$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa File: 1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa (raw, json) Hash identifier: okfr8ZmmRHgsB7kYFrllU4+9MgQaWx51y7YTcOusDuA= Subject key identifier: 1E:22:D7:A9:47:F7:D8:0D:2A:AF:C4:16:BD:35:D0:3C:4F:45:67:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38DC112B641F4DFAADC229F08FDD514327753B87 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa Signing time: Sat 07 Jun 2025 00:00:50 +0000 ROA not before: Sat 07 Jun 2025 00:00:50 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:dc:11:2b:64:1f:4d:fa:ad:c2:29:f0:8f:dd:51:43:27:75:3b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:00:50 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=12e7dd31207b4f3a5600a18748745937f919197f6357554bab009ffe55c2bb04, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:2b:1c:04:9b:23:28:c7:0e:53:49:01:81: 97:f7:05:63:40:fb:22:01:63:52:79:b2:dd:9f:b7: 79:ac:9c:67:8d:18:83:4f:5b:4b:aa:51:01:e6:b7: 71:12:31:04:e8:70:af:65:3e:40:52:3f:b3:7d:49: f5:23:6c:d9:30:4e:bb:de:ac:c7:f8:4b:3d:ce:64: 36:b0:17:54:5c:bb:52:5b:aa:5f:7f:6b:23:b8:1f: 23:2e:02:b9:c9:09:61:2a:c9:b6:4d:b4:a6:1e:c3: 7b:24:49:da:21:1d:b0:f0:44:2f:c4:4a:01:f8:12: 4c:24:b0:5d:c9:f6:5b:19:9d:8c:3c:da:eb:3e:2c: 0d:65:c9:82:d7:04:59:da:d4:64:73:43:62:d6:99: 82:4e:37:4b:89:c6:99:62:2d:46:42:98:b8:c4:75: f7:81:de:34:34:1e:8a:fa:c3:d6:80:90:76:d6:1e: e1:4c:23:7f:a7:0c:97:01:03:f3:8c:d6:60:f5:dd: 2b:5d:b6:32:38:19:3b:e7:81:a1:83:26:fa:c9:9c: bb:d4:2f:06:17:b1:bc:5f:b1:88:8b:48:3e:2f:6c: 84:94:d5:26:b0:01:74:d7:2a:7e:06:14:db:8f:4c: ee:91:05:a2:c9:fb:fb:78:7a:82:be:87:78:2c:0c: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:22:D7:A9:47:F7:D8:0D:2A:AF:C4:16:BD:35:D0:3C:4F:45:67:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1eae4c4f-445b-4bf5-ae7e-1756d87dea17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f040::/48 Signature Algorithm: sha256WithRSAEncryption b3:bc:07:5b:af:dd:10:d5:84:4d:b7:4e:da:96:63:76:11:de: 31:4c:bd:ab:1c:4d:bb:c4:3f:ce:00:18:53:9d:45:c7:e4:2a: 9f:1d:fd:22:03:63:4b:f5:fb:b9:9f:e6:e0:e6:0c:8b:42:3b: 91:1f:82:32:07:9a:19:e4:8d:e5:dc:4b:98:9e:15:4a:ee:3a: e5:ed:e1:40:5e:7f:ce:41:f4:41:bc:ea:2e:42:71:d2:8e:b5: ae:24:a3:fa:52:e7:45:69:8a:27:ef:08:74:92:c3:d3:7c:3a: 89:6a:79:db:bb:8f:b1:57:c8:f7:56:00:51:ee:47:7a:7f:17: b1:7b:d1:6e:74:5e:e7:3e:14:e6:25:4b:dc:72:23:2d:a4:06: ca:df:5c:24:8a:07:c6:53:d0:1c:14:d5:24:74:cf:21:d5:9d: 71:e3:d7:e2:56:f4:ec:fe:9a:c9:4d:5e:45:f3:c4:80:23:95: 25:59:52:4b:a1:6c:13:73:a4:5d:ce:51:d0:54:69:62:8e:b2: 6c:9b:d8:91:d8:ab:b2:bd:e7:72:d1:27:1b:f3:c4:f7:29:c3: 99:a9:1c:d8:e6:de:5f:04:96:e2:24:de:f8:5d:e2:eb:29:4b: 40:21:f0:01:6d:2a:70:78:fc:20:47:08:38:11:e8:e8:3b:4f: 26:15:2b:a8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUONwRK2QfTfqtwinwj91RQyd1O4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMDA1MFoX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAMTJlN2RkMzEyMDdiNGYzYTU2MDBh MTg3NDg3NDU5MzdmOTE5MTk3ZjYzNTc1NTRiYWIwMDlmZmU1NWMyYmIwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7ErHASbIyjHDlNJAYGX9wVjQPsi AWNSebLdn7d5rJxnjRiDT1tLqlEB5rdxEjEE6HCvZT5AUj+zfUn1I2zZME673qzH +Es9zmQ2sBdUXLtSW6pff2sjuB8jLgK5yQlhKsm2TbSmHsN7JEnaIR2w8EQvxEoB +BJMJLBdyfZbGZ2MPNrrPiwNZcmC1wRZ2tRkc0Ni1pmCTjdLicaZYi1GQpi4xHX3 gd40NB6K+sPWgJB21h7hTCN/pwyXAQPzjNZg9d0rXbYyOBk754Ghgyb6yZy71C8G F7G8X7GIi0g+L2yElNUmsAF01yp+BhTbj0zukQWiyfv7eHqCvod4LAwRywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB4i16lH99gNKq/EFr010DxPRWezMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlYWU0YzRmLTQ0NWItNGJmNS1hZTdlLTE3NTZkODdkZWExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPBAMA0GCSqGSIb3DQEBCwUAA4IBAQCzvAdbr90Q1YRNt07a lmN2Ed4xTL2rHE27xD/OABhTnUXH5CqfHf0iA2NL9fu5n+bg5gyLQjuRH4IyB5oZ 5I3l3EuYnhVK7jrl7eFAXn/OQfRBvOouQnHSjrWuJKP6UudFaYon7wh0ksPTfDqJ annbu4+xV8j3VgBR7kd6fxexe9FudF7nPhTmJUvcciMtpAbK31wkigfGU9AcFNUk dM8h1Z1x49fiVvTs/prJTV5F88SAI5UlWVJLoWwTc6RdzlHQVGlijrJsm9iR2Kuy vedy0Scb88T3KcOZqRzY5t5fBJbiJN74XeLrKUtAIfABbSpwePwgRwg4EejoO08m FSuo -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:32 2025 by rpki-client