$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa File: f28ef137-0acd-4efd-b9ee-b352810a3e96.roa (raw, json) Hash identifier: 95iiUTUBgMK+s4o2jiVDUWHeczFfPdV8Dd+6COZLpKM= Subject key identifier: 80:8F:6E:0B:05:DE:F0:8A:71:4C:9E:16:44:D1:41:BA:32:31:51:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 452C44B14163D1732A34B7A2A635EA184787D0B7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa Signing time: Tue 10 Jun 2025 00:00:09 +0000 ROA not before: Tue 10 Jun 2025 00:00:09 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2c:44:b1:41:63:d1:73:2a:34:b7:a2:a6:35:ea:18:47:87:d0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:00:09 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a1b689c0f2aa2a4bf369a131b1ddf9f3c22989c0bcd70aa1bd9414c94ff5467e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:db:75:1e:a2:b9:15:85:e3:62:7a:fd:52: 40:6e:95:13:e0:88:77:ab:2f:90:31:8f:ed:8d:68: 73:c5:f2:27:eb:49:18:3c:cb:96:fc:0b:c8:77:7c: 01:85:e1:97:89:f5:c0:48:2c:8c:d1:08:ee:0a:aa: 4f:56:0a:09:36:25:97:cc:32:8b:f7:bd:51:6b:24: c0:1b:61:be:83:39:2b:49:16:91:d0:50:9a:1c:39: a0:7b:ab:8f:88:cc:26:6d:fe:7f:87:1a:aa:60:f8: 8a:2c:74:91:6a:81:8e:0b:d1:f5:04:1d:39:88:d3: b6:86:59:a3:76:91:8f:99:97:ac:26:72:f6:3b:27: a6:f1:0c:5f:77:ee:2b:75:56:87:cf:f5:cc:cb:2c: 60:f1:bc:95:2b:b5:ef:81:1f:4f:0e:2c:5d:27:09: d8:e9:ce:19:83:ae:ae:78:3c:ee:0a:72:aa:e3:4c: ec:c0:69:ea:91:d4:ba:7d:af:1a:b2:6d:73:19:6a: 07:ef:9c:90:f7:47:84:a0:6a:5b:7c:00:c4:30:5a: b1:9a:a1:4c:a1:c5:42:7e:2f:88:53:28:7d:45:ba: 12:c4:93:f4:f4:aa:6f:2f:ff:98:cb:e8:75:38:1e: 37:e9:67:ae:54:4f:d4:5e:cf:5d:e1:2e:fc:ef:1e: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8F:6E:0B:05:DE:F0:8A:71:4C:9E:16:44:D1:41:BA:32:31:51:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e080::/46 Signature Algorithm: sha256WithRSAEncryption a5:80:9c:98:11:8f:3c:35:a1:3a:da:65:4d:eb:cb:26:46:d2: ea:f2:f8:26:d9:49:20:88:d5:5e:47:c3:c5:e0:b8:6c:bb:10: a7:c5:1e:ae:da:ab:2f:3d:74:a5:b1:2e:7a:f0:1a:1c:d7:f6: e6:97:a7:b5:5c:f3:ad:a1:9b:6b:b1:af:f3:c0:89:d0:26:e5: dc:62:ae:2a:be:6c:9b:eb:f6:af:59:63:df:0d:e0:bd:cb:5d: c0:81:ba:6a:3f:52:81:6c:81:b4:ac:78:1f:d2:09:d1:cb:c3: a9:fe:db:f3:0a:60:d9:6b:e2:d7:bd:f2:24:bf:15:9c:49:4d: 84:e5:56:27:d9:7a:56:61:92:38:41:45:0b:56:c6:37:cd:14: 70:ea:2d:e6:f4:c8:e6:bd:ba:e2:af:3a:b8:f3:84:c1:7f:02: a8:67:c3:98:f4:5e:7a:d8:b7:67:11:08:93:4c:ee:42:d0:e0: 57:5a:47:61:96:72:19:13:6b:87:f1:61:fd:a3:05:20:14:07: d8:66:f4:7a:c2:cf:ef:42:29:4f:88:1b:8a:b5:54:42:3a:23: 69:cc:82:7c:54:f7:6f:cf:7b:92:2e:b9:bf:2d:22:69:3f:ca: fe:fe:c7:28:51:61:af:31:09:8d:6b:38:d4:b9:1a:ea:7a:4b: be:9c:6b:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURSxEsUFj0XMqNLeipjXqGEeH0LcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMDAwOVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYTFiNjg5YzBmMmFhMmE0YmYzNjlh MTMxYjFkZGY5ZjNjMjI5ODljMGJjZDcwYWExYmQ5NDE0Yzk0ZmY1NDY3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0bbdR6iuRWF42J6/VJAbpUT4Ih3 qy+QMY/tjWhzxfIn60kYPMuW/AvId3wBheGXifXASCyM0QjuCqpPVgoJNiWXzDKL 971RayTAG2G+gzkrSRaR0FCaHDmge6uPiMwmbf5/hxqqYPiKLHSRaoGOC9H1BB05 iNO2hlmjdpGPmZesJnL2Oyem8Qxfd+4rdVaHz/XMyyxg8byVK7XvgR9PDixdJwnY 6c4Zg66ueDzuCnKq40zswGnqkdS6fa8asm1zGWoH75yQ90eEoGpbfADEMFqxmqFM ocVCfi+IUyh9RboSxJP09KpvL/+Yy+h1OB436WeuVE/UXs9d4S787x4opQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFICPbgsF3vCKcUyeFkTRQboyMVFdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyOGVmMTM3LTBhY2QtNGVmZC1iOWVlLWIzNTI4MTBhM2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeCAMA0GCSqGSIb3DQEBCwUAA4IBAQClgJyYEY88NaE62mVN 68smRtLq8vgm2UkgiNVeR8PF4LhsuxCnxR6u2qsvPXSlsS568Boc1/bml6e1XPOt oZtrsa/zwInQJuXcYq4qvmyb6/avWWPfDeC9y13AgbpqP1KBbIG0rHgf0gnRy8Op /tvzCmDZa+LXvfIkvxWcSU2E5VYn2XpWYZI4QUULVsY3zRRw6i3m9Mjmvbrirzq4 84TBfwKoZ8OY9F562LdnEQiTTO5C0OBXWkdhlnIZE2uH8WH9owUgFAfYZvR6ws/v QilPiBuKtVRCOiNpzIJ8VPdvz3uSLrm/LSJpP8r+/scoUWGvMQmNazjUuRrqeku+ nGuy -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:02 2025 by rpki-client