$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa File: 1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa (raw, json) Hash identifier: YEHaT1fFP7eCAEXF7+kEBz00E03x+MRch9JrJYrwhn4= Subject key identifier: 3F:FC:45:C0:5D:27:09:16:A6:A7:46:F3:2A:10:EB:EF:92:10:71:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3404C784FDCC5A6C9C763B597B50DC2212ADEB7E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa Signing time: Tue 24 Jun 2025 00:00:07 +0000 ROA not before: Tue 24 Jun 2025 00:00:07 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:04:c7:84:fd:cc:5a:6c:9c:76:3b:59:7b:50:dc:22:12:ad:eb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 24 00:00:07 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=78b3471821e3aa20aea8c01ce8d939bffc7792f8981ff9a1a434547d3c1f62a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:6b:ff:83:e9:7d:dd:5a:da:c5:24:8c:01: 06:1f:9c:3c:33:7e:a4:8d:de:bb:49:a1:71:cf:70: cd:9b:a8:c1:18:73:99:35:82:ac:b3:df:49:dc:c7: ef:57:e8:b4:45:84:d7:68:6f:7f:c2:56:d6:d5:27: ea:7b:cf:21:3d:b7:76:7c:6a:9e:7a:bd:1d:71:7c: c9:fc:cb:ce:55:17:85:92:2a:88:ab:f9:76:44:c6: de:df:fb:7d:55:60:34:be:6c:69:e3:f1:dd:e4:13: a4:35:ac:16:93:a7:a6:1c:21:68:2b:59:4d:91:b8: 2a:56:52:12:d6:30:61:9d:60:29:77:a7:52:49:72: 00:bd:09:26:ba:bb:d6:36:bd:ae:6e:a3:90:50:fd: 25:8e:89:ae:c1:e5:26:7d:05:e9:31:bf:b3:19:62: 5a:ac:a5:ee:14:bf:75:84:b1:c0:47:94:50:8e:3e: 8e:91:97:95:7e:0a:73:93:22:82:36:5b:c0:c1:fd: d3:7b:48:66:32:10:66:5c:c2:55:4a:76:dc:23:c5: b6:1a:2f:b4:1f:a4:7d:ba:ca:70:91:85:8a:17:61: 8a:29:cd:99:da:4d:24:07:06:f8:00:17:d1:7b:f3: 88:cd:e1:33:54:f3:c3:f2:e4:93:5e:7e:96:82:46: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:45:C0:5D:27:09:16:A6:A7:46:F3:2A:10:EB:EF:92:10:71:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:c000::/40 Signature Algorithm: sha256WithRSAEncryption 70:33:4d:3e:71:f4:59:b8:cb:66:26:7b:c4:c5:d4:e1:82:2b: 21:de:1c:af:e4:93:34:47:42:2e:e8:2f:a4:cb:64:94:1a:df: 89:f9:af:94:51:94:c2:52:b4:6c:92:c9:c4:fe:ac:20:91:82: fa:08:dd:bf:5c:9f:b7:7b:b5:4b:be:4e:8b:89:02:c9:f6:5f: d5:de:a7:2e:00:03:26:72:01:3b:96:24:28:e8:83:ba:78:b9: b3:57:cc:97:89:58:55:ca:11:39:cd:11:1e:4c:da:72:ef:4a: 9e:7d:1d:7b:02:6c:3a:f7:c7:3c:35:fd:7e:19:05:0d:ca:76: 23:24:c2:4b:19:32:c4:03:30:52:12:e2:8e:6a:c3:65:98:60: 68:e0:6d:b3:76:31:f8:25:ad:ae:17:81:33:4f:e1:22:12:8b: 8a:c6:6f:fe:75:2f:98:06:ad:f9:82:0b:21:97:d5:fa:33:68: a7:e1:80:9b:5a:50:b6:be:64:0d:ac:04:30:8f:0f:9b:fd:fb: 17:52:40:a9:4f:c4:25:19:4d:3a:23:cf:aa:2f:5c:9a:c9:23: 14:f6:3d:41:bf:4f:e4:fb:ce:53:a5:65:2e:f5:b7:48:28:05: 56:85:66:03:10:c2:73:ca:40:27:81:9e:26:e6:59:f2:74:cd: cf:7a:86:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNATHhP3MWmycdjtZe1DcIhKt634wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNDAwMDAwN1oX DTI1MDcyOTIzNTk1OVowejFJMEcGA1UEBRNANzhiMzQ3MTgyMWUzYWEyMGFlYThj MDFjZThkOTM5YmZmYzc3OTJmODk4MWZmOWExYTQzNDU0N2QzYzFmNjJhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA015r/4Ppfd1a2sUkjAEGH5w8M36k jd67SaFxz3DNm6jBGHOZNYKss99J3MfvV+i0RYTXaG9/wlbW1Sfqe88hPbd2fGqe er0dcXzJ/MvOVReFkiqIq/l2RMbe3/t9VWA0vmxp4/Hd5BOkNawWk6emHCFoK1lN kbgqVlIS1jBhnWApd6dSSXIAvQkmurvWNr2ubqOQUP0ljomuweUmfQXpMb+zGWJa rKXuFL91hLHAR5RQjj6OkZeVfgpzkyKCNlvAwf3Te0hmMhBmXMJVSnbcI8W2Gi+0 H6R9uspwkYWKF2GKKc2Z2k0kBwb4ABfRe/OIzeEzVPPD8uSTXn6WgkY+JwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD/8RcBdJwkWpqdG8yoQ6++SEHEQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NTNiZGYxLTFlOWMtNGZlNi1hODA5LWRhZjQ2MTZhOTE4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMsAwDQYJKoZIhvcNAQELBQADggEBAHAzTT5x9Fm4y2Yme8TF 1OGCKyHeHK/kkzRHQi7oL6TLZJQa34n5r5RRlMJStGySycT+rCCRgvoI3b9cn7d7 tUu+TouJAsn2X9Xepy4AAyZyATuWJCjog7p4ubNXzJeJWFXKETnNER5M2nLvSp59 HXsCbDr3xzw1/X4ZBQ3KdiMkwksZMsQDMFIS4o5qw2WYYGjgbbN2Mfglra4XgTNP 4SISi4rGb/51L5gGrfmCCyGX1fozaKfhgJtaULa+ZA2sBDCPD5v9+xdSQKlPxCUZ TTojz6ovXJrJIxT2PUG/T+T7zlOlZS71t0goBVaFZgMQwnPKQCeBnibmWfJ0zc96 hmQ= -----END CERTIFICATE-----Generated at Sun Jun 29 02:34:53 2025 by rpki-client