$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac7225c2-bba5-4a82-9be4-4396405c0a57.roa File: ac7225c2-bba5-4a82-9be4-4396405c0a57.roa (raw, json) Hash identifier: ZfqH/5H+gGD0TtAhuumNosxyyWFESYHTxUhVEiXav2c= Subject key identifier: E1:69:C9:47:07:79:1E:FB:D9:43:73:C4:4B:DD:92:E5:02:90:A4:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A2655059ADA6DF0841D1A382398760F320044C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac7225c2-bba5-4a82-9be4-4396405c0a57.roa Signing time: Mon 09 Jun 2025 15:21:39 +0000 ROA not before: Mon 09 Jun 2025 15:21:39 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:60a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:26:55:05:9a:da:6d:f0:84:1d:1a:38:23:98:76:0f:32:00:44:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:21:39 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=2c45495cbf5679a787727efe5c7edce95890d27f1912807dbb20de9f0a767cba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:7f:75:37:e7:48:cd:a3:5a:9f:67:85:43: ca:1e:fa:71:9d:f8:2a:63:9f:f3:cc:6f:06:c2:5c: e5:ba:79:6e:34:6c:6c:36:f1:59:f0:92:bd:97:f2: 72:84:54:d5:e0:aa:24:75:c9:f4:ae:72:65:ad:86: 1b:bb:7e:7e:50:81:55:b2:53:8c:70:7d:53:7c:fa: b0:cd:45:9b:73:d9:4f:85:29:09:c6:b3:07:ac:68: 60:b1:61:9e:89:ec:b0:02:dc:f8:14:04:74:b4:5c: a0:0d:52:cc:ef:f3:62:49:70:20:f6:c9:2e:65:e9: ba:75:8b:ac:af:5e:31:ca:12:c6:25:0b:93:9f:42: 84:dc:d2:51:ed:8a:8d:ac:9d:c3:4c:70:34:44:7a: 68:55:60:1d:2a:de:12:3f:d7:b8:ff:80:a9:e3:8f: c3:cd:7c:27:a8:b0:b9:f1:5a:a3:a4:2e:91:59:b1: 1e:a7:75:04:86:9e:b4:fb:fe:05:22:6a:68:5a:b6: 77:f4:a7:e2:40:29:84:05:11:01:7f:74:69:dd:3b: 67:37:35:89:48:47:f9:c0:ca:c1:a4:ea:8d:38:e4: dd:54:09:bf:74:24:5c:32:ad:6b:5e:c5:6c:18:e0: 11:9a:c3:bb:13:e4:f2:c3:78:85:41:ba:ae:f1:02: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:69:C9:47:07:79:1E:FB:D9:43:73:C4:4B:DD:92:E5:02:90:A4:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac7225c2-bba5-4a82-9be4-4396405c0a57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:60a0::/48 Signature Algorithm: sha256WithRSAEncryption 39:e9:be:60:e1:d2:21:cc:d1:26:2d:48:86:06:f9:c8:d0:bf: 98:df:db:c1:9b:6c:ac:52:28:a7:4c:ec:d2:ac:fc:a2:a1:82: 47:25:67:df:8a:d9:59:d2:89:a3:17:44:e8:34:47:c6:ca:c8: 28:ca:8d:a5:b1:25:8b:e5:b7:1a:f2:42:3c:09:c7:9e:df:7d: 88:bb:c7:f2:b8:7d:c3:8f:19:02:35:e0:94:6e:d4:d7:03:91: 22:59:dd:44:40:87:7d:0a:f2:7c:43:04:ed:74:ce:e1:50:c9: 96:6d:c8:85:df:af:fa:02:c8:d2:31:54:b8:c4:f8:11:7d:ec: 81:55:06:b6:01:51:84:c2:06:dc:9e:03:eb:5f:a1:93:3a:8f: e3:27:36:ef:13:0b:55:c9:47:3e:f6:5c:47:80:2b:79:c7:a0: 78:bc:da:29:75:46:28:e9:fa:40:81:db:6f:79:1f:d0:78:61: 43:23:45:b9:10:54:33:5e:92:0b:b0:11:26:f2:77:48:4a:88: 3c:86:0e:66:eb:8c:fa:b5:e7:2c:66:d7:9c:19:d2:a7:57:b6: 09:b3:9a:d4:14:4b:6d:8c:6b:7c:85:81:b4:72:ed:44:a3:d4: 13:7f:dc:bf:92:8a:e6:d1:23:54:26:c3:f7:0b:17:ec:77:3a: 2a:97:45:ce -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSiZVBZrabfCEHRo4I5h2DzIARMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MjEzOVoX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAMmM0NTQ5NWNiZjU2NzlhNzg3NzI3 ZWZlNWM3ZWRjZTk1ODkwZDI3ZjE5MTI4MDdkYmIyMGRlOWYwYTc2N2NiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYR/dTfnSM2jWp9nhUPKHvpxnfgq Y5/zzG8GwlzlunluNGxsNvFZ8JK9l/JyhFTV4Kokdcn0rnJlrYYbu35+UIFVslOM cH1TfPqwzUWbc9lPhSkJxrMHrGhgsWGeieywAtz4FAR0tFygDVLM7/NiSXAg9sku Zem6dYusr14xyhLGJQuTn0KE3NJR7YqNrJ3DTHA0RHpoVWAdKt4SP9e4/4Cp44/D zXwnqLC58VqjpC6RWbEep3UEhp60+/4FImpoWrZ39KfiQCmEBREBf3Rp3TtnNzWJ SEf5wMrBpOqNOOTdVAm/dCRcMq1rXsVsGOARmsO7E+Tyw3iFQbqu8QKGMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOFpyUcHeR772UNzxEvdkuUCkKQrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjNzIyNWMyLWJiYTUtNGE4Mi05YmU0LTQzOTY0MDVjMGE1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2CgMA0GCSqGSIb3DQEBCwUAA4IBAQA56b5g4dIhzNEmLUiG BvnI0L+Y39vBm2ysUiinTOzSrPyioYJHJWffitlZ0omjF0ToNEfGysgoyo2lsSWL 5bca8kI8Ccee332Iu8fyuH3DjxkCNeCUbtTXA5EiWd1EQId9CvJ8QwTtdM7hUMmW bciF36/6AsjSMVS4xPgRfeyBVQa2AVGEwgbcngPrX6GTOo/jJzbvEwtVyUc+9lxH gCt5x6B4vNopdUYo6fpAgdtveR/QeGFDI0W5EFQzXpILsBEm8ndISog8hg5m64z6 tecsZtecGdKnV7YJs5rUFEttjGt8hYG0cu1Eo9QTf9y/korm0SNUJsP3Cxfsdzoq l0XO -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:13 2025 by rpki-client