$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3318e39b-6a03-4709-b0ed-1046eb7a6755.roa File: 3318e39b-6a03-4709-b0ed-1046eb7a6755.roa (raw, json) Hash identifier: NGzNY4JSKCTtnBHYApa5uLCOu2HQ5UPPMkRYVWmxHV0= Subject key identifier: 12:CD:32:D5:73:2E:EA:3C:AC:8B:7E:A3:C7:86:E2:41:1D:E5:94:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 630F5DADEEB898C99BDDF5F7F993BF3D8921A163 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3318e39b-6a03-4709-b0ed-1046eb7a6755.roa Signing time: Tue 10 Jun 2025 00:11:45 +0000 ROA not before: Tue 10 Jun 2025 00:11:45 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0f:5d:ad:ee:b8:98:c9:9b:dd:f5:f7:f9:93:bf:3d:89:21:a1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:11:45 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9dde386340e4e8b71ee031af3b64cf14d4bb6acc391f306da90c4de93e909189, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:a2:5f:18:bb:8d:2d:93:f0:e7:30:ed:49: e8:d2:b0:ef:69:9e:1d:c4:55:2f:09:7e:f2:89:85: 7f:eb:d0:df:1c:01:17:7c:14:6f:66:fc:95:c7:94: 1a:11:1b:d2:f7:47:cb:1e:86:00:0f:3f:02:99:ec: 90:71:17:01:49:ce:ab:66:23:bc:40:cf:6f:80:1f: ba:c3:be:d5:e0:9b:80:f4:66:b1:67:ef:f3:39:80: 2e:dd:06:8c:b8:35:3e:43:be:af:99:14:cf:d6:0b: 8f:e0:72:2a:76:f4:ec:df:02:4b:4f:8e:b3:38:c6: 8c:4f:71:df:22:09:3a:68:90:77:15:04:2a:42:af: e0:0b:13:25:0f:8f:a1:16:c4:90:58:34:b7:75:22: d2:5a:70:d7:56:3b:bf:65:e1:3f:7a:9b:88:8b:6d: e5:69:f6:e8:ca:25:b1:ef:cc:47:6a:aa:08:4b:1a: ea:00:d8:2a:56:79:6e:8a:d2:5e:c1:f1:30:90:d5: 8a:bc:90:f0:9e:e6:a4:a6:de:e6:cb:c3:05:ae:c8: 5d:d3:06:ac:13:d5:dd:da:85:b4:59:8a:91:ec:69: 19:75:c2:d7:a5:c6:07:47:c8:53:d5:9d:13:95:ee: 1d:ea:4a:56:0a:fa:b8:7e:39:9a:99:07:0d:9d:ca: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CD:32:D5:73:2E:EA:3C:AC:8B:7E:A3:C7:86:E2:41:1D:E5:94:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3318e39b-6a03-4709-b0ed-1046eb7a6755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 0f:15:60:2e:55:f4:d7:2c:a9:a3:24:38:98:6d:f0:83:20:c5: c5:35:d9:11:cb:59:e7:a4:89:4a:98:ef:ad:97:f2:c1:09:1e: 9a:03:69:3b:a9:12:39:40:b6:2e:da:a0:7e:ad:a9:3b:92:8c: 9a:3c:0d:03:51:24:21:b2:a6:4a:3f:ff:80:dd:df:87:3f:58: 3c:8c:ff:3e:a4:66:fb:ae:9e:f8:65:e1:ad:96:5d:ac:8f:59: 56:c7:4e:9d:6e:49:52:fb:80:27:6a:1c:fe:10:5d:17:85:dd: a8:47:28:d7:d1:af:7b:31:7d:c7:64:05:ef:69:55:48:b0:50: de:7e:91:f9:a5:b5:59:e9:99:92:4c:1d:87:34:01:08:49:97: 73:40:77:37:31:32:b5:ae:4c:45:92:bf:9b:2e:36:01:7e:bb: 10:95:6d:6d:22:30:b5:84:dc:75:6d:49:73:ea:48:a8:83:1e: 49:4a:36:a2:32:f5:14:16:55:45:43:8c:bf:7f:24:a4:58:6a: 86:0e:e7:55:39:31:df:4d:91:e8:fd:40:bb:2a:da:4e:1a:d6: 6f:a6:77:7f:2b:89:5d:1d:5e:a8:7f:2e:bd:a3:54:c0:82:81: de:cb:23:a9:1d:aa:c0:54:81:40:47:ec:ea:8a:09:43:2e:5f: ef:98:3c:0e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYw9dre64mMmb3fX3+ZO/PYkhoWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMTE0NVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOWRkZTM4NjM0MGU0ZThiNzFlZTAz MWFmM2I2NGNmMTRkNGJiNmFjYzM5MWYzMDZkYTkwYzRkZTkzZTkwOTE4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs6iXxi7jS2T8Ocw7Uno0rDvaZ4d xFUvCX7yiYV/69DfHAEXfBRvZvyVx5QaERvS90fLHoYADz8CmeyQcRcBSc6rZiO8 QM9vgB+6w77V4JuA9GaxZ+/zOYAu3QaMuDU+Q76vmRTP1guP4HIqdvTs3wJLT46z OMaMT3HfIgk6aJB3FQQqQq/gCxMlD4+hFsSQWDS3dSLSWnDXVju/ZeE/epuIi23l afboyiWx78xHaqoISxrqANgqVnluitJewfEwkNWKvJDwnuakpt7my8MFrshd0was E9Xd2oW0WYqR7GkZdcLXpcYHR8hT1Z0Tle4d6kpWCvq4fjmamQcNncoL9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBLNMtVzLuo8rIt+o8eG4kEd5ZSJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMzMThlMzliLTZhMDMtNDcwOS1iMGVkLTEwNDZlYjdhNjc1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba90DAMA0GCSqGSIb3DQEBCwUAA4IBAQAPFWAuVfTXLKmjJDiY bfCDIMXFNdkRy1nnpIlKmO+tl/LBCR6aA2k7qRI5QLYu2qB+rak7koyaPA0DUSQh sqZKP/+A3d+HP1g8jP8+pGb7rp74ZeGtll2sj1lWx06dbklS+4Anahz+EF0Xhd2o RyjX0a97MX3HZAXvaVVIsFDefpH5pbVZ6ZmSTB2HNAEISZdzQHc3MTK1rkxFkr+b LjYBfrsQlW1tIjC1hNx1bUlz6kiogx5JSjaiMvUUFlVFQ4y/fySkWGqGDudVOTHf TZHo/UC7KtpOGtZvpnd/K4ldHV6ofy69o1TAgoHeyyOpHarAVIFAR+zqiglDLl/v mDwO -----END CERTIFICATE-----Generated at Sat Jun 14 06:39:36 2025 by rpki-client