$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae4367a2-0505-4de7-8e63-9b244ca6020f.roa File: ae4367a2-0505-4de7-8e63-9b244ca6020f.roa (raw, json) Hash identifier: q2WiRBsqHT/n8bCQjToaAkCQFLvYyfhz72Ti3Cc5SiE= Subject key identifier: 00:6A:F8:5D:E9:98:73:97:3D:AB:07:06:01:82:30:5C:2B:CE:C8:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5532781388FC2EB46DE1B25BB845E48D5FA5406B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae4367a2-0505-4de7-8e63-9b244ca6020f.roa Signing time: Tue 10 Jun 2025 00:50:13 +0000 ROA not before: Tue 10 Jun 2025 00:50:13 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:32:78:13:88:fc:2e:b4:6d:e1:b2:5b:b8:45:e4:8d:5f:a5:40:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:50:13 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=e8ebd10a41bb863a2445daab46f72cb516758e4997df1726e1dba6f30e5016d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:e1:1c:0f:3f:e8:d6:90:d4:9d:0f:a7:20: 18:c3:bf:99:7b:c3:36:c9:05:76:03:55:8b:4e:47: a9:f8:13:e6:74:0b:ac:41:a8:22:a3:67:20:30:57: 1b:58:80:6d:6b:23:be:07:36:21:87:2f:43:29:d7: 8c:ad:4d:c5:5c:3b:12:19:be:8c:53:bc:54:3e:36: 9a:c9:9f:14:f3:bc:fc:30:f0:4a:05:02:61:93:7c: 6b:31:ce:b0:d0:08:78:6b:d8:b7:b7:66:11:c6:f2: 6a:9e:dc:89:29:81:9d:30:16:c7:26:d4:a3:dd:eb: d4:4c:f8:19:79:20:21:2c:d6:c7:6a:39:7e:7e:6f: 8a:1d:4a:25:fa:76:7a:3c:27:ee:54:17:87:61:8d: ce:ec:b7:85:3b:9f:8f:c1:70:e9:89:f6:8f:5d:8a: e2:99:33:55:03:8c:44:ee:15:91:12:ac:4b:cf:7d: 30:cb:1b:e5:e7:8b:39:a6:20:d2:6b:1c:a5:e8:6f: e5:b5:e8:0a:42:8a:af:f4:47:a8:ea:94:64:d5:4f: 37:99:b9:f9:86:6a:bb:94:33:9c:22:ae:ac:4d:0c: b2:51:00:08:12:d4:48:b0:a7:6f:9a:9f:1d:ad:77: d3:0b:fa:33:07:4a:5b:79:5e:5e:2e:83:5f:c3:c9: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:F8:5D:E9:98:73:97:3D:AB:07:06:01:82:30:5C:2B:CE:C8:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae4367a2-0505-4de7-8e63-9b244ca6020f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8c0::/46 Signature Algorithm: sha256WithRSAEncryption ac:43:72:c8:82:6b:32:3c:2a:2b:db:98:0d:fb:d2:07:9b:d9: b1:cb:90:0c:36:cc:70:12:ce:5e:d8:88:2d:5d:35:71:83:bd: 32:94:ef:0f:c2:ba:d3:46:a9:27:60:11:a9:1d:2e:6e:40:32: 69:b6:43:a1:29:45:35:61:67:32:72:76:39:03:f2:f8:cc:45: 75:62:7e:0b:d6:1b:72:0a:e8:c1:ec:a7:71:03:c0:d9:49:13: dc:b5:38:2d:3a:71:26:f8:4e:56:17:31:e5:df:7d:27:22:4f: 45:2f:80:80:8c:14:c5:44:ce:7a:d6:72:2f:0d:99:6d:19:07: 08:c9:99:e1:54:08:d1:8b:ed:b4:92:34:bf:1f:48:8f:7e:a4: 14:60:84:22:34:dc:a2:ce:3f:2e:86:4a:ce:bd:20:22:40:fd: 68:0f:24:fe:30:4b:57:9b:29:05:f5:bd:0e:e0:bc:bb:c6:82: 97:ec:6f:9b:41:fc:45:fe:d4:8d:0f:c1:6d:83:1a:fa:af:17: 15:a4:9f:54:06:8c:f4:fe:de:40:2c:99:71:bd:19:91:05:b8: 65:ed:99:05:ed:73:dc:b8:b6:97:d4:96:6f:05:ae:bd:39:16: 23:ef:cf:82:09:42:51:9f:92:6f:43:55:04:29:67:83:25:54: a2:46:82:78 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVTJ4E4j8LrRt4bJbuEXkjV+lQGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNTAxM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZThlYmQxMGE0MWJiODYzYTI0NDVk YWFiNDZmNzJjYjUxNjc1OGU0OTk3ZGYxNzI2ZTFkYmE2ZjMwZTUwMTZkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7jhHA8/6NaQ1J0PpyAYw7+Ze8M2 yQV2A1WLTkep+BPmdAusQagio2cgMFcbWIBtayO+BzYhhy9DKdeMrU3FXDsSGb6M U7xUPjaayZ8U87z8MPBKBQJhk3xrMc6w0Ah4a9i3t2YRxvJqntyJKYGdMBbHJtSj 3evUTPgZeSAhLNbHajl+fm+KHUol+nZ6PCfuVBeHYY3O7LeFO5+PwXDpifaPXYri mTNVA4xE7hWREqxLz30wyxvl54s5piDSaxyl6G/ltegKQoqv9Eeo6pRk1U83mbn5 hmq7lDOcIq6sTQyyUQAIEtRIsKdvmp8drXfTC/ozB0pbeV5eLoNfw8mG9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFABq+F3pmHOXPasHBgGCMFwrzsgfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlNDM2N2EyLTA1MDUtNGRlNy04ZTYzLTliMjQ0Y2E2MDIwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9wjAMA0GCSqGSIb3DQEBCwUAA4IBAQCsQ3LIgmsyPCor25gN +9IHm9mxy5AMNsxwEs5e2IgtXTVxg70ylO8PwrrTRqknYBGpHS5uQDJptkOhKUU1 YWcycnY5A/L4zEV1Yn4L1htyCujB7KdxA8DZSRPctTgtOnEm+E5WFzHl330nIk9F L4CAjBTFRM561nIvDZltGQcIyZnhVAjRi+20kjS/H0iPfqQUYIQiNNyizj8uhkrO vSAiQP1oDyT+MEtXmykF9b0O4Ly7xoKX7G+bQfxF/tSND8Ftgxr6rxcVpJ9UBoz0 /t5ALJlxvRmRBbhl7ZkF7XPcuLaX1JZvBa69ORYj78+CCUJRn5JvQ1UEKWeDJVSi RoJ4 -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:21 2025 by rpki-client