$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01b54384-f309-452a-bce6-2793cf241f61.roa File: 01b54384-f309-452a-bce6-2793cf241f61.roa (raw, json) Hash identifier: ESsxJMuPycoYkTsAqWYA13siZIN0yINH9yEEvPROPT4= Subject key identifier: 5E:9C:FA:4B:DB:F7:9B:4B:C3:40:61:E9:34:A6:E7:6A:9F:76:2C:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4EC1D4370EF1A9F5DF1901767098252D8DA5834F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01b54384-f309-452a-bce6-2793cf241f61.roa Signing time: Tue 10 Jun 2025 00:41:57 +0000 ROA not before: Tue 10 Jun 2025 00:41:57 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c1:d4:37:0e:f1:a9:f5:df:19:01:76:70:98:25:2d:8d:a5:83:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:41:57 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=2823ebf870335edb06af7f865657c6db80b26dbaa82856721f5d429544bb494a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:28:ff:a2:0b:22:07:46:8d:14:3e:31:36: 81:d1:00:15:cd:36:c2:7e:be:c2:a2:04:ec:04:12: 53:a5:aa:06:2c:d2:5e:b9:16:d5:8f:95:23:79:3e: 1c:c3:38:dc:1e:d9:2b:ab:80:24:a2:36:f4:9d:53: 4a:e7:5b:da:46:74:58:40:2e:7c:73:e0:c0:f1:53: 1a:eb:fc:1e:5b:85:49:27:4e:9b:fc:db:57:a8:53: 91:43:8a:37:06:4f:4c:a3:e8:0b:2c:1f:35:03:33: 9a:9e:b9:e5:0f:1b:f2:6f:8c:0e:e9:ed:32:76:1d: 5b:53:92:0c:b4:88:93:6b:84:31:08:78:d2:3a:e8: b6:d8:cc:68:6a:c5:2d:60:75:6a:35:c9:4d:54:b8: 73:56:ef:5d:ef:bf:b6:d4:5b:ce:96:22:ae:84:68: 6e:36:67:c6:a3:1a:0e:84:a6:19:20:33:6c:9c:08: a2:52:6f:4c:3d:65:bb:a8:da:b3:f3:a4:b1:1d:63: e8:c8:7e:87:46:eb:95:6c:c3:1a:67:3f:bc:d5:ee: 6c:16:f2:46:c9:f1:0e:a7:a9:6a:eb:d2:1b:06:c6: 06:4e:a7:9f:1e:ab:c4:89:f7:80:b8:54:ce:8c:3a: 13:08:71:99:da:f3:99:3e:42:eb:4b:7a:60:c8:0a: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9C:FA:4B:DB:F7:9B:4B:C3:40:61:E9:34:A6:E7:6A:9F:76:2C:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01b54384-f309-452a-bce6-2793cf241f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c8c0::/46 Signature Algorithm: sha256WithRSAEncryption a1:7a:5b:b8:77:70:ef:e8:20:00:8c:31:10:55:44:92:08:16: 21:09:ac:01:35:a8:51:ea:cb:27:2e:80:2d:a7:18:c3:00:e5: 73:02:02:4f:8e:bf:ac:b8:cc:4c:83:1d:94:b0:41:69:ac:99: 50:0d:41:ad:96:10:24:2c:ba:c8:15:40:64:09:f9:e0:aa:20: e6:ce:48:8d:df:69:81:94:7b:c1:a4:74:9f:f4:b7:b8:4e:3f: e9:d1:7a:c7:07:9a:d1:57:d6:65:dc:88:c9:96:7a:6a:50:4c: c0:cd:78:92:4c:4b:68:71:da:60:7e:30:88:ac:2f:16:9d:2c: 14:d6:48:4a:42:99:7a:5a:cf:6a:70:0c:5d:60:bf:d9:0d:8b: 08:8e:59:0c:c3:03:9b:64:86:94:d8:db:70:73:07:e3:b9:b8: e2:66:f6:e8:be:00:8e:6e:63:3b:4c:5e:f8:be:34:d1:df:4c: 53:06:b9:17:e8:39:39:69:b9:34:cb:d2:8b:1d:5b:a4:49:f1: 8c:e3:89:f6:af:19:39:d4:cd:71:74:7a:2d:15:8c:59:8a:9e: 76:a5:61:2e:45:3c:aa:d3:d8:4e:69:7d:5b:3f:af:55:43:f2: 89:ea:f6:0a:34:2f:56:65:0f:c5:1d:c4:de:9c:b5:7b:42:00: 27:40:76:1f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTsHUNw7xqfXfGQF2cJglLY2lg08wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNDE1N1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMjgyM2ViZjg3MDMzNWVkYjA2YWY3 Zjg2NTY1N2M2ZGI4MGIyNmRiYWE4Mjg1NjcyMWY1ZDQyOTU0NGJiNDk0YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6wo/6ILIgdGjRQ+MTaB0QAVzTbC fr7CogTsBBJTpaoGLNJeuRbVj5UjeT4cwzjcHtkrq4Akojb0nVNK51vaRnRYQC58 c+DA8VMa6/weW4VJJ06b/NtXqFORQ4o3Bk9Mo+gLLB81AzOanrnlDxvyb4wO6e0y dh1bU5IMtIiTa4QxCHjSOui22MxoasUtYHVqNclNVLhzVu9d77+21FvOliKuhGhu NmfGoxoOhKYZIDNsnAiiUm9MPWW7qNqz86SxHWPoyH6HRuuVbMMaZz+81e5sFvJG yfEOp6lq69IbBsYGTqefHqvEifeAuFTOjDoTCHGZ2vOZPkLrS3pgyAoXewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF6c+kvb95tLw0Bh6TSm52qfdiy4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxYjU0Mzg0LWYzMDktNDUyYS1iY2U2LTI3OTNjZjI0MWY2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98jAMA0GCSqGSIb3DQEBCwUAA4IBAQChelu4d3Dv6CAAjDEQ VUSSCBYhCawBNahR6ssnLoAtpxjDAOVzAgJPjr+suMxMgx2UsEFprJlQDUGtlhAk LLrIFUBkCfngqiDmzkiN32mBlHvBpHSf9Le4Tj/p0XrHB5rRV9Zl3IjJlnpqUEzA zXiSTEtocdpgfjCIrC8WnSwU1khKQpl6Ws9qcAxdYL/ZDYsIjlkMwwObZIaU2Ntw cwfjubjiZvbovgCObmM7TF74vjTR30xTBrkX6Dk5abk0y9KLHVukSfGM44n2rxk5 1M1xdHotFYxZip52pWEuRTyq09hOaX1bP69VQ/KJ6vYKNC9WZQ/FHcTenLV7QgAn QHYf -----END CERTIFICATE-----Generated at Sat Jun 14 06:32:20 2025 by rpki-client