$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa File: 55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa (raw, json) Hash identifier: C2liq6R4XpGjYPA9OclESURHl1i91ZoqzDfa/zgXIsI= Subject key identifier: 62:A0:EE:81:41:D0:E3:77:8F:0D:EA:5D:C0:B5:53:09:DC:51:A6:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A9E122850586C9666C08869405F86EABD331376 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa Signing time: Mon 09 Jun 2025 15:30:16 +0000 ROA not before: Mon 09 Jun 2025 15:30:16 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9e:12:28:50:58:6c:96:66:c0:88:69:40:5f:86:ea:bd:33:13:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:30:16 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=c0e99b2bc640133fe0ccf727e004003fe80bedcad7c1d89e4cd80c21798aeb75, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:fa:15:32:13:2f:86:67:39:28:aa:1c:8e: a9:25:4d:f4:c5:42:e3:b4:17:b5:6e:f5:7b:56:79: 5d:2f:98:28:5f:08:3c:74:d5:0d:77:5b:f4:1b:d5: 60:ff:a9:3e:50:24:e9:84:e0:e3:7b:e4:49:d3:c9: bb:f3:90:3c:35:87:d8:6d:96:fb:e8:a6:15:c7:18: 83:d6:38:c7:3d:94:91:c3:ac:58:7d:5b:0e:b8:99: 8a:be:54:3d:4a:aa:5d:6a:27:63:04:85:da:a2:b4: dd:9c:dd:34:8a:eb:ac:9f:ba:47:27:24:27:9c:5b: b6:57:6e:23:8d:99:02:fa:e8:81:bd:79:cc:61:1d: ba:c0:58:5f:0c:5e:1f:f0:a1:e6:1a:ed:15:4e:da: fb:07:18:99:1d:4c:f3:9e:bc:f1:6b:c4:b1:72:86: 22:cf:50:19:25:7b:ad:2b:88:e9:63:4a:04:31:70: 38:be:eb:3f:9d:bb:4e:5b:df:a0:76:10:81:58:02: cc:6d:f8:5a:68:4a:71:bd:7f:f9:2a:4a:27:5b:0b: a9:1f:c4:f6:ba:42:61:7b:bc:29:8a:dd:a5:92:f5: e9:40:04:fb:61:bf:a5:67:fa:4e:a8:13:8c:73:b5: 46:2c:bc:2a:64:8d:74:e2:91:c7:18:52:ab:cc:6a: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:EE:81:41:D0:E3:77:8F:0D:EA:5D:C0:B5:53:09:DC:51:A6:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55712bd4-af68-4d81-b0b4-0e9c08700a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4880::/48 Signature Algorithm: sha256WithRSAEncryption 05:8e:a6:a3:40:cc:7b:45:55:cf:a1:5c:a2:03:f1:7e:82:8d: 3c:e0:e7:ce:f2:5d:7f:2c:87:ed:25:36:1c:56:57:a3:3f:16: 31:71:b7:a7:64:6e:3b:e4:30:56:ca:3d:25:8f:da:e0:4a:3c: 88:e8:a9:5e:ff:71:51:2b:43:ed:00:6f:bc:26:8c:71:05:46: 80:db:d1:68:8d:b1:af:e4:0d:77:4c:01:fd:b0:68:26:c5:7d: d7:00:99:32:99:8e:04:2f:c1:e6:d7:e7:2f:8f:83:6a:5c:e7: 5b:10:81:72:68:42:12:4c:76:0e:d1:e5:28:b7:ea:28:dc:25: 44:7a:4a:3c:65:55:ea:bf:cc:67:c1:71:e2:fb:0b:be:00:92: d6:97:05:41:47:80:07:65:c2:a0:46:06:a5:2c:e8:a4:91:f2: ad:dd:6e:9d:18:46:da:9b:5f:ba:83:7c:36:d6:16:54:16:16: 2d:89:60:3d:9e:a6:40:81:7c:1a:e7:56:91:0f:db:97:1a:c4: a9:5b:88:f9:69:2f:aa:58:97:92:91:6f:2e:7c:39:f6:cb:9a: 26:1f:52:ba:d0:38:c1:49:fc:1a:7e:e4:64:51:93:1b:1c:6b: 52:82:97:76:c2:32:4c:21:c0:bc:75:2f:ea:0a:70:84:33:b5: a4:8e:2a:10 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUep4SKFBYbJZmwIhpQF+G6r0zE3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MzAxNloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAYzBlOTliMmJjNjQwMTMzZmUwY2Nm NzI3ZTAwNDAwM2ZlODBiZWRjYWQ3YzFkODllNGNkODBjMjE3OThhZWI3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUz6FTITL4ZnOSiqHI6pJU30xULj tBe1bvV7VnldL5goXwg8dNUNd1v0G9Vg/6k+UCTphODje+RJ08m785A8NYfYbZb7 6KYVxxiD1jjHPZSRw6xYfVsOuJmKvlQ9SqpdaidjBIXaorTdnN00iuusn7pHJyQn nFu2V24jjZkC+uiBvXnMYR26wFhfDF4f8KHmGu0VTtr7BxiZHUzznrzxa8SxcoYi z1AZJXutK4jpY0oEMXA4vus/nbtOW9+gdhCBWALMbfhaaEpxvX/5KkonWwupH8T2 ukJhe7wpit2lkvXpQAT7Yb+lZ/pOqBOMc7VGLLwqZI104pHHGFKrzGqKYQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGKg7oFB0ON3jw3qXcC1UwncUaZJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1NzEyYmQ0LWFmNjgtNGQ4MS1iMGI0LTBlOWMwODcwMGE1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUiAMA0GCSqGSIb3DQEBCwUAA4IBAQAFjqajQMx7RVXPoVyi A/F+go084OfO8l1/LIftJTYcVlejPxYxcbenZG475DBWyj0lj9rgSjyI6Kle/3FR K0PtAG+8JoxxBUaA29FojbGv5A13TAH9sGgmxX3XAJkymY4EL8Hm1+cvj4NqXOdb EIFyaEISTHYO0eUot+oo3CVEeko8ZVXqv8xnwXHi+wu+AJLWlwVBR4AHZcKgRgal LOikkfKt3W6dGEbam1+6g3w21hZUFhYtiWA9nqZAgXwa51aRD9uXGsSpW4j5aS+q WJeSkW8ufDn2y5omH1K60DjBSfwafuRkUZMbHGtSgpd2wjJMIcC8dS/qCnCEM7Wk jioQ -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:06 2025 by rpki-client