$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f00ce68a-58da-4964-ae28-394559757448.roa File: f00ce68a-58da-4964-ae28-394559757448.roa (raw, json) Hash identifier: 6gB3bUFsjeZYaib0d8Rr2CctRQtG+euop3vUgm496p8= Subject key identifier: D3:4C:FB:49:BA:DE:49:9A:60:6B:04:03:83:BA:6D:1C:C7:BF:89:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 255CD114F08976B43C8D5C1AE37A0F1F3290817C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f00ce68a-58da-4964-ae28-394559757448.roa Signing time: Mon 09 Jun 2025 15:00:16 +0000 ROA not before: Mon 09 Jun 2025 15:00:16 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5c:d1:14:f0:89:76:b4:3c:8d:5c:1a:e3:7a:0f:1f:32:90:81:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:00:16 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=946613eacd960928e9b8e7820e7c24dcf9dea23ac5d82caeb3ac5225ad93b1e6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:5e:75:e4:27:45:c5:4b:44:57:ff:4c:f1: 1b:82:20:a8:e8:34:b3:31:b4:23:7b:18:49:ca:ad: f4:9f:ae:97:4d:32:88:04:e4:21:29:e9:f2:78:dc: c5:b3:e5:12:af:80:fd:6e:02:8c:5f:33:03:14:a3: 83:5f:82:21:d9:41:8f:a2:73:ca:6a:22:7b:3e:9a: 76:09:ad:73:2c:0f:f9:6a:17:c4:74:04:66:63:60: dc:a6:3e:1b:69:8f:c4:f8:00:5c:ec:e7:d9:27:f1: 3a:dc:78:04:e6:1b:ab:71:86:c2:7f:e7:45:e9:70: 63:71:a6:fd:91:81:2d:c5:f2:4b:ee:74:41:59:1d: 12:6d:86:65:96:b3:60:9d:62:62:8b:41:8e:01:02: ff:26:e1:2f:90:74:fe:f0:a2:a8:b1:ba:54:35:96: bc:a5:4b:5f:8d:c2:b9:86:fc:26:40:25:c1:ab:32: 02:38:e7:e2:63:ba:60:88:3b:72:05:0d:8b:3c:0e: 6e:6c:5b:00:ea:8f:4c:f3:71:c2:83:00:f1:7a:07: 30:d4:b1:02:ba:09:2e:cf:1d:8f:4e:ea:eb:1c:14: c0:61:44:72:8d:79:00:39:56:e7:d6:35:bd:3a:c4: 72:ac:27:04:71:05:f8:a2:68:2b:3b:1e:cf:8b:68: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4C:FB:49:BA:DE:49:9A:60:6B:04:03:83:BA:6D:1C:C7:BF:89:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f00ce68a-58da-4964-ae28-394559757448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 45:93:f0:98:14:1c:4c:f5:7f:59:2d:c7:ec:fb:40:25:7c:77: 72:27:0a:61:ed:ab:c2:79:4a:83:e2:ad:ec:5b:28:43:cd:bd: 2b:94:c8:15:6b:fb:0c:ac:9e:1d:fc:30:d7:cd:13:33:09:0e: f4:8e:6d:d9:39:9d:49:9b:78:b1:6f:d8:e2:5e:0d:11:5d:ee: dd:62:39:ca:97:06:44:b6:70:c5:e4:7b:0e:e6:d9:64:1a:54: 63:07:c9:a3:45:e0:7b:47:ac:a1:25:66:79:3e:25:af:ae:2d: b9:53:59:71:55:7d:01:56:27:89:30:fc:78:f6:18:f1:1b:88: 2f:bc:dd:a9:08:c8:bf:85:a5:5f:f4:61:8d:7e:e7:56:83:a0: 67:bb:b3:42:a4:8e:4a:08:6d:8a:48:46:db:20:ad:d3:f6:64: e6:12:d2:6c:c9:29:c6:f7:ee:84:2b:5c:7c:53:58:a4:f5:ac: a7:be:76:56:cf:16:90:cd:cd:7e:de:3e:15:35:37:2d:30:93: 8c:e0:76:0f:57:5d:2e:42:48:d9:e3:df:95:5e:4a:87:40:8d: 38:5a:85:d2:7c:1a:ac:24:ee:b8:26:57:a1:93:50:36:b5:65: c4:39:ed:97:aa:aa:a2:66:19:d0:f0:34:12:9b:73:07:44:1c: fd:dc:1b:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJVzRFPCJdrQ8jVwa43oPHzKQgXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MDAxNloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAOTQ2NjEzZWFjZDk2MDkyOGU5Yjhl NzgyMGU3YzI0ZGNmOWRlYTIzYWM1ZDgyY2FlYjNhYzUyMjVhZDkzYjFlNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok9edeQnRcVLRFf/TPEbgiCo6DSz MbQjexhJyq30n66XTTKIBOQhKenyeNzFs+USr4D9bgKMXzMDFKODX4Ih2UGPonPK aiJ7Ppp2Ca1zLA/5ahfEdARmY2Dcpj4baY/E+ABc7OfZJ/E63HgE5hurcYbCf+dF 6XBjcab9kYEtxfJL7nRBWR0SbYZllrNgnWJii0GOAQL/JuEvkHT+8KKosbpUNZa8 pUtfjcK5hvwmQCXBqzICOOfiY7pgiDtyBQ2LPA5ubFsA6o9M83HCgwDxegcw1LEC ugkuzx2PTurrHBTAYURyjXkAOVbn1jW9OsRyrCcEcQX4omgrOx7Pi2iRlwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNNM+0m63kmaYGsEA4O6bRzHv4lnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwMGNlNjhhLTU4ZGEtNDk2NC1hZTI4LTM5NDU1OTc1NzQ0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYSjAMA0GCSqGSIb3DQEBCwUAA4IBAQBFk/CYFBxM9X9ZLcfs +0AlfHdyJwph7avCeUqD4q3sWyhDzb0rlMgVa/sMrJ4d/DDXzRMzCQ70jm3ZOZ1J m3ixb9jiXg0RXe7dYjnKlwZEtnDF5HsO5tlkGlRjB8mjReB7R6yhJWZ5PiWvri25 U1lxVX0BVieJMPx49hjxG4gvvN2pCMi/haVf9GGNfudWg6Bnu7NCpI5KCG2KSEbb IK3T9mTmEtJsySnG9+6EK1x8U1ik9aynvnZWzxaQzc1+3j4VNTctMJOM4HYPV10u QkjZ49+VXkqHQI04WoXSfBqsJO64Jlehk1A2tWXEOe2XqqqiZhnQ8DQSm3MHRBz9 3BtC -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:14 2025 by rpki-client