$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa File: 25d5e8f8-01ee-4887-9403-cad800717cc9.roa (raw, json) Hash identifier: yAfMtIEgwy9jcDCuWhMAV7Jya5V1D6Ey8XSTkcMr3gg= Subject key identifier: BF:98:20:5D:A8:BB:33:87:B2:BD:AF:A7:BB:F7:95:20:5F:F6:47:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BE9945DF8256348252C89C396D52DEF76FD5294 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa Signing time: Tue 10 Jun 2025 15:21:29 +0000 ROA not before: Tue 10 Jun 2025 15:21:29 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:94:5d:f8:25:63:48:25:2c:89:c3:96:d5:2d:ef:76:fd:52:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:21:29 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ab140cc2237f1b13520e03b15c7f6ff62e1cda36297b9609c18ea801944590c6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:2d:4b:75:dd:04:19:0f:59:61:64:81:bc: f9:d2:f9:51:35:f3:ae:31:05:8b:ee:21:6c:1e:66: f4:ae:9c:5b:72:f6:49:5f:ea:10:23:3b:a3:2f:65: c4:62:17:95:32:9a:cd:1e:c1:41:43:7c:ee:77:f2: d7:a9:c6:cd:f8:f2:5d:5e:37:2f:e8:a6:84:b2:9d: e4:11:23:84:0b:69:f1:08:01:4f:fd:4d:df:16:5c: 44:2d:7b:35:76:9b:d4:ec:00:9d:32:b2:c4:4d:2f: 9e:3d:9e:38:dd:a3:4e:6b:9d:2e:c3:19:04:8a:a7: ef:e1:52:4c:d0:81:7a:af:3f:a1:c4:92:85:3a:6e: 1f:86:9b:ab:c2:01:da:1d:f0:d5:44:cf:83:be:31: 50:f4:29:e6:af:9f:3b:43:1b:15:18:27:9f:e2:4f: e8:b4:82:96:b7:8d:42:ab:b9:24:b9:22:08:a2:c3: fa:48:c4:86:eb:bb:31:64:22:71:1f:4c:18:84:8d: 53:6f:d6:b9:d8:00:ad:83:78:2f:33:50:9c:a0:55: 8a:5e:6c:43:ab:57:1e:09:e7:62:a9:e0:b3:a4:e9: a8:7a:fb:75:ae:57:4c:fe:c8:17:aa:07:fb:0d:85: 43:6a:92:2e:3e:87:ca:5c:2a:73:92:6e:fb:31:b8: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:98:20:5D:A8:BB:33:87:B2:BD:AF:A7:BB:F7:95:20:5F:F6:47:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:1000::/40 Signature Algorithm: sha256WithRSAEncryption ba:b6:ee:9c:9d:82:64:70:d5:77:77:0c:92:dd:8c:69:10:4f: 60:f8:91:b3:f5:48:17:3d:7d:f8:6b:c5:03:30:a9:38:55:53: 65:6c:55:8b:5e:07:14:29:c8:45:48:0f:bc:ec:51:e6:22:68: 71:67:df:1a:e2:06:47:22:cf:f2:35:81:4b:2a:43:ce:90:7a: b7:3c:e6:0a:ea:9f:75:cb:ff:66:f3:39:c1:d7:cd:d4:3e:be: 9a:95:37:2c:fb:cd:b8:60:d0:49:e3:29:65:07:92:8a:c3:28: e5:ae:53:ee:7b:2d:07:17:9d:dd:b6:ff:d1:83:4b:19:01:93: 71:51:e7:bb:61:3b:5e:6d:dd:53:93:bf:44:69:d8:fe:65:f4: bc:4a:66:e4:1a:c8:70:b9:1d:a8:2b:54:0f:3c:40:93:47:45: 05:7f:bd:5f:20:dc:26:ea:e1:e0:9e:c6:27:dc:60:fa:8c:4d: c3:45:6b:6f:93:99:d0:d8:72:93:16:05:0d:c7:ec:06:87:6c: 5e:c5:86:ab:1b:4b:1a:c5:34:ff:da:4a:b4:b8:01:58:52:bd: 79:0f:d5:e9:1c:d7:da:5a:d3:18:0b:d6:f4:f2:c5:36:5a:ec: 41:bf:2a:e6:8f:22:35:28:ff:3a:dc:73:99:ba:60:52:bf:b6: 23:29:fd:8c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC+mUXfglY0glLInDltUt73b9UpQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MjEyOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYWIxNDBjYzIyMzdmMWIxMzUyMGUw M2IxNWM3ZjZmZjYyZTFjZGEzNjI5N2I5NjA5YzE4ZWE4MDE5NDQ1OTBjNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+8tS3XdBBkPWWFkgbz50vlRNfOu MQWL7iFsHmb0rpxbcvZJX+oQIzujL2XEYheVMprNHsFBQ3zud/LXqcbN+PJdXjcv 6KaEsp3kESOEC2nxCAFP/U3fFlxELXs1dpvU7ACdMrLETS+ePZ443aNOa50uwxkE iqfv4VJM0IF6rz+hxJKFOm4fhpurwgHaHfDVRM+DvjFQ9Cnmr587QxsVGCef4k/o tIKWt41Cq7kkuSIIosP6SMSG67sxZCJxH0wYhI1Tb9a52ACtg3gvM1CcoFWKXmxD q1ceCediqeCzpOmoevt1rldM/sgXqgf7DYVDapIuPofKXCpzkm77MbgURQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL+YIF2ouzOHsr2vp7v3lSBf9kefMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1ZDVlOGY4LTAxZWUtNDg4Ny05NDAzLWNhZDgwMDcxN2NjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacBAwDQYJKoZIhvcNAQELBQADggEBALq27pydgmRw1Xd3DJLd jGkQT2D4kbP1SBc9ffhrxQMwqThVU2VsVYteBxQpyEVID7zsUeYiaHFn3xriBkci z/I1gUsqQ86Qerc85grqn3XL/2bzOcHXzdQ+vpqVNyz7zbhg0EnjKWUHkorDKOWu U+57LQcXnd22/9GDSxkBk3FR57thO15t3VOTv0Rp2P5l9LxKZuQayHC5HagrVA88 QJNHRQV/vV8g3Cbq4eCexifcYPqMTcNFa2+TmdDYcpMWBQ3H7AaHbF7FhqsbSxrF NP/aSrS4AVhSvXkP1ekc19pa0xgL1vTyxTZa7EG/KuaPIjUo/zrcc5m6YFK/tiMp /Yw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:11 2025 by rpki-client