$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e40083b-43b1-4ffa-80ac-dab38edc1415.roa File: 7e40083b-43b1-4ffa-80ac-dab38edc1415.roa (raw, json) Hash identifier: u0/6bX/E2twkm7IXdK5lZmWcE3avE5zFzSOzpmqtiVo= Subject key identifier: B9:B8:0D:07:5C:CA:72:B9:E2:A1:12:02:E8:86:D7:85:59:7E:62:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61F2ABC3AC32F9A5FB1B122DAE63D8C1DD6A6791 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e40083b-43b1-4ffa-80ac-dab38edc1415.roa Signing time: Tue 10 Jun 2025 00:20:55 +0000 ROA not before: Tue 10 Jun 2025 00:20:55 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f2:ab:c3:ac:32:f9:a5:fb:1b:12:2d:ae:63:d8:c1:dd:6a:67:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:55 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ce60b2369de786585447147a0b15592800d61e48d5bd2a49d2724887a2eca55b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:6e:3b:6d:9f:16:8d:13:d3:6b:2a:5f:27: c1:ad:8c:c6:bc:92:cb:77:60:cd:16:1f:b7:d6:b1: bf:f3:32:f3:6b:10:c6:ed:d7:05:e1:a1:e8:76:e3: 54:11:1e:8e:14:6a:3a:42:14:4a:2c:09:af:41:db: 9e:80:00:20:ed:45:d1:75:95:2d:1e:2e:16:cf:86: c3:c9:a8:0c:58:5f:a7:79:13:82:75:3b:6f:b8:98: 08:1f:b9:2d:1b:cf:60:2e:f8:23:5f:24:a5:a7:36: dc:44:61:0f:4d:e0:36:bd:b7:70:48:9f:34:05:9d: 33:ba:fc:b2:1a:b5:0e:54:a5:c9:51:b3:c8:3f:7c: 2d:07:05:c2:58:af:c5:2b:62:e8:b5:db:ef:ce:7a: 84:52:f2:d6:07:51:5c:7c:a7:4c:2f:fa:d0:36:7b: 38:98:18:a0:74:de:f4:1d:61:7d:f6:08:c2:3e:f5: 1c:49:9d:17:9c:ca:e1:f8:be:d5:af:51:0a:24:fa: 25:32:c0:af:d7:a9:98:82:6b:df:32:f8:f9:3e:36: 90:70:99:8e:d5:20:47:36:b6:c6:9b:ff:a0:3a:c6: a9:84:4a:b5:ad:b2:4b:24:99:03:3e:39:cf:90:e9: 5b:9f:26:50:85:91:4c:84:b1:de:1a:d3:de:17:91: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B8:0D:07:5C:CA:72:B9:E2:A1:12:02:E8:86:D7:85:59:7E:62:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e40083b-43b1-4ffa-80ac-dab38edc1415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c040::/46 Signature Algorithm: sha256WithRSAEncryption 71:e9:b4:c3:d8:16:05:e9:d5:43:26:21:25:81:fa:a7:8b:05: d0:2d:d7:e5:2a:d9:cc:1e:1b:d7:a0:4c:93:5f:81:24:8f:b5: 82:a9:d1:32:93:c7:de:7a:bc:b7:58:94:0b:8d:01:ae:5e:8b: 0e:3b:75:1a:fb:11:92:cd:2c:46:92:00:ef:f1:ae:f6:19:75: 26:35:ba:79:64:d8:4a:cd:cc:d6:2e:b1:d4:f3:49:43:95:24: 4c:8f:ed:be:c0:14:ff:ff:e0:2d:9f:50:db:62:93:64:37:88: 5a:47:74:a8:7c:eb:3b:61:79:39:1d:e5:88:bb:a5:87:6f:ce: a1:0a:6b:db:cf:99:c8:d3:01:0a:11:33:25:99:ff:7e:0a:ff: 12:93:20:5b:c6:5c:47:d9:41:73:d3:0b:b9:3e:11:1f:da:d2: 97:8e:66:ad:c4:a8:97:86:57:09:8d:d9:06:15:6a:37:6e:05: 9d:53:24:65:e1:42:98:9d:50:cd:62:b6:a1:99:ca:00:eb:f4: 6c:16:92:f8:0c:35:6a:3f:1a:57:d5:36:20:c2:d3:b6:d7:bb: fb:07:28:69:7a:64:75:77:49:28:22:8e:57:c8:ea:e9:62:30: 9c:d0:be:02:b5:1b:de:62:be:6a:bb:0e:bc:d8:a5:0f:8f:24: 53:26:3c:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYfKrw6wy+aX7GxItrmPYwd1qZ5EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjA1NVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAY2U2MGIyMzY5ZGU3ODY1ODU0NDcx NDdhMGIxNTU5MjgwMGQ2MWU0OGQ1YmQyYTQ5ZDI3MjQ4ODdhMmVjYTU1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCpuO22fFo0T02sqXyfBrYzGvJLL d2DNFh+31rG/8zLzaxDG7dcF4aHoduNUER6OFGo6QhRKLAmvQduegAAg7UXRdZUt Hi4Wz4bDyagMWF+neROCdTtvuJgIH7ktG89gLvgjXySlpzbcRGEPTeA2vbdwSJ80 BZ0zuvyyGrUOVKXJUbPIP3wtBwXCWK/FK2LotdvvznqEUvLWB1FcfKdML/rQNns4 mBigdN70HWF99gjCPvUcSZ0XnMrh+L7Vr1EKJPolMsCv16mYgmvfMvj5PjaQcJmO 1SBHNrbGm/+gOsaphEq1rbJLJJkDPjnPkOlbnyZQhZFMhLHeGtPeF5GkjwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLm4DQdcynK54qESAuiG14VZfmILMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlNDAwODNiLTQzYjEtNGZmYS04MGFjLWRhYjM4ZWRjMTQxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaacBAMA0GCSqGSIb3DQEBCwUAA4IBAQBx6bTD2BYF6dVDJiEl gfqniwXQLdflKtnMHhvXoEyTX4Ekj7WCqdEyk8feery3WJQLjQGuXosOO3Ua+xGS zSxGkgDv8a72GXUmNbp5ZNhKzczWLrHU80lDlSRMj+2+wBT//+Atn1DbYpNkN4ha R3SofOs7YXk5HeWIu6WHb86hCmvbz5nI0wEKETMlmf9+Cv8SkyBbxlxH2UFz0wu5 PhEf2tKXjmatxKiXhlcJjdkGFWo3bgWdUyRl4UKYnVDNYrahmcoA6/RsFpL4DDVq PxpX1TYgwtO217v7ByhpemR1d0koIo5XyOrpYjCc0L4CtRveYr5quw682KUPjyRT Jjyj -----END CERTIFICATE-----Generated at Sat Jun 14 06:43:23 2025 by rpki-client