$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa File: 0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa (raw, json) Hash identifier: BjTLt974r+xVvUEJ37uxRfBxsGtF6AbonPxtOV19BOA= Subject key identifier: D1:2E:3E:72:13:53:F6:AC:88:77:6B:9D:AF:1E:22:91:B5:9C:F4:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 083FBD4EDD9D52112B706D9D5905C6AAA28478CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa Signing time: Tue 10 Jun 2025 00:11:38 +0000 ROA not before: Tue 10 Jun 2025 00:11:38 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3f:bd:4e:dd:9d:52:11:2b:70:6d:9d:59:05:c6:aa:a2:84:78:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:11:38 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=e19bcf2c653501ff59376243af9dae76fa5d0c833afc73d993e8208ab8d17092, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:88:6d:73:f1:0b:36:ac:34:71:08:f2:98: b2:cb:22:a8:2c:e4:79:5b:56:38:09:09:20:9a:3d: 3b:43:fe:a5:87:99:8d:f7:16:b2:52:94:5d:2a:60: 6a:d7:63:ae:e1:9a:82:a4:db:60:91:02:59:c9:b9: 0d:d5:eb:3a:21:4d:ce:d7:7f:a1:34:14:81:3f:d1: b0:10:42:e8:68:15:87:24:37:aa:39:86:cb:2c:b8: 70:4f:7a:99:59:d8:8c:58:2c:4f:52:58:60:58:87: be:46:df:f0:f7:13:18:70:d6:8a:a2:ac:fb:3f:18: b1:d3:5a:26:03:ae:34:27:e7:fa:f1:f8:31:24:1f: 52:dd:25:94:71:80:07:11:38:b0:fc:3e:a5:54:fc: 4a:ea:be:9a:46:3c:79:79:b2:d5:ff:35:42:92:d6: a2:da:a2:9b:9a:62:78:87:45:f9:72:9d:df:c6:54: a9:a3:a3:b0:f0:b5:0c:c8:e6:5c:6b:d5:71:56:16: 7c:da:fd:f3:f9:37:a3:4a:3d:60:31:36:ec:a5:fe: 4d:f6:83:5e:90:f6:ce:59:33:7b:5f:2e:f3:87:6b: a5:26:87:41:6f:b4:8b:a1:a2:6d:c5:97:fb:de:44: 71:52:ca:ff:89:2b:b3:58:29:c7:67:32:0d:c9:95: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2E:3E:72:13:53:F6:AC:88:77:6B:9D:AF:1E:22:91:B5:9C:F4:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e0c0::/46 Signature Algorithm: sha256WithRSAEncryption 09:96:9b:00:41:cc:18:50:78:d6:7f:4c:b4:86:4d:29:94:be: e2:1e:cc:78:90:aa:43:2e:5a:e9:c2:96:4a:cb:f6:21:25:0a: 76:78:35:bb:06:f9:f1:70:76:49:13:b4:ca:7a:d9:fc:8b:cc: 2d:f3:55:dc:00:09:d9:ae:15:15:91:b1:49:4a:f2:f7:cc:3d: c7:56:d0:53:fa:f3:a3:24:4f:be:58:06:b0:8e:61:60:df:f6: 9b:03:8b:16:4a:84:e9:68:59:df:1e:83:a7:88:55:d6:5e:24: d0:97:fb:8d:e0:f0:2c:f4:c2:3c:24:45:b2:2d:62:a7:c7:52: db:d8:fe:b1:d6:89:a0:06:61:5b:0d:44:d2:a8:2f:fc:7f:1e: 20:42:11:33:8a:58:65:65:f3:3c:86:db:aa:fd:93:6f:29:1f: df:61:17:10:19:8c:02:20:d7:fd:a9:4d:aa:5c:62:60:bc:a0: 5f:d2:e1:92:29:e5:a8:42:d3:2e:ff:06:38:25:bb:b9:84:b7: 36:4e:f9:f7:86:a6:8d:ea:6a:16:43:a8:87:70:ef:b3:e5:8e: 52:54:14:95:07:33:b0:7e:cb:38:99:f7:9f:c5:fd:87:d7:dd: 95:da:31:da:fa:06:70:6e:05:7f:f8:36:b0:d0:d0:22:96:c4: 38:64:0e:97 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCD+9Tt2dUhErcG2dWQXGqqKEeM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMTEzOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZTE5YmNmMmM2NTM1MDFmZjU5Mzc2 MjQzYWY5ZGFlNzZmYTVkMGM4MzNhZmM3M2Q5OTNlODIwOGFiOGQxNzA5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty6IbXPxCzasNHEI8piyyyKoLOR5 W1Y4CQkgmj07Q/6lh5mN9xayUpRdKmBq12Ou4ZqCpNtgkQJZybkN1es6IU3O13+h NBSBP9GwEELoaBWHJDeqOYbLLLhwT3qZWdiMWCxPUlhgWIe+Rt/w9xMYcNaKoqz7 Pxix01omA640J+f68fgxJB9S3SWUcYAHETiw/D6lVPxK6r6aRjx5ebLV/zVCktai 2qKbmmJ4h0X5cp3fxlSpo6Ow8LUMyOZca9VxVhZ82v3z+TejSj1gMTbspf5N9oNe kPbOWTN7Xy7zh2ulJodBb7SLoaJtxZf73kRxUsr/iSuzWCnHZzINyZXCuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNEuPnITU/asiHdrna8eIpG1nPR4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmZGQ1YmQ0LWQ1YTQtNDBkMi04YTFiLTZhMDA2ZjFhNWIxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeDAMA0GCSqGSIb3DQEBCwUAA4IBAQAJlpsAQcwYUHjWf0y0 hk0plL7iHsx4kKpDLlrpwpZKy/YhJQp2eDW7BvnxcHZJE7TKetn8i8wt81XcAAnZ rhUVkbFJSvL3zD3HVtBT+vOjJE++WAawjmFg3/abA4sWSoTpaFnfHoOniFXWXiTQ l/uN4PAs9MI8JEWyLWKnx1Lb2P6x1omgBmFbDUTSqC/8fx4gQhEzilhlZfM8htuq /ZNvKR/fYRcQGYwCINf9qU2qXGJgvKBf0uGSKeWoQtMu/wY4Jbu5hLc2Tvn3hqaN 6moWQ6iHcO+z5Y5SVBSVBzOwfss4mfefxf2H192V2jHa+gZwbgV/+Daw0NAilsQ4 ZA6X -----END CERTIFICATE-----Generated at Sat Jun 14 06:01:04 2025 by rpki-client