$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa File: c97fd121-51cc-4711-a755-0eefb435ec81.roa (raw, json) Hash identifier: u+bbMHCowxe4IlsOhoPwy+cjjOjTuBHmJ8uKO6/j+rI= Subject key identifier: 63:9A:87:14:BB:2F:55:62:9E:3A:39:6F:CF:7C:08:C1:FB:3C:33:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48C1B19F6F6A2DF96E955BFA7403C67E12D75DD5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa Signing time: Fri 06 Jun 2025 00:00:59 +0000 ROA not before: Fri 06 Jun 2025 00:00:59 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c1:b1:9f:6f:6a:2d:f9:6e:95:5b:fa:74:03:c6:7e:12:d7:5d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 6 00:00:59 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=c8443b4763a0bc58f93f1396ece68ab25bfa0520a225cef9a4d02572149eabc8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:99:10:36:1c:89:5a:54:be:5f:c3:41:c6: f7:46:dc:00:ae:1f:bf:10:70:a3:15:d4:c2:0b:04: 35:ca:0d:0f:2f:3c:6a:0e:86:d6:40:f3:f4:52:27: 1c:96:23:b2:21:49:5d:85:90:37:b6:c0:09:51:d7: 30:67:60:b0:d7:17:37:d6:28:b8:43:85:44:8a:1c: 4a:18:3d:d3:7f:ef:95:54:9e:78:d6:67:fd:a1:ee: 1b:d2:62:27:e8:f2:bf:80:af:22:8e:70:e6:88:e0: c4:e4:da:c2:26:cd:d2:8c:67:de:22:6c:3b:25:e5: 20:62:67:d1:3e:4c:24:ec:ff:fc:e6:c7:1c:44:f0: 2c:a2:57:21:e1:ad:f0:2a:b4:f2:10:81:e1:ec:fe: 1e:0a:71:1f:cb:40:4d:f1:85:8b:d6:12:30:c4:69: d2:f9:3f:e8:87:29:af:a3:18:b8:24:80:4d:a1:c9: f1:81:31:ba:f6:37:c4:3a:7d:7b:48:11:12:d2:6a: e0:06:81:9a:d3:53:5d:60:0d:5c:08:1f:68:93:5f: 53:b5:fb:57:db:91:8f:c1:16:de:c1:0f:74:e9:a6: 38:42:b8:73:83:31:54:da:df:c7:78:b9:77:54:44: 0f:b9:27:bc:93:6c:51:00:fb:ed:b3:9f:e7:7b:e3: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9A:87:14:BB:2F:55:62:9E:3A:39:6F:CF:7C:08:C1:FB:3C:33:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/40 Signature Algorithm: sha256WithRSAEncryption 54:fc:c9:6d:86:b3:0a:36:35:b6:e4:dc:2f:d2:43:77:9d:d8: cf:02:f7:6c:e5:bf:63:72:fc:8a:b7:7c:80:0d:27:a9:1e:6b: 47:1b:6a:95:d4:5a:e4:e7:02:d3:42:fc:f7:a4:8e:ae:b5:b7: 4b:14:c6:c3:9b:8a:dd:74:be:2b:e9:84:9a:8d:99:ad:f0:03: 2c:04:b6:43:dd:4a:4f:5f:24:06:e4:ed:ec:82:41:5f:45:15: 99:cb:8b:ca:03:8c:b4:d5:a2:2b:ba:bb:fb:de:20:a5:f1:3c: 1e:59:f5:f0:27:c7:74:4e:46:f6:f5:ac:c9:63:3a:c1:85:53: c2:cc:ac:b0:02:61:df:4c:78:8b:b2:d3:ce:d4:1d:27:69:84: a2:29:80:0f:d3:ca:5c:a8:f6:d6:55:6e:3d:03:38:5c:77:b3: 8d:3c:4a:65:9a:51:66:5c:c5:d8:bf:7e:d1:5b:fe:ad:30:c0: 4f:1f:b4:a8:29:5e:55:c0:62:07:56:cc:45:9e:6c:e5:74:9d: 13:e1:6a:8c:11:00:6e:db:e6:c4:61:0e:1d:31:20:ea:a2:12: 73:09:62:8a:fa:bb:c9:61:cf:96:cb:07:6a:3c:b8:66:97:65: 3d:6d:21:9d:19:86:3f:4f:87:67:22:70:80:f1:f3:65:26:19: b5:58:b4:ec -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSMGxn29qLflulVv6dAPGfhLXXdUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNjAwMDA1OVoX DTI1MDcxMTIzNTk1OVowejFJMEcGA1UEBRNAYzg0NDNiNDc2M2EwYmM1OGY5M2Yx Mzk2ZWNlNjhhYjI1YmZhMDUyMGEyMjVjZWY5YTRkMDI1NzIxNDllYWJjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIuZEDYciVpUvl/DQcb3RtwArh+/ EHCjFdTCCwQ1yg0PLzxqDobWQPP0UiccliOyIUldhZA3tsAJUdcwZ2Cw1xc31ii4 Q4VEihxKGD3Tf++VVJ541mf9oe4b0mIn6PK/gK8ijnDmiODE5NrCJs3SjGfeImw7 JeUgYmfRPkwk7P/85sccRPAsolch4a3wKrTyEIHh7P4eCnEfy0BN8YWL1hIwxGnS +T/ohymvoxi4JIBNocnxgTG69jfEOn17SBES0mrgBoGa01NdYA1cCB9ok19TtftX 25GPwRbewQ906aY4QrhzgzFU2t/HeLl3VEQPuSe8k2xRAPvts5/ne+MtZQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGOahxS7L1Vinjo5b898CMH7PDOKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5N2ZkMTIxLTUxY2MtNDcxMS1hNzU1LTBlZWZiNDM1ZWM4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ggwDQYJKoZIhvcNAQELBQADggEBAFT8yW2Gswo2Nbbk3C/S Q3ed2M8C92zlv2Ny/Iq3fIANJ6kea0cbapXUWuTnAtNC/Pekjq61t0sUxsObit10 vivphJqNma3wAywEtkPdSk9fJAbk7eyCQV9FFZnLi8oDjLTVoiu6u/veIKXxPB5Z 9fAnx3RORvb1rMljOsGFU8LMrLACYd9MeIuy087UHSdphKIpgA/Tylyo9tZVbj0D OFx3s408SmWaUWZcxdi/ftFb/q0wwE8ftKgpXlXAYgdWzEWebOV0nRPhaowRAG7b 5sRhDh0xIOqiEnMJYor6u8lhz5bLB2o8uGaXZT1tIZ0Zhj9Ph2cicIDx82UmGbVY tOw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:13 2025 by rpki-client