$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bc66f2e-41cb-465a-add7-471e408dd01e.roa File: 1bc66f2e-41cb-465a-add7-471e408dd01e.roa (raw, json) Hash identifier: 0zeZ+BnQxpxK1PgUPs8X9y9o/N7DhPkI/oHeu113r/A= Subject key identifier: 26:34:13:5C:2B:14:6B:9B:7A:B5:C5:DE:DC:02:2D:2D:A4:E7:7C:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05B5287DDA3F44DA35461EC1A4DAB27FBBEFA559 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bc66f2e-41cb-465a-add7-471e408dd01e.roa Signing time: Tue 10 Jun 2025 15:50:22 +0000 ROA not before: Tue 10 Jun 2025 15:50:22 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b5:28:7d:da:3f:44:da:35:46:1e:c1:a4:da:b2:7f:bb:ef:a5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:50:22 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=0b11e948e30c28063a11a5a79d94ad1003f506b3ed80c0e3d63ac2ff7d6a0696, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:64:dc:f0:32:0a:26:d0:5c:4b:93:6c:ab: 47:a0:a8:f7:06:6e:45:d1:f4:07:fc:10:b6:65:31: 59:79:fc:e4:73:7f:da:d0:f5:12:2d:2d:43:19:39: fc:13:65:a6:71:f4:d6:33:4e:99:18:b4:3a:db:c4: 51:74:da:c0:b3:73:f6:34:50:94:e7:86:cb:8b:5b: 94:ec:79:02:ce:d9:0e:e6:54:b7:82:a0:14:b3:a8: 9d:20:84:ff:6f:80:5f:06:cb:29:6a:05:3b:b0:7f: 25:a2:70:86:d7:23:e4:53:2b:2c:44:f9:06:e2:08: 3a:b1:0f:76:d3:18:39:61:d4:f2:13:07:4c:fd:75: bb:c1:19:32:1e:4b:4d:ce:0d:72:9a:c8:bf:16:d0: 39:e2:e9:d7:08:e5:21:62:3d:13:56:e0:80:7e:a1: 2c:17:c7:60:f4:8f:f4:29:32:3d:35:ca:ff:da:71: 55:1a:92:ca:cb:6a:95:69:34:d2:e1:0c:a2:89:5d: 92:f3:32:86:06:f9:fa:ce:ef:0a:32:d8:47:0b:24: bc:7d:5d:a4:5b:55:4c:98:41:11:2c:68:31:38:65: 60:a5:9d:00:74:31:cd:9e:10:79:dd:3c:b8:c5:3c: a9:49:fc:6b:c2:2d:0e:2a:f4:d4:ba:8a:79:c6:29: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:13:5C:2B:14:6B:9B:7A:B5:C5:DE:DC:02:2D:2D:A4:E7:7C:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bc66f2e-41cb-465a-add7-471e408dd01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8000::/36 Signature Algorithm: sha256WithRSAEncryption 52:67:1d:f9:7a:97:b8:17:18:a3:62:d9:2e:e0:2e:8a:db:47: 95:bd:e1:08:fd:17:a7:85:7d:de:b0:f8:ba:15:96:86:08:98: b7:7b:1e:4c:76:4a:d8:f0:2e:c9:63:cf:e5:b9:9f:c7:91:a1: bd:37:b0:05:0b:ce:77:05:11:ba:e9:a3:30:e0:28:20:7d:37: 14:3a:bf:4e:87:5e:4a:f0:cf:5c:fc:b4:38:c2:e1:e4:44:60: 35:33:5d:47:58:d3:16:a9:a4:1b:e3:f6:9e:b5:06:49:b7:34: f3:a5:ac:82:a2:47:e3:84:5b:42:48:41:0d:b4:71:1a:c0:0e: ba:fa:be:7e:4e:a7:24:a3:c3:01:7d:07:2f:7f:8d:c3:c7:9d: 9e:ee:ff:22:77:01:7c:2c:26:51:34:19:b2:1b:df:60:06:42: a8:80:39:b7:79:c0:51:65:de:5f:c8:ac:d4:7f:f1:2d:8a:1f: bd:1b:d3:d8:b4:c2:9c:68:93:ac:cd:e2:5b:f6:53:7f:eb:4a: 66:ed:01:13:22:01:9a:cb:1c:79:bd:f6:e9:87:4f:f0:08:06: 3e:4a:3a:46:99:2e:e0:5e:3d:2d:f1:bb:3e:02:88:a5:ec:87: 1e:e9:97:ac:3f:7a:c0:76:96:1f:d3:25:a5:c5:79:ae:30:c9: e8:1e:7b:2f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBbUofdo/RNo1Rh7BpNqyf7vvpVkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NTAyMloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMGIxMWU5NDhlMzBjMjgwNjNhMTFh NWE3OWQ5NGFkMTAwM2Y1MDZiM2VkODBjMGUzZDYzYWMyZmY3ZDZhMDY5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA135k3PAyCibQXEuTbKtHoKj3Bm5F 0fQH/BC2ZTFZefzkc3/a0PUSLS1DGTn8E2WmcfTWM06ZGLQ628RRdNrAs3P2NFCU 54bLi1uU7HkCztkO5lS3gqAUs6idIIT/b4BfBsspagU7sH8lonCG1yPkUyssRPkG 4gg6sQ920xg5YdTyEwdM/XW7wRkyHktNzg1ymsi/FtA54unXCOUhYj0TVuCAfqEs F8dg9I/0KTI9Ncr/2nFVGpLKy2qVaTTS4QyiiV2S8zKGBvn6zu8KMthHCyS8fV2k W1VMmEERLGgxOGVgpZ0AdDHNnhB53Ty4xTypSfxrwi0OKvTUuop5ximfJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCY0E1wrFGuberXF3twCLS2k53xIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiYzY2ZjJlLTQxY2ItNDY1YS1hZGQ3LTQ3MWU0MDhkZDAxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFIAwDQYJKoZIhvcNAQELBQADggEBAFJnHfl6l7gXGKNi2S7g LorbR5W94Qj9F6eFfd6w+LoVloYImLd7Hkx2StjwLsljz+W5n8eRob03sAULzncF EbrpozDgKCB9NxQ6v06HXkrwz1z8tDjC4eREYDUzXUdY0xappBvj9p61Bkm3NPOl rIKiR+OEW0JIQQ20cRrADrr6vn5OpySjwwF9By9/jcPHnZ7u/yJ3AXwsJlE0GbIb 32AGQqiAObd5wFFl3l/IrNR/8S2KH70b09i0wpxok6zN4lv2U3/rSmbtARMiAZrL HHm99umHT/AIBj5KOkaZLuBePS3xuz4CiKXshx7pl6w/esB2lh/TJaXFea4wyege ey8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:25 2025 by rpki-client