$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: 61FCTOnVGydkRLcHTvRxV72OZaR+OblRrSpvTMK5lNM= Subject key identifier: 01:FC:20:1A:B4:50:0B:00:66:72:F7:63:CE:B5:9A:F2:8B:B8:BD:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50E17F3FC1306D50FD29BEF7FB01C268E290C76B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Tue 10 Jun 2025 15:50:12 +0000 ROA not before: Tue 10 Jun 2025 15:50:12 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e1:7f:3f:c1:30:6d:50:fd:29:be:f7:fb:01:c2:68:e2:90:c7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:50:12 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=2ddbfb84ad1e0c19c15f000be52fa3c9de15d409b838bdcde89543c895de8312, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:2a:01:4b:e6:d8:01:eb:5b:3c:4f:e9:65: 29:c4:9e:b9:7a:b3:30:ac:18:6a:2c:d3:6a:80:25: 9b:79:48:04:fa:aa:28:99:57:4e:b8:e6:82:42:eb: ef:4a:37:06:fb:f6:9c:d1:17:6f:4c:d2:01:5b:2a: 7c:ce:70:41:90:3a:9d:72:54:7e:bb:4d:65:86:4c: b0:81:28:3f:96:01:1f:8c:8f:c2:21:0c:51:b3:16: b9:b5:c4:89:d3:a2:95:21:19:77:87:ae:86:0a:43: 84:c9:e2:0b:17:f7:8e:27:12:2c:82:7b:f7:de:fc: a9:63:a2:42:7d:6f:1e:59:73:11:58:d0:62:da:02: ad:2b:40:4c:b7:56:a5:a1:7a:6e:4d:87:84:2d:c5: 3d:9d:cc:90:3f:f2:26:05:07:8b:f4:11:7b:a9:b2: f0:7e:44:5c:13:fd:dc:bf:07:98:73:a0:00:57:7e: fc:db:e3:33:82:e0:0d:cf:67:19:47:7b:0a:0c:21: ec:fa:98:7e:f1:b3:80:80:f9:40:60:55:6c:6d:2a: a1:77:0f:25:23:0f:86:1a:79:41:bc:ff:e4:c9:07: 0b:1d:64:98:22:37:82:11:f3:2d:94:27:92:5c:3b: 40:24:f7:98:2a:69:c4:93:31:cf:b6:6f:1f:22:c9: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:20:1A:B4:50:0B:00:66:72:F7:63:CE:B5:9A:F2:8B:B8:BD:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 10:cc:e0:14:dc:08:2d:a3:b5:dc:34:5d:7d:4a:82:c1:0b:d5: a6:f2:2e:56:3e:61:b4:ce:73:b2:a4:c4:5a:b7:0e:e4:34:b0: 00:5c:ce:fc:af:25:fe:ac:bd:f2:45:68:35:68:fb:cf:03:e1: ff:e9:0e:67:08:5b:07:bc:a4:d9:08:70:e9:52:c8:ab:a3:47: 02:53:fd:bb:b8:e3:44:0c:03:2a:dc:54:0d:ea:fe:97:c4:83: 07:48:c6:d4:ce:2b:e9:ef:d7:dd:95:30:85:cb:08:d9:38:39: 74:f2:bd:4b:56:42:28:60:92:c0:67:18:8c:97:80:f7:44:5b: 7e:f1:09:3a:fb:90:8c:b1:83:9c:63:6e:fc:d6:69:d9:92:45: 62:2b:10:d9:26:7e:36:23:0a:49:74:e0:34:47:96:61:96:7f: 37:e1:ea:9f:98:0b:b8:3a:82:43:84:96:be:a9:ec:d1:af:9e: 09:c8:87:eb:30:27:1d:2d:0a:73:33:e9:1c:55:63:c1:2b:12: 01:4d:a1:3f:bc:f7:74:14:25:78:09:a3:4d:4f:51:be:b6:a7: d1:95:43:a7:81:08:b6:aa:8f:27:94:51:e5:ad:ad:30:1f:1e: fd:af:64:76:40:07:1f:36:a8:9b:be:88:21:b5:9d:d6:3f:34: 6e:46:b7:c9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUOF/P8EwbVD9Kb73+wHCaOKQx2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NTAxMloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMmRkYmZiODRhZDFlMGMxOWMxNWYw MDBiZTUyZmEzYzlkZTE1ZDQwOWI4MzhiZGNkZTg5NTQzYzg5NWRlODMxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17cqAUvm2AHrWzxP6WUpxJ65erMw rBhqLNNqgCWbeUgE+qoomVdOuOaCQuvvSjcG+/ac0RdvTNIBWyp8znBBkDqdclR+ u01lhkywgSg/lgEfjI/CIQxRsxa5tcSJ06KVIRl3h66GCkOEyeILF/eOJxIsgnv3 3vypY6JCfW8eWXMRWNBi2gKtK0BMt1aloXpuTYeELcU9ncyQP/ImBQeL9BF7qbLw fkRcE/3cvweYc6AAV3782+MzguANz2cZR3sKDCHs+ph+8bOAgPlAYFVsbSqhdw8l Iw+GGnlBvP/kyQcLHWSYIjeCEfMtlCeSXDtAJPeYKmnEkzHPtm8fIsmzSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAH8IBq0UAsAZnL3Y861mvKLuL2bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBABDM4BTcCC2jtdw0XX1K gsEL1abyLlY+YbTOc7KkxFq3DuQ0sABczvyvJf6svfJFaDVo+88D4f/pDmcIWwe8 pNkIcOlSyKujRwJT/bu440QMAyrcVA3q/pfEgwdIxtTOK+nv192VMIXLCNk4OXTy vUtWQihgksBnGIyXgPdEW37xCTr7kIyxg5xjbvzWadmSRWIrENkmfjYjCkl04DRH lmGWfzfh6p+YC7g6gkOElr6p7NGvngnIh+swJx0tCnMz6RxVY8ErEgFNoT+893QU JXgJo01PUb62p9GVQ6eBCLaqjyeUUeWtrTAfHv2vZHZABx82qJu+iCG1ndY/NG5G t8k= -----END CERTIFICATE-----Generated at Sat Jun 14 05:57:05 2025 by rpki-client