$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48008c21-51fe-4426-86e9-7a9a136e90da.roa File: 48008c21-51fe-4426-86e9-7a9a136e90da.roa (raw, json) Hash identifier: 2Gzx9IGOiBhvIbVn3nWyK7P3F9lE5nbEBcDzYamLf08= Subject key identifier: A5:DD:72:15:46:6C:AC:38:44:7B:F3:D1:67:73:EC:C9:E5:77:3F:03 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 750F3E957418F2542D1D86D4A105B2EFE4B623FC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48008c21-51fe-4426-86e9-7a9a136e90da.roa Signing time: Sat 07 Jun 2025 00:00:48 +0000 ROA not before: Sat 07 Jun 2025 00:00:48 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0f:3e:95:74:18:f2:54:2d:1d:86:d4:a1:05:b2:ef:e4:b6:23:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:00:48 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=13a841f3f563f05c1966078b2e61eb01a4db4e5a45fe183a34f6498ef1c6a6cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:5a:02:f5:13:b2:07:77:41:c2:89:d7:bc: 8b:64:7d:ae:d7:14:65:db:a9:db:1d:d1:9a:2a:07: 63:05:8e:7f:f9:a1:05:04:59:eb:ba:08:bd:17:16: b0:e5:30:5d:4d:73:6e:dc:f8:67:b7:24:5a:23:e0: b5:b6:91:99:0d:83:30:68:d0:32:63:ab:3e:c7:8f: 84:41:44:64:9e:4f:12:d6:0e:bb:d8:43:c7:87:17: 38:b6:eb:a4:5f:c6:ae:0d:22:5b:96:16:f0:9e:76: e2:cd:ed:1d:6d:12:4f:e8:40:03:f3:ed:df:03:ba: a8:35:db:05:a9:ca:db:e2:e9:7b:69:47:e1:2f:58: 1a:d6:44:e6:7d:4d:e5:f6:d7:cc:9c:61:7f:7d:e4: 53:06:15:a5:a3:61:a8:48:64:77:fc:ba:4e:20:11: 61:79:f1:1e:64:55:d5:fa:03:0f:97:bb:4e:63:ba: 8c:56:69:4d:b1:bf:fe:7d:8e:4f:64:40:77:9d:e0: 54:63:2a:a7:46:4e:09:65:80:02:f5:d7:cf:1f:b1: 64:3f:f5:92:ca:8a:c7:12:50:5c:44:37:b5:0a:be: 4d:a9:74:78:d2:92:19:b7:ef:35:42:72:82:be:8e: c9:fd:0d:5f:6a:73:53:48:8a:8e:94:a9:b5:9d:d2: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:72:15:46:6C:AC:38:44:7B:F3:D1:67:73:EC:C9:E5:77:3F:03 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48008c21-51fe-4426-86e9-7a9a136e90da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6060::/48 Signature Algorithm: sha256WithRSAEncryption 96:ca:6f:1c:dd:70:0a:2d:54:38:9b:07:65:52:e3:d9:69:53: 95:50:ee:80:5b:23:25:b5:2c:e0:1b:92:c9:09:c6:7f:b5:b8: eb:86:7c:18:5d:d3:14:25:23:fa:4a:ad:f2:50:99:d0:f7:eb: 6f:41:99:0e:a6:29:47:f6:11:3b:1d:8a:33:5f:97:be:7a:a9: d1:7a:d5:0e:6b:07:1f:b3:f9:43:e9:91:ef:05:d9:43:33:59: 10:4a:42:ab:0b:e1:37:d6:c2:a3:74:b6:c8:79:8b:72:04:f7: 74:3d:80:ab:28:6b:53:b0:a3:45:c4:63:f2:ed:27:6b:fb:94: 85:41:6f:fd:eb:53:73:9d:77:15:27:db:0f:62:53:8b:a3:b1: d0:ea:0a:fa:15:41:54:f5:22:e8:f2:4a:2f:36:3a:55:24:40: eb:07:25:a9:e8:94:93:1e:8b:63:eb:44:96:5c:78:23:69:08: c4:d5:a7:ac:19:3e:c9:e3:be:86:5b:c5:d7:aa:9b:a7:6d:9a: 22:05:95:74:8f:b8:e5:de:c6:44:38:fb:55:26:58:bb:4f:ea: 41:ad:c0:05:ed:bd:ca:09:6a:42:b2:14:38:04:45:c2:64:db: 93:15:da:6f:bb:87:fa:43:80:b9:15:83:49:c7:30:56:f3:cd: b5:81:a5:96 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdQ8+lXQY8lQtHYbUoQWy7+S2I/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMDA0OFoX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAMTNhODQxZjNmNTYzZjA1YzE5NjYw NzhiMmU2MWViMDFhNGRiNGU1YTQ1ZmUxODNhMzRmNjQ5OGVmMWM2YTZjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r1aAvUTsgd3QcKJ17yLZH2u1xRl 26nbHdGaKgdjBY5/+aEFBFnrugi9Fxaw5TBdTXNu3PhntyRaI+C1tpGZDYMwaNAy Y6s+x4+EQURknk8S1g672EPHhxc4tuukX8auDSJblhbwnnbize0dbRJP6EAD8+3f A7qoNdsFqcrb4ul7aUfhL1ga1kTmfU3l9tfMnGF/feRTBhWlo2GoSGR3/LpOIBFh efEeZFXV+gMPl7tOY7qMVmlNsb/+fY5PZEB3neBUYyqnRk4JZYAC9dfPH7FkP/WS yorHElBcRDe1Cr5NqXR40pIZt+81QnKCvo7J/Q1fanNTSIqOlKm1ndK/UwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKXdchVGbKw4RHvz0Wdz7Mnldz8DMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4MDA4YzIxLTUxZmUtNDQyNi04NmU5LTdhOWExMzZlOTBkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2BgMA0GCSqGSIb3DQEBCwUAA4IBAQCWym8c3XAKLVQ4mwdl UuPZaVOVUO6AWyMltSzgG5LJCcZ/tbjrhnwYXdMUJSP6Sq3yUJnQ9+tvQZkOpilH 9hE7HYozX5e+eqnRetUOawcfs/lD6ZHvBdlDM1kQSkKrC+E31sKjdLbIeYtyBPd0 PYCrKGtTsKNFxGPy7Sdr+5SFQW/961NznXcVJ9sPYlOLo7HQ6gr6FUFU9SLo8kov NjpVJEDrByWp6JSTHotj60SWXHgjaQjE1aesGT7J476GW8XXqpunbZoiBZV0j7jl 3sZEOPtVJli7T+pBrcAF7b3KCWpCshQ4BEXCZNuTFdpvu4f6Q4C5FYNJxzBW8821 gaWW -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:09 2025 by rpki-client