$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f53e144-6602-423c-9146-4441340a43ed.roa File: 9f53e144-6602-423c-9146-4441340a43ed.roa (raw, json) Hash identifier: s+Bc4ZcanOEs8qyzfFkf/JBbpudRoEMGqER/Yfi238g= Subject key identifier: 4E:54:B5:15:BE:41:4D:A3:59:49:2C:A2:A3:DE:0B:22:46:F5:78:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E439CA1883724912A68B3D9496E6358CD1957B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f53e144-6602-423c-9146-4441340a43ed.roa Signing time: Tue 10 Jun 2025 00:20:53 +0000 ROA not before: Tue 10 Jun 2025 00:20:53 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:43:9c:a1:88:37:24:91:2a:68:b3:d9:49:6e:63:58:cd:19:57:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:53 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=b2e13e97a179718d9fa23114e8e6d538726e8a0a28f38cd1fd48f9256d907595, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:ca:5a:04:a7:63:43:1d:93:4d:15:01:9b: 1f:be:da:09:1c:28:2a:07:6e:d6:e0:eb:fa:f9:24: c1:43:71:c7:ad:fd:b9:27:f5:15:cf:39:9b:31:2b: 30:5d:11:97:2f:30:a7:b3:fc:84:e5:20:59:97:88: 08:41:69:1b:8e:ef:f2:ae:89:3f:29:45:ee:7a:cc: a3:a3:39:a5:3a:70:be:91:19:e8:00:3c:64:2b:d1: f4:50:ab:e9:a7:53:85:b4:34:7e:0e:de:86:0f:26: e0:5b:d1:aa:c5:c3:76:72:56:4b:72:99:e9:0b:28: 18:8b:01:92:c7:8d:98:5b:b9:d7:b3:91:4f:ba:12: 67:a6:7a:41:c3:07:44:a5:d9:2d:28:af:a9:9b:bc: a0:28:cf:1c:8c:a5:93:c7:1a:e2:7b:32:09:7c:59: 20:94:d7:f4:29:39:ea:49:30:c3:51:35:4b:55:a0: c8:64:83:63:43:02:f4:2d:c3:40:8f:74:39:f7:a1: bc:d5:4a:20:97:26:97:fb:be:35:75:65:4c:ac:9f: d9:8d:9b:5d:72:c9:a3:e2:3c:34:a2:13:14:e3:c6: 17:43:c8:b5:ee:e4:61:6b:ff:c7:fa:bf:2e:06:61: a5:d9:83:81:94:11:de:89:6f:2b:0c:f1:81:0a:8f: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:B5:15:BE:41:4D:A3:59:49:2C:A2:A3:DE:0B:22:46:F5:78:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f53e144-6602-423c-9146-4441340a43ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8840::/46 Signature Algorithm: sha256WithRSAEncryption b2:c0:e6:81:8d:55:a1:ed:5a:03:aa:3b:e4:d3:62:e7:8a:5a: 27:e2:12:74:bf:c6:3e:f2:0a:99:7c:c4:4c:e0:6d:e8:c9:67: 5d:7d:f1:3a:fe:1e:35:c5:0f:7e:5e:49:a8:da:16:13:93:3a: 20:6f:a0:a8:29:34:54:42:f3:80:8e:d9:12:9f:32:ab:57:2d: 6e:c0:eb:0e:f7:a3:fa:bb:1b:85:4b:5c:e9:57:b5:1f:4e:44: 9a:ab:d1:47:aa:06:45:03:cd:8f:e5:8c:b0:87:8c:7c:d3:70: 91:9b:70:69:79:ee:fd:9e:24:d8:58:37:7e:b4:6c:a3:e7:4e: 46:7f:78:3d:59:c5:dc:00:36:fb:5d:09:9c:0f:b6:67:ca:79: 60:02:f3:92:97:a2:1b:62:34:ba:46:bf:6c:61:b0:71:22:16: 0a:1a:b9:24:ca:3d:05:12:da:8f:c4:91:5e:5b:9b:31:61:5f: 6c:66:cc:92:30:b2:13:1f:1a:e5:cf:47:18:6f:ac:7a:ba:ce: b6:9c:83:cf:25:85:63:02:96:c2:7c:17:1f:34:de:a3:c3:70: 70:d1:61:c8:8d:70:f9:17:f4:cf:95:1a:6c:94:6a:ac:7c:cd: 29:ca:a8:ad:8a:80:5a:7f:0b:62:2f:9a:c4:73:70:f5:68:7b: 70:a3:3a:a6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDkOcoYg3JJEqaLPZSW5jWM0ZV7UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjA1M1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYjJlMTNlOTdhMTc5NzE4ZDlmYTIz MTE0ZThlNmQ1Mzg3MjZlOGEwYTI4ZjM4Y2QxZmQ0OGY5MjU2ZDkwNzU5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVzKWgSnY0Mdk00VAZsfvtoJHCgq B27W4Ov6+STBQ3HHrf25J/UVzzmbMSswXRGXLzCns/yE5SBZl4gIQWkbju/yrok/ KUXuesyjozmlOnC+kRnoADxkK9H0UKvpp1OFtDR+Dt6GDybgW9GqxcN2clZLcpnp CygYiwGSx42YW7nXs5FPuhJnpnpBwwdEpdktKK+pm7ygKM8cjKWTxxriezIJfFkg lNf0KTnqSTDDUTVLVaDIZINjQwL0LcNAj3Q596G81UoglyaX+741dWVMrJ/ZjZtd csmj4jw0ohMU48YXQ8i17uRha//H+r8uBmGl2YOBlBHeiW8rDPGBCo/2tQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE5UtRW+QU2jWUksoqPeCyJG9XimMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmNTNlMTQ0LTY2MDItNDIzYy05MTQ2LTQ0NDEzNDBhNDNlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaYhAMA0GCSqGSIb3DQEBCwUAA4IBAQCywOaBjVWh7VoDqjvk 02Lnilon4hJ0v8Y+8gqZfMRM4G3oyWddffE6/h41xQ9+Xkmo2hYTkzogb6CoKTRU QvOAjtkSnzKrVy1uwOsO96P6uxuFS1zpV7UfTkSaq9FHqgZFA82P5Yywh4x803CR m3Bpee79niTYWDd+tGyj505Gf3g9WcXcADb7XQmcD7ZnynlgAvOSl6IbYjS6Rr9s YbBxIhYKGrkkyj0FEtqPxJFeW5sxYV9sZsySMLITHxrlz0cYb6x6us62nIPPJYVj ApbCfBcfNN6jw3Bw0WHIjXD5F/TPlRpslGqsfM0pyqitioBafwtiL5rEc3D1aHtw ozqm -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:12 2025 by rpki-client