$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb33c78e-80e8-48d7-8941-7ac54859b50c.roa File: fb33c78e-80e8-48d7-8941-7ac54859b50c.roa (raw, json) Hash identifier: mg+j/cZ8d0y0bpti52QKymBRBNr3ny91LmzFPsHv4zs= Subject key identifier: E6:AA:22:95:D7:00:68:D0:7E:7D:6B:8D:77:D9:5F:8B:1D:5F:BA:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C34CB6772A63575CA6ECF5D140A800497FCF7FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb33c78e-80e8-48d7-8941-7ac54859b50c.roa Signing time: Tue 10 Jun 2025 00:20:48 +0000 ROA not before: Tue 10 Jun 2025 00:20:48 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:34:cb:67:72:a6:35:75:ca:6e:cf:5d:14:0a:80:04:97:fc:f7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:48 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=e1e495f89552098ad8f596576ece86e01fdd6cdaf1d2a3e0ca1d4b144f8e425d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:ba:75:39:f6:25:17:52:51:f2:f6:a1:53: 7e:34:56:51:ea:7d:88:61:ef:41:f9:01:b6:e7:13: c0:ad:90:d2:94:9f:22:fa:37:d7:4e:b8:df:f4:d6: b5:93:d6:1f:9a:c5:b8:18:a6:cb:97:b7:fe:b2:b0: a3:f4:bc:2a:19:a1:87:35:d5:e2:40:b2:71:2c:89: 3b:8b:a6:78:64:f9:2b:5b:ea:44:73:90:a4:3e:8f: 5a:77:54:32:eb:56:b2:f4:38:a2:25:ad:56:65:9d: 24:bb:2c:58:2f:f2:b2:a9:b9:68:a1:83:21:27:2a: d3:53:05:f4:21:7a:05:60:69:32:95:bb:7b:c7:83: 76:32:64:0e:62:5e:1b:6e:01:ab:24:dc:26:53:27: 24:ca:e6:be:0c:2a:5b:bd:4e:ff:35:e4:9e:92:13: f8:8a:d4:8f:84:18:8d:d8:4c:3e:fd:17:90:e0:d5: 15:49:d9:dc:72:2c:fd:22:d0:5a:5e:3e:2b:ce:00: ea:78:97:f8:f6:34:e0:c1:17:41:ce:bb:5c:1f:03: 82:56:f5:0d:8e:2b:ef:25:bd:85:a1:82:34:f7:7b: 6c:69:70:92:0f:ba:6b:f3:41:f5:99:bb:9e:07:28: 4e:de:3f:56:79:73:c0:03:95:b0:66:74:23:ea:9f: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AA:22:95:D7:00:68:D0:7E:7D:6B:8D:77:D9:5F:8B:1D:5F:BA:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb33c78e-80e8-48d7-8941-7ac54859b50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4080::/46 Signature Algorithm: sha256WithRSAEncryption 11:8b:18:f1:d1:24:6b:1a:9f:1d:e1:cc:c5:0d:04:12:6d:d2: 52:a5:32:17:91:ea:54:02:b5:3b:67:02:b1:b6:ea:f8:62:da: b7:18:17:d8:0f:87:c1:8c:47:46:9d:95:c5:19:40:9c:ea:12: c5:34:dd:0b:45:f9:0f:4a:ff:45:e4:23:77:2d:54:21:49:b3: d6:5a:54:19:38:94:39:e5:7b:61:13:2c:b2:70:92:ed:92:e1: d8:ca:c2:c1:9c:59:13:82:9a:d3:60:88:8f:af:d7:db:d7:dd: 27:f5:68:bc:02:7a:29:44:47:3d:53:48:98:45:34:0d:17:5a: 03:7a:9a:50:b4:0c:fb:42:54:c6:71:1e:e0:c2:89:a4:44:99: 49:48:87:29:ed:4b:58:75:5e:fd:e2:58:17:cd:2b:ab:1f:2e: 02:6b:86:93:8e:e3:15:a5:4d:66:c7:79:df:5b:3e:0d:9f:79: cb:79:63:5f:8f:b8:d3:f4:1d:8c:ab:e2:b4:c8:ec:d8:3f:4d: 41:60:e4:69:74:a9:44:b7:ea:cd:09:1f:c5:a1:c5:1b:f8:e0: 5c:d3:0c:1e:01:53:02:ec:c4:24:76:d9:b4:c3:57:2d:02:9f: cb:7f:a8:67:a9:2b:8d:30:00:24:de:80:fd:50:5a:3c:b1:bb: 41:cc:bc:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPDTLZ3KmNXXKbs9dFAqABJf89/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjA0OFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZTFlNDk1Zjg5NTUyMDk4YWQ4ZjU5 NjU3NmVjZTg2ZTAxZmRkNmNkYWYxZDJhM2UwY2ExZDRiMTQ0ZjhlNDI1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss26dTn2JRdSUfL2oVN+NFZR6n2I Ye9B+QG25xPArZDSlJ8i+jfXTrjf9Na1k9YfmsW4GKbLl7f+srCj9LwqGaGHNdXi QLJxLIk7i6Z4ZPkrW+pEc5CkPo9ad1Qy61ay9DiiJa1WZZ0kuyxYL/KyqblooYMh JyrTUwX0IXoFYGkylbt7x4N2MmQOYl4bbgGrJNwmUyckyua+DCpbvU7/NeSekhP4 itSPhBiN2Ew+/ReQ4NUVSdncciz9ItBaXj4rzgDqeJf49jTgwRdBzrtcHwOCVvUN jivvJb2FoYI093tsaXCSD7pr80H1mbueByhO3j9WeXPAA5WwZnQj6p+g0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOaqIpXXAGjQfn1rjXfZX4sdX7pHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiMzNjNzhlLTgwZTgtNDhkNy04OTQxLTdhYzU0ODU5YjUwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0CAMA0GCSqGSIb3DQEBCwUAA4IBAQARixjx0SRrGp8d4czF DQQSbdJSpTIXkepUArU7ZwKxtur4Ytq3GBfYD4fBjEdGnZXFGUCc6hLFNN0LRfkP Sv9F5CN3LVQhSbPWWlQZOJQ55XthEyyycJLtkuHYysLBnFkTgprTYIiPr9fb190n 9Wi8AnopREc9U0iYRTQNF1oDeppQtAz7QlTGcR7gwomkRJlJSIcp7UtYdV794lgX zSurHy4Ca4aTjuMVpU1mx3nfWz4Nn3nLeWNfj7jT9B2Mq+K0yOzYP01BYORpdKlE t+rNCR/FocUb+OBc0wweAVMC7MQkdtm0w1ctAp/Lf6hnqSuNMAAk3oD9UFo8sbtB zLwe -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:56 2025 by rpki-client