$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa File: 24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa (raw, json) Hash identifier: nlVa+JYt89jo1sljf2Q+zvVks89DRQdiODtxlREMb/8= Subject key identifier: D4:E2:5F:A6:8E:1F:20:76:E2:32:D4:E2:4D:CE:DA:4C:BF:B2:20:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D4C4429A28E872D765BB3AE2981F34173812091 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa Signing time: Tue 10 Jun 2025 00:21:34 +0000 ROA not before: Tue 10 Jun 2025 00:21:34 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4c:44:29:a2:8e:87:2d:76:5b:b3:ae:29:81:f3:41:73:81:20:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:21:34 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=59a1ce01c0ce22fd1c83ada34f53c49f4278b2bef81463ccdaf88f265d26e554, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:8c:4b:71:44:35:16:57:49:78:96:87:d1: 69:a8:17:99:4c:0e:c2:05:a6:ac:03:cd:b9:0e:90: df:45:32:e3:ba:e9:14:80:6f:78:72:36:9b:7d:4d: f1:33:db:cb:a8:07:0a:95:92:08:77:27:56:f1:de: b7:65:1b:f3:2b:b7:7b:78:12:f2:b9:f6:82:66:60: 11:d8:c6:89:db:9e:c0:85:73:a3:e5:ad:68:eb:d6: a0:76:ea:1e:93:4f:05:25:fa:1c:6f:58:f2:e9:4a: d2:53:a0:c6:83:5d:30:84:ba:47:86:7d:5a:06:88: a6:85:42:4c:c3:53:0c:fb:51:59:0a:af:5b:30:c6: 72:c2:5c:d4:ec:34:17:f4:9b:da:45:36:de:f3:79: c3:f5:76:82:39:ac:a5:07:fc:d7:b4:48:a4:ec:61: ef:3c:4b:50:80:5e:14:62:d8:55:04:f3:60:96:52: 84:4a:d5:aa:16:33:d1:2f:9f:19:50:2f:c5:82:dc: c6:00:bb:2f:8f:05:dc:d8:cf:35:4b:9e:b1:10:71: 89:21:60:93:9e:7d:8b:f9:3b:98:6b:e2:ab:78:d0: 05:ca:52:7c:5c:29:02:a6:9b:fa:2e:03:25:30:ab: d0:e4:94:5e:28:9c:3b:12:07:08:42:b4:7d:9a:81: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E2:5F:A6:8E:1F:20:76:E2:32:D4:E2:4D:CE:DA:4C:BF:B2:20:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8080::/48 Signature Algorithm: sha256WithRSAEncryption 9a:75:c5:ed:4b:5d:04:1f:81:b2:96:5f:74:31:9f:ec:a3:ed: cf:c7:a3:d3:0b:44:40:8d:59:26:ed:65:4d:f4:78:e5:8d:2b: 78:e0:be:f4:c9:2f:86:35:80:77:7b:bb:0c:bd:ed:bc:17:b0: 84:41:0b:85:81:9a:5a:05:c0:26:27:c2:95:8c:f4:f2:a6:54: 2f:8c:ba:31:3b:38:eb:47:84:e4:f9:68:9f:df:5b:d0:0d:de: 8a:4b:95:91:f9:60:f2:8b:a9:cf:3d:6d:cc:91:0d:d3:eb:97: f0:e8:77:c0:6c:c4:39:52:fe:4a:b1:09:bb:8f:79:75:a2:3d: 7a:8a:b0:4f:25:35:f4:a8:15:c7:91:dd:43:5e:f1:9e:74:e8: 72:d3:1b:e3:9f:b6:2f:03:61:2e:b8:27:ce:60:9f:a3:e8:51: f5:77:21:09:5b:f5:b7:b7:83:4b:dd:be:7f:5a:6c:5c:60:cf: ce:11:91:dc:81:65:91:81:9e:ff:1e:b2:4c:4f:f0:c9:b7:96: 6f:47:93:a4:ff:20:de:27:f5:9e:98:4d:b4:5f:e1:bb:c2:8b: 4e:a4:f8:5f:7d:4e:3b:5d:2e:e5:63:70:ec:c9:24:d5:d9:09: 58:54:cc:eb:2c:4d:2d:f7:c6:84:38:6b:9a:97:9a:61:6e:d7: 90:0f:a9:d5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDUxEKaKOhy12W7OuKYHzQXOBIJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjEzNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANTlhMWNlMDFjMGNlMjJmZDFjODNh ZGEzNGY1M2M0OWY0Mjc4YjJiZWY4MTQ2M2NjZGFmODhmMjY1ZDI2ZTU1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l+MS3FENRZXSXiWh9FpqBeZTA7C BaasA825DpDfRTLjuukUgG94cjabfU3xM9vLqAcKlZIIdydW8d63ZRvzK7d7eBLy ufaCZmAR2MaJ257AhXOj5a1o69agduoek08FJfocb1jy6UrSU6DGg10whLpHhn1a BoimhUJMw1MM+1FZCq9bMMZywlzU7DQX9JvaRTbe83nD9XaCOaylB/zXtEik7GHv PEtQgF4UYthVBPNgllKEStWqFjPRL58ZUC/FgtzGALsvjwXc2M81S56xEHGJIWCT nn2L+TuYa+KreNAFylJ8XCkCppv6LgMlMKvQ5JReKJw7EgcIQrR9moGC9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNTiX6aOHyB24jLU4k3O2ky/siDjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0Y2U2NjgwLTQwNTUtNDI3OC05YTlkLWEyYTJmM2UxZWRiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAICAMA0GCSqGSIb3DQEBCwUAA4IBAQCadcXtS10EH4Gyll90 MZ/so+3Px6PTC0RAjVkm7WVN9HjljSt44L70yS+GNYB3e7sMve28F7CEQQuFgZpa BcAmJ8KVjPTyplQvjLoxOzjrR4Tk+Wif31vQDd6KS5WR+WDyi6nPPW3MkQ3T65fw 6HfAbMQ5Uv5KsQm7j3l1oj16irBPJTX0qBXHkd1DXvGedOhy0xvjn7YvA2EuuCfO YJ+j6FH1dyEJW/W3t4NL3b5/WmxcYM/OEZHcgWWRgZ7/HrJMT/DJt5ZvR5Ok/yDe J/WemE20X+G7wotOpPhffU47XS7lY3DsySTV2QlYVMzrLE0t98aEOGual5phbteQ D6nV -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:36 2025 by rpki-client