$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2d775cf-eb5c-47e2-90da-83e9d3f6ed06.roa File: d2d775cf-eb5c-47e2-90da-83e9d3f6ed06.roa (raw, json) Hash identifier: 3DRvWJp0xNfTUfmnKJoeAaUyPVGuD/CnCFYrBoj/haw= Subject key identifier: 20:35:0B:82:8E:7C:B3:DD:89:B9:3A:73:A8:93:39:30:C4:2B:7E:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2872D1AB35CA45EB9C341B9D2381D68CA0229B07 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2d775cf-eb5c-47e2-90da-83e9d3f6ed06.roa Signing time: Tue 10 Jun 2025 00:41:50 +0000 ROA not before: Tue 10 Jun 2025 00:41:50 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:e040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:72:d1:ab:35:ca:45:eb:9c:34:1b:9d:23:81:d6:8c:a0:22:9b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:41:50 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=f54b4690703ccf383f142c53f5ea95b43b6331a186bbcc63c0bde66b1ebbdf68, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:21:25:81:c2:fe:f4:6b:13:22:2a:fb:4b: 05:a0:01:d9:a5:30:6e:12:c4:fb:88:d8:e9:33:0f: 86:b6:c8:d5:35:0e:bf:d4:30:65:8e:cf:78:39:e4: f8:31:cb:f2:3e:e9:2d:45:ee:3f:29:3d:90:31:71: 54:4a:02:a8:76:09:a0:27:56:ea:a4:71:6f:78:08: 22:fa:94:cc:07:33:72:ed:15:c9:4c:90:23:41:a9: 28:c2:2e:9b:7c:e7:65:23:83:9f:06:86:28:f2:96: 93:76:be:0a:75:58:b9:5f:5c:67:e8:4b:54:93:a0: d9:39:92:e9:8c:3f:3d:61:d1:58:58:d7:78:1d:b4: 28:14:6a:a9:a6:b9:7f:01:85:97:dc:3b:5a:29:7e: a5:f6:9b:83:d5:cf:77:7e:ea:5a:e1:7a:e8:11:01: 7e:45:3b:b0:b5:14:c1:eb:0a:0a:5b:fc:24:7f:92: c4:ef:67:e8:5f:5f:bf:20:43:20:52:7d:2b:2c:aa: 32:f6:89:65:99:dc:b9:ba:32:a1:ba:1d:d8:d7:59: 65:a6:59:81:fd:2f:09:53:66:86:a6:6f:dd:d0:0e: 6a:fe:11:f7:05:aa:70:60:2b:00:13:76:57:dc:ca: 9a:33:77:21:48:7f:16:bd:16:58:a1:0e:a2:f5:0b: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:0B:82:8E:7C:B3:DD:89:B9:3A:73:A8:93:39:30:C4:2B:7E:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2d775cf-eb5c-47e2-90da-83e9d3f6ed06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:e040::/46 Signature Algorithm: sha256WithRSAEncryption 31:91:d3:63:6e:ca:51:0a:0d:69:22:e0:e3:37:5e:e3:c1:b8: bc:ce:23:4b:5a:b7:59:f9:ff:7c:d1:45:81:31:08:ed:4d:7b: 5d:e3:b2:6b:f8:54:e0:b1:c1:4c:04:c7:16:fc:80:73:f5:2b: 2d:ec:c2:b2:e6:4a:67:dd:80:f9:8c:13:70:9f:78:2b:76:bf: 1b:4b:1a:51:75:ae:01:5b:63:41:5d:b3:09:6a:08:6d:20:9b: 71:90:8b:f9:0f:e6:89:29:e5:aa:dd:91:9b:b2:b4:67:84:68: 45:42:09:0c:05:4e:8c:da:c7:8e:55:ad:2a:19:c8:2f:86:f4: e8:f9:ee:7c:eb:e1:bb:95:e2:c9:ae:a3:73:93:f9:f3:ed:3b: 8f:f7:a0:b5:b5:40:44:0f:6c:1b:c3:c5:6a:33:e2:2d:a3:85: 09:4c:b1:d9:ef:fb:1d:34:7e:e0:6e:18:e1:0f:61:79:d6:da: 87:70:4c:bc:3e:5c:a7:5e:c5:c2:56:86:f5:35:7e:c4:07:c7: 77:2b:da:1c:6b:d8:37:51:4e:13:b8:ea:75:3d:0a:a4:4c:54: 67:7f:ea:a1:56:2f:74:34:87:98:c4:3c:5c:58:5d:ab:3c:0f: 17:19:d8:73:8d:81:8f:75:20:97:a2:99:9b:9c:d2:03:fb:39: 21:e1:09:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKHLRqzXKReucNBudI4HWjKAimwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNDE1MFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZjU0YjQ2OTA3MDNjY2YzODNmMTQy YzUzZjVlYTk1YjQzYjYzMzFhMTg2YmJjYzYzYzBiZGU2NmIxZWJiZGY2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2AhJYHC/vRrEyIq+0sFoAHZpTBu EsT7iNjpMw+GtsjVNQ6/1DBljs94OeT4McvyPuktRe4/KT2QMXFUSgKodgmgJ1bq pHFveAgi+pTMBzNy7RXJTJAjQakowi6bfOdlI4OfBoYo8paTdr4KdVi5X1xn6EtU k6DZOZLpjD89YdFYWNd4HbQoFGqpprl/AYWX3DtaKX6l9puD1c93fupa4XroEQF+ RTuwtRTB6woKW/wkf5LE72foX1+/IEMgUn0rLKoy9ollmdy5ujKhuh3Y11llplmB /S8JU2aGpm/d0A5q/hH3BapwYCsAE3ZX3MqaM3chSH8WvRZYoQ6i9QucYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCA1C4KOfLPdibk6c6iTOTDEK34+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyZDc3NWNmLWViNWMtNDdlMi05MGRhLTgzZTlkM2Y2ZWQwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9+BAMA0GCSqGSIb3DQEBCwUAA4IBAQAxkdNjbspRCg1pIuDj N17jwbi8ziNLWrdZ+f980UWBMQjtTXtd47Jr+FTgscFMBMcW/IBz9Sst7MKy5kpn 3YD5jBNwn3grdr8bSxpRda4BW2NBXbMJaghtIJtxkIv5D+aJKeWq3ZGbsrRnhGhF QgkMBU6M2seOVa0qGcgvhvTo+e586+G7leLJrqNzk/nz7TuP96C1tUBED2wbw8Vq M+Ito4UJTLHZ7/sdNH7gbhjhD2F51tqHcEy8PlynXsXCVob1NX7EB8d3K9oca9g3 UU4TuOp1PQqkTFRnf+qhVi90NIeYxDxcWF2rPA8XGdhzjYGPdSCXopmbnNID+zkh 4QlC -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:58 2025 by rpki-client