MjcwZGEzLTk1MWQtNGVmMi1hN2ZjLTQzZmQ2YWI0ZTU2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYAwDQYJKoZIhvcNAQELBQADggEBAEtAWnmeh99gMYeh+V+s Ta8MPG9sYUTzO1MYC78xIPZj9Rwl03Zn4qeVOx2RezLlZ+8meWx2wR0fWhof/kLy Ymr5rhMLLk8WM7bfA/I2zHcXLYRLzPA8kbYUb4sk4VJSwhBVwAlhsgxfftDRMS5H 79o7dSXx+FwfZhTWdRb6Kxr6klcthf1+eKank/c3lMyZS4/y3radCXl2lQNhm9iC nLgcU4XYmZImAdBOeFYzx6N7aRwQE+DlzN5G70NPrpkbYussBhLbxQE65XWi2Rbm Xo6O7dwhB2Jm/lFRFs2E3e4eqq13I/S0paZfFmp6h0EGO2rPzzIcvbWvgevFZ/ve Gww= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:06 2025 by rpki-client