$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: nL+WnXiytgbDMCLsUdnSzQ7777ybRRsc+05hiwJIj+0= Subject key identifier: 6D:6C:7B:8E:F6:B1:0F:A3:03:D5:DE:24:72:AE:49:55:C1:50:5E:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73B5D04E39261405ED56547A247F0A6CF51C6D76 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Tue 10 Jun 2025 00:21:19 +0000 ROA not before: Tue 10 Jun 2025 00:21:19 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b5:d0:4e:39:26:14:05:ed:56:54:7a:24:7f:0a:6c:f5:1c:6d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:21:19 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=dc986e44df542c7eea7216beffc090fbfeb0e6ca375c06cd598f9ad3dead80ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:0d:11:72:22:8f:bf:3b:d2:00:b0:cb:69: ec:02:f1:fd:77:d9:80:73:98:2a:fd:9f:14:fd:ce: 07:d7:94:10:2e:bb:5d:be:b2:01:7e:d5:5e:37:cb: 31:2c:8b:cb:8a:49:cd:1f:11:5c:57:08:d7:d3:9e: 14:93:30:8d:da:8b:be:a0:71:00:c6:07:82:4e:c8: 4f:90:00:7d:3e:37:26:42:b8:2d:73:bf:91:11:b7: dd:51:14:8a:d1:91:f8:96:66:81:3d:33:6e:27:6d: 09:dd:75:5a:25:59:ab:0a:46:89:50:82:80:67:b7: 25:26:34:5f:5d:b7:d1:79:94:60:9a:80:da:87:9a: 07:0d:64:76:aa:91:31:f5:50:0e:45:1f:01:61:81: 96:38:6e:a1:14:d3:f2:dd:fc:f0:80:86:41:2a:9a: 76:ea:6a:34:ff:96:f4:8b:97:a7:12:13:41:b6:32: cf:20:e9:18:23:dc:b5:ae:62:28:92:f8:5a:a1:bd: f7:21:4f:c9:87:e1:09:9f:08:e4:6e:60:ee:5f:dc: 85:fd:42:28:9e:d6:c8:e2:1e:4f:af:d6:97:ef:3d: 32:e7:c0:3c:8c:85:b7:64:79:fb:68:c0:ee:88:87: 93:59:86:68:73:1d:81:de:07:e0:3a:d4:0c:d9:6f: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6C:7B:8E:F6:B1:0F:A3:03:D5:DE:24:72:AE:49:55:C1:50:5E:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption ae:ba:e0:f0:3f:8c:df:e4:62:26:1f:f1:32:0b:fe:95:c8:ae: 6d:71:1d:34:22:d0:5a:3d:f4:18:40:7d:24:82:46:d1:16:66: d8:6e:37:a4:34:2e:ba:54:53:57:12:d6:42:12:7e:3d:b8:bc: ce:d6:ab:61:5d:50:37:19:81:aa:8c:23:f4:64:28:c5:1e:df: 7d:47:6c:25:42:3f:f9:c0:2a:b1:29:71:fc:81:c7:77:6c:31: d8:2f:86:8e:ba:b4:2b:34:73:25:bc:8e:c3:b0:4b:59:dc:59: 66:a4:b7:8e:2a:67:48:08:65:2d:2a:3d:3c:8e:ee:f0:21:04: 9c:1e:d2:3b:ed:b5:9f:69:2a:5a:8a:ab:71:75:ae:f6:c9:a8: 10:7d:dd:d8:d1:32:1f:25:ca:48:2f:11:52:d9:7c:28:b8:9a: 30:98:92:05:28:2c:dc:d1:a7:77:33:de:2c:36:0b:ed:0f:b1: f3:be:f2:dd:e6:db:95:ba:9a:ec:94:c9:42:c8:51:a7:f9:66: 07:70:c6:28:cf:97:32:e6:d8:47:60:ea:27:a8:fe:ac:01:ff: 7d:01:ed:13:eb:1e:f6:34:cb:f8:e5:c6:a0:3e:6e:b4:e7:44: 8f:c7:b7:bc:7b:64:9f:1c:8d:be:9f:36:22:ad:2b:ef:ef:43: ac:a6:63:55 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc7XQTjkmFAXtVlR6JH8KbPUcbXYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjExOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZGM5ODZlNDRkZjU0MmM3ZWVhNzIx NmJlZmZjMDkwZmJmZWIwZTZjYTM3NWMwNmNkNTk4ZjlhZDNkZWFkODBlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNANEXIij7870gCwy2nsAvH9d9mA c5gq/Z8U/c4H15QQLrtdvrIBftVeN8sxLIvLiknNHxFcVwjX054UkzCN2ou+oHEA xgeCTshPkAB9PjcmQrgtc7+REbfdURSK0ZH4lmaBPTNuJ20J3XVaJVmrCkaJUIKA Z7clJjRfXbfReZRgmoDah5oHDWR2qpEx9VAORR8BYYGWOG6hFNPy3fzwgIZBKpp2 6mo0/5b0i5enEhNBtjLPIOkYI9y1rmIokvhaob33IU/Jh+EJnwjkbmDuX9yF/UIo ntbI4h5Pr9aX7z0y58A8jIW3ZHn7aMDuiIeTWYZocx2B3gfgOtQM2W9NYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG1se472sQ+jA9XeJHKuSVXBUF4+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQCuuuDwP4zf5GImH/Ey C/6VyK5tcR00ItBaPfQYQH0kgkbRFmbYbjekNC66VFNXEtZCEn49uLzO1qthXVA3 GYGqjCP0ZCjFHt99R2wlQj/5wCqxKXH8gcd3bDHYL4aOurQrNHMlvI7DsEtZ3Flm pLeOKmdICGUtKj08ju7wIQScHtI77bWfaSpaiqtxda72yagQfd3Y0TIfJcpILxFS 2XwouJowmJIFKCzc0ad3M94sNgvtD7HzvvLd5tuVuprslMlCyFGn+WYHcMYoz5cy 5thHYOonqP6sAf99Ae0T6x72NMv45cagPm6050SPx7e8e2SfHI2+nzYirSvv70Os pmNV -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:04 2025 by rpki-client