$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa File: 2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa (raw, json) Hash identifier: W7340EDiJ/306ExpeHfdllza92vL3xGrRMjolwbEGnA= Subject key identifier: 4F:38:CC:2F:08:AD:6A:21:CC:66:DA:A1:6B:A6:22:3C:01:37:39:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AE0D9C2DB1ADB5D638884FB0283EFC97925386C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa Signing time: Sat 07 Jun 2025 00:21:07 +0000 ROA not before: Sat 07 Jun 2025 00:21:07 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e0:d9:c2:db:1a:db:5d:63:88:84:fb:02:83:ef:c9:79:25:38:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:21:07 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=b2843c1701c8d389bd0fd952a5745ea6007a8a9ef119d0db6f31e09ab8a4a3e6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:39:7e:51:16:88:b7:66:d4:6c:de:68:05: cb:cd:3a:94:67:73:45:e4:44:2f:47:c0:cb:69:d5: d5:22:05:f1:47:ac:ac:e3:65:02:5a:3a:b8:5f:6c: 65:e2:56:77:2e:2b:dc:09:b8:75:b4:c0:52:3c:5f: 81:aa:b4:77:b3:55:c6:69:52:ad:e4:49:06:c5:da: 2e:69:4e:a4:46:96:f6:ed:72:d0:d9:7f:e2:62:bc: 18:77:f6:65:9c:89:ec:f1:db:16:81:08:4c:f9:f8: c4:c8:a0:61:52:f3:aa:ef:46:9e:1a:cf:ba:ab:03: 4c:db:52:bc:6f:0b:47:4c:13:28:3a:a7:2c:2f:12: a1:d3:80:9e:21:8b:b7:36:0d:04:e3:aa:c3:ee:2f: 5d:e1:6b:d4:9a:b8:e0:60:5a:82:7a:49:00:91:78: a6:c6:35:f1:f6:8b:33:f9:2a:46:f3:10:fe:cb:60: 98:60:73:80:7d:69:db:64:1e:35:b7:7c:f4:92:c0: bd:c2:dc:fa:6c:3d:78:9b:94:1b:c8:b1:15:d7:d1: fd:6d:94:ec:4e:c6:53:5d:2d:2c:b6:bf:2b:c8:58: 16:49:d5:96:90:2b:0a:44:06:7e:2b:56:eb:f1:3e: 5c:d1:85:90:97:fc:cb:65:a1:f6:76:a9:a0:7a:12: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:CC:2F:08:AD:6A:21:CC:66:DA:A1:6B:A6:22:3C:01:37:39:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a080::/48 Signature Algorithm: sha256WithRSAEncryption a1:c8:4f:7a:d6:88:a5:dd:5a:d5:f4:fa:c1:fe:db:e7:a9:ba: f1:6a:d1:94:a3:ad:e9:67:70:dd:79:f9:1b:88:b8:9a:24:8b: ef:42:d7:75:98:1b:84:d4:79:fb:0e:4f:54:35:49:e4:59:03: 8b:e2:ed:8a:ce:03:93:7f:b9:2a:6c:ff:ab:74:a0:ec:29:18: 65:39:c7:f0:8e:c4:8f:ad:dd:fe:7f:3e:96:22:26:70:19:91: 4b:da:95:30:69:a3:14:a7:fa:30:24:40:74:8f:af:dd:d9:e3: fd:ef:da:3a:2e:d0:92:bd:cd:0c:ec:60:b9:79:82:df:5c:05: ef:96:54:09:21:15:b9:66:12:fc:2f:76:87:44:fb:1b:9b:8f: 35:d8:59:93:9d:7a:36:d3:91:78:3d:75:c8:87:0d:24:f2:40: f3:ae:9b:2e:f4:72:b4:ea:c3:97:22:9f:b2:dc:a6:e5:36:f9: bc:5d:a5:f5:90:39:9d:8c:b0:34:42:7d:3c:6e:63:e7:b5:82: f2:d8:62:dd:ce:5d:f4:e2:d9:72:05:59:5e:2b:7f:3f:f1:31: 25:7d:41:22:be:2e:c4:1e:89:74:b4:37:b1:e6:96:a3:b2:00: 9e:f3:7e:50:5f:88:9f:57:3c:cb:f5:66:45:81:58:13:c3:8d: 4f:c8:db:ff -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUauDZwtsa211jiIT7AoPvyXklOGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMjEwN1oX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAYjI4NDNjMTcwMWM4ZDM4OWJkMGZk OTUyYTU3NDVlYTYwMDdhOGE5ZWYxMTlkMGRiNmYzMWUwOWFiOGE0YTNlNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPo5flEWiLdm1GzeaAXLzTqUZ3NF 5EQvR8DLadXVIgXxR6ys42UCWjq4X2xl4lZ3LivcCbh1tMBSPF+BqrR3s1XGaVKt 5EkGxdouaU6kRpb27XLQ2X/iYrwYd/ZlnIns8dsWgQhM+fjEyKBhUvOq70aeGs+6 qwNM21K8bwtHTBMoOqcsLxKh04CeIYu3Ng0E46rD7i9d4WvUmrjgYFqCekkAkXim xjXx9osz+SpG8xD+y2CYYHOAfWnbZB41t3z0ksC9wtz6bD14m5QbyLEV19H9bZTs TsZTXS0str8ryFgWSdWWkCsKRAZ+K1br8T5c0YWQl/zLZaH2dqmgehJ1ywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE84zC8IrWohzGbaoWumIjwBNzmvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlYmRjMWU5LTBlNGItNDJmZi05YTI3LTgwMGI3Mzk4OTdhNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKCAMA0GCSqGSIb3DQEBCwUAA4IBAQChyE961oil3VrV9PrB /tvnqbrxatGUo63pZ3DdefkbiLiaJIvvQtd1mBuE1Hn7Dk9UNUnkWQOL4u2KzgOT f7kqbP+rdKDsKRhlOcfwjsSPrd3+fz6WIiZwGZFL2pUwaaMUp/owJEB0j6/d2eP9 79o6LtCSvc0M7GC5eYLfXAXvllQJIRW5ZhL8L3aHRPsbm4812FmTnXo205F4PXXI hw0k8kDzrpsu9HK06sOXIp+y3KblNvm8XaX1kDmdjLA0Qn08bmPntYLy2GLdzl30 4tlyBVleK38/8TElfUEivi7EHol0tDex5pajsgCe835QX4ifVzzL9WZFgVgTw41P yNv/ -----END CERTIFICATE-----Generated at Sat Jun 14 06:04:16 2025 by rpki-client