$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49e84179-b363-4bd7-a8a7-5203c6a98687.roa File: 49e84179-b363-4bd7-a8a7-5203c6a98687.roa (raw, json) Hash identifier: t3HI5tfdAFJumf/X0pk37qMcAWNr7bSmnncSTi8Kel4= Subject key identifier: 95:75:F0:26:B6:DD:60:EE:F5:D1:6E:C0:DC:36:98:6E:54:56:B3:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E6D184F68749490187ABE8C3BD6F91FDB680866 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49e84179-b363-4bd7-a8a7-5203c6a98687.roa Signing time: Tue 10 Jun 2025 00:21:33 +0000 ROA not before: Tue 10 Jun 2025 00:21:33 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6d:18:4f:68:74:94:90:18:7a:be:8c:3b:d6:f9:1f:db:68:08:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:21:33 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=d06304a31a8d8938e36ac62499760507cbb5d203f9e061462ee62b201ff468cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:b8:6d:e0:26:1e:9a:f2:c3:5e:7c:c8:1e: a7:c0:36:0a:77:72:76:0b:f0:5b:f9:cb:d1:06:20: f4:04:1d:c9:66:70:27:b1:bf:4c:f7:5c:90:68:a2: 7f:5c:1a:12:ee:89:66:0f:c2:e1:36:62:4e:a4:21: bb:d9:a3:b4:e5:0b:95:f5:a4:a6:5c:c8:7c:69:d8: 3f:f5:b5:cb:20:4c:23:d1:88:dd:1d:59:38:14:44: 1a:00:6c:3d:b7:e5:b1:69:44:86:94:c3:de:66:55: 18:4c:4d:4e:a9:0b:2c:32:6e:08:98:c7:0d:c9:17: 4e:14:dd:df:5a:b7:2b:72:da:bd:ce:f9:5d:e1:57: d3:2d:81:25:ce:21:f8:1a:29:62:63:34:ca:a9:c7: 1b:11:b5:c7:f9:26:9f:c4:24:6f:23:4a:c3:3d:5d: a9:8b:2a:45:2e:53:0b:fc:43:90:80:b0:cb:24:9a: e7:3e:6f:53:58:64:fd:c7:6c:72:4c:fc:ff:60:62: 88:ab:c6:93:c5:b6:ce:38:e2:ae:a5:2f:ea:42:9b: 7b:96:90:bb:47:60:91:ca:de:49:9e:51:75:8f:73: e1:12:82:0a:c5:40:c9:d2:dc:1d:ca:1c:e0:70:05: 44:b9:be:80:e0:f0:2b:ac:40:5e:83:68:e4:f8:c4: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:75:F0:26:B6:DD:60:EE:F5:D1:6E:C0:DC:36:98:6E:54:56:B3:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49e84179-b363-4bd7-a8a7-5203c6a98687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:1b:22:7d:53:18:a7:4f:57:e2:7c:0c:76:24:cf:64:17:f4: 05:25:9a:ef:c8:80:b7:32:6a:a4:83:7c:f5:85:7c:ac:bf:3e: c6:74:73:23:7b:38:64:79:94:43:6d:d1:9c:33:11:a2:69:36: 5d:d5:da:b7:d9:5e:c1:f2:41:60:86:e6:0e:f4:94:6f:f5:15: 1c:e4:ff:72:85:c7:b2:e6:fe:89:79:f1:70:09:b7:a7:a9:52: 24:8c:3a:47:cc:d7:a8:6c:18:b6:1b:8b:97:b6:c8:87:97:d1: 36:55:a9:0f:6f:aa:07:06:ff:bb:7e:bf:e0:f1:2e:11:2f:38: aa:ad:69:86:90:18:3f:ea:14:27:7f:ce:c9:58:29:d6:e5:27: 49:3c:db:c4:c7:37:56:45:cc:9c:89:e5:dd:03:7f:c9:7e:98: 22:8e:d0:51:9d:90:72:ab:0b:aa:2e:27:21:05:74:ef:4d:98: 24:83:be:93:8c:f0:f7:6f:3c:97:08:44:bd:81:9a:f9:22:ef: 00:02:e0:b1:6a:5d:3a:47:29:35:0d:57:e9:b5:86:fd:e6:7a: 62:a4:ec:cb:4a:5e:88:13:73:41:27:1c:65:da:b5:c5:dc:83: ee:f4:b3:a6:84:fe:fa:18:fa:64:3b:46:ee:f7:c9:d3:9b:08: 8c:cf:43:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTm0YT2h0lJAYer6MO9b5H9toCGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjEzM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZDA2MzA0YTMxYThkODkzOGUzNmFj NjI0OTk3NjA1MDdjYmI1ZDIwM2Y5ZTA2MTQ2MmVlNjJiMjAxZmY0NjhjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lK4beAmHpryw158yB6nwDYKd3J2 C/Bb+cvRBiD0BB3JZnAnsb9M91yQaKJ/XBoS7olmD8LhNmJOpCG72aO05QuV9aSm XMh8adg/9bXLIEwj0YjdHVk4FEQaAGw9t+WxaUSGlMPeZlUYTE1OqQssMm4ImMcN yRdOFN3fWrcrctq9zvld4VfTLYElziH4GiliYzTKqccbEbXH+SafxCRvI0rDPV2p iypFLlML/EOQgLDLJJrnPm9TWGT9x2xyTPz/YGKIq8aTxbbOOOKupS/qQpt7lpC7 R2CRyt5JnlF1j3PhEoIKxUDJ0twdyhzgcAVEub6A4PArrEBeg2jk+MT/zQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJV18Ca23WDu9dFuwNw2mG5UVrPnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5ZTg0MTc5LWIzNjMtNGJkNy1hOGE3LTUyMDNjNmE5ODY4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAOAwDQYJKoZIhvcNAQELBQADggEBAAsbIn1TGKdPV+J8DHYk z2QX9AUlmu/IgLcyaqSDfPWFfKy/PsZ0cyN7OGR5lENt0ZwzEaJpNl3V2rfZXsHy QWCG5g70lG/1FRzk/3KFx7Lm/ol58XAJt6epUiSMOkfM16hsGLYbi5e2yIeX0TZV qQ9vqgcG/7t+v+DxLhEvOKqtaYaQGD/qFCd/zslYKdblJ0k828THN1ZFzJyJ5d0D f8l+mCKO0FGdkHKrC6ouJyEFdO9NmCSDvpOM8PdvPJcIRL2Bmvki7wAC4LFqXTpH KTUNV+m1hv3memKk7MtKXogTc0EnHGXatcXcg+70s6aE/voY+mQ7Ru73ydObCIzP Q0k= -----END CERTIFICATE-----Generated at Sat Jun 14 06:25:21 2025 by rpki-client