$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6bff16f-4159-48b7-bc80-a4353edd73ed.roa File: a6bff16f-4159-48b7-bc80-a4353edd73ed.roa (raw, json) Hash identifier: W3E1NVFn32aCa5oqEq1E7O6u/soYKZThpmm6f0GSoN0= Subject key identifier: FD:11:9E:F1:D8:41:06:4D:D8:8C:6E:93:CE:40:0F:17:F8:1E:EA:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 56B12FCF3B0CB7586AF9BACCFC7C11A14E100BEC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6bff16f-4159-48b7-bc80-a4353edd73ed.roa Signing time: Tue 10 Jun 2025 15:50:21 +0000 ROA not before: Tue 10 Jun 2025 15:50:21 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b1:2f:cf:3b:0c:b7:58:6a:f9:ba:cc:fc:7c:11:a1:4e:10:0b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:50:21 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=d0847e330c3157f892e1f51a65f1dcc9cc61c9a30b79c395135172e3afc1fabc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:0e:3c:12:f5:52:7c:e7:8f:04:ce:fb:11: 84:ec:0d:84:d6:c6:2c:e6:e4:27:49:63:4a:0b:83: aa:e8:1b:c6:b0:3c:95:4d:20:d0:0f:58:73:5a:b5: db:1f:b5:d5:d7:70:9d:08:ce:74:bb:fc:26:77:58: 5c:c7:df:d4:3f:93:15:4b:8f:5c:ff:83:3c:e4:6f: 51:ca:a9:d6:b0:a8:a0:49:87:13:19:b4:b1:7e:06: da:7e:62:a9:98:83:1e:cd:63:28:23:32:d2:7d:3b: 9a:00:e5:c1:81:b4:aa:9d:f7:d2:4a:1d:af:38:3d: 66:c4:11:c3:d5:1b:42:cc:43:67:58:c4:fe:29:0c: 8b:f1:3f:f1:87:c5:68:a8:79:52:22:fd:cc:8e:43: 5e:bb:a8:2f:e9:11:57:01:cb:fc:1f:e0:46:7c:9d: fd:0b:b4:e0:3c:79:71:04:30:15:d8:a6:d8:79:62: 4e:37:f7:8a:44:54:79:23:d7:41:38:b0:b0:37:d1: 7e:a8:54:88:9d:22:5b:c6:c0:f5:27:81:eb:e2:60: f0:c5:7e:e4:e7:ea:d8:89:73:bc:8e:36:39:05:7e: a1:00:7b:7b:ef:bc:36:77:e0:63:85:d9:87:15:ba: 3a:1f:d5:ed:75:92:3d:ed:07:42:ff:28:4f:c7:72: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:11:9E:F1:D8:41:06:4D:D8:8C:6E:93:CE:40:0F:17:F8:1E:EA:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6bff16f-4159-48b7-bc80-a4353edd73ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8000::/38 Signature Algorithm: sha256WithRSAEncryption 75:a1:01:16:f7:1a:b4:9c:77:81:34:6b:e9:0b:7a:59:23:c5: e1:fe:12:9f:57:5b:a9:4c:35:f2:d8:e7:c9:72:06:77:30:7a: 11:43:d4:a4:c8:4c:1b:e5:a3:c5:4b:e5:5e:e9:bf:ac:4e:b1: d1:28:69:98:d7:f9:32:fc:a0:7b:57:a6:56:96:da:48:de:ac: 5b:34:7e:95:5f:b0:6e:b7:41:9e:01:0f:e1:d3:dc:2c:99:62: 19:c3:21:98:29:56:36:2a:25:16:90:0f:c6:92:6c:1a:46:51: b6:83:bf:d6:2d:a0:ce:62:e9:c3:0f:73:9e:51:ef:bb:50:75: d3:25:3d:bd:78:94:42:70:23:bc:b3:70:39:ba:d3:8d:3d:88: 81:22:51:84:7e:24:a2:95:2e:3c:71:ad:b4:8d:67:4e:46:69: 5f:62:3b:fc:60:fd:3c:a5:ae:17:30:f2:e0:b3:c9:f0:0f:1b: b5:92:70:1c:8a:cd:be:47:0e:4f:9f:bd:6f:14:98:24:f1:f9: d5:b4:a7:dd:d8:18:6e:bf:52:2f:da:e6:59:ae:cf:44:83:5e: 87:de:9a:36:9d:23:12:21:00:0d:64:83:40:8a:e7:8f:86:57: ae:d2:f7:d3:47:6b:35:51:84:e6:9f:08:48:85:08:41:9d:67: 61:a8:82:6f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVrEvzzsMt1hq+brM/HwRoU4QC+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NTAyMVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZDA4NDdlMzMwYzMxNTdmODkyZTFm NTFhNjVmMWRjYzljYzYxYzlhMzBiNzljMzk1MTM1MTcyZTNhZmMxZmFiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9AOPBL1UnznjwTO+xGE7A2E1sYs 5uQnSWNKC4Oq6BvGsDyVTSDQD1hzWrXbH7XV13CdCM50u/wmd1hcx9/UP5MVS49c /4M85G9RyqnWsKigSYcTGbSxfgbafmKpmIMezWMoIzLSfTuaAOXBgbSqnffSSh2v OD1mxBHD1RtCzENnWMT+KQyL8T/xh8VoqHlSIv3MjkNeu6gv6RFXAcv8H+BGfJ39 C7TgPHlxBDAV2KbYeWJON/eKRFR5I9dBOLCwN9F+qFSInSJbxsD1J4Hr4mDwxX7k 5+rYiXO8jjY5BX6hAHt777w2d+BjhdmHFbo6H9XtdZI97QdC/yhPx3Lw1wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP0RnvHYQQZN2Ixuk85ADxf4HurnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2YmZmMTZmLTQxNTktNDhiNy1iYzgwLWE0MzUzZWRkNzNlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFIAwDQYJKoZIhvcNAQELBQADggEBAHWhARb3GrScd4E0a+kL elkjxeH+Ep9XW6lMNfLY58lyBncwehFD1KTITBvlo8VL5V7pv6xOsdEoaZjX+TL8 oHtXplaW2kjerFs0fpVfsG63QZ4BD+HT3CyZYhnDIZgpVjYqJRaQD8aSbBpGUbaD v9YtoM5i6cMPc55R77tQddMlPb14lEJwI7yzcDm60409iIEiUYR+JKKVLjxxrbSN Z05GaV9iO/xg/Tylrhcw8uCzyfAPG7WScByKzb5HDk+fvW8UmCTx+dW0p93YGG6/ Ui/a5lmuz0SDXofemjadIxIhAA1kg0CK54+GV67S99NHazVRhOafCEiFCEGdZ2Go gm8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:06 2025 by rpki-client