$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa File: 869e5c68-564f-4aa0-a84a-56dac3c414a5.roa (raw, json) Hash identifier: nPjZ8hwmcb32LbjjSnDIP/3CkmOuOOu2eTkIkoBPcPU= Subject key identifier: 11:80:72:38:2E:EF:B1:CC:72:39:95:8D:DA:E5:2D:72:9D:D1:24:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D943551CE5E7A4B80F7D99D144FB139AF458168 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa Signing time: Tue 10 Jun 2025 00:01:04 +0000 ROA not before: Tue 10 Jun 2025 00:01:04 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:90c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:94:35:51:ce:5e:7a:4b:80:f7:d9:9d:14:4f:b1:39:af:45:81:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:01:04 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=f9a94af742e999bf439961906c85aa4c98cb4711144d87257af48266067548a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:85:87:ee:bc:52:d5:50:fa:c3:99:a1:44: 38:ce:19:38:fe:11:2a:b4:32:00:09:1c:95:59:bd: bc:b2:3d:09:aa:36:0c:0c:13:53:eb:2a:9d:b7:1c: a3:48:b5:9a:8d:00:53:10:6e:c2:ae:45:5f:28:03: 79:e6:11:b6:4a:fa:94:b7:0b:91:25:22:03:ec:c6: e9:b2:d6:39:91:54:23:f7:7d:a9:ae:0c:66:d1:52: e1:fc:99:41:f4:21:fe:d4:ee:50:49:2b:89:13:16: 83:a7:4d:bc:d6:6a:ac:6f:82:49:d0:8f:6f:57:2b: f6:0d:e7:23:3a:18:b2:bf:7d:df:2e:c9:2d:97:53: 15:bd:3a:2b:13:66:0f:55:31:10:29:57:ef:d2:ca: 99:e0:c6:1b:4d:87:91:ca:ba:87:e8:04:c7:41:02: 5d:b8:b6:da:55:ee:82:68:d7:6b:3d:01:65:16:01: e5:61:b5:92:9c:cf:ab:fb:bd:94:9f:e1:04:01:b1: e3:fb:dc:37:50:7b:2c:cc:79:48:d6:49:e8:8a:8f: f4:00:81:ad:30:1a:af:9c:b6:3b:19:c4:5c:4f:07: be:dd:6f:e3:d6:19:d4:2b:ff:90:fd:74:15:00:fc: fe:40:e5:a7:0c:b7:d2:ab:fe:58:25:1c:a1:cf:1b: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:80:72:38:2E:EF:B1:CC:72:39:95:8D:DA:E5:2D:72:9D:D1:24:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:90c0::/46 Signature Algorithm: sha256WithRSAEncryption 1c:92:36:10:c1:0d:90:fa:32:5a:ef:e8:c7:50:52:3d:55:92: 4c:90:5b:9a:74:2f:9a:b4:73:74:57:d5:13:2e:2c:57:6d:16: 9c:82:23:13:ea:57:3c:d8:35:7a:cf:56:ca:43:df:42:4c:bc: 15:c1:eb:16:b9:76:63:42:a5:cc:2a:a2:93:cb:8d:a1:56:ca: 35:61:b3:f0:a0:24:4f:4f:83:c9:52:67:ca:09:f7:b0:19:54: 13:ed:59:2a:86:5b:ec:13:71:53:d4:e5:1d:5e:d5:2b:4f:53: 05:a8:b5:1d:bb:5a:c4:c7:a3:7b:5b:8a:83:3a:b0:2c:ad:5d: 8b:12:e1:a4:c1:0d:b8:ef:e4:af:b3:da:da:f0:92:25:cc:0a: 8c:c1:50:83:e8:df:8a:2d:b3:0e:47:1f:40:6b:c7:fe:07:6d: 06:27:30:82:5e:ea:d7:76:35:7d:9a:bd:43:94:79:87:37:59: 83:ed:c2:c6:63:61:98:85:20:d3:bb:49:16:ed:22:17:2d:2e: 6b:24:a7:8c:ab:8e:4a:71:54:1c:10:25:88:fa:7f:83:98:d1: af:b4:74:21:50:9a:a9:0e:af:ed:46:60:14:43:c5:b5:80:d5: 2e:a2:10:3f:0b:ef:72:eb:11:4e:c3:5d:27:4e:b6:99:fa:95: 5f:86:8b:d3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXZQ1Uc5eekuA99mdFE+xOa9FgWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMDEwNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZjlhOTRhZjc0MmU5OTliZjQzOTk2 MTkwNmM4NWFhNGM5OGNiNDcxMTE0NGQ4NzI1N2FmNDgyNjYwNjc1NDhhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi+Fh+68UtVQ+sOZoUQ4zhk4/hEq tDIACRyVWb28sj0JqjYMDBNT6yqdtxyjSLWajQBTEG7CrkVfKAN55hG2SvqUtwuR JSID7MbpstY5kVQj932prgxm0VLh/JlB9CH+1O5QSSuJExaDp0281mqsb4JJ0I9v Vyv2DecjOhiyv33fLsktl1MVvTorE2YPVTEQKVfv0sqZ4MYbTYeRyrqH6ATHQQJd uLbaVe6CaNdrPQFlFgHlYbWSnM+r+72Un+EEAbHj+9w3UHsszHlI1knoio/0AIGt MBqvnLY7GcRcTwe+3W/j1hnUK/+Q/XQVAPz+QOWnDLfSq/5YJRyhzxu+IwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBGAcjgu77HMcjmVjdrlLXKd0STBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2OWU1YzY4LTU2NGYtNGFhMC1hODRhLTU2ZGFjM2M0MTRhNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaZDAMA0GCSqGSIb3DQEBCwUAA4IBAQAckjYQwQ2Q+jJa7+jH UFI9VZJMkFuadC+atHN0V9UTLixXbRacgiMT6lc82DV6z1bKQ99CTLwVwesWuXZj QqXMKqKTy42hVso1YbPwoCRPT4PJUmfKCfewGVQT7VkqhlvsE3FT1OUdXtUrT1MF qLUdu1rEx6N7W4qDOrAsrV2LEuGkwQ247+Svs9ra8JIlzAqMwVCD6N+KLbMORx9A a8f+B20GJzCCXurXdjV9mr1DlHmHN1mD7cLGY2GYhSDTu0kW7SIXLS5rJKeMq45K cVQcECWI+n+DmNGvtHQhUJqpDq/tRmAUQ8W1gNUuohA/C+9y6xFOw10nTraZ+pVf hovT -----END CERTIFICATE-----Generated at Sat Jun 14 06:17:22 2025 by rpki-client