$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa File: 00af7dea-19a3-4a5b-bdf6-57556cec9653.roa (raw, json) Hash identifier: GZ3IdfO47lqmFS7mRmEBZnSjsuP9y/HPChElEtwR8pw= Subject key identifier: E4:AD:E7:16:9E:95:D7:D2:DF:8D:DD:46:34:B9:7C:3B:94:E9:33:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 190FB10B2C6E015C411C7CDCAC7F4FD4FDE982FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa Signing time: Tue 03 Jun 2025 19:36:49 +0000 ROA not before: Tue 03 Jun 2025 19:36:49 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dabb::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0f:b1:0b:2c:6e:01:5c:41:1c:7c:dc:ac:7f:4f:d4:fd:e9:82:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 3 19:36:49 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=1860fa9e1073b93f63591f4bdf1783a544afd5c196bcecee704d5dcf6ee256ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:e8:d8:8c:d5:65:91:3b:5f:2f:f4:96:69: 2d:16:5c:36:ee:4c:48:c8:fe:52:cb:e5:fb:2e:aa: df:03:b8:3a:c1:1b:72:5d:64:8e:9e:ff:dd:1d:d8: ad:58:8b:77:08:18:ef:f5:77:4d:c4:da:06:34:aa: 8a:ed:ae:85:83:37:27:4b:2a:e1:a0:30:12:cd:75: e7:f6:17:2f:05:c8:85:fd:86:6f:ca:a5:ba:31:95: 6f:5b:8d:ad:d9:74:c5:12:a3:85:8d:7e:17:a9:df: 4c:93:fe:82:3b:42:d0:46:a7:4b:2a:19:eb:aa:d0: de:87:4c:24:e9:51:28:63:fc:2a:a3:d8:71:c7:6e: 45:f8:82:f3:f7:74:68:cf:4a:bb:ea:e8:61:95:a1: 00:2c:fe:24:8e:e5:fb:64:95:38:b1:d2:09:d8:f2: ff:bc:31:01:40:4f:55:42:51:cb:4c:48:a0:d0:cb: 62:95:3d:b0:d1:5f:70:77:2f:6a:f3:70:93:af:98: c1:e6:a7:7c:13:fd:49:12:ea:ae:72:2a:50:88:25: 96:65:39:48:9e:70:ae:3e:13:47:fe:4c:03:c4:fb: 27:c3:3a:b8:54:b4:6b:a4:cf:49:3b:86:f3:a3:55: 42:88:e2:d6:c8:6c:ca:97:22:46:d1:2f:e5:24:fa: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AD:E7:16:9E:95:D7:D2:DF:8D:DD:46:34:B9:7C:3B:94:E9:33:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dabb::/32 Signature Algorithm: sha256WithRSAEncryption 1d:4e:89:ab:1c:69:8b:74:93:a6:87:6f:25:df:3f:3a:22:94: 57:2c:0c:7c:1a:3f:f7:85:91:91:46:fc:74:27:4c:08:26:b8: c9:bb:e8:7a:94:7f:f1:45:5d:45:88:f4:de:2e:7b:c8:33:7a: 63:e3:b2:94:d0:5f:31:4d:ac:4e:4e:a8:27:9b:b4:e8:9f:78: 12:9c:0c:10:35:3b:31:d9:08:8f:68:7a:cf:67:33:bf:dc:2d: 2a:5c:70:f1:04:fb:01:46:9c:cb:37:d4:ad:d2:a3:d0:86:b8: c0:bb:9e:c2:2e:ab:2b:23:c9:2b:06:f6:30:b9:f5:9d:6c:84: f6:f8:99:86:28:cb:6a:8d:fe:82:5d:47:d1:79:a8:db:f1:b2: 58:8b:fc:c5:44:95:7d:a4:95:25:38:a5:3e:e1:e0:9d:f9:e3: cf:63:9c:e0:8e:ff:0c:1f:08:cd:3d:b7:17:d0:4c:72:c9:60: 8f:96:36:67:00:25:ea:63:fd:8f:3a:e1:76:ad:2f:9b:40:fd: 9e:65:e4:c4:1f:d8:07:2a:f8:92:c6:f6:31:88:97:6b:a2:6c: 68:12:12:c8:10:f2:25:12:de:fc:c9:d4:d4:a0:af:91:2b:dc: 7b:9a:0f:9f:2b:f5:77:c9:8f:67:d6:3a:3c:17:b4:95:95:13: 0d:52:f7:c8 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUGQ+xCyxuAVxBHHzcrH9P1P3pgvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwMzE5MzY0OVoX DTI1MDcwODIzNTk1OVowejFJMEcGA1UEBRNAMTg2MGZhOWUxMDczYjkzZjYzNTkx ZjRiZGYxNzgzYTU0NGFmZDVjMTk2YmNlY2VlNzA0ZDVkY2Y2ZWUyNTZiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFLo2IzVZZE7Xy/0lmktFlw27kxI yP5Sy+X7LqrfA7g6wRtyXWSOnv/dHditWIt3CBjv9XdNxNoGNKqK7a6FgzcnSyrh oDASzXXn9hcvBciF/YZvyqW6MZVvW42t2XTFEqOFjX4Xqd9Mk/6CO0LQRqdLKhnr qtDeh0wk6VEoY/wqo9hxx25F+ILz93Roz0q76uhhlaEALP4kjuX7ZJU4sdIJ2PL/ vDEBQE9VQlHLTEig0MtilT2w0V9wdy9q83CTr5jB5qd8E/1JEuqucipQiCWWZTlI nnCuPhNH/kwDxPsnwzq4VLRrpM9JO4bzo1VCiOLWyGzKlyJG0S/lJPrq8QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFOSt5xaeldfS343dRjS5fDuU6TPIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwYWY3ZGVhLTE5YTMtNGE1Yi1iZGY2LTU3NTU2Y2VjOTY1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbauzANBgkqhkiG9w0BAQsFAAOCAQEAHU6Jqxxpi3STpodvJd8/ OiKUVywMfBo/94WRkUb8dCdMCCa4ybvoepR/8UVdRYj03i57yDN6Y+OylNBfMU2s Tk6oJ5u06J94EpwMEDU7MdkIj2h6z2czv9wtKlxw8QT7AUacyzfUrdKj0Ia4wLue wi6rKyPJKwb2MLn1nWyE9viZhijLao3+gl1H0Xmo2/GyWIv8xUSVfaSVJTilPuHg nfnjz2Oc4I7/DB8IzT23F9BMcslgj5Y2ZwAl6mP9jzrhdq0vm0D9nmXkxB/YByr4 ksb2MYiXa6JsaBISyBDyJRLe/MnU1KCvkSvce5oPnyv1d8mPZ9Y6PBe0lZUTDVL3 yA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:14 2025 by rpki-client