$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa File: e07de3d6-bd1c-45fc-a092-f2635716b267.roa (raw, json) Hash identifier: A5rQP9BagIMALu4nevIDfiOrL7b1hzkzZVjd23iqa4o= Subject key identifier: 0E:BA:FB:37:C5:9B:5F:2C:80:D8:F1:6E:78:F1:55:3B:41:C7:09:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 063C1BE115A7E2314BB38150C624AD38ABD349E8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa Signing time: Tue 10 Jun 2025 00:20:09 +0000 ROA not before: Tue 10 Jun 2025 00:20:09 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3c:1b:e1:15:a7:e2:31:4b:b3:81:50:c6:24:ad:38:ab:d3:49:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:09 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=bca8e2ea8243229c3f7e9915a3fa51bfb486c7466e92f54af5b35267cc8a3945, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:99:d5:d9:1c:02:0c:b0:6e:c6:2d:2b:a6: 6c:f3:69:c6:99:aa:ac:4d:cf:65:5a:9e:ec:27:43: 09:63:1a:36:57:73:f5:5a:22:1d:13:0a:b9:c5:97: c0:e4:f9:dd:5a:6a:41:59:b8:0d:57:d8:eb:a0:a4: 26:c0:ac:01:13:51:12:ff:0e:0b:03:df:6a:45:80: a9:0b:e1:25:87:b4:ba:fc:32:41:5c:a9:fc:ca:15: eb:39:f8:d1:28:4b:d8:dc:26:16:07:eb:a9:4e:fc: 10:ce:fb:20:5f:f6:6d:24:79:b7:20:ca:71:ee:fd: 0e:00:13:a4:81:0e:13:31:5a:55:3d:b9:3f:4b:49: 54:a5:62:ab:d6:4f:88:b9:9f:b9:22:37:0f:a5:90: 7d:b8:28:92:6e:f8:2c:ba:b6:f4:44:5d:86:36:83: c3:85:97:2b:5c:ac:6d:ac:70:77:d4:86:76:cc:b2: 64:c9:3a:24:99:9c:0f:51:5d:12:87:cd:af:dd:e8: ed:7f:fe:5f:80:d5:33:0e:5e:84:a7:38:46:0d:c3: 5c:4a:8a:19:97:2f:4d:27:42:f7:38:89:90:04:8f: c1:dd:cf:28:c2:32:5e:a4:fe:7a:99:6e:4c:62:99: 02:1e:04:77:a0:3c:d9:9f:e9:39:90:3c:5c:fe:33: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:FB:37:C5:9B:5F:2C:80:D8:F1:6E:78:F1:55:3B:41:C7:09:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c080::/46 Signature Algorithm: sha256WithRSAEncryption 20:7c:04:b0:91:ca:67:ee:02:01:c8:27:5c:3b:44:27:c6:da: ae:2c:b9:92:e1:e6:32:33:35:4c:95:94:d2:0a:a5:46:4d:1a: 82:e1:d9:73:cf:01:1b:8a:d2:e0:a5:42:fd:b0:37:c1:3b:fb: 53:2d:1d:b0:c0:e9:ba:8b:93:50:32:14:4e:5c:fe:d3:27:bd: f8:8d:6e:35:15:78:0e:e5:88:7d:b9:5e:91:b7:f8:32:27:37: f0:49:57:e8:5e:58:9b:62:ca:79:08:fd:45:81:b0:21:62:6e: 1e:b7:4a:4e:35:71:d3:6e:ee:53:a5:51:04:a8:12:ed:79:66: 0f:78:00:7a:b7:f1:b7:da:56:a1:cf:e7:63:ac:7e:89:9e:70: 52:69:8b:df:3c:38:e8:a0:16:ff:06:36:d4:88:63:d7:63:16: 83:51:a5:72:6c:20:73:f2:64:6a:bf:58:7d:92:f3:14:41:47: 46:d4:10:7e:8b:78:4b:00:11:fd:34:0c:83:25:51:b7:3d:26: 9a:72:f6:5b:44:ee:98:be:8e:00:72:44:e4:d2:6a:99:91:69: 9a:b9:b0:9c:81:03:cf:80:8a:f4:30:f6:7c:a8:bc:ba:b8:b5: b2:26:2b:02:a8:24:41:81:94:57:3c:88:49:6f:c6:b8:11:4f: 86:47:5e:6a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBjwb4RWn4jFLs4FQxiStOKvTSegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjAwOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYmNhOGUyZWE4MjQzMjI5YzNmN2U5 OTE1YTNmYTUxYmZiNDg2Yzc0NjZlOTJmNTRhZjViMzUyNjdjYzhhMzk0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsACZ1dkcAgywbsYtK6Zs82nGmaqs Tc9lWp7sJ0MJYxo2V3P1WiIdEwq5xZfA5PndWmpBWbgNV9jroKQmwKwBE1ES/w4L A99qRYCpC+Elh7S6/DJBXKn8yhXrOfjRKEvY3CYWB+upTvwQzvsgX/ZtJHm3IMpx 7v0OABOkgQ4TMVpVPbk/S0lUpWKr1k+IuZ+5IjcPpZB9uCiSbvgsurb0RF2GNoPD hZcrXKxtrHB31IZ2zLJkyTokmZwPUV0Sh82v3ejtf/5fgNUzDl6EpzhGDcNcSooZ ly9NJ0L3OImQBI/B3c8owjJepP56mW5MYpkCHgR3oDzZn+k5kDxc/jMwWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA66+zfFm18sgNjxbnjxVTtBxwmcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwN2RlM2Q2LWJkMWMtNDVmYy1hMDkyLWYyNjM1NzE2YjI2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98CAMA0GCSqGSIb3DQEBCwUAA4IBAQAgfASwkcpn7gIByCdc O0QnxtquLLmS4eYyMzVMlZTSCqVGTRqC4dlzzwEbitLgpUL9sDfBO/tTLR2wwOm6 i5NQMhROXP7TJ734jW41FXgO5Yh9uV6Rt/gyJzfwSVfoXlibYsp5CP1FgbAhYm4e t0pONXHTbu5TpVEEqBLteWYPeAB6t/G32lahz+djrH6JnnBSaYvfPDjooBb/BjbU iGPXYxaDUaVybCBz8mRqv1h9kvMUQUdG1BB+i3hLABH9NAyDJVG3PSaacvZbRO6Y vo4AckTk0mqZkWmaubCcgQPPgIr0MPZ8qLy6uLWyJisCqCRBgZRXPIhJb8a4EU+G R15q -----END CERTIFICATE-----Generated at Sat Jun 14 05:52:48 2025 by rpki-client