$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa File: 7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa (raw, json) Hash identifier: m/fkheO3BH4B1fjF5PkGYf26uXnr3jP9vkZsI74txkg= Subject key identifier: AB:33:C6:2A:81:A6:3D:F3:27:B7:4F:A1:C8:79:6E:3C:4B:43:A9:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DD1F3032E91F3A7026EA89CC2F7043DFD9A0072 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa Signing time: Tue 10 Jun 2025 00:20:46 +0000 ROA not before: Tue 10 Jun 2025 00:20:46 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d1:f3:03:2e:91:f3:a7:02:6e:a8:9c:c2:f7:04:3d:fd:9a:00:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:46 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=be5b38da0cad58d083108f8cbf7cf6193ce3ce0ec978e24b4d6075fb0629be77, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:6a:0b:75:6f:c0:98:11:12:ee:b6:12:84: 33:cf:bb:43:68:84:e7:da:71:b6:02:29:b8:90:0e: a3:af:d8:02:e7:7f:e0:c5:0d:0d:25:d1:df:22:02: 29:21:8c:09:a5:84:2d:2e:05:a4:3f:0c:b9:7b:62: 99:af:9c:b3:31:1d:b1:85:f1:c9:94:57:93:7e:32: 77:5a:68:8c:af:5b:48:a1:70:75:6b:97:48:50:69: 9c:96:c7:52:dd:88:2d:24:10:ef:83:f2:66:ef:5a: eb:0c:ac:3c:39:91:ee:52:01:ee:dd:85:d2:a5:2d: cf:ec:f0:27:14:05:15:9a:27:f9:2a:77:c8:35:e0: 94:55:19:4b:64:ae:53:a1:64:4a:89:7d:e0:f9:48: a5:80:7e:1d:1a:46:92:9f:0e:a0:1f:9d:9b:e2:ff: f9:b8:a3:45:4c:7c:91:e0:62:0f:e6:8c:b3:6c:86: fc:81:f0:92:d3:b5:b9:e5:7e:ec:6a:5b:6e:c5:e3: d6:1b:3d:87:8d:b2:f6:41:71:a5:07:db:bb:71:6a: 91:e2:e3:34:7a:f1:47:b6:ef:d5:03:e3:49:f6:ba: 05:60:2a:c9:eb:fb:34:04:98:03:77:d2:45:62:0a: 19:1e:7c:16:4b:9d:62:ff:29:37:9f:04:ba:1a:95: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:C6:2A:81:A6:3D:F3:27:B7:4F:A1:C8:79:6E:3C:4B:43:A9:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1080::/48 Signature Algorithm: sha256WithRSAEncryption a4:40:d0:4d:95:02:7c:f9:63:0c:e1:0d:81:fe:61:60:ce:09: 44:9b:14:0a:da:9c:e8:35:30:d8:5e:a3:a1:18:2c:d3:07:4c: ab:b4:9d:29:81:35:d5:de:d9:9f:31:d5:45:b7:07:e1:fa:f2: 3f:ec:81:d3:d0:51:cb:67:63:38:66:d5:36:93:c7:b9:e0:46: 47:ca:70:d6:4f:e8:19:9b:7a:51:c2:c9:2d:8b:f3:76:f0:e8: 83:f7:99:6a:b5:04:ad:30:17:60:d6:2c:69:2e:dd:20:6d:6d: e7:95:7f:eb:5c:ec:01:30:ae:46:4f:af:93:78:23:28:f1:f1: 9c:6c:57:35:2b:47:82:89:73:e0:ee:3b:63:23:ae:3f:fb:18: 3c:c4:3d:b2:6a:b9:79:7f:87:16:c3:a4:20:46:dd:3c:68:15: 48:ef:c6:84:37:b8:5b:27:de:f7:ca:50:0c:6e:09:21:c0:38: 23:82:37:44:ac:a4:77:94:f8:75:3e:9d:57:ed:2a:0c:2d:82: a6:47:90:56:85:38:4c:24:52:5f:b4:3c:58:e1:a8:4d:56:ec: dc:fb:29:e4:e9:51:73:21:73:73:29:f7:bc:c2:22:84:e1:ab: df:9c:82:57:ce:89:f8:fb:c4:7d:b7:66:44:84:cd:6c:ee:44: eb:e3:c5:fc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXdHzAy6R86cCbqicwvcEPf2aAHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjA0NloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYmU1YjM4ZGEwY2FkNThkMDgzMTA4 ZjhjYmY3Y2Y2MTkzY2UzY2UwZWM5NzhlMjRiNGQ2MDc1ZmIwNjI5YmU3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7NqC3VvwJgREu62EoQzz7tDaITn 2nG2Aim4kA6jr9gC53/gxQ0NJdHfIgIpIYwJpYQtLgWkPwy5e2KZr5yzMR2xhfHJ lFeTfjJ3WmiMr1tIoXB1a5dIUGmclsdS3YgtJBDvg/Jm71rrDKw8OZHuUgHu3YXS pS3P7PAnFAUVmif5KnfINeCUVRlLZK5ToWRKiX3g+UilgH4dGkaSnw6gH52b4v/5 uKNFTHyR4GIP5oyzbIb8gfCS07W55X7saltuxePWGz2HjbL2QXGlB9u7cWqR4uM0 evFHtu/VA+NJ9roFYCrJ6/s0BJgDd9JFYgoZHnwWS51i/yk3nwS6GpWN4wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKszxiqBpj3zJ7dPoch5bjxLQ6nBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdhYzUwOGI4LTMzYzMtNDdkNC1hYzhhLTFjMjVmMzdkYjNjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xCAMA0GCSqGSIb3DQEBCwUAA4IBAQCkQNBNlQJ8+WMM4Q2B /mFgzglEmxQK2pzoNTDYXqOhGCzTB0yrtJ0pgTXV3tmfMdVFtwfh+vI/7IHT0FHL Z2M4ZtU2k8e54EZHynDWT+gZm3pRwskti/N28OiD95lqtQStMBdg1ixpLt0gbW3n lX/rXOwBMK5GT6+TeCMo8fGcbFc1K0eCiXPg7jtjI64/+xg8xD2yarl5f4cWw6Qg Rt08aBVI78aEN7hbJ973ylAMbgkhwDgjgjdErKR3lPh1Pp1X7SoMLYKmR5BWhThM JFJftDxY4ahNVuzc+ynk6VFzIXNzKfe8wiKE4avfnIJXzon4+8R9t2ZEhM1s7kTr 48X8 -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:30 2025 by rpki-client