$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa File: b20a7e82-867b-4d4d-bff9-1bf42972706b.roa (raw, json) Hash identifier: mlSMkwZsMl7E5WFAMCRSRoug06z9UU52jCUmPdXQztk= Subject key identifier: E2:25:C2:37:21:D8:65:B2:55:1F:CE:20:9D:49:F1:0D:40:1A:FE:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7CD8C9374BA8FC5F6A66BA8DCD978F1AD9A84B77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa Signing time: Tue 10 Jun 2025 15:30:14 +0000 ROA not before: Tue 10 Jun 2025 15:30:14 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d8:c9:37:4b:a8:fc:5f:6a:66:ba:8d:cd:97:8f:1a:d9:a8:4b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:30:14 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a349f270387d3bfd40deac76711519a87713281a63fcd23d8beaa294b32cab05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:23:b0:a6:09:b3:ea:57:54:ae:9a:3c:89: 35:3f:57:65:d3:ce:11:89:c1:b9:42:0d:ba:01:dd: b3:83:76:cb:ce:90:06:90:aa:4b:8a:69:0d:b4:c2: 64:ab:e7:56:6d:e2:e4:cf:ec:92:4a:4d:77:70:ef: 58:2e:9d:92:68:44:9f:33:ca:a1:5d:a0:c0:e1:1d: 01:9c:e6:12:80:84:18:d6:2c:65:b8:a3:27:c9:11: df:14:db:3b:1e:fc:04:b8:ec:1c:c5:6d:08:d8:d7: f9:aa:ac:85:ad:ec:84:49:fa:64:77:7d:47:0f:ec: d1:e2:11:39:9e:c4:1d:55:e0:58:b2:a1:c4:44:5d: f3:eb:7c:a3:f3:ca:ec:18:0c:12:6b:8a:87:21:7a: 4c:7d:26:b2:ac:e1:91:3f:56:d6:25:12:a5:95:f1: 19:16:04:75:6c:52:76:dc:a4:9a:c8:60:2c:cd:ff: f7:0c:50:f5:34:f0:08:9c:0e:3d:b7:0f:91:e2:9f: c6:d4:ee:18:5c:88:5a:53:c4:0d:7c:dd:06:36:66: 29:17:07:24:58:72:ac:d2:d8:3a:e1:e9:39:79:f4: 29:54:a9:ea:e5:70:16:e8:52:d7:c5:f6:a7:22:77: da:aa:ae:3b:3d:1b:18:8d:df:50:81:10:88:fd:e0: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:25:C2:37:21:D8:65:B2:55:1F:CE:20:9D:49:F1:0D:40:1A:FE:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:4800::/40 Signature Algorithm: sha256WithRSAEncryption 3a:c0:09:3d:63:5f:a8:15:06:67:2c:e1:74:70:e5:cb:4b:9f: 4a:e8:b1:55:c2:47:f1:6b:e5:90:09:f4:a1:91:28:fb:b4:6c: 80:63:0f:d7:c7:87:b4:58:ba:a8:a7:68:a5:79:58:de:45:cd: bf:3f:26:74:43:38:9c:e0:7a:0d:62:c4:e9:09:db:8f:8d:56: 1b:69:4f:d9:98:df:7a:8b:46:b7:ac:1a:c4:e4:12:fc:ae:03: be:b9:78:59:80:78:b9:25:98:7b:c9:d5:cf:13:1d:92:af:3b: 97:2c:fb:82:23:fb:76:8e:41:2f:0a:6a:bc:65:c7:63:bd:c3: f1:f8:1d:4d:3f:dd:54:32:93:26:e1:3c:2e:6f:b2:31:dd:98: 8c:09:14:58:4b:11:90:48:16:97:dc:44:1e:87:cc:66:c5:4d: f4:ac:b8:fc:2a:70:31:b2:ce:90:5e:2e:b8:9f:aa:99:02:60: 1a:4f:10:40:d0:84:fa:8c:18:d2:d2:51:d3:14:1b:30:69:f2: e4:ec:d7:13:22:e8:d3:83:66:42:e2:da:79:d9:95:10:04:44: e6:41:98:24:d2:e0:9a:a2:2c:b6:ef:1d:b1:c6:bf:bc:a5:95: 2f:4c:b6:66:6c:25:38:6d:f4:c0:17:ee:72:0d:9b:5c:09:bb: c9:44:33:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfNjJN0uo/F9qZrqNzZePGtmoS3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzAxNFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYTM0OWYyNzAzODdkM2JmZDQwZGVh Yzc2NzExNTE5YTg3NzEzMjgxYTYzZmNkMjNkOGJlYWEyOTRiMzJjYWIwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wojsKYJs+pXVK6aPIk1P1dl084R icG5Qg26Ad2zg3bLzpAGkKpLimkNtMJkq+dWbeLkz+ySSk13cO9YLp2SaESfM8qh XaDA4R0BnOYSgIQY1ixluKMnyRHfFNs7HvwEuOwcxW0I2Nf5qqyFreyESfpkd31H D+zR4hE5nsQdVeBYsqHERF3z63yj88rsGAwSa4qHIXpMfSayrOGRP1bWJRKllfEZ FgR1bFJ23KSayGAszf/3DFD1NPAInA49tw+R4p/G1O4YXIhaU8QNfN0GNmYpFwck WHKs0tg64ek5efQpVKnq5XAW6FLXxfanInfaqq47PRsYjd9QgRCI/eCgIQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOIlwjch2GWyVR/OIJ1J8Q1AGv5iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMGE3ZTgyLTg2N2ItNGQ0ZC1iZmY5LTFiZjQyOTcyNzA2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMkgwDQYJKoZIhvcNAQELBQADggEBADrACT1jX6gVBmcs4XRw 5ctLn0rosVXCR/Fr5ZAJ9KGRKPu0bIBjD9fHh7RYuqinaKV5WN5Fzb8/JnRDOJzg eg1ixOkJ24+NVhtpT9mY33qLRresGsTkEvyuA765eFmAeLklmHvJ1c8THZKvO5cs +4Ij+3aOQS8Karxlx2O9w/H4HU0/3VQykybhPC5vsjHdmIwJFFhLEZBIFpfcRB6H zGbFTfSsuPwqcDGyzpBeLrifqpkCYBpPEEDQhPqMGNLSUdMUGzBp8uTs1xMi6NOD ZkLi2nnZlRAEROZBmCTS4JqiLLbvHbHGv7yllS9MtmZsJTht9MAX7nINm1wJu8lE M1c= -----END CERTIFICATE-----Generated at Sat Jun 14 06:11:56 2025 by rpki-client