$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b355bf84-223a-40db-b012-87ca07f79405.roa File: b355bf84-223a-40db-b012-87ca07f79405.roa (raw, json) Hash identifier: akunYjMT5BvUib5mjL4L9jkFWcEjRyv43DP4NYz5a4U= Subject key identifier: FF:55:1D:8D:35:44:E2:C3:45:FF:DA:70:20:C6:DC:29:0F:7C:E4:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AA6DF55BBA28202271BB5A7E35B80A49D139E2F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b355bf84-223a-40db-b012-87ca07f79405.roa Signing time: Tue 10 Jun 2025 00:41:49 +0000 ROA not before: Tue 10 Jun 2025 00:41:49 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a6:df:55:bb:a2:82:02:27:1b:b5:a7:e3:5b:80:a4:9d:13:9e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:41:49 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ce6cc94ad9a5cfb4b1e5934a4c40f3a296ed4f3e08e260c43e803dae67a63302, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:ff:13:8f:df:6e:f0:9d:54:97:dc:b0:e0: 09:d6:dd:7a:fe:94:07:c9:41:ef:33:e5:b3:3a:3e: 23:df:0c:a8:3d:c1:26:16:79:64:59:7e:cf:4d:61: 11:74:78:63:ef:08:c6:6c:6d:d0:a3:56:59:6f:48: 9f:89:15:c4:97:9f:d5:97:73:7d:9d:7f:e1:0b:a7: 24:fb:ab:bb:38:08:15:37:ba:6f:f5:fe:e1:f2:d0: 5b:85:e2:a8:06:c7:5c:fe:04:48:f0:1e:8b:e3:35: d1:89:16:d1:1a:69:91:b6:46:67:72:c6:45:ca:ee: 92:78:98:85:0f:a8:75:82:c2:82:ef:14:95:b1:6e: 17:b9:b2:53:f2:04:64:83:01:a4:42:b6:5f:f3:ae: 3a:7a:15:75:00:5a:ed:a3:0c:77:07:a7:5c:1a:a0: b2:7e:27:31:cd:fb:ca:e6:65:9c:2a:9e:24:61:49: fd:a0:80:7d:4b:8f:48:cf:47:f5:dc:94:ab:25:29: 43:0a:0e:60:3d:86:9f:37:71:b2:00:d5:2b:61:d4: a3:e8:11:03:89:cf:6a:a1:7e:46:5d:69:3f:bf:bb: 38:90:53:96:bb:0b:c5:c6:77:07:6f:4a:d9:4c:47: b6:35:5b:72:a3:cc:d6:56:87:1a:87:6e:87:db:ed: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:1D:8D:35:44:E2:C3:45:FF:DA:70:20:C6:DC:29:0F:7C:E4:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b355bf84-223a-40db-b012-87ca07f79405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c800::/40 Signature Algorithm: sha256WithRSAEncryption a5:e4:52:a7:c0:c4:7d:6d:9f:2a:3a:31:91:d2:b4:fc:23:8e: 53:b5:0a:28:9a:b8:40:94:b5:00:2a:09:37:7a:18:d1:6e:11: bb:22:8e:b1:41:7a:ce:8c:56:7f:ef:2c:2f:82:19:ff:72:59: 1b:26:2d:ee:5a:56:27:81:f8:01:e9:7c:63:dc:cb:38:5f:00: 3c:e0:91:3e:1e:12:26:48:37:7f:78:99:91:b6:0e:70:92:7c: ef:5b:6f:02:00:8e:b4:97:18:d0:0c:71:e6:b2:31:19:c7:d5: c3:28:d3:7d:81:51:52:bd:e1:7d:4a:e9:6f:6d:d5:27:c4:62: 0c:b0:0b:10:36:63:bc:7a:1a:b0:e7:d1:af:8b:7b:56:bb:75: da:50:08:85:b6:fa:04:89:5b:cf:f8:e2:15:8a:5c:51:95:45: e0:58:be:c4:9a:be:4c:11:11:57:12:5b:9c:da:38:f9:f5:8e: 16:09:59:d7:43:a8:dc:6b:f7:87:aa:a2:7f:90:ca:39:0e:42: a3:df:67:99:c7:98:38:32:4b:af:3f:bf:13:c4:ae:58:57:94: 0a:ed:f3:5e:97:25:d4:6a:37:80:b7:29:84:0a:6e:9e:ba:93: 8c:c9:7c:1c:52:a2:48:a3:84:ec:f1:0e:b3:73:aa:92:d3:7e: a9:0e:41:a2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGqbfVbuiggInG7Wn41uApJ0Tni8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNDE0OVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAY2U2Y2M5NGFkOWE1Y2ZiNGIxZTU5 MzRhNGM0MGYzYTI5NmVkNGYzZTA4ZTI2MGM0M2U4MDNkYWU2N2E2MzMwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxor/E4/fbvCdVJfcsOAJ1t16/pQH yUHvM+WzOj4j3wyoPcEmFnlkWX7PTWERdHhj7wjGbG3Qo1ZZb0ifiRXEl5/Vl3N9 nX/hC6ck+6u7OAgVN7pv9f7h8tBbheKoBsdc/gRI8B6L4zXRiRbRGmmRtkZncsZF yu6SeJiFD6h1gsKC7xSVsW4XubJT8gRkgwGkQrZf8646ehV1AFrtowx3B6dcGqCy ficxzfvK5mWcKp4kYUn9oIB9S49Iz0f13JSrJSlDCg5gPYafN3GyANUrYdSj6BED ic9qoX5GXWk/v7s4kFOWuwvFxncHb0rZTEe2NVtyo8zWVocah26H2+1CgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP9VHY01ROLDRf/acCDG3CkPfOQXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzNTViZjg0LTIyM2EtNDBkYi1iMDEyLTg3Y2EwN2Y3OTQwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaacgwDQYJKoZIhvcNAQELBQADggEBAKXkUqfAxH1tnyo6MZHS tPwjjlO1CiiauECUtQAqCTd6GNFuEbsijrFBes6MVn/vLC+CGf9yWRsmLe5aVieB +AHpfGPcyzhfADzgkT4eEiZIN394mZG2DnCSfO9bbwIAjrSXGNAMceayMRnH1cMo 032BUVK94X1K6W9t1SfEYgywCxA2Y7x6GrDn0a+Le1a7ddpQCIW2+gSJW8/44hWK XFGVReBYvsSavkwREVcSW5zaOPn1jhYJWddDqNxr94eqon+QyjkOQqPfZ5nHmDgy S68/vxPErlhXlArt816XJdRqN4C3KYQKbp66k4zJfBxSokijhOzxDrNzqpLTfqkO QaI= -----END CERTIFICATE-----Generated at Sat Jun 14 05:58:06 2025 by rpki-client