$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa File: 10683670-b448-4b46-8e10-aa3682be179f.roa (raw, json) Hash identifier: IuiWAAX7fk6uf+eV676biLmjo4WHzer0WHmz4jfRyXI= Subject key identifier: 65:AD:4A:C6:74:26:2B:D7:02:97:16:79:F4:20:A7:5F:E1:8D:BA:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DFEAC0FD882D5DB4F2AB592D78BBAE9FABFFB85 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa Signing time: Mon 09 Jun 2025 15:20:21 +0000 ROA not before: Mon 09 Jun 2025 15:20:21 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fe:ac:0f:d8:82:d5:db:4f:2a:b5:92:d7:8b:ba:e9:fa:bf:fb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:20:21 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=db3cf40dd6b8722858551dccb580a04bb011e7d83dca0e85df53db3b7e8eb455, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:6a:06:24:8b:ab:d9:7e:e7:04:7c:f8:ae: 73:9a:21:60:0f:52:b8:9b:d4:23:66:25:86:85:c8: e6:12:76:fb:e8:19:47:1d:a8:a6:da:7a:5f:a4:9d: c6:43:05:87:fa:20:ec:00:9e:16:eb:f7:50:2b:b2: 74:3c:a1:e4:5a:bb:05:de:b5:30:94:2a:02:f0:d5: 57:d5:7f:f4:65:73:8c:05:66:e8:d5:6c:c1:88:10: 59:f2:2f:16:bf:79:62:3b:3c:61:fe:0f:1f:03:95: 59:33:23:ca:b4:ec:c7:31:75:50:19:ac:93:cf:d1: 0c:d3:df:57:06:41:b1:bb:b2:ff:b6:54:56:d0:ec: 88:27:55:14:32:00:f2:72:60:17:8e:1a:98:06:28: 7c:12:70:45:3e:ec:82:c6:d7:9b:d9:5e:01:43:70: a8:a7:a9:6f:6b:99:58:e3:66:8f:41:59:1d:b9:b1: 0b:24:4c:c4:f2:1b:a5:6f:e3:5f:0d:80:78:8a:ae: 03:c7:aa:c0:8a:e7:a7:30:a6:45:ca:0b:c4:c1:68: 08:2c:cd:02:21:0b:8a:d3:ab:9d:4d:93:f0:79:00: 7e:ab:db:3e:d9:7c:61:3e:8d:10:da:38:91:5e:03: 96:29:10:b2:af:ef:02:af:e4:e8:de:85:65:37:77: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:4A:C6:74:26:2B:D7:02:97:16:79:F4:20:A7:5F:E1:8D:BA:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:840::/48 Signature Algorithm: sha256WithRSAEncryption 45:22:90:f5:ec:96:95:22:b4:41:9c:a4:80:09:b8:d6:40:d2: aa:83:d0:df:ce:a6:5b:6c:59:e3:d2:86:f0:87:80:e9:9f:26: 3a:1e:24:73:80:9e:0f:a1:2e:47:21:1a:e1:fc:60:ce:4f:5b: 9f:13:28:5a:4e:ed:a8:8e:1d:5f:71:02:23:7e:28:7d:d9:72: 7a:51:60:50:46:b9:ee:1e:a7:ab:40:a9:93:f7:47:3a:27:85: bc:18:33:4c:af:22:13:21:23:65:82:04:20:bc:de:3c:c4:26: 71:8a:53:9c:dc:b1:48:7e:b4:b4:26:ed:21:d6:99:9b:5b:ab: 6b:86:61:61:a0:6b:b3:fa:eb:84:ce:9f:66:5b:33:67:a6:14: 21:5e:01:3b:05:27:11:4f:b1:c0:d9:6e:b8:aa:40:15:b8:70: ba:7e:19:67:e3:07:2f:3e:1f:7a:66:11:1d:d0:d8:76:99:29: 7f:7d:7f:a4:7d:c6:42:f9:7d:db:ac:7d:a6:fc:b1:0a:6c:17: 49:61:b4:76:d1:83:98:54:af:08:a4:67:d1:49:85:b4:5b:ec: d6:fd:42:b2:5f:73:13:56:6e:ad:1c:8b:dd:26:4b:91:20:d9: 6b:5d:3e:e1:0f:b9:f4:74:f5:74:20:91:54:b3:3a:2f:71:c5: 5b:68:d1:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPf6sD9iC1dtPKrWS14u66fq/+4UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjAyMVoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAZGIzY2Y0MGRkNmI4NzIyODU4NTUx ZGNjYjU4MGEwNGJiMDExZTdkODNkY2EwZTg1ZGY1M2RiM2I3ZThlYjQ1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApglqBiSLq9l+5wR8+K5zmiFgD1K4 m9QjZiWGhcjmEnb76BlHHaim2npfpJ3GQwWH+iDsAJ4W6/dQK7J0PKHkWrsF3rUw lCoC8NVX1X/0ZXOMBWbo1WzBiBBZ8i8Wv3liOzxh/g8fA5VZMyPKtOzHMXVQGayT z9EM099XBkGxu7L/tlRW0OyIJ1UUMgDycmAXjhqYBih8EnBFPuyCxteb2V4BQ3Co p6lva5lY42aPQVkdubELJEzE8hulb+NfDYB4iq4Dx6rAiuenMKZFygvEwWgILM0C IQuK06udTZPweQB+q9s+2XxhPo0Q2jiRXgOWKRCyr+8Cr+To3oVlN3fd4QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGWtSsZ0JivXApcWefQgp1/hjbp7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNjgzNjcwLWI0NDgtNGI0Ni04ZTEwLWFhMzY4MmJlMTc5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAhAMA0GCSqGSIb3DQEBCwUAA4IBAQBFIpD17JaVIrRBnKSA CbjWQNKqg9DfzqZbbFnj0obwh4DpnyY6HiRzgJ4PoS5HIRrh/GDOT1ufEyhaTu2o jh1fcQIjfih92XJ6UWBQRrnuHqerQKmT90c6J4W8GDNMryITISNlggQgvN48xCZx ilOc3LFIfrS0Ju0h1pmbW6trhmFhoGuz+uuEzp9mWzNnphQhXgE7BScRT7HA2W64 qkAVuHC6fhln4wcvPh96ZhEd0Nh2mSl/fX+kfcZC+X3brH2m/LEKbBdJYbR20YOY VK8IpGfRSYW0W+zW/UKyX3MTVm6tHIvdJkuRINlrXT7hD7n0dPV0IJFUszovccVb aNFE -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:22 2025 by rpki-client