$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bdb13c4d-36b9-422d-b558-2882286c1ab9.roa File: bdb13c4d-36b9-422d-b558-2882286c1ab9.roa (raw, json) Hash identifier: 4DiTcgPlVre3i0y07q2Q9sr6FfCHWFL6CqiVcVYeE1E= Subject key identifier: 95:FA:C7:27:90:65:D0:40:9A:24:EB:AD:31:47:81:7A:A3:DA:F1:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E8EB0318B57C7FB3808901C713CD000FFF9FFF4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bdb13c4d-36b9-422d-b558-2882286c1ab9.roa Signing time: Tue 10 Jun 2025 00:31:24 +0000 ROA not before: Tue 10 Jun 2025 00:31:24 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:8e:b0:31:8b:57:c7:fb:38:08:90:1c:71:3c:d0:00:ff:f9:ff:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:31:24 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=4796342453dceaf4fab7baaa5216227bdee7ce2bd1fa8508b6c34d1484404827, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:dd:76:8f:21:ca:ee:f3:ef:d7:5a:bb:9a: 12:0f:4d:7a:78:0e:73:12:68:54:ab:fb:84:0e:54: 61:ee:aa:a4:05:d1:24:71:17:4d:24:dd:18:5c:86: 01:e7:12:b8:c8:9f:42:56:ba:0f:ce:cf:4f:f5:75: 46:e5:cf:16:72:5e:81:c1:00:8a:6d:56:0c:37:12: d3:80:da:2f:f0:06:24:f2:a4:50:1b:e7:43:2d:54: dd:84:c9:ff:7d:a8:1e:40:6c:06:33:44:10:b0:6b: 60:59:c7:72:b4:d4:36:c5:7c:86:a0:81:4e:2e:0f: bd:95:20:2a:5b:82:02:79:ee:b3:f7:05:ca:92:17: 0b:53:c0:58:4d:d2:b1:be:bb:61:ba:5d:e6:d8:90: 43:db:4a:ca:fc:14:01:0a:e2:80:b3:b3:a9:68:38: b2:41:d8:66:19:54:60:61:e4:d7:49:01:fd:c5:9e: 0d:97:0a:50:58:94:8c:f9:d9:ac:ad:de:a1:84:d7: 3c:11:6f:ab:83:3a:3e:7a:76:16:d9:62:55:1f:50: df:5d:a4:42:c3:c0:9e:13:5f:2f:e7:af:6e:fa:83: 8c:11:6b:4b:63:75:22:8c:50:5f:c1:96:8d:5f:97: a6:65:ad:df:bf:dc:22:22:65:e0:f0:b7:5e:b2:dc: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FA:C7:27:90:65:D0:40:9A:24:EB:AD:31:47:81:7A:A3:DA:F1:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bdb13c4d-36b9-422d-b558-2882286c1ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c080::/46 Signature Algorithm: sha256WithRSAEncryption ca:53:dc:1a:bd:3a:86:25:e0:9c:e1:5d:b2:1e:c1:38:08:94: 19:f0:80:ec:d6:07:a6:8a:ab:06:a3:39:57:53:c1:93:ce:59: ee:d5:98:7d:e7:98:eb:fa:e2:39:cb:0e:9c:dc:34:f6:f8:e0: 61:52:e9:3e:28:62:90:fb:85:88:03:2b:45:8d:f1:f8:a2:32: ad:3b:7c:8b:48:32:94:fb:60:df:7d:d3:37:49:89:2b:1a:58: e4:7d:4a:4e:eb:e9:f6:c9:76:5f:37:d1:f1:85:ec:0a:7d:ec: be:48:09:d7:38:7d:c0:2e:1e:99:88:f4:f2:bb:9c:b0:89:9f: e1:4e:40:0c:c4:e9:89:47:5e:a9:af:19:bb:9d:f2:66:dd:dc: 9d:93:e3:38:13:d0:ae:c3:d1:77:36:28:6d:8a:77:cd:41:28: 9d:0a:32:4c:2b:f9:62:f1:07:40:c1:27:e9:03:b0:32:ae:e1: 95:50:5c:b3:57:98:8e:d4:dd:ac:2c:2c:e9:e8:71:0c:cd:63: 41:6d:2d:77:18:9f:a5:d6:70:5d:4b:4e:aa:c8:48:5f:e3:3f: 53:b7:48:e9:e9:bc:59:62:04:93:ba:ae:de:11:47:b5:90:aa: 19:9a:89:32:23:23:1d:77:e7:83:e3:1b:7f:bf:41:96:b7:41: dd:6d:f8:f5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbo6wMYtXx/s4CJAccTzQAP/5//QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMzEyNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANDc5NjM0MjQ1M2RjZWFmNGZhYjdi YWFhNTIxNjIyN2JkZWU3Y2UyYmQxZmE4NTA4YjZjMzRkMTQ4NDQwNDgyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNrddo8hyu7z79dau5oSD016eA5z EmhUq/uEDlRh7qqkBdEkcRdNJN0YXIYB5xK4yJ9CVroPzs9P9XVG5c8Wcl6BwQCK bVYMNxLTgNov8AYk8qRQG+dDLVTdhMn/fageQGwGM0QQsGtgWcdytNQ2xXyGoIFO Lg+9lSAqW4ICee6z9wXKkhcLU8BYTdKxvrthul3m2JBD20rK/BQBCuKAs7OpaDiy QdhmGVRgYeTXSQH9xZ4NlwpQWJSM+dmsrd6hhNc8EW+rgzo+enYW2WJVH1DfXaRC w8CeE18v569u+oOMEWtLY3UijFBfwZaNX5emZa3fv9wiImXg8Ldestyj5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJX6xyeQZdBAmiTrrTFHgXqj2vHOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JkYjEzYzRkLTM2YjktNDIyZC1iNTU4LTI4ODIyODZjMWFiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+8CAMA0GCSqGSIb3DQEBCwUAA4IBAQDKU9wavTqGJeCc4V2y HsE4CJQZ8IDs1gemiqsGozlXU8GTzlnu1Zh955jr+uI5yw6c3DT2+OBhUuk+KGKQ +4WIAytFjfH4ojKtO3yLSDKU+2DffdM3SYkrGljkfUpO6+n2yXZfN9HxhewKfey+ SAnXOH3ALh6ZiPTyu5ywiZ/hTkAMxOmJR16prxm7nfJm3dydk+M4E9Cuw9F3Niht infNQSidCjJMK/li8QdAwSfpA7AyruGVUFyzV5iO1N2sLCzp6HEMzWNBbS13GJ+l 1nBdS06qyEhf4z9Tt0jp6bxZYgSTuq7eEUe1kKoZmokyIyMdd+eD4xt/v0GWt0Hd bfj1 -----END CERTIFICATE-----Generated at Sat Jun 14 06:44:19 2025 by rpki-client