$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa File: b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa (raw, json) Hash identifier: Ek1DiLevmWYeDi0mVqN3jhapMlXzycnlC23Zj6oO6Gs= Subject key identifier: 93:C6:9A:2F:85:7D:B6:0E:0F:22:9C:9C:B5:AB:B2:23:DE:5D:7F:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D1F9AEBA3F412F1CA4D31F036D517B712845858 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa Signing time: Sat 07 Jun 2025 00:01:07 +0000 ROA not before: Sat 07 Jun 2025 00:01:07 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1f:9a:eb:a3:f4:12:f1:ca:4d:31:f0:36:d5:17:b7:12:84:58:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:01:07 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=34fbbbdd952aa71232bb7553edab85dcd4435f0849667a44e8319139d4fc5d92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:d2:bf:80:a4:67:5a:73:00:e3:59:21:a5: 4d:33:ba:84:f5:89:58:34:96:64:e7:37:fb:3c:b1: e6:4c:ef:1b:32:63:0d:96:62:20:4f:23:ee:17:f5: 67:58:8b:a0:ba:68:6c:04:49:4e:24:cd:94:76:f3: ff:b9:4c:86:8f:e5:78:29:e5:6f:ba:9b:0f:cd:e5: 2e:53:74:6e:33:65:5d:fb:29:ee:a4:0c:c9:01:33: 1e:59:f3:b5:8c:87:e0:fb:a0:dd:da:2e:8f:a3:af: c8:8b:7e:f6:26:b7:d8:66:bd:18:02:13:d0:cc:bc: 25:54:a4:0d:47:ae:d4:62:7e:bb:d6:bb:70:3f:a1: 38:f4:24:93:f7:b0:1a:ca:f0:6e:70:3c:76:75:15: a5:c8:97:ba:c7:75:3d:69:bb:37:a2:a9:53:84:7f: e7:6c:b1:bd:ed:e8:28:6d:31:d1:07:20:6e:60:31: aa:de:7d:e3:df:80:c0:e1:cd:77:47:32:ec:1e:c5: b9:e7:d2:72:63:72:b6:69:e6:57:37:6b:bd:a7:35: fa:5a:dd:4e:74:f0:48:1a:b7:c0:14:79:7b:59:49: 8c:16:8e:ca:c5:70:98:7e:56:07:35:e6:13:b8:d3: f1:d6:d8:25:8c:1e:ad:f8:be:99:b4:0a:06:24:05: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:9A:2F:85:7D:B6:0E:0F:22:9C:9C:B5:AB:B2:23:DE:5D:7F:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4840::/48 Signature Algorithm: sha256WithRSAEncryption 59:c7:da:05:7e:d9:03:98:16:d0:3d:fa:6e:3a:86:6c:3b:e1: 97:86:cc:db:e3:0b:91:6c:61:ce:ef:cc:4b:1a:3d:d8:90:5d: d6:65:9a:d5:73:b5:d8:70:e7:cf:c4:03:58:bd:c9:c8:ef:64: a4:25:76:32:6e:0b:c9:af:90:62:a8:4b:2e:d2:17:98:71:50: f3:73:3d:51:31:7f:c8:06:45:8e:48:fb:a0:99:c2:46:a9:3f: f5:09:d7:1c:75:40:85:14:90:87:ba:8d:1e:b2:a9:c3:e1:3c: c3:06:2d:fe:84:7b:93:d9:b5:25:ce:55:ca:2e:cc:a2:b8:c2: 9c:ba:1f:ce:9f:17:23:24:a7:22:32:92:2c:56:a1:aa:8b:9d: cf:fd:e2:b7:d7:1d:a4:aa:2d:5c:be:cd:e9:d5:a0:9e:29:9b: 06:00:5d:65:b8:2e:4c:6b:d6:10:0e:52:2a:af:48:ea:5a:24: 29:d4:70:70:94:3b:b0:b4:c3:5c:f4:72:bf:54:72:3f:cb:96: 2d:cc:e2:42:06:45:f8:5c:8c:bd:aa:ba:61:d5:04:7b:74:9b: 25:07:20:90:0d:ce:3b:44:29:32:57:e9:ba:60:37:4e:56:df: 2f:29:b2:2b:26:96:ec:32:6a:58:d3:27:fe:b8:6e:d1:3f:1e: 95:bb:8b:f8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDR+a66P0EvHKTTHwNtUXtxKEWFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMDEwN1oX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAMzRmYmJiZGQ5NTJhYTcxMjMyYmI3 NTUzZWRhYjg1ZGNkNDQzNWYwODQ5NjY3YTQ0ZTgzMTkxMzlkNGZjNWQ5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiULSv4CkZ1pzAONZIaVNM7qE9YlY NJZk5zf7PLHmTO8bMmMNlmIgTyPuF/VnWIugumhsBElOJM2UdvP/uUyGj+V4KeVv upsPzeUuU3RuM2Vd+ynupAzJATMeWfO1jIfg+6Dd2i6Po6/Ii372JrfYZr0YAhPQ zLwlVKQNR67UYn671rtwP6E49CST97AayvBucDx2dRWlyJe6x3U9abs3oqlThH/n bLG97egobTHRByBuYDGq3n3j34DA4c13RzLsHsW559JyY3K2aeZXN2u9pzX6Wt1O dPBIGrfAFHl7WUmMFo7KxXCYflYHNeYTuNPx1tgljB6t+L6ZtAoGJAUJnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJPGmi+FfbYODyKcnLWrsiPeXX+vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzMzRmY2EyLWIyYmMtNGRiNS05NTZjLWUzZmY4ZDk3NWI1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8khAMA0GCSqGSIb3DQEBCwUAA4IBAQBZx9oFftkDmBbQPfpu OoZsO+GXhszb4wuRbGHO78xLGj3YkF3WZZrVc7XYcOfPxANYvcnI72SkJXYybgvJ r5BiqEsu0heYcVDzcz1RMX/IBkWOSPugmcJGqT/1CdccdUCFFJCHuo0esqnD4TzD Bi3+hHuT2bUlzlXKLsyiuMKcuh/OnxcjJKciMpIsVqGqi53P/eK31x2kqi1cvs3p 1aCeKZsGAF1luC5Ma9YQDlIqr0jqWiQp1HBwlDuwtMNc9HK/VHI/y5YtzOJCBkX4 XIy9qrph1QR7dJslByCQDc47RCkyV+m6YDdOVt8vKbIrJpbsMmpY0yf+uG7RPx6V u4v4 -----END CERTIFICATE-----Generated at Sat Jun 14 05:37:50 2025 by rpki-client