$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa File: 02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa (raw, json) Hash identifier: nXjKR94wWxBvX+hSK0BVgdtxL7Ol1QhwwJPW0CnEcgw= Subject key identifier: D1:82:79:DC:B6:DE:98:0A:00:F6:0D:73:51:C2:8F:17:7C:96:15:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61D43EA6C3455417FAEA3054C3B14E3A7E80F69A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa Signing time: Tue 10 Jun 2025 00:30:49 +0000 ROA not before: Tue 10 Jun 2025 00:30:49 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d4:3e:a6:c3:45:54:17:fa:ea:30:54:c3:b1:4e:3a:7e:80:f6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:30:49 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a8db23f5386d3cf943e67153f9b79165b0c00126e4795d852f5b3bd88fa14591, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:8f:12:02:2d:3f:5a:da:1f:d7:8e:d5:fb: 8b:5d:92:b4:54:6f:f0:f4:e0:db:30:8f:82:82:08: 57:bc:87:a4:82:1c:13:53:9b:6a:7c:9d:5e:a7:0e: 52:9a:00:e1:dd:27:12:41:68:fb:8a:ff:a8:87:f7: 51:1b:a1:df:08:31:43:d1:1f:02:4e:7b:11:42:7f: 5b:f5:d1:8d:b2:c3:78:6d:51:c0:6f:1a:9b:9d:25: 55:42:d5:48:1e:d0:c3:84:f9:ca:cd:a0:d5:c6:44: 3a:64:8b:07:81:a1:6b:71:ce:35:41:9b:00:4d:74: ae:71:a7:74:51:83:f8:30:c7:04:4e:2b:00:60:55: fa:1e:f9:a1:9e:34:49:3f:f7:8d:79:be:2b:0d:8c: c9:9b:f3:d7:51:b0:28:0f:7c:3e:de:9d:12:64:99: d2:3c:fa:8a:05:2c:af:ee:f2:4e:64:86:af:50:d6: 1b:be:0f:99:dd:8b:06:8d:a6:d9:fc:94:10:a1:37: ed:ab:73:3b:23:43:e4:6e:38:88:ce:e6:ab:4b:b0: 62:51:6e:09:0b:ed:4d:f4:dc:49:6b:9f:12:52:6d: 63:70:99:79:73:bd:22:99:40:48:3f:9d:2f:f5:3b: fc:a0:19:37:37:81:fe:a2:5b:86:ee:e6:97:b1:bb: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:79:DC:B6:DE:98:0A:00:F6:0D:73:51:C2:8F:17:7C:96:15:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:9000::/40 Signature Algorithm: sha256WithRSAEncryption 94:17:b2:97:84:74:aa:cd:a6:79:b8:60:0d:84:3d:b8:24:3b: 46:99:70:b2:e7:71:d0:d6:4f:49:e6:53:45:43:d2:b7:b6:91: 64:6e:e6:f0:16:7f:5c:eb:67:26:0a:ac:e5:1a:21:ef:e4:7b: 13:37:ee:bc:74:cb:34:d9:61:f2:32:cf:f6:3c:e1:c8:8d:55: b2:3e:7b:73:a5:80:77:61:c7:4f:b9:2b:1e:82:f1:7b:34:79: e1:b5:ba:43:cb:77:8d:ca:3e:db:2a:aa:26:40:ab:a5:09:49: fc:7a:bb:d2:db:a9:54:23:f2:c5:87:70:f0:24:ba:19:90:e3: 74:96:ea:96:95:a6:7f:77:89:00:50:ae:dd:bd:66:cc:cb:2e: 54:0f:7a:32:65:3e:d5:8c:1e:6d:cc:aa:6c:a7:71:f6:68:ae: 9c:51:33:34:60:0b:92:4b:72:06:ff:54:6b:2d:b9:d5:fe:e9: 86:14:03:d0:2b:2f:8c:cd:ea:64:5c:eb:a0:11:d8:c9:a2:fc: 4e:84:d6:fd:8d:04:2d:7a:3e:34:06:71:0e:7a:1d:ea:ab:e0: ed:f7:4f:0b:1e:57:c1:bd:d1:0a:1c:6e:55:26:d7:18:5a:10: 0d:b1:0d:49:96:22:62:b0:e6:90:1a:b3:1d:c3:d1:e5:5e:bf: e0:20:4e:99 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYdQ+psNFVBf66jBUw7FOOn6A9powDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMzA0OVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYThkYjIzZjUzODZkM2NmOTQzZTY3 MTUzZjliNzkxNjViMGMwMDEyNmU0Nzk1ZDg1MmY1YjNiZDg4ZmExNDU5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hmPEgItP1raH9eO1fuLXZK0VG/w 9ODbMI+CgghXvIekghwTU5tqfJ1epw5SmgDh3ScSQWj7iv+oh/dRG6HfCDFD0R8C TnsRQn9b9dGNssN4bVHAbxqbnSVVQtVIHtDDhPnKzaDVxkQ6ZIsHgaFrcc41QZsA TXSucad0UYP4MMcETisAYFX6HvmhnjRJP/eNeb4rDYzJm/PXUbAoD3w+3p0SZJnS PPqKBSyv7vJOZIavUNYbvg+Z3YsGjabZ/JQQoTftq3M7I0PkbjiIzuarS7BiUW4J C+1N9NxJa58SUm1jcJl5c70imUBIP50v9Tv8oBk3N4H+oluG7uaXsbse0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNGCedy23pgKAPYNc1HCjxd8lhUwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyZDRlMmExLWI4NTUtNGRjOS1iNzZmLTlmNjYxYTBkZmYxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYZAwDQYJKoZIhvcNAQELBQADggEBAJQXspeEdKrNpnm4YA2E PbgkO0aZcLLncdDWT0nmU0VD0re2kWRu5vAWf1zrZyYKrOUaIe/kexM37rx0yzTZ YfIyz/Y84ciNVbI+e3OlgHdhx0+5Kx6C8Xs0eeG1ukPLd43KPtsqqiZAq6UJSfx6 u9LbqVQj8sWHcPAkuhmQ43SW6paVpn93iQBQrt29ZszLLlQPejJlPtWMHm3Mqmyn cfZorpxRMzRgC5JLcgb/VGstudX+6YYUA9ArL4zN6mRc66AR2Mmi/E6E1v2NBC16 PjQGcQ56Heqr4O33TwseV8G90QocblUm1xhaEA2xDUmWImKw5pAasx3D0eVev+Ag Tpk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:14 2025 by rpki-client