$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa File: 629f07b6-9f47-4955-89e6-77a305389cf6.roa (raw, json) Hash identifier: DsxEu8PPQRxGRqwKOjNmMdcYK+oT4+vcY/UKnFLJd74= Subject key identifier: 9B:0B:FF:3D:89:AF:71:56:D3:85:52:C6:C2:A1:33:A3:D2:C9:05:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 551E6FE80A3AB7F9BD5086ABDF3E3B73157E79DD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa Signing time: Tue 10 Jun 2025 00:21:25 +0000 ROA not before: Tue 10 Jun 2025 00:21:25 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1e:6f:e8:0a:3a:b7:f9:bd:50:86:ab:df:3e:3b:73:15:7e:79:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:21:25 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=6501d90c141fdc3dcba60c932ebfedcc65a6b817692b666aab57ad35d1c243ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:dd:2e:c7:6d:af:11:0b:fa:5f:59:a1:64: 64:41:5d:c9:fa:89:2e:47:13:9e:93:28:14:f7:af: 7f:39:98:fa:c7:9c:3b:36:52:d7:a2:91:19:8d:dc: 8e:9e:33:25:89:33:79:61:a6:e5:5e:1d:d1:14:43: 5a:a5:9f:50:cb:38:59:fa:ae:6d:18:c7:97:8d:bf: 41:95:47:3c:9a:84:82:8d:ec:1f:57:2f:2f:04:ee: 06:47:9f:59:e4:2c:c6:90:fc:ef:57:ec:93:78:3a: 79:31:07:c2:3e:28:a1:ed:64:cf:f5:35:63:7f:8f: 26:85:50:4a:6b:85:b6:2b:61:d1:f2:77:67:ed:02: d8:7b:96:a0:a8:6c:09:47:ad:bc:25:7f:d4:f6:c1: 6b:f6:52:f5:d6:0d:ac:20:c3:cb:cb:b7:3b:85:df: 86:78:e4:2e:da:d1:0d:10:b6:37:0d:26:9f:4e:1c: 0b:3a:4a:ef:97:9b:ac:03:09:07:a1:37:10:45:16: f0:97:a8:ea:e4:d9:6f:21:82:9b:35:d1:fe:d6:eb: d1:eb:57:b0:a4:02:c1:b8:a4:be:3e:d1:eb:9d:34: 0e:6b:67:9e:9f:87:c2:2d:a6:78:e4:d5:95:57:f3: b6:45:4b:c4:61:91:6a:78:6a:97:14:c0:5d:9f:fb: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:FF:3D:89:AF:71:56:D3:85:52:C6:C2:A1:33:A3:D2:C9:05:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b040::/48 Signature Algorithm: sha256WithRSAEncryption 9e:f8:de:08:4d:1e:1a:46:c3:43:e5:f9:a5:24:12:f9:a4:e4: 63:61:fd:e6:9f:57:9f:a0:f0:b5:89:b1:c9:17:cb:3a:03:b0: 3a:25:68:3e:39:a2:ae:d7:64:40:40:9a:b3:4e:f4:ec:68:95: 6e:83:96:51:98:07:88:72:99:d6:cc:3e:40:7d:b6:61:e9:7b: 04:38:06:f3:3b:b9:cb:65:4b:18:2d:a1:25:a7:b0:c7:b1:83: 97:54:b5:e0:fe:c0:fc:48:11:52:dc:01:4b:14:76:3b:2f:58: 50:04:19:0d:44:a9:8c:e5:32:e8:5d:07:0d:8f:1a:54:9e:e1: f6:15:6d:17:02:57:27:6b:ea:81:e5:47:75:f0:b5:e6:25:74: ca:1c:e3:6c:92:df:e0:24:62:75:92:e6:ee:2e:4f:ad:7b:64: 36:f6:73:cd:c3:3b:2e:0b:a7:cf:a5:7a:55:3d:7f:30:90:ef: 9e:32:41:9c:3a:8e:8b:af:a0:cd:dc:07:b8:61:78:15:24:4c: ff:03:e5:0d:ca:11:da:bd:d7:64:92:e8:2b:06:6b:25:ae:98: d6:18:98:1e:47:4b:87:a6:31:55:78:b0:dd:31:fc:25:31:d4: 02:c6:a6:84:6f:d1:e5:71:a8:df:9f:35:25:3d:6a:43:ec:4a: 7f:d2:49:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVR5v6Ao6t/m9UIar3z47cxV+ed0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjEyNVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANjUwMWQ5MGMxNDFmZGMzZGNiYTYw YzkzMmViZmVkY2M2NWE2YjgxNzY5MmI2NjZhYWI1N2FkMzVkMWMyNDNlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnTdLsdtrxEL+l9ZoWRkQV3J+oku RxOekygU969/OZj6x5w7NlLXopEZjdyOnjMliTN5YablXh3RFENapZ9QyzhZ+q5t GMeXjb9BlUc8moSCjewfVy8vBO4GR59Z5CzGkPzvV+yTeDp5MQfCPiih7WTP9TVj f48mhVBKa4W2K2HR8ndn7QLYe5agqGwJR628JX/U9sFr9lL11g2sIMPLy7c7hd+G eOQu2tENELY3DSafThwLOkrvl5usAwkHoTcQRRbwl6jq5NlvIYKbNdH+1uvR61ew pALBuKS+PtHrnTQOa2een4fCLaZ45NWVV/O2RUvEYZFqeGqXFMBdn/unkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJsL/z2Jr3FW04VSxsKhM6PSyQWzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYyOWYwN2I2LTlmNDctNDk1NS04OWU2LTc3YTMwNTM4OWNmNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7BAMA0GCSqGSIb3DQEBCwUAA4IBAQCe+N4ITR4aRsND5fml JBL5pORjYf3mn1efoPC1ibHJF8s6A7A6JWg+OaKu12RAQJqzTvTsaJVug5ZRmAeI cpnWzD5AfbZh6XsEOAbzO7nLZUsYLaElp7DHsYOXVLXg/sD8SBFS3AFLFHY7L1hQ BBkNRKmM5TLoXQcNjxpUnuH2FW0XAlcna+qB5Ud18LXmJXTKHONskt/gJGJ1kubu Lk+te2Q29nPNwzsuC6fPpXpVPX8wkO+eMkGcOo6Lr6DN3Ae4YXgVJEz/A+UNyhHa vddkkugrBmslrpjWGJgeR0uHpjFVeLDdMfwlMdQCxqaEb9HlcajfnzUlPWpD7Ep/ 0klE -----END CERTIFICATE-----Generated at Sat Jun 14 06:34:14 2025 by rpki-client