$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa File: 0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa (raw, json) Hash identifier: 3f/s2pOhoquvEH2Cw3YiWSFapTEGBD+0/R1I0F2+tpc= Subject key identifier: 3C:72:0E:E5:A0:78:81:96:4B:46:4F:DD:28:AC:AD:24:62:7D:02:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63D74F8FEEE0A7E2D038F47557D8687A77770752 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa Signing time: Tue 17 Jun 2025 00:01:00 +0000 ROA not before: Tue 17 Jun 2025 00:01:00 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d7:4f:8f:ee:e0:a7:e2:d0:38:f4:75:57:d8:68:7a:77:77:07:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:01:00 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=ece745782b12abe61a36836bbfa82464d5bd4d022feef66857451e17f385d45a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:c7:bb:1e:32:e4:fd:51:28:04:ab:91:df: f5:07:43:e7:ba:db:68:8f:4e:0a:33:f0:d3:86:7e: 85:09:a7:b5:52:d2:f9:1a:e4:7d:87:12:10:64:32: d9:da:7f:c5:21:0c:43:ef:f7:7e:b9:fc:8c:f4:8b: f0:db:50:00:6d:aa:45:18:8b:26:e4:3b:2f:4b:60: 61:32:e2:4f:14:9d:6f:e9:0e:5b:ab:13:ab:4f:8d: 46:90:12:2f:5e:a8:58:33:80:9f:a1:dd:1e:26:7d: c7:40:a2:71:7b:54:90:2e:ac:6e:17:5e:54:7d:36: d6:24:b7:28:de:71:54:2b:3d:a6:20:84:62:bb:d3: 6b:92:62:dc:1a:90:c9:a0:25:ae:8a:04:a6:f0:95: 4e:fc:dd:1e:f4:61:1c:40:64:60:6d:57:3e:bb:31: f6:f7:9b:d6:cf:28:76:f8:2b:54:4a:a6:87:6b:09: 5b:13:a2:90:24:0a:67:c2:42:fb:1f:48:1f:55:b0: 2e:ed:e6:a1:84:9a:28:c4:1f:aa:f0:37:9f:eb:9f: 03:41:f0:f3:10:38:d9:43:c8:2a:1e:3d:de:4c:0e: ef:6f:5b:70:45:c4:d1:48:a0:12:45:3b:a5:3a:b9: f2:b9:af:1c:58:c2:9e:9c:2d:54:b1:bd:75:a2:8d: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:72:0E:E5:A0:78:81:96:4B:46:4F:DD:28:AC:AD:24:62:7D:02:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:9000::/40 Signature Algorithm: sha256WithRSAEncryption 25:41:82:97:4b:ad:06:7d:11:bb:3f:e9:2c:8d:e2:fb:97:5d: 09:7e:55:cf:a8:cf:b8:5e:ae:7f:65:31:42:f2:af:3d:c8:ff: 31:fc:00:7c:5c:b8:06:d9:77:22:56:6e:8a:6e:e7:bf:dc:9c: 3d:12:c7:1f:e6:74:dd:80:89:8e:72:a3:a5:65:ca:9a:9b:e1: 73:3d:06:7d:78:1e:8f:4a:8b:71:8c:4d:30:89:39:56:ad:f2: a6:b6:ca:ed:f5:24:f6:fb:2e:7d:a3:dd:d0:cc:b2:05:5d:3f: 8d:ac:83:5f:dd:cb:51:4b:3c:0e:1f:11:34:61:c4:b2:cb:5f: 38:94:2b:3f:7b:2a:97:2e:9b:25:1d:7c:54:ad:f5:3f:11:f2: 5e:e7:b4:b2:ab:f4:7e:58:69:9e:f9:cc:81:52:a2:14:11:bf: 78:8a:5a:89:52:ed:b6:1b:5f:8f:c3:bf:a2:86:37:d9:dc:75: fa:96:d5:89:3e:28:29:f2:b7:e2:4a:df:ab:39:c2:3c:bf:33: 0f:64:56:cb:b5:47:18:37:97:c1:c0:6f:ff:46:be:c4:51:26: a9:bd:2e:5f:d1:60:06:57:7d:2e:5a:dd:28:ec:f7:13:ca:43: 67:f3:91:10:7a:cb:d7:08:7e:5c:d3:4c:0a:60:4e:e4:c5:e9: 4a:74:2e:cd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY9dPj+7gp+LQOPR1V9hoend3B1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDEwMFoX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAZWNlNzQ1NzgyYjEyYWJlNjFhMzY4 MzZiYmZhODI0NjRkNWJkNGQwMjJmZWVmNjY4NTc0NTFlMTdmMzg1ZDQ1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJrHux4y5P1RKASrkd/1B0Pnutto j04KM/DThn6FCae1UtL5GuR9hxIQZDLZ2n/FIQxD7/d+ufyM9Ivw21AAbapFGIsm 5DsvS2BhMuJPFJ1v6Q5bqxOrT41GkBIvXqhYM4Cfod0eJn3HQKJxe1SQLqxuF15U fTbWJLco3nFUKz2mIIRiu9NrkmLcGpDJoCWuigSm8JVO/N0e9GEcQGRgbVc+uzH2 95vWzyh2+CtUSqaHawlbE6KQJApnwkL7H0gfVbAu7eahhJooxB+q8Def658DQfDz EDjZQ8gqHj3eTA7vb1twRcTRSKASRTulOrnyua8cWMKenC1Usb11oo3w0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDxyDuWgeIGWS0ZP3SisrSRifQKnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3NDVkZDk1LWE2Y2ItNDJmMS04NjAwLTdjNmJhOTRmZWZmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba75AwDQYJKoZIhvcNAQELBQADggEBACVBgpdLrQZ9Ebs/6SyN 4vuXXQl+Vc+oz7hern9lMULyrz3I/zH8AHxcuAbZdyJWbopu57/cnD0Sxx/mdN2A iY5yo6Vlypqb4XM9Bn14Ho9Ki3GMTTCJOVat8qa2yu31JPb7Ln2j3dDMsgVdP42s g1/dy1FLPA4fETRhxLLLXziUKz97KpcumyUdfFSt9T8R8l7ntLKr9H5YaZ75zIFS ohQRv3iKWolS7bYbX4/Dv6KGN9ncdfqW1Yk+KCnyt+JK36s5wjy/Mw9kVsu1Rxg3 l8HAb/9GvsRRJqm9Ll/RYAZXfS5a3Sjs9xPKQ2fzkRB6y9cIflzTTApgTuTF6Up0 Ls0= -----END CERTIFICATE-----Generated at Sun Jun 29 06:04:27 2025 by rpki-client