$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa File: 040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa (raw, json) Hash identifier: UoBNFUsz/0okCEsshgan7/kTzRF/YACFuhnRGyp8lIc= Subject key identifier: 05:62:4C:AC:3C:6C:06:73:AC:96:49:C3:F8:D2:D8:2F:2F:75:61:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DAA04F91F895BF7EBF3906FB4767B74968B9DFF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa Signing time: Fri 13 Jun 2025 00:00:07 +0000 ROA not before: Fri 13 Jun 2025 00:00:07 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:aa:04:f9:1f:89:5b:f7:eb:f3:90:6f:b4:76:7b:74:96:8b:9d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 13 00:00:07 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=b04fe375a9637276db2618020a75fd241885efa085b0aee71c2cf6b13d8ce360, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:6d:67:57:b7:3d:3a:4d:80:6c:ea:ad:79: 8c:6f:b9:27:e9:87:d0:f6:0b:b8:f9:d3:f7:56:5e: b2:d8:2d:c8:95:d3:37:83:0b:2a:54:99:28:1b:54: 07:63:21:36:60:d8:3f:c4:b6:7d:c5:7f:9d:d4:8f: d1:50:7f:a4:9e:fa:93:66:bd:ab:76:2c:af:b7:84: 2b:62:6f:55:cb:c2:bd:8a:b0:f7:00:41:7e:4d:ec: 1c:84:1e:7b:96:c9:56:ba:56:b6:e2:a5:71:93:47: 9a:35:e2:f9:01:d9:79:0c:24:7a:1e:fc:a8:11:2b: 0d:67:9a:bf:93:5a:ab:f5:d1:16:1c:f6:27:8b:b1: 9b:03:0b:c5:4b:3d:eb:31:a1:76:9b:89:31:e6:6f: 49:47:6f:d5:28:4e:b4:78:e7:e4:16:aa:59:e9:c9: a2:57:a4:34:f9:c5:dc:a6:12:01:e7:15:12:62:98: fc:12:77:7f:95:49:d8:1e:dc:dc:88:33:9a:70:e5: 57:08:3c:d1:d9:df:7f:4c:be:44:98:72:89:ed:60: 58:a0:43:12:62:d6:28:21:af:35:9f:33:f0:c1:5e: b7:9c:ef:89:11:18:5e:af:6f:51:95:f0:15:1c:fc: a7:d9:71:b5:4a:4e:29:34:8b:15:96:5b:c6:b2:5b: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:4C:AC:3C:6C:06:73:AC:96:49:C3:F8:D2:D8:2F:2F:75:61:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a000::/40 Signature Algorithm: sha256WithRSAEncryption 28:89:55:68:1f:91:5f:40:de:6e:1e:7a:c5:f0:3a:86:72:84: 72:4c:f4:65:10:a1:90:7f:2b:69:12:49:71:23:36:ff:ff:4c: 6c:f8:5f:84:7d:57:31:85:fc:e0:a7:a6:8b:bb:07:eb:0b:1c: 6a:f8:30:8a:03:5f:73:1e:bc:ab:6c:8b:8d:a3:76:20:93:99: ad:48:76:c8:d6:5d:9c:4b:eb:3a:89:ed:2e:ba:b1:2d:73:56: 81:e4:10:95:05:46:90:3b:c5:d2:4e:1d:5d:10:db:33:bd:33: 10:7b:10:b7:fe:63:64:ac:94:62:ff:3e:09:af:d8:68:66:b2: fc:bd:c8:fa:cd:b0:9a:eb:1b:31:88:ef:fd:99:a7:0d:02:74: 01:97:23:6a:75:64:51:ac:6b:a3:a6:41:46:5f:f5:d3:2b:a4: 4f:d6:2f:95:a9:0b:95:fc:35:0c:6b:ee:25:63:db:45:69:52: aa:a1:91:35:95:14:9e:47:ce:f3:fc:69:cb:b9:9e:1e:54:f2: a9:44:cd:62:5e:c2:c9:f9:85:a9:d1:89:f8:36:0e:24:76:c2: 85:8e:75:b9:6c:4b:67:a6:d4:ef:b2:02:c8:5d:3e:7a:4d:0c: 86:d7:53:e8:70:01:ab:f9:0d:87:ac:63:9b:67:2c:4b:ff:df: 8e:e3:fb:b2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHaoE+R+JW/fr85BvtHZ7dJaLnf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMzAwMDAwN1oX DTI1MDcxODIzNTk1OVowejFJMEcGA1UEBRNAYjA0ZmUzNzVhOTYzNzI3NmRiMjYx ODAyMGE3NWZkMjQxODg1ZWZhMDg1YjBhZWU3MWMyY2Y2YjEzZDhjZTM2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuJtZ1e3PTpNgGzqrXmMb7kn6YfQ 9gu4+dP3Vl6y2C3IldM3gwsqVJkoG1QHYyE2YNg/xLZ9xX+d1I/RUH+knvqTZr2r diyvt4QrYm9Vy8K9irD3AEF+TewchB57lslWula24qVxk0eaNeL5Adl5DCR6Hvyo ESsNZ5q/k1qr9dEWHPYni7GbAwvFSz3rMaF2m4kx5m9JR2/VKE60eOfkFqpZ6cmi V6Q0+cXcphIB5xUSYpj8End/lUnYHtzciDOacOVXCDzR2d9/TL5EmHKJ7WBYoEMS YtYoIa81nzPwwV63nO+JERher29RlfAVHPyn2XG1Sk4pNIsVllvGsltJ1QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAViTKw8bAZzrJZJw/jS2C8vdWFWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0MGVmNzEzLWNlMWEtNGFlMS05YWQ4LThmZjJlZDY2NDVkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaKAwDQYJKoZIhvcNAQELBQADggEBACiJVWgfkV9A3m4eesXw OoZyhHJM9GUQoZB/K2kSSXEjNv//TGz4X4R9VzGF/OCnpou7B+sLHGr4MIoDX3Me vKtsi42jdiCTma1IdsjWXZxL6zqJ7S66sS1zVoHkEJUFRpA7xdJOHV0Q2zO9MxB7 ELf+Y2SslGL/Pgmv2Ghmsvy9yPrNsJrrGzGI7/2Zpw0CdAGXI2p1ZFGsa6OmQUZf 9dMrpE/WL5WpC5X8NQxr7iVj20VpUqqhkTWVFJ5HzvP8acu5nh5U8qlEzWJewsn5 hanRifg2DiR2woWOdblsS2em1O+yAshdPnpNDIbXU+hwAav5DYesY5tnLEv/347j +7I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:39:37 2025 by rpki-client