$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa File: 47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa (raw, json) Hash identifier: oxXc29Qq1Zw8TqNSudVWTwSlEgcph2SQd9Nn1vL1Yew= Subject key identifier: 5E:74:D2:4A:F6:08:01:FB:F3:7E:C0:87:5B:B0:B9:F4:54:AB:83:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DB518A393F4EBD3E214AD726AABE45EEBD769B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa Signing time: Tue 10 Jun 2025 15:01:23 +0000 ROA not before: Tue 10 Jun 2025 15:01:23 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b5:18:a3:93:f4:eb:d3:e2:14:ad:72:6a:ab:e4:5e:eb:d7:69:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:01:23 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=eb8dc5e7e4fea000988811b96b02d9572f6de8e7e84d444b84a138d688340f8d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:75:b3:2e:fb:23:e4:67:e4:0e:26:c6:36: 3a:89:71:64:0b:87:d7:17:2b:91:ee:3b:b9:6e:9d: bb:8d:27:0f:97:f7:83:38:7b:af:1d:dd:36:84:66: eb:2e:4d:43:0e:49:b2:92:9e:cd:6d:ec:2d:63:a9: 2d:83:d2:80:e5:ce:9c:f1:25:1d:af:8b:ff:b4:6f: cf:42:73:f9:e4:4d:79:0d:7a:94:ac:43:26:e0:1a: 98:e8:74:95:e9:01:5f:92:45:e4:aa:78:19:df:77: 16:d5:ff:7d:8f:b0:07:8c:47:1a:ca:8b:1a:d7:3e: 67:3b:61:ac:23:3e:4f:fb:8b:15:4e:06:05:ce:c4: 2b:70:91:5c:54:8f:80:ce:a8:9f:f8:5c:9c:3e:0a: 60:24:cc:81:3a:c9:55:1f:35:a6:70:c0:a0:b9:b3: 50:ef:07:c8:76:10:bd:86:96:74:af:9f:f8:6c:07: 00:9a:ec:0e:52:2a:62:03:db:fc:3c:d6:0b:dc:40: 15:66:17:3f:6f:cd:7e:e1:45:df:dd:cb:17:c0:f0: 7a:9e:97:c2:93:a4:0a:d6:c4:4a:9d:ba:ca:16:86: a5:d1:26:d4:80:87:a0:a3:a9:e1:b1:dc:4a:b2:73: 69:87:25:88:b8:e3:82:c5:92:b9:ef:cc:ba:c6:ac: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:74:D2:4A:F6:08:01:FB:F3:7E:C0:87:5B:B0:B9:F4:54:AB:83:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7::/32 Signature Algorithm: sha256WithRSAEncryption a8:cc:07:11:02:29:a8:1e:d7:5a:0a:55:20:ba:b6:3d:1d:12: 9c:e7:d9:1d:27:7e:95:f6:ce:e6:1b:b9:8e:25:71:ee:e1:b9: 61:87:d0:43:b1:e5:1d:36:79:ea:d0:aa:ad:f1:d6:13:d0:e3: 49:25:6b:1f:96:61:5e:e7:09:79:70:58:2f:86:27:c0:c9:c4: 9e:3a:ae:e8:2d:19:9c:e9:e4:dd:d9:02:72:2c:7a:14:6a:36: 07:ba:8c:18:60:9f:0e:95:16:d2:d0:ba:7e:67:b3:be:b7:df: 00:00:2a:57:d0:d4:cd:49:c0:c9:93:7c:bb:92:0c:5c:4c:83: 7a:11:40:b0:f0:8e:31:8f:d1:bc:2c:c0:83:d5:39:90:ba:01: 27:34:4b:00:7f:a1:e3:0b:8a:e4:75:2f:4c:94:77:cd:5d:97: 4c:6b:9a:64:d5:08:ba:80:2b:bf:65:8f:6c:97:e7:1e:78:5b: 6c:93:4d:52:1f:7d:02:d0:61:58:89:61:8e:90:57:b9:d7:27: 79:8c:1c:82:fa:48:93:e2:5d:f3:f7:4f:ed:7e:59:78:b3:4d: b1:6e:8e:00:a1:ea:7c:ec:ed:31:b0:62:5e:f5:df:3c:33:24: 4b:ff:91:53:d9:2d:56:c4:d0:c1:0a:16:5b:11:99:cf:57:f5: 78:de:76:b0 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIULbUYo5P069PiFK1yaqvkXuvXabUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MDEyM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZWI4ZGM1ZTdlNGZlYTAwMDk4ODgx MWI5NmIwMmQ5NTcyZjZkZThlN2U4NGQ0NDRiODRhMTM4ZDY4ODM0MGY4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XV1sy77I+Rn5A4mxjY6iXFkC4fX FyuR7ju5bp27jScPl/eDOHuvHd02hGbrLk1DDkmykp7NbewtY6ktg9KA5c6c8SUd r4v/tG/PQnP55E15DXqUrEMm4BqY6HSV6QFfkkXkqngZ33cW1f99j7AHjEcayosa 1z5nO2GsIz5P+4sVTgYFzsQrcJFcVI+Azqif+FycPgpgJMyBOslVHzWmcMCgubNQ 7wfIdhC9hpZ0r5/4bAcAmuwOUipiA9v8PNYL3EAVZhc/b81+4UXf3csXwPB6npfC k6QK1sRKnbrKFoal0SbUgIego6nhsdxKsnNphyWIuOOCxZK578y6xqwH8wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFF500kr2CAH7837Ah1uwufRUq4N7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3YWI1MGExLWZlNTUtNDVmZS05OWU2LWNkN2IyZjY3MmE4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9zANBgkqhkiG9w0BAQsFAAOCAQEAqMwHEQIpqB7XWgpVILq2 PR0SnOfZHSd+lfbO5hu5jiVx7uG5YYfQQ7HlHTZ56tCqrfHWE9DjSSVrH5ZhXucJ eXBYL4YnwMnEnjqu6C0ZnOnk3dkCcix6FGo2B7qMGGCfDpUW0tC6fmezvrffAAAq V9DUzUnAyZN8u5IMXEyDehFAsPCOMY/RvCzAg9U5kLoBJzRLAH+h4wuK5HUvTJR3 zV2XTGuaZNUIuoArv2WPbJfnHnhbbJNNUh99AtBhWIlhjpBXudcneYwcgvpIk+Jd 8/dP7X5ZeLNNsW6OAKHqfOztMbBiXvXfPDMkS/+RU9ktVsTQwQoWWxGZz1f1eN52 sA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:12:59 2025 by rpki-client