$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa File: 8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa (raw, json) Hash identifier: m5qFt1tE1xVrOBPx31shwyRTdMjpNZ1snUxf6DOMDIE= Subject key identifier: B1:D9:F0:1F:A2:B5:18:12:69:0D:4B:36:85:8C:E8:9A:C8:26:9A:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E45DD9A6B8F5E8841A87EA4D0192A32AF70A23E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa Signing time: Mon 09 Jun 2025 15:50:13 +0000 ROA not before: Mon 09 Jun 2025 15:50:13 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:45:dd:9a:6b:8f:5e:88:41:a8:7e:a4:d0:19:2a:32:af:70:a2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:50:13 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=5c414a0569bab6140d36ec3f4a25cd602a56d53a1d3a56eacaf596313d71501d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:34:99:92:1c:c5:f6:cb:5f:ca:2e:7d:b7: 4a:17:c4:13:e9:07:88:ac:cc:38:66:3a:dd:88:56: e1:20:d8:3f:60:0d:0a:73:a1:bf:af:73:eb:58:7f: 9c:a6:92:24:10:7f:46:b7:63:67:88:a9:c6:bc:ea: 03:b2:49:7d:73:50:ad:9a:2e:66:8d:b6:85:22:83: 4f:2a:4e:27:f1:ca:30:ea:82:d3:6d:22:20:de:c9: 18:10:68:86:47:aa:6e:09:d9:45:aa:83:0a:36:cf: 77:46:3a:c1:c9:01:08:f9:e8:01:3d:28:2e:77:56: 24:6b:b6:e4:34:b9:cf:1b:c5:0a:60:c7:9e:9d:9e: 3e:7d:34:fd:5e:49:f4:10:97:56:7d:a0:71:e1:70: fd:cc:49:bf:ee:44:5f:54:76:d1:1e:24:ba:0e:ac: 6c:68:eb:72:ff:c0:02:02:05:14:b8:04:cf:2a:e3: 9a:a7:bf:93:1f:b2:15:bd:5f:cd:70:dd:92:05:f6: 6c:d0:6f:cc:0b:07:f8:86:f7:4c:55:0a:15:79:f5: ef:ca:7a:2f:c8:9f:da:f3:ee:4e:b1:8b:38:b1:e9: d4:fc:86:a3:6d:9a:ca:03:52:4d:10:eb:ef:4c:d3: 6a:32:a1:da:65:0b:8b:35:c4:ad:70:b4:9b:12:43: 8b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:F0:1F:A2:B5:18:12:69:0D:4B:36:85:8C:E8:9A:C8:26:9A:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2040::/48 Signature Algorithm: sha256WithRSAEncryption 8a:a2:c4:e6:fe:ce:9a:db:39:be:67:de:93:f6:ba:5e:43:dc: 79:4b:3b:47:5e:50:c2:a1:51:4e:5c:85:71:55:d7:0c:53:14: 2b:13:4f:77:24:02:bd:38:d0:2c:ff:71:f4:e0:59:93:26:fb: 21:6c:73:c4:ae:9d:9f:07:a9:d9:52:63:17:32:da:de:c5:ce: af:5d:d9:97:e3:a3:69:38:e9:15:51:4f:1d:d0:3d:12:d4:69: fd:d6:b9:45:1d:73:f2:8e:51:ca:80:d9:e7:9c:f1:d7:a7:f1: 55:56:1e:22:d1:c8:77:9f:38:ab:5e:f6:18:e8:27:a4:35:1d: 82:0b:6d:f4:69:25:a3:37:9e:ea:a8:6c:4c:f5:f3:72:87:95: 2c:df:ad:ff:35:5b:bd:e3:6a:4a:b4:d6:90:c9:0e:5c:27:a6: 4b:4f:13:ce:9b:dd:5e:62:d3:16:98:9e:84:35:77:70:6c:b6: b7:17:4f:e6:f5:57:bc:42:1f:9c:3d:99:e1:64:e0:c5:f0:12: 97:6a:7e:d9:db:be:34:af:dd:09:f8:18:2a:5c:a1:40:34:28: ff:6e:f7:ac:d5:6c:d7:c4:67:c0:5c:50:bd:b3:7b:5c:1d:94: 97:35:27:d2:62:f6:4a:c3:e9:71:f5:cb:49:78:fe:56:35:19: 16:3d:5f:16 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULkXdmmuPXohBqH6k0BkqMq9woj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1NTAxM1oX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANWM0MTRhMDU2OWJhYjYxNDBkMzZl YzNmNGEyNWNkNjAyYTU2ZDUzYTFkM2E1NmVhY2FmNTk2MzEzZDcxNTAxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eM0mZIcxfbLX8oufbdKF8QT6QeI rMw4ZjrdiFbhINg/YA0Kc6G/r3PrWH+cppIkEH9Gt2NniKnGvOoDskl9c1Ctmi5m jbaFIoNPKk4n8cow6oLTbSIg3skYEGiGR6puCdlFqoMKNs93RjrByQEI+egBPSgu d1Yka7bkNLnPG8UKYMeenZ4+fTT9Xkn0EJdWfaBx4XD9zEm/7kRfVHbRHiS6Dqxs aOty/8ACAgUUuATPKuOap7+TH7IVvV/NcN2SBfZs0G/MCwf4hvdMVQoVefXvynov yJ/a8+5OsYs4senU/IajbZrKA1JNEOvvTNNqMqHaZQuLNcStcLSbEkOL7QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLHZ8B+itRgSaQ1LNoWM6JrIJprVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjNmIzZTJmLWM0NDEtNGQyZS1hM2ZiLTUxMWFlYmQ3MmFhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yBAMA0GCSqGSIb3DQEBCwUAA4IBAQCKosTm/s6a2zm+Z96T 9rpeQ9x5SztHXlDCoVFOXIVxVdcMUxQrE093JAK9ONAs/3H04FmTJvshbHPErp2f B6nZUmMXMtrexc6vXdmX46NpOOkVUU8d0D0S1Gn91rlFHXPyjlHKgNnnnPHXp/FV Vh4i0ch3nzirXvYY6CekNR2CC230aSWjN57qqGxM9fNyh5Us363/NVu942pKtNaQ yQ5cJ6ZLTxPOm91eYtMWmJ6ENXdwbLa3F0/m9Ve8Qh+cPZnhZODF8BKXan7Z2740 r90J+BgqXKFANCj/bves1WzXxGfAXFC9s3tcHZSXNSfSYvZKw+lx9ctJeP5WNRkW PV8W -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:27 2025 by rpki-client