$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa File: 91d6523c-4ab1-4850-a8cf-025e394ee348.roa (raw, json) Hash identifier: 5FObf6A6T3kd0xDFIvJhmiClAkMcXBnPQkpTBfhb1jg= Subject key identifier: 64:BF:69:E4:10:C9:3E:E6:2B:B8:56:C8:3E:41:AE:3B:73:26:CB:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 040E023EBA3360709B94E4FA5EFD6F954BDB573C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa Signing time: Wed 04 Jun 2025 00:00:06 +0000 ROA not before: Wed 04 Jun 2025 00:00:06 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0e:02:3e:ba:33:60:70:9b:94:e4:fa:5e:fd:6f:95:4b:db:57:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 4 00:00:06 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=b2d1a899f2fb95e87546493b2c3c79d742581dd692872a6ca5650188276349c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:90:08:c4:9d:94:96:8f:4e:8c:d1:f2:9e:b5: 7d:9d:10:6c:7e:0a:d6:d5:a7:48:ac:df:c8:ac:76: 15:9d:e9:8f:69:f8:a1:87:a9:71:7b:85:08:78:3f: b7:23:4f:7e:41:a5:1e:63:b0:64:6c:55:b8:c2:81: 2a:68:7a:0a:82:a4:7d:5b:f5:db:53:58:b9:d3:89: 75:9c:84:b6:0a:19:52:36:24:3e:7f:97:a5:e6:ad: d6:f5:b6:da:18:87:f9:c7:44:7c:3f:40:d8:ce:fd: 3c:ee:6a:a0:d7:80:0f:36:8e:3d:28:8c:59:d0:c6: 74:7b:c4:5d:98:29:7f:50:b1:f7:d8:e9:47:e3:7e: b5:89:aa:9b:6f:72:64:c3:42:5c:34:c5:ae:fa:57: 9f:6e:8b:2c:39:84:c2:7f:4f:8b:6b:55:88:6e:22: 99:77:08:6c:ad:01:a6:6e:52:df:c7:9b:b9:8d:21: c9:ed:aa:20:5c:a1:6c:c4:f9:c4:be:ec:6d:af:3b: 34:e6:c5:5e:80:22:58:60:72:41:20:d6:1a:ae:28: ac:52:44:2d:8d:d6:c1:62:f5:40:b2:93:50:21:d5: 43:61:37:5f:14:c5:c6:59:4b:7c:ff:20:95:23:01: c8:cf:61:53:d7:7b:61:75:3f:38:23:1b:22:1a:5a: 94:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:69:E4:10:C9:3E:E6:2B:B8:56:C8:3E:41:AE:3B:73:26:CB:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:6000::/40 Signature Algorithm: sha256WithRSAEncryption 48:ff:bd:3a:9b:f3:a6:7d:ec:e1:3b:a1:77:8e:83:73:51:1f: 0b:88:4c:51:ae:b3:8d:f3:cb:25:74:5d:26:09:c5:d3:b9:77: 34:50:db:53:7c:c0:0f:66:02:42:69:7d:6d:2f:73:64:39:50: 2b:ff:e6:db:9a:62:67:5a:9e:67:76:9f:10:de:86:8d:a7:4b: 5d:1c:f6:08:3a:83:12:2c:62:db:95:03:90:f9:4d:dd:be:0e: f6:81:0b:c8:6f:f6:7f:d6:3c:c0:01:25:2e:90:53:96:d9:7c: 0b:d6:63:e0:9b:cb:46:2f:fb:b8:8e:8c:a5:d2:20:07:dd:cf: cb:9a:63:ad:7a:8f:cf:68:f5:87:b1:c4:9f:0f:f3:8b:dd:97: ec:cf:78:25:ae:bb:6d:5e:ac:72:35:d7:99:d4:24:90:11:8b: 94:3b:96:6d:c7:a1:ee:dc:b4:1d:94:64:8b:c5:83:96:9c:40: 75:09:d7:77:d7:01:cc:3f:0c:fc:23:1e:bc:a7:79:40:c9:3f: 4d:ee:5e:dd:33:c9:0d:12:5c:bb:25:f0:3e:c0:be:3d:96:39: 4e:06:c2:58:14:96:c6:e4:7e:48:4b:6c:78:fa:cf:86:7b:a4: 6e:c6:04:e8:48:a4:f0:81:6d:54:f6:73:5b:e5:bf:ca:fe:06: c5:25:cd:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBA4CProzYHCblOT6Xv1vlUvbVzwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNDAwMDAwNloX DTI1MDcwOTIzNTk1OVowejFJMEcGA1UEBRNAYjJkMWE4OTlmMmZiOTVlODc1NDY0 OTNiMmMzYzc5ZDc0MjU4MWRkNjkyODcyYTZjYTU2NTAxODgyNzYzNDljNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipAIxJ2Ulo9OjNHynrV9nRBsfgrW 1adIrN/IrHYVnemPafihh6lxe4UIeD+3I09+QaUeY7BkbFW4woEqaHoKgqR9W/Xb U1i504l1nIS2ChlSNiQ+f5el5q3W9bbaGIf5x0R8P0DYzv087mqg14APNo49KIxZ 0MZ0e8RdmCl/ULH32OlH4361iaqbb3Jkw0JcNMWu+lefbossOYTCf0+La1WIbiKZ dwhsrQGmblLfx5u5jSHJ7aogXKFsxPnEvuxtrzs05sVegCJYYHJBINYariisUkQt jdbBYvVAspNQIdVDYTdfFMXGWUt8/yCVIwHIz2FT13thdT84IxsiGlqU2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGS/aeQQyT7mK7hWyD5BrjtzJsv/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxZDY1MjNjLTRhYjEtNDg1MC1hOGNmLTAyNWUzOTRlZTM0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYGAwDQYJKoZIhvcNAQELBQADggEBAEj/vTqb86Z97OE7oXeO g3NRHwuITFGus43zyyV0XSYJxdO5dzRQ21N8wA9mAkJpfW0vc2Q5UCv/5tuaYmda nmd2nxDeho2nS10c9gg6gxIsYtuVA5D5Td2+DvaBC8hv9n/WPMABJS6QU5bZfAvW Y+Cby0Yv+7iOjKXSIAfdz8uaY616j89o9YexxJ8P84vdl+zPeCWuu21erHI115nU JJARi5Q7lm3Hoe7ctB2UZIvFg5acQHUJ13fXAcw/DPwjHryneUDJP03uXt0zyQ0S XLsl8D7Avj2WOU4GwlgUlsbkfkhLbHj6z4Z7pG7GBOhIpPCBbVT2c1vlv8r+BsUl zY0= -----END CERTIFICATE-----Generated at Sat Jun 14 23:50:41 2025 by rpki-client