$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27c2fcae-a7ea-4dec-afdb-fd99eff80b06.roa File: 27c2fcae-a7ea-4dec-afdb-fd99eff80b06.roa (raw, json) Hash identifier: ejmFNVKBIhE9qIgypGpMQaP4h7rJcRSWfcAHaLwIe0A= Subject key identifier: F5:24:7B:29:33:19:A6:1D:63:26:05:A3:BC:92:4D:F5:BE:CC:3B:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41EA9EF14084A80FA44405634C186BE3D1BD5E2C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27c2fcae-a7ea-4dec-afdb-fd99eff80b06.roa Signing time: Mon 09 Jun 2025 15:21:04 +0000 ROA not before: Mon 09 Jun 2025 15:21:04 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ea:9e:f1:40:84:a8:0f:a4:44:05:63:4c:18:6b:e3:d1:bd:5e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:21:04 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=0deca858723b6dfcc84324f287e4f2e63dde12f04473042541a0c4284528951b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:fd:c0:bf:5a:27:e7:c2:85:a6:65:10:34: fe:84:17:e2:9b:73:0b:3e:d0:63:85:9f:36:03:66: 07:de:60:86:60:e3:0e:ac:7a:0c:4e:95:9d:2a:da: 70:3a:bb:99:0c:d3:d9:e5:3f:19:f7:ab:7d:a3:5d: 5a:80:58:9b:10:67:60:97:6c:15:cc:11:6f:69:c2: 2b:a6:2c:ed:3f:64:eb:df:d8:b1:3a:68:96:26:3e: 10:28:00:1b:ef:7a:df:29:20:b2:70:1f:48:10:1d: 09:28:49:ba:69:fb:dd:12:dc:a5:d6:4d:7d:b4:2d: 4d:52:c9:3c:ea:3f:8a:ba:9a:ff:fa:5a:c2:bd:ec: df:c2:bf:7e:18:63:60:c7:c4:74:94:c4:9b:8a:f4: 78:ff:1d:b5:7b:26:80:5a:16:3f:ec:5f:d4:0a:ab: 09:28:9a:82:11:13:56:a9:73:3d:84:c5:57:54:09: 3f:c3:9a:28:2e:51:98:e0:51:2e:fd:16:a8:0d:9d: 18:1c:ab:f0:56:d4:03:f0:dc:2b:86:14:73:5c:80: 5d:2a:7b:87:c9:57:10:29:81:95:e1:49:e2:ca:fc: 26:eb:3a:fa:76:d3:27:37:e8:d4:25:ca:bf:08:7b: cc:69:23:1c:54:13:5e:e5:1f:db:b3:34:54:e1:89: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:24:7B:29:33:19:A6:1D:63:26:05:A3:BC:92:4D:F5:BE:CC:3B:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27c2fcae-a7ea-4dec-afdb-fd99eff80b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:1040::/48 Signature Algorithm: sha256WithRSAEncryption 8e:4c:52:98:5c:99:63:b1:30:be:3c:76:1e:90:7f:72:df:f7: 47:5f:c1:45:dc:00:50:1f:e2:b0:d6:4a:ef:dc:f6:d5:c1:a1: 31:c6:31:cb:19:fb:2e:ff:37:4c:28:7c:e5:d6:cf:30:bc:d1: 40:a7:6a:ad:ca:ab:b0:98:21:97:47:68:9d:ee:3d:f7:0e:a9: e5:ba:44:b5:a5:d3:73:3e:72:2c:16:2d:c6:d1:68:28:9e:b2: f2:42:3d:7d:4e:af:62:c3:9f:59:d7:fa:f3:1e:5b:68:f5:ec: 2a:79:05:8b:42:74:29:24:4a:7e:f5:2c:a4:04:10:ad:94:13: 29:54:c6:11:86:ef:e8:aa:74:a4:17:27:0e:d9:db:9c:41:bc: e7:65:27:26:34:07:3f:83:cf:c4:83:a5:06:03:e1:2e:31:1e: 24:5a:99:aa:21:ac:84:5d:2e:82:e1:74:c2:19:85:6a:3e:35: 41:51:4b:f0:9c:ef:ff:02:a3:0e:67:fe:cb:70:c4:f9:9d:c8: 68:7e:86:57:35:dd:b1:85:4f:23:97:11:b9:61:76:98:6d:9d: 29:8e:bc:8e:4d:9d:12:69:a3:35:16:d8:fd:88:64:fd:87:16: 3a:19:2a:04:05:d3:d3:cf:c2:f9:03:45:7e:23:04:72:0a:f7: d1:e2:98:99 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQeqe8UCEqA+kRAVjTBhr49G9XiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjEwNFoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAMGRlY2E4NTg3MjNiNmRmY2M4NDMy NGYyODdlNGYyZTYzZGRlMTJmMDQ0NzMwNDI1NDFhMGM0Mjg0NTI4OTUxYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoT9wL9aJ+fChaZlEDT+hBfim3ML PtBjhZ82A2YH3mCGYOMOrHoMTpWdKtpwOruZDNPZ5T8Z96t9o11agFibEGdgl2wV zBFvacIrpiztP2Tr39ixOmiWJj4QKAAb73rfKSCycB9IEB0JKEm6afvdEtyl1k19 tC1NUsk86j+Kupr/+lrCvezfwr9+GGNgx8R0lMSbivR4/x21eyaAWhY/7F/UCqsJ KJqCERNWqXM9hMVXVAk/w5ooLlGY4FEu/RaoDZ0YHKvwVtQD8NwrhhRzXIBdKnuH yVcQKYGV4Uniyvwm6zr6dtMnN+jUJcq/CHvMaSMcVBNe5R/bszRU4YlqnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPUkeykzGaYdYyYFo7ySTfW+zDsPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3YzJmY2FlLWE3ZWEtNGRlYy1hZmRiLWZkOTllZmY4MGIwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYRBAMA0GCSqGSIb3DQEBCwUAA4IBAQCOTFKYXJljsTC+PHYe kH9y3/dHX8FF3ABQH+Kw1krv3PbVwaExxjHLGfsu/zdMKHzl1s8wvNFAp2qtyquw mCGXR2id7j33DqnlukS1pdNzPnIsFi3G0WgonrLyQj19Tq9iw59Z1/rzHlto9ewq eQWLQnQpJEp+9SykBBCtlBMpVMYRhu/oqnSkFycO2ducQbznZScmNAc/g8/Eg6UG A+EuMR4kWpmqIayEXS6C4XTCGYVqPjVBUUvwnO//AqMOZ/7LcMT5nchofoZXNd2x hU8jlxG5YXaYbZ0pjryOTZ0SaaM1Ftj9iGT9hxY6GSoEBdPTz8L5A0V+IwRyCvfR 4piZ -----END CERTIFICATE-----Generated at Sat Jun 14 05:43:18 2025 by rpki-client