$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa File: 794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa (raw, json) Hash identifier: ORhvF4G9b7EUhQq81zx/8+cscqp8I1aAfWW/moKzTe0= Subject key identifier: 28:09:E4:EC:7F:90:58:99:53:E7:FE:3E:FF:5D:63:79:78:E3:D0:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1EA2332603C3F0E8C1BBD0174E28209B969EE40A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa Signing time: Tue 10 Jun 2025 15:30:54 +0000 ROA not before: Tue 10 Jun 2025 15:30:54 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a2:33:26:03:c3:f0:e8:c1:bb:d0:17:4e:28:20:9b:96:9e:e4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:30:54 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=4d0ce02cb84fecdb1d4c18ea9ae570e4a64b041556ae626fefa6ced0ce370d6c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:6a:a7:ce:56:51:f5:d8:68:9b:f3:60:c3: 47:af:27:f1:15:9e:aa:0a:01:56:4b:f9:1e:05:1c: c8:63:e3:80:66:60:9b:3e:58:1a:c6:a5:63:f0:fd: 4c:25:78:1d:fc:1d:49:8b:1f:62:47:71:1b:6d:3c: 5d:36:18:dc:cf:c4:a1:2c:c6:55:02:6b:4f:3d:56: e0:41:08:95:7e:6b:8c:0b:4a:96:69:34:ac:41:d1: 0f:13:9b:a3:24:5a:25:89:25:81:a3:83:24:a2:e1: fb:bc:ad:b2:90:e2:92:60:09:f1:bf:3a:ad:1f:ae: 48:b0:e8:1d:0f:5c:af:df:b6:60:a8:36:f8:9d:5e: 70:37:96:e6:f3:96:13:29:97:e4:5f:d8:0c:38:bd: 7b:eb:71:6d:d3:8e:b5:a4:f5:77:cf:91:fe:54:61: 67:dd:6d:a5:b7:0b:1e:92:e2:73:9a:4b:13:53:ef: 0f:8a:f2:3b:ea:a6:99:c8:8f:34:79:ea:20:25:f7: 9d:da:a7:a9:fc:7e:87:b8:f2:3f:77:8e:86:9a:c8: fb:ba:3e:71:7f:d0:6f:4c:0a:1c:58:a4:2a:22:86: d7:c9:79:39:3d:9a:23:af:ca:ee:94:26:a7:fa:2e: e6:a2:40:ef:5d:c9:45:f3:bb:73:eb:b1:92:87:c8: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:E4:EC:7F:90:58:99:53:E7:FE:3E:FF:5D:63:79:78:E3:D0:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a::/38 Signature Algorithm: sha256WithRSAEncryption c0:47:6a:4a:4f:5c:5f:32:a0:2c:ce:6f:fb:ca:cc:d1:ec:68: d2:4d:ae:99:b9:c6:a3:00:37:eb:f0:69:95:24:c6:44:4c:9c: b8:15:eb:09:3b:18:ec:fc:9d:59:23:a0:a0:1e:ef:a0:c2:6f: 1b:62:2e:8c:cb:c1:73:5f:e9:72:2e:17:dd:50:d8:9a:5a:84: e5:a4:74:14:3d:fd:d0:d6:72:6a:f2:f5:fe:98:2d:24:33:c7: 58:97:5a:86:72:bd:ba:7b:64:a4:1c:3e:53:29:d1:48:e2:8b: 3e:90:18:30:2e:62:7c:a4:3c:97:51:6f:7a:29:83:16:e0:89: d1:60:c7:11:2d:79:97:7b:c9:7e:dc:f7:3d:7c:58:72:e5:32: f9:0b:59:c6:1a:99:74:b0:68:70:91:86:74:cc:f1:41:b7:43: 91:ff:e8:ae:09:cc:a4:69:9c:2a:2f:ee:f3:59:e7:ae:f2:53: 93:0a:ec:34:ee:a2:ab:75:42:03:3f:20:c6:da:98:32:e8:06: 83:71:bd:fb:fe:42:9d:0d:aa:32:c5:43:b7:05:83:e0:c5:75: fa:5b:e3:74:3d:98:11:b2:10:01:ac:3d:75:e9:0d:1b:b3:d6: e4:23:ea:b3:88:92:4f:16:b7:ea:3f:c9:66:73:e4:9c:35:1e: 62:16:59:55 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHqIzJgPD8OjBu9AXTiggm5ae5AowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzA1NFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANGQwY2UwMmNiODRmZWNkYjFkNGMx OGVhOWFlNTcwZTRhNjRiMDQxNTU2YWU2MjZmZWZhNmNlZDBjZTM3MGQ2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyJqp85WUfXYaJvzYMNHryfxFZ6q CgFWS/keBRzIY+OAZmCbPlgaxqVj8P1MJXgd/B1Jix9iR3EbbTxdNhjcz8ShLMZV AmtPPVbgQQiVfmuMC0qWaTSsQdEPE5ujJFoliSWBo4MkouH7vK2ykOKSYAnxvzqt H65IsOgdD1yv37ZgqDb4nV5wN5bm85YTKZfkX9gMOL1763Ft0461pPV3z5H+VGFn 3W2ltwsekuJzmksTU+8PivI76qaZyI80eeogJfed2qep/H6HuPI/d46Gmsj7uj5x f9BvTAocWKQqIobXyXk5PZojr8rulCan+i7mokDvXclF87tz67GSh8isNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCgJ5Ox/kFiZU+f+Pv9dY3l449C0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5NGY5NGM2LWExZTAtNDRkYi1hYzEzLTBjYjVkMGQ4YmM2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgAwDQYJKoZIhvcNAQELBQADggEBAMBHakpPXF8yoCzOb/vK zNHsaNJNrpm5xqMAN+vwaZUkxkRMnLgV6wk7GOz8nVkjoKAe76DCbxtiLozLwXNf 6XIuF91Q2JpahOWkdBQ9/dDWcmry9f6YLSQzx1iXWoZyvbp7ZKQcPlMp0Ujiiz6Q GDAuYnykPJdRb3opgxbgidFgxxEteZd7yX7c9z18WHLlMvkLWcYamXSwaHCRhnTM 8UG3Q5H/6K4JzKRpnCov7vNZ567yU5MK7DTuoqt1QgM/IMbamDLoBoNxvfv+Qp0N qjLFQ7cFg+DFdfpb43Q9mBGyEAGsPXXpDRuz1uQj6rOIkk8Wt+o/yWZz5Jw1HmIW WVU= -----END CERTIFICATE-----Generated at Sat Jun 14 05:47:30 2025 by rpki-client