$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa File: b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json) Hash identifier: fsCM6me2G6O/5jZhDOBpi7iy5Mia/N0xNhZCb1xDfeM= Subject key identifier: E6:94:F4:C4:59:A8:A9:D2:AC:29:0F:F2:10:30:01:C3:F3:84:22:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E541782271F6BF8CB3D3A4BE93BDE99E96EFF27 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa Signing time: Tue 10 Jun 2025 00:30:51 +0000 ROA not before: Tue 10 Jun 2025 00:30:51 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:54:17:82:27:1f:6b:f8:cb:3d:3a:4b:e9:3b:de:99:e9:6e:ff:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:30:51 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=6698341f9b4b4461cf4f399ae1a0214864a6321bf3226942d498fde8da074274, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:0e:f1:af:ad:f3:ac:62:fc:2a:2d:1c:17: b1:4a:30:a0:f3:3f:c7:bd:01:ee:cf:dd:44:28:f5: 80:b5:23:c7:6b:8f:03:04:d4:10:e5:5c:ec:6c:5d: c3:6c:6c:6b:26:2f:a7:33:31:98:30:cb:11:11:53: 10:2e:a4:12:a3:ff:ff:25:82:30:0f:57:77:3f:ff: 7f:fe:23:ef:74:4d:6d:4e:ff:ef:8a:3a:31:a3:81: c6:3f:4a:66:88:39:1b:ee:4b:fb:52:a0:07:ab:1f: 45:e8:63:ba:a5:db:d5:52:02:a6:15:f3:ab:4d:d8: cc:e2:c7:bc:37:17:45:c3:51:30:0f:c2:fc:92:42: 7e:38:23:2c:a0:05:d5:ac:b5:d3:85:fe:35:d1:d5: be:50:45:70:c6:65:44:10:97:5e:21:0b:04:9b:04: fd:10:9f:2d:a1:d9:d0:30:19:c7:1e:ac:0a:1d:f9: c0:a1:9b:2e:63:bd:3b:a0:dd:83:57:d1:67:7d:3d: 82:a0:c0:65:1a:cb:d2:c3:77:ed:0b:ab:02:e1:0a: 0b:0a:90:b4:bc:52:b4:e2:59:da:60:f6:14:90:87: d6:ca:3f:38:e2:72:1c:c4:24:83:5f:0b:9f:1e:b4: 0a:02:0d:ba:71:54:cb:35:ac:5c:f1:24:bd:cf:75: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:94:F4:C4:59:A8:A9:D2:AC:29:0F:F2:10:30:01:C3:F3:84:22:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2000::/40 Signature Algorithm: sha256WithRSAEncryption 62:7d:5e:23:44:48:ef:35:fa:88:1e:98:10:f6:6a:da:46:c4: 2b:63:fc:97:9a:c5:87:fb:97:5e:c7:fd:15:18:29:7f:37:85: c6:37:d2:1b:9b:5c:d2:ae:04:5e:be:ca:06:c3:8b:9b:60:2e: 50:55:f3:e0:48:0e:55:b1:17:bb:fe:61:8c:28:57:84:86:56: 9a:07:ef:eb:4a:19:30:8a:e8:be:af:8c:75:2e:72:6c:90:8d: 77:08:d6:bd:df:53:21:5b:e8:2f:10:77:fc:6a:1d:19:4a:45: 6a:aa:e0:d9:62:44:e6:29:14:fb:26:42:05:af:8d:4a:fa:be: a3:ef:01:f5:0f:fc:42:63:77:93:7d:d5:21:51:c4:d6:a3:6b: 9a:d8:29:ad:1f:4d:7a:96:8f:7d:4d:f7:7f:e2:69:2a:4b:f2: 95:61:86:30:19:0e:6d:b4:46:1d:f4:a2:0b:fd:a0:e6:a3:cc: 78:f1:b6:6d:39:c8:8d:82:2a:bb:b7:5e:55:f1:b3:7d:0a:8d: 75:e4:42:38:a3:bd:ae:fa:97:b7:3e:35:0e:8a:be:93:b0:43: 64:62:bb:fd:b0:0e:dd:a6:ce:b7:bb:9e:ce:78:cd:b2:4b:8e: 0f:7a:32:02:58:27:8b:74:0c:10:bf:78:63:e8:ba:67:4c:b7: d1:29:be:a1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULlQXgicfa/jLPTpL6Tvemelu/ycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMzA1MVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANjY5ODM0MWY5YjRiNDQ2MWNmNGYz OTlhZTFhMDIxNDg2NGE2MzIxYmYzMjI2OTQyZDQ5OGZkZThkYTA3NDI3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T8O8a+t86xi/CotHBexSjCg8z/H vQHuz91EKPWAtSPHa48DBNQQ5VzsbF3DbGxrJi+nMzGYMMsREVMQLqQSo///JYIw D1d3P/9//iPvdE1tTv/vijoxo4HGP0pmiDkb7kv7UqAHqx9F6GO6pdvVUgKmFfOr TdjM4se8NxdFw1EwD8L8kkJ+OCMsoAXVrLXThf410dW+UEVwxmVEEJdeIQsEmwT9 EJ8todnQMBnHHqwKHfnAoZsuY707oN2DV9FnfT2CoMBlGsvSw3ftC6sC4QoLCpC0 vFK04lnaYPYUkIfWyj844nIcxCSDXwufHrQKAg26cVTLNaxc8SS9z3Wo0wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOaU9MRZqKnSrCkP8hAwAcPzhCKOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NjhlMTEyLTJjNjgtNGRjNS1iMjlmLThjNjRjNGUwOWMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaACAwDQYJKoZIhvcNAQELBQADggEBAGJ9XiNESO81+ogemBD2 atpGxCtj/JeaxYf7l17H/RUYKX83hcY30hubXNKuBF6+ygbDi5tgLlBV8+BIDlWx F7v+YYwoV4SGVpoH7+tKGTCK6L6vjHUucmyQjXcI1r3fUyFb6C8Qd/xqHRlKRWqq 4NliROYpFPsmQgWvjUr6vqPvAfUP/EJjd5N91SFRxNaja5rYKa0fTXqWj31N93/i aSpL8pVhhjAZDm20Rh30ogv9oOajzHjxtm05yI2CKru3XlXxs30KjXXkQjijva76 l7c+NQ6KvpOwQ2Riu/2wDt2mzre7ns54zbJLjg96MgJYJ4t0DBC/eGPoumdMt9Ep vqE= -----END CERTIFICATE-----Generated at Sat Jun 14 05:57:00 2025 by rpki-client