$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa File: b235d168-8a46-461c-98e6-45ec802567db.roa (raw, json) Hash identifier: yXHjnbUyfHhTQEaE2AXqhtdsYhzTPl3I1Tsc8ecw+xU= Subject key identifier: 42:B1:C2:1D:43:B5:05:F7:9A:30:8E:7F:AB:5B:F0:94:3E:2D:10:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F188986F8DA623653F9A3AF44D323C6C5F75675 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa Signing time: Tue 10 Jun 2025 15:21:34 +0000 ROA not before: Tue 10 Jun 2025 15:21:34 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:18:89:86:f8:da:62:36:53:f9:a3:af:44:d3:23:c6:c5:f7:56:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:21:34 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=529a803954d22487cf0c344eefaa6c3f1599ad7f985b18fa1d20c47c09397fee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:71:45:71:cf:2c:70:a4:e6:af:46:61:51: 6e:c5:7c:b3:1b:1d:ef:11:61:59:f0:6d:52:ec:ba: 93:46:8b:df:05:39:f8:7c:72:b6:ab:05:0e:be:a7: de:77:62:ee:bc:61:ac:b2:1a:4b:99:e5:10:5f:3d: 96:6a:8b:e2:fc:be:a8:62:25:f1:e0:50:a4:ea:ee: 06:ef:89:9a:43:fb:53:1a:53:be:96:19:42:c0:9b: 31:ec:b6:5f:d3:72:e0:51:89:fc:11:ce:d5:9c:22: 7d:4f:64:3f:5a:a7:1f:f1:81:cc:b6:70:43:b6:87: 66:a1:1d:4e:08:e8:88:11:32:3d:12:5c:e4:56:08: 2e:b0:03:6d:00:06:82:58:01:3b:99:3e:ee:23:31: 21:78:5d:a7:79:22:1a:b4:3f:e4:ee:ba:71:db:57: 97:77:b3:3d:d6:02:86:52:2c:86:63:c9:eb:7f:eb: c0:46:4d:c7:02:83:a5:08:49:a6:7b:97:00:b7:3f: da:27:5c:14:6e:d2:6b:e4:1b:41:3f:30:c5:37:56: bf:80:e4:84:84:52:dc:da:2e:eb:2d:1e:a8:a1:0a: 6d:ce:db:7c:cc:6c:51:f3:2f:ca:f3:33:26:1e:5b: e2:4e:c2:17:ce:63:32:20:9d:42:ad:32:ce:3b:1c: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:C2:1D:43:B5:05:F7:9A:30:8E:7F:AB:5B:F0:94:3E:2D:10:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:9000::/40 Signature Algorithm: sha256WithRSAEncryption bf:0b:a7:ae:2d:0c:66:5a:5c:f3:5a:06:be:c6:22:f6:f0:8b: 7f:fa:1a:44:a3:60:c2:eb:31:c7:2d:eb:e5:cf:1a:ac:00:0b: 68:1c:f5:2c:9e:15:b2:e3:c0:60:f0:77:00:1f:1d:06:92:65: 0a:9b:a9:57:be:60:f2:cc:05:55:b6:54:10:43:e2:dd:94:95: c1:cf:3f:df:79:c2:35:25:ea:c3:12:bd:d1:18:a0:ee:8a:49: b8:b5:b6:93:74:e6:22:96:70:78:62:d3:08:d6:5d:2d:93:6d: a2:17:b7:45:49:8d:5c:f4:c3:a2:da:43:42:aa:08:43:78:2e: bc:22:36:3e:52:02:e0:39:70:ac:7a:27:a1:a5:54:e1:fa:f3: c0:6b:98:88:48:d2:d4:a2:d8:c5:ee:79:be:5b:c0:28:d7:7b: 44:9d:e7:14:a7:01:f3:1a:35:e9:7c:e4:d0:4b:dc:01:8c:3d: 80:d8:bc:b1:0c:fa:45:db:e8:03:40:c5:b9:4c:89:92:89:72: b5:d0:ce:c3:99:5f:98:d8:e3:e6:68:47:bc:84:9b:1e:c1:77: d2:7e:b0:16:b3:f0:a3:c8:63:ba:0c:52:a6:cd:06:1f:6b:f9: b3:93:2a:54:83:2d:fc:0c:4b:1d:a9:80:f7:f8:d7:18:0f:09: 31:7e:06:b5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULxiJhvjaYjZT+aOvRNMjxsX3VnUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MjEzNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANTI5YTgwMzk1NGQyMjQ4N2NmMGMz NDRlZWZhYTZjM2YxNTk5YWQ3Zjk4NWIxOGZhMWQyMGM0N2MwOTM5N2ZlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluNxRXHPLHCk5q9GYVFuxXyzGx3v EWFZ8G1S7LqTRovfBTn4fHK2qwUOvqfed2LuvGGsshpLmeUQXz2Waovi/L6oYiXx 4FCk6u4G74maQ/tTGlO+lhlCwJsx7LZf03LgUYn8Ec7VnCJ9T2Q/Wqcf8YHMtnBD todmoR1OCOiIETI9ElzkVggusANtAAaCWAE7mT7uIzEheF2neSIatD/k7rpx21eX d7M91gKGUiyGY8nrf+vARk3HAoOlCEmme5cAtz/aJ1wUbtJr5BtBPzDFN1a/gOSE hFLc2i7rLR6ooQptztt8zGxR8y/K8zMmHlviTsIXzmMyIJ1CrTLOOxx40QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEKxwh1DtQX3mjCOf6tb8JQ+LRDWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMzVkMTY4LThhNDYtNDYxYy05OGU2LTQ1ZWM4MDI1NjdkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ZAwDQYJKoZIhvcNAQELBQADggEBAL8Lp64tDGZaXPNaBr7G Ivbwi3/6GkSjYMLrMcct6+XPGqwAC2gc9SyeFbLjwGDwdwAfHQaSZQqbqVe+YPLM BVW2VBBD4t2UlcHPP995wjUl6sMSvdEYoO6KSbi1tpN05iKWcHhi0wjWXS2TbaIX t0VJjVz0w6LaQ0KqCEN4LrwiNj5SAuA5cKx6J6GlVOH688BrmIhI0tSi2MXueb5b wCjXe0Sd5xSnAfMaNel85NBL3AGMPYDYvLEM+kXb6ANAxblMiZKJcrXQzsOZX5jY 4+ZoR7yEmx7Bd9J+sBaz8KPIY7oMUqbNBh9r+bOTKlSDLfwMSx2pgPf41xgPCTF+ BrU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:18 2025 by rpki-client