$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa File: 9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa (raw, json) Hash identifier: fK08TCAevd0Pjo+OIPrQp322QEtvt+RsUHW80iQi0ck= Subject key identifier: 28:DC:A8:B9:2A:CE:63:1F:29:D8:22:DD:03:CC:AA:2A:F3:C5:DD:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E864DD1FC6AA14921143D75D4B3F059E539C789 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa Signing time: Tue 10 Jun 2025 15:30:59 +0000 ROA not before: Tue 10 Jun 2025 15:30:59 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:86:4d:d1:fc:6a:a1:49:21:14:3d:75:d4:b3:f0:59:e5:39:c7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:30:59 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=003b0671082db25beed0ca3b1854b5bbdc83280b0c227a660d9e4eee198e747b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:b8:61:9f:cc:7d:10:10:a1:62:b0:3c:d7: 8e:ef:99:88:34:c8:5c:e3:a0:3a:f4:da:3b:59:a4: ab:3a:b0:a0:8a:ff:4b:d0:89:c7:76:cf:59:44:cf: 02:3a:d1:ca:18:1a:0f:5e:bc:a2:28:4c:a9:63:0b: 0c:b8:4f:e2:87:d0:7f:1a:ee:33:59:5f:48:1f:23: de:e2:e5:4a:fe:76:04:81:cb:5f:9f:80:3c:68:35: db:50:50:80:aa:69:51:d2:00:40:1a:62:d4:8e:8e: 9f:01:c3:23:4c:fa:93:56:f2:a1:80:40:d2:12:f2: 60:0b:58:3e:bf:b0:df:03:3c:93:9a:3f:cb:7e:71: d3:8d:2f:f4:ad:d9:48:b2:30:77:e3:6f:68:b8:ee: b8:f2:9c:1c:6d:4e:77:48:15:86:54:d2:aa:90:72: 9c:2e:e6:26:5c:0d:66:12:c6:fd:73:f5:45:93:8b: 55:7a:9e:94:c0:b6:7e:ef:e8:b9:8b:02:10:7a:fc: 01:a9:5d:7c:99:b2:a2:0e:0b:df:6a:a9:ec:bd:c8: 30:a3:3e:36:ca:85:1a:9f:3b:5e:5b:5b:42:c7:65: 43:6b:2e:3a:28:b2:7e:75:51:1d:11:37:0c:3a:9a: 92:0a:20:aa:08:d1:30:99:60:3f:c1:68:8a:63:47: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:A8:B9:2A:CE:63:1F:29:D8:22:DD:03:CC:AA:2A:F3:C5:DD:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6097bb-46f7-4a39-9afe-98271c8b05b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8c00::/38 Signature Algorithm: sha256WithRSAEncryption 90:97:11:3d:f1:17:f0:8a:84:bf:1a:b8:a4:ab:bb:d1:fb:a4: ee:7d:c2:a7:45:e5:9d:a9:d6:98:91:6d:85:b4:20:ab:0d:f3: 6d:10:1f:4c:11:ed:08:49:5a:84:2e:ed:5f:88:ca:ca:af:e6: 5b:ac:e8:4e:e7:90:ed:3d:3d:7f:fc:3c:75:41:a3:a5:c0:20: 2e:89:6f:64:09:b1:0d:c3:ac:28:d9:8e:8a:af:e4:b8:9b:73: 44:d3:84:47:64:66:cc:fb:72:ed:ba:95:96:3c:17:1f:b7:fe: 07:77:60:c4:05:75:33:a5:1f:fe:ef:4f:aa:9f:38:16:43:8b: 79:25:37:5b:a8:03:2c:1c:49:7c:9f:fb:d6:60:4e:28:c7:3d: 05:5c:7b:bb:b0:16:a3:bc:fd:df:ff:62:0d:71:b8:60:c2:13: d3:d6:9a:2e:6a:a6:54:6c:15:01:10:48:c3:74:30:54:37:bd: c1:61:21:26:be:54:0b:08:68:28:dd:70:27:93:d1:03:37:48: 13:c4:cd:e1:78:2a:99:48:cf:7e:02:67:56:13:b1:4f:ab:8b: bc:b4:33:4b:90:c6:5a:7d:5c:82:04:50:14:b2:55:03:3d:e7: d7:fc:46:d6:9d:3d:1b:cd:62:ca:6a:d3:15:09:ed:0b:1d:d4: 18:3a:a5:3f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULoZN0fxqoUkhFD111LPwWeU5x4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzA1OVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAMDAzYjA2NzEwODJkYjI1YmVlZDBj YTNiMTg1NGI1YmJkYzgzMjgwYjBjMjI3YTY2MGQ5ZTRlZWUxOThlNzQ3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzG4YZ/MfRAQoWKwPNeO75mINMhc 46A69No7WaSrOrCgiv9L0InHds9ZRM8COtHKGBoPXryiKEypYwsMuE/ih9B/Gu4z WV9IHyPe4uVK/nYEgctfn4A8aDXbUFCAqmlR0gBAGmLUjo6fAcMjTPqTVvKhgEDS EvJgC1g+v7DfAzyTmj/LfnHTjS/0rdlIsjB3429ouO648pwcbU53SBWGVNKqkHKc LuYmXA1mEsb9c/VFk4tVep6UwLZ+7+i5iwIQevwBqV18mbKiDgvfaqnsvcgwoz42 yoUanzteW1tCx2VDay46KLJ+dVEdETcMOpqSCiCqCNEwmWA/wWiKY0fkdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCjcqLkqzmMfKdgi3QPMqirzxd1pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNjA5N2JiLTQ2ZjctNGEzOS05YWZlLTk4MjcxYzhiMDViOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIwwDQYJKoZIhvcNAQELBQADggEBAJCXET3xF/CKhL8auKSr u9H7pO59wqdF5Z2p1piRbYW0IKsN820QH0wR7QhJWoQu7V+Iysqv5lus6E7nkO09 PX/8PHVBo6XAIC6Jb2QJsQ3DrCjZjoqv5Libc0TThEdkZsz7cu26lZY8Fx+3/gd3 YMQFdTOlH/7vT6qfOBZDi3klN1uoAywcSXyf+9ZgTijHPQVce7uwFqO8/d//Yg1x uGDCE9PWmi5qplRsFQEQSMN0MFQ3vcFhISa+VAsIaCjdcCeT0QM3SBPEzeF4KplI z34CZ1YTsU+ri7y0M0uQxlp9XIIEUBSyVQM959f8RtadPRvNYspq0xUJ7Qsd1Bg6 pT8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:44:14 2025 by rpki-client