$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa File: 880212bb-51a8-4111-9ffb-f1fce2a3315f.roa (raw, json) Hash identifier: b+7RIR4xphDPM+wsQEnoxSOBWYZhSH/cr8uQsvOAA38= Subject key identifier: AF:3C:55:1A:76:1F:C5:35:52:0F:DB:99:FA:47:1F:16:F4:04:AE:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DD1C8D48B48D08E88F297A13B2EAE5107010C5F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa Signing time: Tue 10 Jun 2025 15:20:58 +0000 ROA not before: Tue 10 Jun 2025 15:20:58 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:c8:d4:8b:48:d0:8e:88:f2:97:a1:3b:2e:ae:51:07:01:0c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:20:58 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=fd6938d351043ec09686039681d8fccfc3c596e9a102263a226a26a2b0b5c0ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:c3:3b:e7:bb:15:3e:a8:62:b2:7e:7e:8c: 2f:38:61:04:d0:02:55:9e:7d:9e:8c:9c:69:2f:f7: 5b:38:5c:3e:30:6b:29:25:11:d4:bb:c9:99:ba:d6: 41:d4:e6:b2:23:c1:d5:03:8d:77:44:56:1f:d4:8b: 76:9b:7d:01:b2:20:5c:71:38:cc:eb:6e:b8:c3:25: d9:01:2b:25:04:28:2c:93:6f:e6:bc:26:93:dc:de: 82:ca:83:93:e0:e0:f2:da:ff:c6:be:c7:c0:a6:21: 9e:f5:ec:de:e8:fc:52:3c:e4:85:fc:37:af:47:34: b4:45:ae:36:34:c6:54:08:c7:b0:57:c5:fa:41:d1: 11:27:71:8f:2f:88:50:09:3a:84:e2:86:54:ec:3d: eb:09:68:5a:50:05:12:02:4f:09:64:3f:28:df:c9: a7:38:4e:0a:3a:63:1a:2b:0e:1c:f1:3f:94:d3:56: 5e:b8:f8:7f:8e:8e:a2:e7:19:61:d5:77:a8:8b:74: 83:6e:33:35:60:4a:dc:f0:89:90:3c:a1:4b:2a:68: 55:5d:ca:b8:c4:ac:4b:63:18:fa:a5:8b:3c:7a:93: 7a:ce:c6:50:fc:ba:58:a8:99:bd:0c:26:19:d2:fe: b7:32:18:1c:73:f6:7a:c4:87:37:7c:a6:29:78:c8: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:55:1A:76:1F:C5:35:52:0F:DB:99:FA:47:1F:16:F4:04:AE:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:7000::/40 Signature Algorithm: sha256WithRSAEncryption 64:cf:a7:dd:70:e5:dc:45:9a:05:7e:a6:e6:63:22:da:b1:a9: d1:6d:8b:2f:e7:3c:0f:25:4a:20:2d:46:aa:0d:b0:a2:15:58: 88:6a:50:2d:43:fd:74:f3:40:6f:97:ad:43:fc:b0:45:f2:9a: 90:2e:a1:26:6f:17:23:24:c2:6f:ed:1c:48:b9:b1:21:bb:eb: 56:1a:e3:82:76:fe:55:a5:bb:8b:fe:6a:cf:0e:6c:a5:f7:8e: b4:ed:ff:a3:f9:4a:33:ac:4d:72:7b:61:d2:ba:67:e3:27:7d: 22:3a:d9:d8:b4:70:f8:11:a0:9f:78:1c:52:0e:18:ff:e7:d3: 4a:46:d8:3f:66:39:99:ba:00:82:7d:c4:b0:ab:19:88:a1:0d: ca:b3:59:3b:32:75:eb:73:f9:7a:03:19:4f:05:fa:5f:ba:73: 22:9c:75:7d:d9:99:70:d7:ca:cc:b4:86:cc:9e:26:53:d2:f8: c9:6a:2a:65:fd:e9:d0:86:fb:57:d0:ba:07:a5:8c:37:5e:05: b6:d2:3b:74:d4:ab:a3:3d:b2:dc:b2:be:6c:48:15:3d:4d:57: fa:67:a7:4a:33:da:e1:c3:d6:5a:14:de:35:c9:9b:dc:68:27: 1a:5a:33:64:b9:27:0c:bb:16:27:e3:d7:e5:6d:8b:92:71:51: f5:6c:53:17 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHdHI1ItI0I6I8pehOy6uUQcBDF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MjA1OFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZmQ2OTM4ZDM1MTA0M2VjMDk2ODYw Mzk2ODFkOGZjY2ZjM2M1OTZlOWExMDIyNjNhMjI2YTI2YTJiMGI1YzBlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOfDO+e7FT6oYrJ+fowvOGEE0AJV nn2ejJxpL/dbOFw+MGspJRHUu8mZutZB1OayI8HVA413RFYf1It2m30BsiBccTjM 6264wyXZASslBCgsk2/mvCaT3N6CyoOT4ODy2v/GvsfApiGe9eze6PxSPOSF/Dev RzS0Ra42NMZUCMewV8X6QdERJ3GPL4hQCTqE4oZU7D3rCWhaUAUSAk8JZD8o38mn OE4KOmMaKw4c8T+U01ZeuPh/jo6i5xlh1Xeoi3SDbjM1YErc8ImQPKFLKmhVXcq4 xKxLYxj6pYs8epN6zsZQ/LpYqJm9DCYZ0v63Mhgcc/Z6xIc3fKYpeMgTwQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK88VRp2H8U1Ug/bmfpHHxb0BK5rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MDIxMmJiLTUxYTgtNDExMS05ZmZiLWYxZmNlMmEzMzE1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacHAwDQYJKoZIhvcNAQELBQADggEBAGTPp91w5dxFmgV+puZj ItqxqdFtiy/nPA8lSiAtRqoNsKIVWIhqUC1D/XTzQG+XrUP8sEXympAuoSZvFyMk wm/tHEi5sSG761Ya44J2/lWlu4v+as8ObKX3jrTt/6P5SjOsTXJ7YdK6Z+MnfSI6 2di0cPgRoJ94HFIOGP/n00pG2D9mOZm6AIJ9xLCrGYihDcqzWTsydetz+XoDGU8F +l+6cyKcdX3ZmXDXysy0hsyeJlPS+MlqKmX96dCG+1fQugeljDdeBbbSO3TUq6M9 styyvmxIFT1NV/pnp0oz2uHD1loU3jXJm9xoJxpaM2S5Jwy7Fifj1+Vti5JxUfVs Uxc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:10 2025 by rpki-client