$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa File: 6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa (raw, json) Hash identifier: ZRkYad9X1JP9uHKOaz9aUQd1Nz00SdBCNCOsAmsqnF8= Subject key identifier: B1:10:18:00:7A:96:6C:F4:8B:35:07:BD:2E:C0:23:65:B5:AC:5F:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63F8A53A269330DF93AA530A6493D9B529064D86 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa Signing time: Mon 09 Jun 2025 15:20:23 +0000 ROA not before: Mon 09 Jun 2025 15:20:23 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f8:a5:3a:26:93:30:df:93:aa:53:0a:64:93:d9:b5:29:06:4d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:20:23 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=cd403c1063f267279118200592c47d2fcaaf5ea8f6480722f9882a21f2bf68ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:ae:1a:3c:29:14:e3:13:34:4c:a3:b8:72: ac:85:f0:93:dc:f8:79:e0:94:51:8b:2e:eb:df:12: b3:42:b9:55:13:87:2c:84:19:b5:cc:1a:dc:75:09: 34:a2:4e:ff:ba:04:d6:28:bb:4f:ac:34:ac:67:05: 90:d8:ec:a0:ce:e2:20:32:51:d8:6c:2a:c5:96:d9: 14:b8:d3:82:45:0a:13:b0:2f:89:df:c1:be:32:ec: 4c:7f:a9:19:bb:c5:fa:16:dd:a0:19:8f:10:4d:b5: 09:d6:45:a9:2c:2d:85:64:8c:2a:09:fc:bb:eb:81: 8e:e0:39:f3:db:16:11:c5:78:a2:8c:d6:66:ca:d9: 4c:2f:e7:38:e6:d4:9b:67:b9:2e:58:4f:64:d6:0d: 5a:67:2d:d4:a4:33:e9:dc:23:98:70:e5:42:33:ae: 46:be:9a:e8:a6:77:bf:8c:3d:ca:6d:4b:bc:32:15: 6a:29:b9:a6:e8:e9:7a:d5:4f:72:7a:5f:b3:98:31: 8b:fe:92:13:aa:3b:08:4d:3d:aa:ba:16:97:64:10: 63:26:a3:9b:df:fc:f2:ad:12:fa:8b:7a:7d:92:e4: b0:cb:14:47:23:cb:8a:ae:11:71:5b:2e:7f:e1:8d: 64:d9:68:94:a1:7b:d5:b2:b9:aa:bb:ac:6f:bd:4a: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:10:18:00:7A:96:6C:F4:8B:35:07:BD:2E:C0:23:65:B5:AC:5F:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c880::/48 Signature Algorithm: sha256WithRSAEncryption ab:01:00:2d:3c:92:23:e0:12:8a:5d:93:47:99:88:9e:37:0e: 0f:f0:d8:31:a1:13:0a:9c:5c:0f:51:59:95:d7:37:e3:93:1b: 7c:50:25:62:06:77:f7:ad:d5:38:72:51:db:62:b0:33:48:62: ff:39:29:5b:11:8b:ac:36:b2:0e:d3:f6:18:14:29:e0:3c:c2: 74:21:87:78:0f:64:f6:99:b7:a1:87:2e:3c:b7:78:96:f6:4a: 2b:02:34:83:4e:6a:b4:9a:0d:89:3c:87:09:6f:9d:19:7a:4c: 46:7c:8d:4b:ef:db:de:cd:52:77:19:50:31:9e:2c:c5:b1:5b: 78:5d:4b:81:8f:21:d8:30:a5:f5:dd:dc:d9:e1:89:12:3c:1c: c2:e9:69:5d:dd:b7:4b:91:a9:97:4a:de:71:dd:3b:2f:2e:63: a7:fd:10:70:d4:12:9d:a3:12:e1:d0:7a:9f:7d:bf:06:95:0d: bb:63:ce:f7:a0:f9:8f:2b:77:18:5b:ac:a6:9e:25:be:58:c9: 44:e7:e3:32:78:5c:3e:d8:e9:57:1c:36:31:b6:68:63:9f:58: 5f:a5:ca:97:6f:28:3d:73:31:5e:e6:16:9b:e0:4a:58:7f:44: 45:86:35:8b:b9:45:95:99:20:7a:8e:93:36:6f:34:52:06:b1: 56:da:59:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY/ilOiaTMN+TqlMKZJPZtSkGTYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjAyM1oX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAY2Q0MDNjMTA2M2YyNjcyNzkxMTgy MDA1OTJjNDdkMmZjYWFmNWVhOGY2NDgwNzIyZjk4ODJhMjFmMmJmNjhlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMmuGjwpFOMTNEyjuHKshfCT3Ph5 4JRRiy7r3xKzQrlVE4cshBm1zBrcdQk0ok7/ugTWKLtPrDSsZwWQ2OygzuIgMlHY bCrFltkUuNOCRQoTsC+J38G+MuxMf6kZu8X6Ft2gGY8QTbUJ1kWpLC2FZIwqCfy7 64GO4Dnz2xYRxXiijNZmytlML+c45tSbZ7kuWE9k1g1aZy3UpDPp3COYcOVCM65G vpropne/jD3KbUu8MhVqKbmm6Ol61U9yel+zmDGL/pITqjsITT2quhaXZBBjJqOb 3/zyrRL6i3p9kuSwyxRHI8uKrhFxWy5/4Y1k2WiUoXvVsrmqu6xvvUreGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLEQGAB6lmz0izUHvS7AI2W1rF9GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmNmI1YTNjLWIzZjUtNDU3Ny1hMjI4LTJjZTFiNzMyN2MwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8iAMA0GCSqGSIb3DQEBCwUAA4IBAQCrAQAtPJIj4BKKXZNH mYieNw4P8NgxoRMKnFwPUVmV1zfjkxt8UCViBnf3rdU4clHbYrAzSGL/OSlbEYus NrIO0/YYFCngPMJ0IYd4D2T2mbehhy48t3iW9korAjSDTmq0mg2JPIcJb50ZekxG fI1L79vezVJ3GVAxnizFsVt4XUuBjyHYMKX13dzZ4YkSPBzC6Wld3bdLkamXSt5x 3TsvLmOn/RBw1BKdoxLh0Hqffb8GlQ27Y873oPmPK3cYW6ymniW+WMlE5+MyeFw+ 2OlXHDYxtmhjn1hfpcqXbyg9czFe5hab4EpYf0RFhjWLuUWVmSB6jpM2bzRSBrFW 2ll3 -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:14 2025 by rpki-client