$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b40021-be8f-464d-b054-4e7db7c9b814.roa File: 43b40021-be8f-464d-b054-4e7db7c9b814.roa (raw, json) Hash identifier: qs3COR3dVJm+omCrY3EudF7drGN7xjG0VCVHQhKESiU= Subject key identifier: 56:72:F5:6D:2F:E8:FF:00:7C:F6:5C:5D:47:8D:FC:88:C5:03:EE:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17F8AF0C2B865F497F0D371123CEE7CEC56B59FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b40021-be8f-464d-b054-4e7db7c9b814.roa Signing time: Tue 10 Jun 2025 15:41:04 +0000 ROA not before: Tue 10 Jun 2025 15:41:04 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f8:af:0c:2b:86:5f:49:7f:0d:37:11:23:ce:e7:ce:c5:6b:59:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:41:04 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=d8aad7337ad5139841c38dc6803e99f4a093c8ebe8e37657dae7335eab18f9ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:d1:dc:01:ed:12:d2:3d:28:3e:26:55:b7: c8:96:d5:0a:63:fc:b0:03:03:67:f9:aa:4e:6d:85: af:1f:bb:9a:c3:ce:d7:0d:29:9d:31:a2:81:24:66: 25:48:5e:a9:1b:b6:d1:76:7f:50:fe:f1:52:1e:f4: ab:af:9c:37:85:b5:9c:3d:a9:9d:eb:a4:a5:0b:5c: 06:87:73:0f:57:78:1b:14:81:b1:6b:63:4e:2b:4b: b2:ef:db:c6:b7:e8:3f:97:95:9b:d0:20:b4:e7:e2: 6b:bf:a2:2d:7a:9f:3f:4a:58:93:59:48:1d:bb:7a: a5:cd:66:73:4a:27:0b:fc:bb:79:a0:27:1d:b9:93: c3:91:78:65:35:0c:6a:73:87:a8:40:97:84:83:70: 39:78:2e:e5:50:39:1d:b4:47:bd:46:f9:0d:3b:44: c3:47:b5:de:01:85:47:e8:ec:8e:6e:a7:65:61:e8: 24:d5:7d:bb:4b:7a:b6:1e:fd:02:53:b5:33:ff:ef: f2:94:dc:3a:12:c0:74:f4:2f:c9:eb:2c:91:13:cd: 9e:cd:68:e5:8b:64:1f:79:3a:31:12:69:9e:58:15: af:34:9e:82:47:96:d2:e9:cb:be:82:0d:e5:60:1c: 58:5f:14:6a:28:72:ce:7d:c3:53:93:08:23:1b:57: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:72:F5:6D:2F:E8:FF:00:7C:F6:5C:5D:47:8D:FC:88:C5:03:EE:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b40021-be8f-464d-b054-4e7db7c9b814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:400::/38 Signature Algorithm: sha256WithRSAEncryption c8:16:57:70:42:ab:d8:31:dc:f2:64:e0:d2:0b:11:1c:78:f7: dc:fe:35:69:61:d8:44:95:79:12:07:19:cd:58:27:3f:8c:98: 66:a7:d1:d2:b8:57:b1:75:dd:f6:f3:aa:ec:c5:61:3e:a5:36: ce:e7:39:59:7c:be:84:10:3c:41:b8:51:31:e4:17:c3:03:07: 87:d0:42:3b:3e:19:fe:0c:32:1a:c6:f1:cd:92:e1:ea:bc:48: 19:ba:af:b2:59:8c:46:d8:bb:6e:e4:51:28:dc:94:6a:86:9b: c7:3b:ca:a4:53:50:8b:ee:ef:37:fc:cb:58:03:9b:90:64:b0: 59:1d:cc:21:4a:89:80:07:d4:f3:c6:c2:72:16:db:e4:b9:fc: 80:b3:ba:95:b0:fb:52:ca:fa:d2:af:b8:18:dc:cb:5d:db:09: 57:9f:d9:09:97:a8:c2:d7:40:ca:3c:e8:16:2d:59:69:27:1c: 2b:4f:2a:3a:55:68:99:cc:5f:92:30:ee:75:ba:98:2c:1e:74: 46:5b:0c:f2:72:37:2c:e3:33:8c:e0:97:ae:a9:3d:4c:16:25: 77:1b:e4:bf:35:22:8c:03:64:b3:de:d9:bb:35:e1:42:1e:a8: 4c:80:6b:c6:77:31:ff:ed:1b:a7:11:27:b9:1f:8d:e6:31:5e: 01:91:57:7a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF/ivDCuGX0l/DTcRI87nzsVrWf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NDEwNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZDhhYWQ3MzM3YWQ1MTM5ODQxYzM4 ZGM2ODAzZTk5ZjRhMDkzYzhlYmU4ZTM3NjU3ZGFlNzMzNWVhYjE4ZjliYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm03R3AHtEtI9KD4mVbfIltUKY/yw AwNn+apObYWvH7uaw87XDSmdMaKBJGYlSF6pG7bRdn9Q/vFSHvSrr5w3hbWcPamd 66SlC1wGh3MPV3gbFIGxa2NOK0uy79vGt+g/l5Wb0CC05+Jrv6Itep8/SliTWUgd u3qlzWZzSicL/Lt5oCcduZPDkXhlNQxqc4eoQJeEg3A5eC7lUDkdtEe9RvkNO0TD R7XeAYVH6OyObqdlYegk1X27S3q2Hv0CU7Uz/+/ylNw6EsB09C/J6yyRE82ezWjl i2QfeToxEmmeWBWvNJ6CR5bS6cu+gg3lYBxYXxRqKHLOfcNTkwgjG1dOAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFZy9W0v6P8AfPZcXUeN/IjFA+7FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjQwMDIxLWJlOGYtNDY0ZC1iMDU0LTRlN2RiN2M5YjgxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEgQwDQYJKoZIhvcNAQELBQADggEBAMgWV3BCq9gx3PJk4NIL ERx499z+NWlh2ESVeRIHGc1YJz+MmGan0dK4V7F13fbzquzFYT6lNs7nOVl8voQQ PEG4UTHkF8MDB4fQQjs+Gf4MMhrG8c2S4eq8SBm6r7JZjEbYu27kUSjclGqGm8c7 yqRTUIvu7zf8y1gDm5BksFkdzCFKiYAH1PPGwnIW2+S5/ICzupWw+1LK+tKvuBjc y13bCVef2QmXqMLXQMo86BYtWWknHCtPKjpVaJnMX5Iw7nW6mCwedEZbDPJyNyzj M4zgl66pPUwWJXcb5L81IowDZLPe2bs14UIeqEyAa8Z3Mf/tG6cRJ7kfjeYxXgGR V3o= -----END CERTIFICATE-----Generated at Sat Jun 14 06:17:27 2025 by rpki-client