$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa File: 0c131403-c0db-4229-b10c-238da60a9c57.roa (raw, json) Hash identifier: QJiVVnaDSD0FTt8M355bCLLTOI8CdBXVdfjDdpQOJHI= Subject key identifier: DE:3D:DC:2E:25:C1:F3:6C:F0:61:D5:A6:B2:E3:90:E8:5C:4D:74:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FB2A680BD10076893C9F08DFCFB636871F67CBE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa Signing time: Mon 09 Jun 2025 15:00:54 +0000 ROA not before: Mon 09 Jun 2025 15:00:54 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b2:a6:80:bd:10:07:68:93:c9:f0:8d:fc:fb:63:68:71:f6:7c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:00:54 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=11a8062a9b923d9ba20c1103e91ef40480757cd46a1d26a3a29083a0e5169830, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:96:fd:27:f5:00:73:ee:41:c1:95:0b:24:33: d3:6a:74:bf:2e:f0:7c:13:df:29:2f:b5:c2:fb:61: ee:d9:0f:6f:95:ba:76:19:50:24:ba:6f:01:05:ef: d8:4f:78:7f:4e:20:d2:6e:09:6b:66:43:91:df:77: 08:a3:ab:fe:6a:f2:38:09:fb:61:6b:1b:89:e0:d6: bd:1b:40:48:26:db:e3:3b:33:30:61:74:20:1b:73: e5:2f:66:b7:30:e7:69:83:a9:21:1f:8d:64:7a:51: d2:93:0c:b4:aa:f5:5e:a8:2b:ca:5d:0b:d4:68:75: f6:54:2a:4c:5d:79:e8:fa:2c:ce:be:92:15:a9:f9: 44:15:f7:f5:26:5d:73:ec:26:e5:20:d2:d2:80:63: 97:c4:2d:47:a9:fd:c6:b1:b5:f8:a6:63:fa:51:b5: 10:ef:f0:8d:9e:47:e5:cd:55:1e:5f:61:3c:a0:18: 37:e0:82:c4:7c:84:9b:e3:af:fa:1d:e3:7b:c6:79: 09:b1:ef:fc:ea:90:4c:59:d4:55:42:c2:bf:99:f7: 75:40:70:f0:c3:e6:42:50:af:36:d1:cf:7f:16:58: db:08:27:30:28:31:62:3f:93:04:3e:42:b7:0f:ac: e8:76:d6:56:0a:42:5c:11:b2:7b:24:20:6c:68:7c: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3D:DC:2E:25:C1:F3:6C:F0:61:D5:A6:B2:E3:90:E8:5C:4D:74:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c880::/48 Signature Algorithm: sha256WithRSAEncryption 30:79:a1:48:db:62:17:96:1f:fa:8c:4b:f5:a2:b8:b3:f5:72: 52:5c:a7:dd:93:40:fd:82:81:18:f3:22:a5:90:00:71:5a:ab: 0a:61:c8:ce:04:6c:a4:5a:bd:79:ab:39:97:19:80:be:e4:c7: 2f:1c:fa:97:fa:84:85:61:b7:15:f3:ed:3a:9b:33:bc:65:51: 7b:fb:d5:24:2a:86:c2:99:a4:12:5a:ad:12:38:09:3c:f5:35: 10:25:b4:93:6b:d3:ac:cf:e0:65:d1:90:6d:b8:97:67:be:36: d3:11:ba:d9:54:8d:4c:bf:c8:d6:e0:50:40:52:af:97:1b:10: a4:d1:32:31:14:29:93:ff:cb:93:8a:6e:12:85:32:36:b4:98: f9:d1:d9:f1:ab:f7:52:74:f4:1e:9c:b5:5b:e4:ea:b1:ab:35: d9:3b:19:1b:36:ab:26:7a:6f:bf:fc:af:aa:d6:bd:23:53:62: c0:9d:63:d3:32:51:c5:e7:49:3d:80:a1:e5:60:09:45:90:34: c8:71:39:86:88:9c:07:11:aa:be:f6:73:60:6a:de:ef:bd:49: fe:0e:64:27:b5:60:ff:a6:30:be:ab:81:20:57:74:1d:fb:8d: 22:ff:19:8c:ea:07:07:9d:9b:ed:ac:21:b8:5c:75:4a:f8:99: e9:22:67:d4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUL7KmgL0QB2iTyfCN/PtjaHH2fL4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MDA1NFoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAMTFhODA2MmE5YjkyM2Q5YmEyMGMx MTAzZTkxZWY0MDQ4MDc1N2NkNDZhMWQyNmEzYTI5MDgzYTBlNTE2OTgzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jb9J/UAc+5BwZULJDPTanS/LvB8 E98pL7XC+2Hu2Q9vlbp2GVAkum8BBe/YT3h/TiDSbglrZkOR33cIo6v+avI4Cfth axuJ4Na9G0BIJtvjOzMwYXQgG3PlL2a3MOdpg6khH41kelHSkwy0qvVeqCvKXQvU aHX2VCpMXXno+izOvpIVqflEFff1Jl1z7CblINLSgGOXxC1Hqf3GsbX4pmP6UbUQ 7/CNnkflzVUeX2E8oBg34ILEfISb46/6HeN7xnkJse/86pBMWdRVQsK/mfd1QHDw w+ZCUK820c9/FljbCCcwKDFiP5MEPkK3D6zodtZWCkJcEbJ7JCBsaHyflwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN493C4lwfNs8GHVprLjkOhcTXTQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBjMTMxNDAzLWMwZGItNDIyOS1iMTBjLTIzOGRhNjBhOWM1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYciAMA0GCSqGSIb3DQEBCwUAA4IBAQAweaFI22IXlh/6jEv1 oriz9XJSXKfdk0D9goEY8yKlkABxWqsKYcjOBGykWr15qzmXGYC+5McvHPqX+oSF YbcV8+06mzO8ZVF7+9UkKobCmaQSWq0SOAk89TUQJbSTa9Osz+Bl0ZBtuJdnvjbT EbrZVI1Mv8jW4FBAUq+XGxCk0TIxFCmT/8uTim4ShTI2tJj50dnxq/dSdPQenLVb 5OqxqzXZOxkbNqsmem+//K+q1r0jU2LAnWPTMlHF50k9gKHlYAlFkDTIcTmGiJwH Eaq+9nNgat7vvUn+DmQntWD/pjC+q4EgV3Qd+40i/xmM6gcHnZvtrCG4XHVK+Jnp ImfU -----END CERTIFICATE-----Generated at Sat Jun 14 05:42:28 2025 by rpki-client