$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa File: 0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa (raw, json) Hash identifier: PqCh8JO/VTBrblFjL67jENpFRYfypv8qA6sL/XdDXFk= Subject key identifier: 1A:B1:F1:77:E9:56:6F:E9:BC:01:A8:76:F9:CD:7A:30:A6:32:9E:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50D10624F7B932FCA3CA1800AAB12EF98AF5BA56 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa Signing time: Mon 09 Jun 2025 15:30:42 +0000 ROA not before: Mon 09 Jun 2025 15:30:42 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d1:06:24:f7:b9:32:fc:a3:ca:18:00:aa:b1:2e:f9:8a:f5:ba:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:30:42 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=4fee858c65108d6abfba8cc615204f31b6e6f7e504fe6dd0ae38546d121f0832, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:09:0c:82:a2:05:87:1d:2c:eb:17:cc:26: 71:8a:79:b4:c3:87:22:c3:6f:6a:8c:45:31:66:b5: 43:cc:9a:4c:85:1e:27:2f:e6:69:ef:62:94:52:62: fb:e7:b7:f5:0a:5a:b1:b2:b8:a8:d2:3b:a8:92:e1: 14:93:e8:ac:27:c9:4c:19:68:3c:c2:d0:9b:da:6b: ee:22:3b:ce:bb:9e:33:73:87:5a:ed:52:60:ad:3d: dc:a0:dd:d5:b9:51:e6:c4:eb:58:bf:47:2f:1c:b0: 1a:31:29:85:a5:5a:c4:88:29:f6:ae:9d:04:b9:6c: fc:48:0e:f1:59:5f:f6:d6:35:e7:d3:ca:c2:42:fb: 09:a2:3b:98:05:49:c2:10:2d:09:bc:c1:6b:3b:62: 24:59:e4:1d:07:5c:27:c8:75:53:48:dd:2b:57:3a: ec:2f:47:01:a6:f5:6e:b7:8b:38:2c:77:1f:36:3a: 1e:1d:a2:56:90:8c:a2:f0:ba:e9:44:a5:66:b5:45: e0:78:0b:2a:6b:c1:4f:6a:13:3a:65:a2:d6:cf:e1: cf:3c:2d:48:90:0e:3b:74:d5:b5:59:0c:3a:6c:79: d3:64:8e:f2:26:7e:c5:bc:16:27:e8:9a:0e:69:98: 36:c3:cc:4e:44:37:19:16:fa:28:f1:33:a8:48:7c: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:F1:77:E9:56:6F:E9:BC:01:A8:76:F9:CD:7A:30:A6:32:9E:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1080::/48 Signature Algorithm: sha256WithRSAEncryption ad:5c:f0:ea:3a:d2:cd:b0:9e:f9:3b:f2:5f:27:d6:1c:79:01: 50:df:11:7a:11:81:64:a9:57:51:a4:5c:bb:30:c5:ca:39:b6: 34:4f:50:da:85:cb:10:6d:ac:54:03:b1:14:54:5c:48:74:15: bd:f5:be:26:0c:9b:9f:22:e8:50:29:d9:a4:de:93:9d:36:1d: 73:c4:ab:83:d8:3b:db:1b:35:dd:4a:65:6d:af:93:d8:85:12: 30:ec:d7:a1:32:37:15:fc:49:0c:9c:a7:42:ec:c3:e7:a5:cd: 78:89:e0:c9:28:5a:97:01:8e:fb:fb:a9:b4:5b:84:19:cd:da: 60:90:64:a1:a0:d1:be:f1:4a:b8:f7:be:ef:7f:5d:3b:fe:3a: 5c:85:12:67:b4:69:67:66:a3:dc:28:6e:56:23:a4:40:84:98: 26:79:6f:06:ad:91:8f:74:4c:c7:c8:26:a8:69:f7:6c:03:14: dc:8b:b9:dc:aa:fe:dd:2c:ec:e2:fa:3e:c4:e5:8d:b2:28:60: 7d:47:79:91:06:f5:e6:dc:d7:84:65:3f:bb:f4:2d:c4:1d:f8: 20:62:2c:9d:50:c1:9d:3b:77:21:24:cd:6d:b6:dc:9d:f6:2a: 1f:50:6f:2c:ba:f2:cc:60:55:a5:ee:b8:6d:44:23:74:e9:65: 88:70:09:1c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUNEGJPe5MvyjyhgAqrEu+Yr1ulYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MzA0MloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANGZlZTg1OGM2NTEwOGQ2YWJmYmE4 Y2M2MTUyMDRmMzFiNmU2ZjdlNTA0ZmU2ZGQwYWUzODU0NmQxMjFmMDgzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DsJDIKiBYcdLOsXzCZxinm0w4ci w29qjEUxZrVDzJpMhR4nL+Zp72KUUmL757f1Clqxsrio0juokuEUk+isJ8lMGWg8 wtCb2mvuIjvOu54zc4da7VJgrT3coN3VuVHmxOtYv0cvHLAaMSmFpVrEiCn2rp0E uWz8SA7xWV/21jXn08rCQvsJojuYBUnCEC0JvMFrO2IkWeQdB1wnyHVTSN0rVzrs L0cBpvVut4s4LHcfNjoeHaJWkIyi8LrpRKVmtUXgeAsqa8FPahM6ZaLWz+HPPC1I kA47dNW1WQw6bHnTZI7yJn7FvBYn6JoOaZg2w8xORDcZFvoo8TOoSHyo4QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBqx8XfpVm/pvAGodvnNejCmMp7QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlNzRkNGZhLTI3NjgtNGFhMi1hZDVlLWU2MmVkMmI1MDg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hCAMA0GCSqGSIb3DQEBCwUAA4IBAQCtXPDqOtLNsJ75O/Jf J9YceQFQ3xF6EYFkqVdRpFy7MMXKObY0T1DahcsQbaxUA7EUVFxIdBW99b4mDJuf IuhQKdmk3pOdNh1zxKuD2DvbGzXdSmVtr5PYhRIw7NehMjcV/EkMnKdC7MPnpc14 ieDJKFqXAY77+6m0W4QZzdpgkGShoNG+8Uq4977vf107/jpchRJntGlnZqPcKG5W I6RAhJgmeW8GrZGPdEzHyCaoafdsAxTci7ncqv7dLOzi+j7E5Y2yKGB9R3mRBvXm 3NeEZT+79C3EHfggYiydUMGdO3chJM1tttyd9iofUG8suvLMYFWl7rhtRCN06WWI cAkc -----END CERTIFICATE-----Generated at Sat Jun 14 06:11:55 2025 by rpki-client