$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49fb7e22-9413-4e85-9c70-9dd3a60de128.roa File: 49fb7e22-9413-4e85-9c70-9dd3a60de128.roa (raw, json) Hash identifier: UbjTFbuYZT0c8kaPBKuef9kKPL8Xf5VgswunmCu/3TE= Subject key identifier: A2:C2:DD:1E:73:58:A8:66:7B:2A:E1:D2:C9:5F:39:04:9C:3F:87:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C0AD040B75E3316541D9CA830AA95F9C1A43C00 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49fb7e22-9413-4e85-9c70-9dd3a60de128.roa Signing time: Mon 09 Jun 2025 15:11:45 +0000 ROA not before: Mon 09 Jun 2025 15:11:45 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0a:d0:40:b7:5e:33:16:54:1d:9c:a8:30:aa:95:f9:c1:a4:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:11:45 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=64a733b7cbb8200d0116056d052391cef84dab23535a57aafd940ba82461c7b6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:e8:9a:88:af:2f:ee:43:e6:76:a7:60:ca: 36:bb:52:71:7e:a0:ba:f2:c9:68:5f:f6:e6:c7:c9: b9:22:7a:a3:1e:62:22:6c:a6:88:7e:67:cf:ee:ec: 06:13:61:c1:01:ed:fe:a4:90:95:30:a4:ec:5d:cd: 00:d3:49:b0:54:eb:33:7b:e7:a1:7f:52:14:16:32: b2:f7:06:e2:7b:ac:e9:cc:03:70:01:97:4e:c0:13: e2:a7:39:f4:c4:bc:1d:f9:42:ee:a6:ad:81:1b:02: 17:e0:4b:f5:61:86:3a:29:6b:d2:6f:66:92:30:46: 06:8d:9c:30:2a:5b:ca:19:b6:f0:8f:77:b0:0a:59: e2:ad:fe:3c:d4:2b:bc:77:99:16:e6:3c:6f:b3:86: da:ec:0a:6b:6b:22:b9:06:47:ed:b6:2c:d7:67:11: dc:f4:f9:4f:ce:7f:d4:22:49:0f:bd:de:1d:19:4e: 51:a3:7f:07:0f:37:b3:4d:19:f4:13:72:e5:34:12: 74:2f:da:b1:d2:38:55:28:10:fb:39:f2:05:f4:de: ab:9e:28:d5:31:7f:19:aa:11:1c:c6:e3:64:10:e5: 38:47:18:62:b2:ac:c3:74:b5:8c:d7:a7:ee:01:d6: 56:ba:ae:59:a8:49:5f:10:86:ea:9f:fd:dc:57:d9: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C2:DD:1E:73:58:A8:66:7B:2A:E1:D2:C9:5F:39:04:9C:3F:87:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49fb7e22-9413-4e85-9c70-9dd3a60de128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f040::/48 Signature Algorithm: sha256WithRSAEncryption 22:3e:62:e6:10:a1:7b:c1:44:75:8b:7f:97:39:fc:d2:15:26: 54:bd:38:06:5f:26:a4:ec:62:ce:17:0a:21:10:c5:4a:da:2b: e4:78:20:fa:f1:1a:ac:69:6b:5f:85:9b:45:47:a5:a9:67:39: ee:f5:32:6a:b5:3a:3e:32:02:cb:f1:52:d8:5d:5f:ed:07:bd: 59:2e:12:9a:35:1b:26:d4:1a:7e:69:a9:94:35:a9:53:b1:c9: 4a:6f:50:ed:43:30:c7:5d:a7:41:86:b5:0a:ce:cf:ed:44:b7: c2:e8:7f:b2:90:25:86:74:e4:eb:ea:fc:17:a7:f2:77:46:b1: 34:18:5d:19:dc:c6:b7:38:e9:db:be:df:4d:6d:60:53:eb:c0: 78:d9:a8:4f:fc:66:0a:fd:5d:30:4a:4c:66:20:f8:9a:87:9a: de:c4:ba:a9:24:bd:b4:c5:c4:a1:88:a4:58:ac:27:f5:b6:4b: 8c:18:58:46:09:30:7e:73:a2:5d:06:14:34:60:9c:42:75:e3: 04:1a:4c:8c:fe:84:58:5d:c0:c5:57:47:b4:55:30:ec:51:9e: 41:e8:cc:38:a7:f1:fb:c1:ca:bf:31:9b:08:c5:6b:83:f6:b1: 6d:d6:ad:8a:dd:77:03:13:c8:d8:8e:39:64:88:b4:01:4d:73: af:fa:63:2e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXArQQLdeMxZUHZyoMKqV+cGkPAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MTE0NVoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNANjRhNzMzYjdjYmI4MjAwZDAxMTYw NTZkMDUyMzkxY2VmODRkYWIyMzUzNWE1N2FhZmQ5NDBiYTgyNDYxYzdiNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sXomoivL+5D5nanYMo2u1JxfqC6 8sloX/bmx8m5InqjHmIibKaIfmfP7uwGE2HBAe3+pJCVMKTsXc0A00mwVOsze+eh f1IUFjKy9wbie6zpzANwAZdOwBPipzn0xLwd+ULupq2BGwIX4Ev1YYY6KWvSb2aS MEYGjZwwKlvKGbbwj3ewClnirf481Cu8d5kW5jxvs4ba7AprayK5BkfttizXZxHc 9PlPzn/UIkkPvd4dGU5Ro38HDzezTRn0E3LlNBJ0L9qx0jhVKBD7OfIF9N6rnijV MX8ZqhEcxuNkEOU4RxhisqzDdLWM16fuAdZWuq5ZqElfEIbqn/3cV9n2MQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKLC3R5zWKhmeyrh0slfOQScP4fDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5ZmI3ZTIyLTk0MTMtNGU4NS05YzcwLTlkZDNhNjBkZTEyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8vBAMA0GCSqGSIb3DQEBCwUAA4IBAQAiPmLmEKF7wUR1i3+X OfzSFSZUvTgGXyak7GLOFwohEMVK2ivkeCD68RqsaWtfhZtFR6WpZznu9TJqtTo+ MgLL8VLYXV/tB71ZLhKaNRsm1Bp+aamUNalTsclKb1DtQzDHXadBhrUKzs/tRLfC 6H+ykCWGdOTr6vwXp/J3RrE0GF0Z3Ma3OOnbvt9NbWBT68B42ahP/GYK/V0wSkxm IPiah5rexLqpJL20xcShiKRYrCf1tkuMGFhGCTB+c6JdBhQ0YJxCdeMEGkyM/oRY XcDFV0e0VTDsUZ5B6Mw4p/H7wcq/MZsIxWuD9rFt1q2K3XcDE8jYjjlkiLQBTXOv +mMu -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:04 2025 by rpki-client