$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa File: 836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa (raw, json) Hash identifier: KG7Kkr84AQGJHKTxaYOvvPcOE8tKb82N7P5vl843HjI= Subject key identifier: 9B:8A:B1:18:D3:FF:3E:71:C4:A4:52:25:69:2B:B4:DA:A7:F8:BF:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40AF73B8909D5F0F5C08D3433538F9F994E751DB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa Signing time: Mon 09 Jun 2025 15:50:17 +0000 ROA not before: Mon 09 Jun 2025 15:50:17 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:af:73:b8:90:9d:5f:0f:5c:08:d3:43:35:38:f9:f9:94:e7:51:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:50:17 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=2e2f2d1749002fd137cdc85901ca2d52a015a566d28090823af71cb9a10ebb4f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:12:6b:2a:8b:16:8e:02:73:8b:12:18:2a: 05:75:98:ce:b6:4a:d1:bb:9c:91:72:19:cf:b9:79: 18:ca:8e:b9:aa:bd:d2:67:13:a4:b4:28:e5:da:fe: 6d:2f:dc:79:c3:fa:4f:32:99:63:eb:72:1f:cf:62: de:d2:3c:f9:06:c2:34:6b:50:bf:23:4d:53:f7:c2: 4c:9e:ee:27:6f:bb:f4:e7:0f:e4:4b:c6:05:13:92: 31:5b:2e:f2:ac:00:2b:2d:85:ab:17:e6:2e:fa:07: 09:72:32:18:48:9f:53:a1:1f:90:2e:72:30:7f:6f: 84:67:15:64:f0:c1:aa:72:0c:2a:96:a4:d4:40:c1: 07:60:f3:12:ed:8a:2e:06:6b:a7:cb:28:4a:c7:68: 8c:20:0f:f5:02:98:c5:6a:7d:7b:a9:ed:1b:73:6b: 4e:75:25:5e:99:bf:52:e2:c4:fc:45:1c:7e:d9:ea: d3:11:09:d4:c7:6c:4f:5c:f5:ea:34:d6:cc:34:b9: 77:9a:3b:b8:aa:4f:36:cd:4e:7c:fb:93:7e:f1:b1: 8c:3e:0a:2f:01:24:4a:45:94:32:6b:ef:21:04:ce: 3f:6c:0a:56:12:23:5f:01:c2:37:e9:37:c8:e7:9a: 46:ba:a6:c1:04:79:bb:ba:c3:ea:8b:08:e8:24:ea: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:B1:18:D3:FF:3E:71:C4:A4:52:25:69:2B:B4:DA:A7:F8:BF:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:880::/46 Signature Algorithm: sha256WithRSAEncryption 48:95:e0:58:c7:19:4b:50:ef:17:5f:65:18:7b:ba:d5:8f:07: 38:b9:5d:e5:e0:88:22:d0:b6:e5:8e:32:18:58:d6:43:fc:bf: 68:ac:d2:f4:5a:9d:0c:db:1f:70:d7:71:5a:44:57:fb:6c:9c: 19:ee:bf:86:6c:65:2e:42:08:17:72:83:41:18:85:03:d1:3d: 6c:ab:14:6d:08:c0:f7:0f:7d:ba:57:8f:74:67:9c:f3:0f:3f: e3:a6:4a:6a:e4:33:78:b9:76:ab:76:f0:07:13:e5:ae:08:7d: 56:a2:8f:df:7b:02:0f:24:a3:27:cb:31:03:c2:e6:0d:59:77: 07:38:5a:b6:50:59:46:dd:17:e7:1e:ec:26:ee:99:74:f4:69: b1:9a:4c:59:6d:21:a1:fb:a5:ea:2d:47:aa:2e:2d:b2:86:73: 39:40:a7:ca:f0:d1:ce:f7:25:e5:4e:0e:18:c9:e0:43:0a:b8: b5:70:8c:83:fb:04:c4:78:35:e0:e3:1b:fa:ae:a9:26:7c:97: a9:b5:0a:0f:22:0c:1d:62:81:a2:cf:11:1c:ad:93:09:4e:db: 5e:f5:c7:7f:4d:9b:aa:41:ad:60:4a:78:a5:c5:59:a1:63:25: c0:d0:77:8a:ed:e5:6e:8f:ca:c4:e7:33:b3:b4:7c:33:40:86: 08:13:2b:2b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQK9zuJCdXw9cCNNDNTj5+ZTnUdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1NTAxN1oX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAMmUyZjJkMTc0OTAwMmZkMTM3Y2Rj ODU5MDFjYTJkNTJhMDE1YTU2NmQyODA5MDgyM2FmNzFjYjlhMTBlYmI0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmoSayqLFo4Cc4sSGCoFdZjOtkrR u5yRchnPuXkYyo65qr3SZxOktCjl2v5tL9x5w/pPMplj63Ifz2Le0jz5BsI0a1C/ I01T98JMnu4nb7v05w/kS8YFE5IxWy7yrAArLYWrF+Yu+gcJcjIYSJ9ToR+QLnIw f2+EZxVk8MGqcgwqlqTUQMEHYPMS7YouBmunyyhKx2iMIA/1ApjFan17qe0bc2tO dSVemb9S4sT8RRx+2erTEQnUx2xPXPXqNNbMNLl3mju4qk82zU58+5N+8bGMPgov ASRKRZQya+8hBM4/bApWEiNfAcI36TfI55pGuqbBBHm7usPqiwjoJOpRLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJuKsRjT/z5xxKRSJWkrtNqn+L+VMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzNmZkYzNkLWJhYzItNGNlNC05NDdhLTg4MzA4ODFjYjhlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9wiAMA0GCSqGSIb3DQEBCwUAA4IBAQBIleBYxxlLUO8XX2UY e7rVjwc4uV3l4Igi0LbljjIYWNZD/L9orNL0Wp0M2x9w13FaRFf7bJwZ7r+GbGUu QggXcoNBGIUD0T1sqxRtCMD3D326V490Z5zzDz/jpkpq5DN4uXardvAHE+WuCH1W oo/fewIPJKMnyzEDwuYNWXcHOFq2UFlG3RfnHuwm7pl09GmxmkxZbSGh+6XqLUeq Li2yhnM5QKfK8NHO9yXlTg4YyeBDCri1cIyD+wTEeDXg4xv6rqkmfJeptQoPIgwd YoGizxEcrZMJTtte9cd/TZuqQa1gSnilxVmhYyXA0HeK7eVuj8rE5zOztHwzQIYI Eysr -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:17 2025 by rpki-client