$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa File: 8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa (raw, json) Hash identifier: 6vkE0Uw7iuU+O93rxnUlpY6ScASfi2lcZCqON39N+es= Subject key identifier: 5D:E3:DB:55:46:B9:49:82:28:EF:5A:45:78:6E:B7:07:32:C8:A1:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50AE0BADE658FF3EDFA18E3F163DCD491B371BEB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa Signing time: Tue 10 Jun 2025 00:10:54 +0000 ROA not before: Tue 10 Jun 2025 00:10:54 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ae:0b:ad:e6:58:ff:3e:df:a1:8e:3f:16:3d:cd:49:1b:37:1b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:10:54 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ad0b25154d02e23cb5ad42d268ea374539b52446bb69f77358ce659c4546ec6a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:e2:ea:06:0e:08:97:c4:c8:85:8f:81:0f: b2:79:65:cb:ab:08:84:de:99:ed:85:77:17:c6:f1: c6:80:6c:fb:1f:e2:28:a4:3e:af:2d:41:70:79:eb: c4:c5:75:53:03:e1:bb:7d:90:35:23:b0:c8:50:88: a8:b5:77:7e:63:b3:ad:3e:21:d1:49:ce:a9:9c:14: 05:37:18:95:48:d0:76:51:fe:fb:3d:9f:82:45:61: 11:e7:5b:5c:d5:a2:ea:b6:6d:cf:53:77:17:9d:07: 94:68:12:3f:31:47:49:70:3a:6c:60:ae:f1:ba:6b: 71:ad:b1:62:c2:fe:ec:19:99:a3:5a:d9:01:eb:2b: 2e:cb:27:69:e9:1f:16:ab:a6:e1:01:7e:b0:ab:d8: eb:83:cb:4a:a9:81:19:70:89:a4:c7:12:ac:04:8e: dd:2f:4d:87:fb:0c:8e:24:59:88:91:74:07:08:07: 39:27:6b:70:09:af:af:24:eb:87:88:ff:82:25:82: 35:5d:15:bd:bd:69:19:73:27:29:11:c5:ae:9e:04: bc:65:b8:7e:a2:ac:e4:ee:c8:57:af:91:40:20:e2: e4:15:4c:0d:fb:f6:3d:26:45:49:55:e6:fa:f0:6b: de:46:2e:34:a6:5a:98:9e:8c:d3:d0:ad:21:6b:13: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:DB:55:46:B9:49:82:28:EF:5A:45:78:6E:B7:07:32:C8:A1:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:60c0::/46 Signature Algorithm: sha256WithRSAEncryption 49:d2:07:30:3c:b0:78:ed:db:98:0f:fd:25:79:69:a1:73:82: c7:b4:58:5c:36:0e:22:d1:c8:cf:b6:bb:18:ce:fd:bc:29:c4: bb:54:9b:b9:c8:35:94:d2:c9:9e:d0:15:16:ec:1f:72:6b:dd: 3d:0d:f0:80:06:03:8a:cb:41:13:2c:fa:12:8b:c6:15:7f:d0: fb:bb:47:a5:d2:40:1e:4a:74:3a:4e:2c:40:9c:50:c3:55:b1: 0b:33:8d:63:26:04:2e:bd:79:db:b1:b0:57:1d:7f:dd:bf:90: 9f:d0:07:ff:cb:8b:68:a5:65:67:4a:50:00:cb:60:42:d4:92: a4:76:fe:20:96:ff:e6:96:18:f1:53:83:61:80:c1:cb:0b:1c: 62:19:af:99:5f:86:40:94:cf:1e:df:f5:73:da:a8:e1:98:b6: b1:95:61:fe:56:2d:e2:c4:fc:4f:d7:c7:e9:b7:76:a3:04:f7: 11:00:3d:b8:41:35:19:3d:ce:25:c9:ea:39:92:95:2d:3a:c4: 76:62:b4:2d:9f:40:92:47:3f:f8:0b:cd:f1:e8:f1:a8:da:7a: e5:c9:4a:5d:43:57:bd:0e:30:49:73:31:65:fd:e3:e7:77:d0: 40:67:19:36:9a:5a:44:bd:0f:bc:ef:20:e7:f6:86:cf:b2:cc: 62:b5:76:9e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUK4LreZY/z7foY4/Fj3NSRs3G+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMTA1NFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYWQwYjI1MTU0ZDAyZTIzY2I1YWQ0 MmQyNjhlYTM3NDUzOWI1MjQ0NmJiNjlmNzczNThjZTY1OWM0NTQ2ZWM2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N/i6gYOCJfEyIWPgQ+yeWXLqwiE 3pnthXcXxvHGgGz7H+IopD6vLUFweevExXVTA+G7fZA1I7DIUIiotXd+Y7OtPiHR Sc6pnBQFNxiVSNB2Uf77PZ+CRWER51tc1aLqtm3PU3cXnQeUaBI/MUdJcDpsYK7x umtxrbFiwv7sGZmjWtkB6ysuyydp6R8Wq6bhAX6wq9jrg8tKqYEZcImkxxKsBI7d L02H+wyOJFmIkXQHCAc5J2twCa+vJOuHiP+CJYI1XRW9vWkZcycpEcWungS8Zbh+ oqzk7shXr5FAIOLkFUwN+/Y9JkVJVeb68GveRi40plqYnozT0K0haxM6uQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF3j21VGuUmCKO9aRXhutwcyyKEgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwNjFhNGQwLTk5ZWMtNGYzOC1iMWEwLWVkMDEzYjZiYmM1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba92DAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ0gcwPLB47duYD/0l eWmhc4LHtFhcNg4i0cjPtrsYzv28KcS7VJu5yDWU0sme0BUW7B9ya909DfCABgOK y0ETLPoSi8YVf9D7u0el0kAeSnQ6TixAnFDDVbELM41jJgQuvXnbsbBXHX/dv5Cf 0Af/y4topWVnSlAAy2BC1JKkdv4glv/mlhjxU4NhgMHLCxxiGa+ZX4ZAlM8e3/Vz 2qjhmLaxlWH+Vi3ixPxP18fpt3ajBPcRAD24QTUZPc4lyeo5kpUtOsR2YrQtn0CS Rz/4C83x6PGo2nrlyUpdQ1e9DjBJczFl/ePnd9BAZxk2mlpEvQ+87yDn9obPssxi tXae -----END CERTIFICATE-----Generated at Sat Jun 14 06:22:01 2025 by rpki-client