$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa File: 6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa (raw, json) Hash identifier: qL/xwCtiFiLzGU8DOXldITtv0qo4JFQZO9SSHsOoz1Y= Subject key identifier: 54:AA:07:25:13:C6:07:6F:80:4A:FD:74:E9:5A:69:4A:91:CE:4D:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C9DF2E1101FC8D810DA6E43B86A5431A92ADCD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa Signing time: Fri 13 Jun 2025 00:00:11 +0000 ROA not before: Fri 13 Jun 2025 00:00:11 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9d:f2:e1:10:1f:c8:d8:10:da:6e:43:b8:6a:54:31:a9:2a:dc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 13 00:00:11 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=8e942ed7338b7ddc6eab530a3298f513c5f8804eb258279168ad7c0afcc7a985, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:0a:20:74:67:f9:ce:4a:8d:74:d0:e1:dc: 92:af:a2:c1:31:3f:dd:0d:d9:4e:2c:2d:97:cf:54: 96:69:8e:80:f1:a2:92:10:b7:9e:cd:e3:c5:49:cc: 13:9a:02:20:d8:5a:61:54:7d:01:37:1f:06:a4:43: 17:85:fe:26:dd:f5:50:64:e0:8a:51:44:0f:4a:f3: 6c:3d:04:5e:d3:33:61:a2:17:6b:52:a0:6e:72:86: f5:aa:c6:71:d1:1d:c9:8a:72:72:c0:5e:5a:51:9b: 81:1d:2b:8f:60:07:e8:f3:96:6c:e7:f9:ad:cf:6d: d3:fc:7b:b0:25:63:d7:2e:0a:e7:0d:02:65:c4:3e: 99:90:90:79:3c:96:81:d2:ff:c5:fb:1a:9b:00:46: 16:72:98:ee:f0:4a:88:7c:b0:ce:c8:d7:4e:65:70: 6f:6f:07:a2:34:31:e1:26:af:d9:01:8b:95:42:81: 39:60:f0:e4:7d:97:41:7e:39:ad:d5:c2:fc:ea:53: c5:bd:95:39:e3:e4:57:73:8d:20:2b:2b:6f:61:53: 97:54:60:01:7d:da:4f:90:0a:8f:c4:ce:04:e8:f7: 65:78:05:0d:66:5e:ae:15:57:ff:cf:63:52:41:1a: c5:3e:c1:7b:b7:02:f2:0b:3b:ab:c4:a6:77:49:08: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:07:25:13:C6:07:6F:80:4A:FD:74:E9:5A:69:4A:91:CE:4D:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:b000::/40 Signature Algorithm: sha256WithRSAEncryption 4f:99:6e:d2:bf:a4:35:2e:47:10:aa:73:e4:37:13:6e:d9:02: f0:92:9a:66:ab:6e:f7:05:54:9a:48:a6:49:ed:27:24:27:34: 04:af:b7:9f:0d:f0:e0:58:19:a3:b3:33:e4:4e:1b:e8:74:f4: fd:c0:db:da:bc:f8:44:b6:75:5d:c0:b6:41:76:10:74:16:d5: 8e:91:3d:35:8c:33:0c:a6:92:ef:3b:ad:47:83:0a:70:e7:0e: bb:e5:e0:20:0b:8c:0b:93:d4:fe:f2:8a:50:93:4c:42:81:3f: 0b:d9:fa:07:18:b2:2d:3d:dc:98:78:71:b8:3c:64:4a:a5:71: 83:5b:80:0a:04:6d:c9:9f:e7:c2:67:97:ab:6d:bb:2a:0a:a1: f8:24:d5:50:b4:21:d9:5d:2f:d6:cd:97:50:a8:e6:d2:26:cc: b6:3c:83:d0:5b:77:bb:e7:72:b3:99:fe:62:1b:99:7c:16:d3: a0:38:18:87:85:11:e4:ae:45:9b:95:0f:cf:d1:1c:eb:2c:fe: 59:65:5a:09:59:57:6e:b9:5c:38:b1:a6:42:39:c0:01:28:94: d7:cc:5c:ed:50:a5:43:9a:5f:33:5b:85:8e:fa:f9:95:6a:d4: 45:e3:b4:c8:b9:9e:aa:58:69:53:e1:74:d6:8f:fc:97:40:fe: ff:08:74:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHJ3y4RAfyNgQ2m5DuGpUMakq3NIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMzAwMDAxMVoX DTI1MDcxODIzNTk1OVowejFJMEcGA1UEBRNAOGU5NDJlZDczMzhiN2RkYzZlYWI1 MzBhMzI5OGY1MTNjNWY4ODA0ZWIyNTgyNzkxNjhhZDdjMGFmY2M3YTk4NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwgKIHRn+c5KjXTQ4dySr6LBMT/d DdlOLC2Xz1SWaY6A8aKSELeezePFScwTmgIg2FphVH0BNx8GpEMXhf4m3fVQZOCK UUQPSvNsPQRe0zNhohdrUqBucob1qsZx0R3JinJywF5aUZuBHSuPYAfo85Zs5/mt z23T/HuwJWPXLgrnDQJlxD6ZkJB5PJaB0v/F+xqbAEYWcpju8EqIfLDOyNdOZXBv bweiNDHhJq/ZAYuVQoE5YPDkfZdBfjmt1cL86lPFvZU54+RXc40gKytvYVOXVGAB fdpPkAqPxM4E6PdleAUNZl6uFVf/z2NSQRrFPsF7twLyCzurxKZ3SQinQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFSqByUTxgdvgEr9dOlaaUqRzk2SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMzM2YjAyLWY3NzMtNGZiYi1iYmM0LWExMTQ5YjE3MmFkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoLAwDQYJKoZIhvcNAQELBQADggEBAE+ZbtK/pDUuRxCqc+Q3 E27ZAvCSmmarbvcFVJpIpkntJyQnNASvt58N8OBYGaOzM+ROG+h09P3A29q8+ES2 dV3AtkF2EHQW1Y6RPTWMMwymku87rUeDCnDnDrvl4CALjAuT1P7yilCTTEKBPwvZ +gcYsi093Jh4cbg8ZEqlcYNbgAoEbcmf58Jnl6ttuyoKofgk1VC0IdldL9bNl1Co 5tImzLY8g9Bbd7vncrOZ/mIbmXwW06A4GIeFEeSuRZuVD8/RHOss/lllWglZV265 XDixpkI5wAEolNfMXO1QpUOaXzNbhY76+ZVq1EXjtMi5nqpYaVPhdNaP/JdA/v8I dEo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:37:23 2025 by rpki-client