$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: coWqHj6nPcnQ5zauvwGlujidZo1fmXslgUDuq6n5cHw= Subject key identifier: AD:30:53:00:E1:03:77:01:8B:0F:96:46:41:D3:E2:3A:5E:0B:99:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BC53904F41802FA03DB026C6C0161C29FF42E7F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Tue 10 Jun 2025 15:02:01 +0000 ROA not before: Tue 10 Jun 2025 15:02:01 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c5:39:04:f4:18:02:fa:03:db:02:6c:6c:01:61:c2:9f:f4:2e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:02:01 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=4f0db9b20937f25c8b1081a8cabc44a67f5a821d2418117d1431c1bc2711791a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:b3:eb:e3:9f:9a:80:93:4b:5f:db:d9:86: 2f:ff:42:ce:0b:81:53:b6:ab:08:c0:6d:96:3e:ae: bf:24:f0:71:15:38:aa:01:ff:5a:c5:87:e7:90:e8: 41:c9:6e:fd:57:87:b3:c7:a6:01:47:23:7b:fe:34: 46:42:a0:5e:bd:4e:7d:bb:3b:dc:51:d1:3a:50:b7: f1:8c:00:fa:fa:a9:44:07:68:de:6b:60:5d:69:7a: 58:89:ac:37:42:ac:71:a6:f2:87:70:16:01:13:06: aa:03:0f:67:79:75:be:8d:44:8b:98:5d:8d:42:18: 5d:46:1b:6c:b0:b3:1c:83:22:ce:ef:b1:48:3a:6b: d7:8e:16:90:0a:a9:3e:98:2c:a5:a8:e9:63:67:c8: ae:16:7c:93:74:d6:67:f8:21:3f:4b:0b:b3:22:0f: 63:8c:58:3d:5b:6d:ee:b7:63:a7:53:e1:e5:48:70: 24:48:50:fd:9c:3f:e3:ac:e6:f1:b2:4c:11:c3:ee: 01:8a:48:9e:a1:ca:3d:9c:ba:04:b5:5c:6a:ac:2a: 5c:bc:b2:56:55:60:4c:a3:c0:5e:7d:24:1f:60:1b: 50:8a:38:95:14:56:42:cf:89:89:da:da:54:49:b5: d6:90:20:ce:d9:25:f5:15:42:f5:4f:d7:cc:6c:13: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:53:00:E1:03:77:01:8B:0F:96:46:41:D3:E2:3A:5E:0B:99:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption c5:0f:7e:33:d5:3e:40:02:c4:df:d7:5b:5c:03:79:27:4f:d3: 71:0c:80:7e:0c:23:a6:09:4b:79:f6:76:18:53:8b:a6:f8:ed: 73:57:a6:29:b1:9e:09:ff:71:3b:c5:a8:cb:73:d0:a2:c7:f3: b0:f9:ec:be:3c:09:42:48:9a:2d:16:00:61:49:29:fb:46:c1: 5f:49:56:ac:9e:e6:78:11:85:a9:85:07:61:db:c1:83:08:98: 8d:e4:1b:55:32:23:ca:8c:79:b5:a5:95:a4:26:d1:0a:41:10: 97:1e:cc:8a:e2:0d:e6:47:af:22:68:42:d6:e6:54:a9:b2:8c: 2b:e5:4d:ae:f1:09:54:85:e0:b5:a7:fd:f8:5c:12:df:46:a4: 1c:56:8b:a0:45:c5:a7:ea:4c:6c:1a:a7:0c:0e:f6:b0:08:eb: 98:b4:e6:8e:b8:29:f6:f9:9c:14:cd:3e:3e:51:67:bc:d2:e2: 09:cf:d6:12:e2:35:99:cc:66:83:d6:0d:1d:14:e0:78:d1:99: 9f:4c:17:a6:60:e6:1e:92:fc:5f:d5:e5:88:c5:76:ba:86:79: 88:6d:bb:4a:ba:f8:1d:fc:bb:08:b7:6a:e0:43:aa:bc:7f:bf: 6a:82:1f:fe:9d:6b:d7:40:95:d2:25:0b:48:06:23:25:be:a0: dd:53:e4:35 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO8U5BPQYAvoD2wJsbAFhwp/0Ln8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MDIwMVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANGYwZGI5YjIwOTM3ZjI1YzhiMTA4 MWE4Y2FiYzQ0YTY3ZjVhODIxZDI0MTgxMTdkMTQzMWMxYmMyNzExNzkxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+z6+OfmoCTS1/b2YYv/0LOC4FT tqsIwG2WPq6/JPBxFTiqAf9axYfnkOhByW79V4ezx6YBRyN7/jRGQqBevU59uzvc UdE6ULfxjAD6+qlEB2jea2BdaXpYiaw3QqxxpvKHcBYBEwaqAw9neXW+jUSLmF2N QhhdRhtssLMcgyLO77FIOmvXjhaQCqk+mCylqOljZ8iuFnyTdNZn+CE/SwuzIg9j jFg9W23ut2OnU+HlSHAkSFD9nD/jrObxskwRw+4Bikieoco9nLoEtVxqrCpcvLJW VWBMo8BefSQfYBtQijiVFFZCz4mJ2tpUSbXWkCDO2SX1FUL1T9fMbBPeiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK0wUwDhA3cBiw+WRkHT4jpeC5kBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBAMUPfjPVPkACxN/XW1wD eSdP03EMgH4MI6YJS3n2dhhTi6b47XNXpimxngn/cTvFqMtz0KLH87D57L48CUJI mi0WAGFJKftGwV9JVqye5ngRhamFB2HbwYMImI3kG1UyI8qMebWllaQm0QpBEJce zIriDeZHryJoQtbmVKmyjCvlTa7xCVSF4LWn/fhcEt9GpBxWi6BFxafqTGwapwwO 9rAI65i05o64Kfb5nBTNPj5RZ7zS4gnP1hLiNZnMZoPWDR0U4HjRmZ9MF6Zg5h6S /F/V5YjFdrqGeYhtu0q6+B38uwi3auBDqrx/v2qCH/6da9dAldIlC0gGIyW+oN1T 5DU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:14 2025 by rpki-client