$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b072caa-75fc-4171-a003-7c2d34288af7.roa File: 9b072caa-75fc-4171-a003-7c2d34288af7.roa (raw, json) Hash identifier: ysMzgmaVXaEa9yJovhhRWM4Kyj2TzbymbjEKPR4Dyzw= Subject key identifier: B3:7C:FC:6D:95:86:A6:D7:30:67:A3:8E:D3:1B:20:B5:63:64:E8:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7270BD2C703118976A4BCF923CAA1BC1BD1F134F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b072caa-75fc-4171-a003-7c2d34288af7.roa Signing time: Tue 10 Jun 2025 15:40:21 +0000 ROA not before: Tue 10 Jun 2025 15:40:21 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:70:bd:2c:70:31:18:97:6a:4b:cf:92:3c:aa:1b:c1:bd:1f:13:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:40:21 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9b8bc581cb124e7dd6a85c004a22eeeb527bb64c2ad4e988b2cb72dc7cefe474, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:6d:11:71:7d:86:34:57:84:4b:a9:ac:bc: ca:d9:c4:c1:ae:df:32:d5:cf:74:a6:93:2a:59:d8: c1:45:4a:55:36:94:70:22:93:ac:96:6d:b1:1a:af: e8:25:c5:eb:9a:fe:81:d9:59:d9:96:cf:14:ce:84: 98:52:af:86:e8:20:8a:3c:c7:a6:b1:4f:da:50:e5: f4:9d:a0:45:e5:52:03:88:31:d6:69:50:64:9d:e5: 9f:21:b2:1e:77:c7:90:71:23:4b:aa:49:d8:c2:33: 0e:c0:59:70:d4:2a:45:4b:74:3d:1e:8e:9b:b9:a7: 0d:20:e2:44:54:1c:df:c8:21:1d:54:d8:0f:1c:84: 2b:9e:23:b1:ae:30:80:33:a5:b0:75:8d:03:cc:34: fb:aa:a0:1b:d7:29:5b:32:89:29:79:d0:72:d1:a1: e1:52:51:39:9e:2a:25:fb:af:da:41:08:d2:2c:0f: 75:ef:6a:75:08:6c:65:6d:43:d8:be:49:d6:53:d0: 6e:4b:74:c5:12:81:81:98:61:69:fb:1b:d5:3a:fc: b3:28:ae:b1:d5:26:67:49:c0:f1:2d:3d:8d:55:e4: 7c:4a:bd:2f:50:e7:ff:1d:ba:c6:5a:26:aa:8c:da: e2:f8:42:dc:e9:47:a0:a5:cb:8c:2b:00:fb:ab:30: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7C:FC:6D:95:86:A6:D7:30:67:A3:8E:D3:1B:20:B5:63:64:E8:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b072caa-75fc-4171-a003-7c2d34288af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18::/38 Signature Algorithm: sha256WithRSAEncryption 15:ff:a6:66:2e:4f:98:35:98:e0:25:e7:8d:4d:fb:15:72:16: 65:9e:81:7f:bf:b3:ec:af:01:8d:23:bc:2c:50:35:39:a6:42: 05:1b:22:f3:d3:87:67:90:5f:47:7e:c7:97:7f:9e:7a:7b:d5: ad:9a:b5:98:d7:e7:7a:ae:16:da:78:01:3c:99:be:f8:ff:9a: f8:63:b2:d4:15:6a:c9:27:96:db:2a:3e:36:95:ae:18:e8:e5: 22:fb:e5:02:58:65:b6:68:b0:8c:cf:7d:66:da:2d:b2:a5:87: e4:51:de:d1:e8:b0:d9:41:b6:23:64:79:63:22:43:22:30:fa: ed:a5:ee:49:c6:3f:e7:05:8a:4a:2b:8d:68:b9:d7:89:3f:0a: 6b:7a:23:f5:c8:2b:f4:ff:17:43:99:7e:8d:9a:bf:cf:a6:1b: 02:f5:45:14:b4:dd:80:ec:1c:58:aa:a9:d2:12:e7:eb:6e:72: 08:a1:4b:fe:92:dc:da:85:68:64:73:6f:f5:b3:f4:98:46:24: 8f:16:7a:fa:99:10:a8:84:59:2a:85:e3:ad:1e:17:9e:b5:fb: 2c:9b:d0:90:25:0d:e4:9e:37:e0:f1:04:0b:06:71:45:f6:cb: 45:3b:53:1f:7d:80:24:e1:a2:4d:d1:44:55:16:77:e1:c6:77: 52:40:52:53 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcnC9LHAxGJdqS8+SPKobwb0fE08wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NDAyMVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOWI4YmM1ODFjYjEyNGU3ZGQ2YTg1 YzAwNGEyMmVlZWI1MjdiYjY0YzJhZDRlOTg4YjJjYjcyZGM3Y2VmZTQ3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf5tEXF9hjRXhEuprLzK2cTBrt8y 1c90ppMqWdjBRUpVNpRwIpOslm2xGq/oJcXrmv6B2VnZls8UzoSYUq+G6CCKPMem sU/aUOX0naBF5VIDiDHWaVBkneWfIbIed8eQcSNLqknYwjMOwFlw1CpFS3Q9Ho6b uacNIOJEVBzfyCEdVNgPHIQrniOxrjCAM6WwdY0DzDT7qqAb1ylbMokpedBy0aHh UlE5niol+6/aQQjSLA9172p1CGxlbUPYvknWU9BuS3TFEoGBmGFp+xvVOvyzKK6x 1SZnScDxLT2NVeR8Sr0vUOf/HbrGWiaqjNri+ELc6UegpcuMKwD7qzB1dwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLN8/G2VhqbXMGejjtMbILVjZOgFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzliMDcyY2FhLTc1ZmMtNDE3MS1hMDAzLTdjMmQzNDI4OGFmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGAAwDQYJKoZIhvcNAQELBQADggEBABX/pmYuT5g1mOAl541N +xVyFmWegX+/s+yvAY0jvCxQNTmmQgUbIvPTh2eQX0d+x5d/nnp71a2atZjX53qu Ftp4ATyZvvj/mvhjstQVasknltsqPjaVrhjo5SL75QJYZbZosIzPfWbaLbKlh+RR 3tHosNlBtiNkeWMiQyIw+u2l7knGP+cFikorjWi514k/Cmt6I/XIK/T/F0OZfo2a v8+mGwL1RRS03YDsHFiqqdIS5+tucgihS/6S3NqFaGRzb/Wz9JhGJI8WevqZEKiE WSqF460eF561+yyb0JAlDeSeN+DxBAsGcUX2y0U7Ux99gCThok3RRFUWd+HGd1JA UlM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:28:23 2025 by rpki-client