$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa File: f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa (raw, json) Hash identifier: UzAEqeX50gysH37pXt8Mu9cEzPTvKIWrScuvChNTP08= Subject key identifier: 6C:13:95:52:26:E4:BD:AB:82:02:49:24:7E:1D:8E:4C:CD:F2:67:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23EF9AEFE1295D0C051E91474257D4EC15B30A99 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa Signing time: Tue 10 Jun 2025 15:20:17 +0000 ROA not before: Tue 10 Jun 2025 15:20:17 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:9a:ef:e1:29:5d:0c:05:1e:91:47:42:57:d4:ec:15:b3:0a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:20:17 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=cfeab0e91a1f2e0238fcfa909fb11d5e40336dc99e48a3b230e773db55c3b105, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:de:4e:e5:e4:34:7a:ac:5f:10:be:c1:e5: c6:53:c4:02:0a:a8:22:b3:db:20:13:c7:6c:80:19: 18:13:d0:45:f5:2a:af:0e:7b:a7:45:86:ab:ac:56: 05:5e:33:15:14:e5:44:f4:35:9f:93:dd:ce:ad:7f: 5f:36:2e:95:9c:09:13:49:02:51:37:1b:eb:39:38: 3c:ee:8e:6b:2b:7b:84:91:7b:ef:57:50:f2:f5:7e: be:3a:cf:b2:1b:2c:fe:09:41:25:e7:f7:92:b6:f0: c6:d1:26:b0:f7:fb:75:61:c5:cc:7c:90:9f:88:cd: 76:f8:e6:9a:17:27:1b:1e:a0:79:90:b3:fd:60:8a: 14:6f:41:d5:53:6c:4a:b6:02:51:6c:1c:82:84:ff: 8e:e4:db:ca:96:53:ef:4f:7b:b7:c1:b9:74:71:24: 95:4c:a1:7f:e2:d5:bd:7a:d7:f7:db:b8:fe:3f:0b: 5f:26:83:7e:f4:a5:41:cf:36:50:5e:a8:fb:14:7b: 3d:4c:a4:d9:6e:a4:e9:4e:49:a5:fa:d1:a9:8e:0a: 65:af:1f:ce:b7:59:63:c9:cb:cc:41:0e:ef:e1:d7: dc:6a:49:df:12:a3:cc:ca:9d:7a:16:5d:8c:fc:48: c4:01:04:37:46:c9:cc:d4:71:33:fa:dd:e3:3b:0b: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:13:95:52:26:E4:BD:AB:82:02:49:24:7E:1D:8E:4C:CD:F2:67:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:e000::/40 Signature Algorithm: sha256WithRSAEncryption c2:52:97:7f:91:fe:13:ba:61:a8:8c:28:55:2d:50:b7:c2:fd: c0:f5:ab:81:68:34:6d:d2:a7:3f:00:a6:35:b3:38:f8:cf:4c: 1d:2f:c8:cf:99:42:66:04:90:27:2d:2e:c5:95:5f:4f:d7:00: e9:47:57:56:d4:e3:fd:76:fa:e0:f8:64:73:73:e2:95:79:70: 76:9a:76:7f:8b:25:e8:67:77:36:a8:ca:bd:31:ce:1a:1a:86: b8:9c:b6:60:ea:4c:01:43:05:dd:16:48:ca:d0:f0:f6:c2:9d: 40:24:ee:c5:86:5a:a0:8d:21:c9:0e:1c:f8:8f:9a:93:f5:5d: e2:4b:e9:13:33:1a:e3:cb:9e:6a:6c:93:cb:29:e6:9e:1c:a6: 98:10:4b:63:55:45:6b:8d:02:55:f7:0e:0b:83:57:18:1c:97: 41:20:80:1c:35:53:77:88:e9:c6:f9:6d:59:f7:1a:ea:25:9a: 98:b6:4e:46:0e:90:8c:1f:c5:a1:a1:19:ff:89:6d:8d:82:6f: 4e:e3:72:95:e4:b8:22:d2:d5:31:66:bd:fc:5b:19:f7:d2:d5: a3:92:8a:c9:66:21:42:a6:6e:48:99:c1:a1:62:06:8f:21:9d: 60:ab:f5:d7:25:a7:89:b2:af:32:4e:3f:8f:85:bb:92:40:a6: c8:e4:fb:f1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUI++a7+EpXQwFHpFHQlfU7BWzCpkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MjAxN1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAY2ZlYWIwZTkxYTFmMmUwMjM4ZmNm YTkwOWZiMTFkNWU0MDMzNmRjOTllNDhhM2IyMzBlNzczZGI1NWMzYjEwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIveTuXkNHqsXxC+weXGU8QCCqgi s9sgE8dsgBkYE9BF9SqvDnunRYarrFYFXjMVFOVE9DWfk93OrX9fNi6VnAkTSQJR NxvrOTg87o5rK3uEkXvvV1Dy9X6+Os+yGyz+CUEl5/eStvDG0Saw9/t1YcXMfJCf iM12+OaaFycbHqB5kLP9YIoUb0HVU2xKtgJRbByChP+O5NvKllPvT3u3wbl0cSSV TKF/4tW9etf327j+PwtfJoN+9KVBzzZQXqj7FHs9TKTZbqTpTkml+tGpjgplrx/O t1ljycvMQQ7v4dfcaknfEqPMyp16Fl2M/EjEAQQ3RsnM1HEz+t3jOwvNJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGwTlVIm5L2rggJJJH4djkzN8mdeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YxMThhNzc2LThjY2YtNGVkNS1iNmY2LWY2MmQ2NDRkOWUzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOOAwDQYJKoZIhvcNAQELBQADggEBAMJSl3+R/hO6YaiMKFUt ULfC/cD1q4FoNG3Spz8ApjWzOPjPTB0vyM+ZQmYEkCctLsWVX0/XAOlHV1bU4/12 +uD4ZHNz4pV5cHaadn+LJehndzaoyr0xzhoahrictmDqTAFDBd0WSMrQ8PbCnUAk 7sWGWqCNIckOHPiPmpP1XeJL6RMzGuPLnmpsk8sp5p4cppgQS2NVRWuNAlX3DguD Vxgcl0EggBw1U3eI6cb5bVn3Guolmpi2TkYOkIwfxaGhGf+JbY2Cb07jcpXkuCLS 1TFmvfxbGffS1aOSislmIUKmbkiZwaFiBo8hnWCr9dclp4myrzJOP4+Fu5JApsjk +/E= -----END CERTIFICATE-----Generated at Sat Jun 14 06:01:01 2025 by rpki-client