$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21152065-60c9-41ef-ae06-c350c175101e.roa File: 21152065-60c9-41ef-ae06-c350c175101e.roa (raw, json) Hash identifier: G/R/2idQMXCT6/fyE8iZhvXBM61x5kgWEg9EpsXc1Nk= Subject key identifier: DD:54:05:68:44:F7:D6:50:2A:87:F5:61:72:57:82:BC:B9:EF:6F:3F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E318A0F630298A75C18B9779DD64AB414DC4478 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21152065-60c9-41ef-ae06-c350c175101e.roa Signing time: Tue 17 Jun 2025 00:01:11 +0000 ROA not before: Tue 17 Jun 2025 00:01:11 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:31:8a:0f:63:02:98:a7:5c:18:b9:77:9d:d6:4a:b4:14:dc:44:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:01:11 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=03f2f6f7fbf5f0b10d5f9d83bd0bde70cc2296627339db1552de6ad210b1f200, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:6f:36:9e:e1:50:0f:a3:b0:84:83:4e:cc: 2c:e4:fe:a3:50:04:5a:ee:43:a1:c7:0f:94:8f:ba: 46:c6:1b:8f:a1:ef:4e:c9:4e:c2:c4:a0:13:11:4a: 4a:eb:69:19:ef:82:aa:35:93:f7:34:bc:d8:9a:30: 89:b3:97:72:13:84:e4:32:41:fb:5b:fe:d1:7f:42: a0:ad:e9:15:0d:e7:ff:a8:48:e6:62:bf:3d:3f:48: 4c:f6:eb:3e:77:d8:af:5a:01:fa:fa:79:e4:df:44: a8:1f:aa:0e:b3:c5:76:1f:42:57:24:a6:f5:bf:8e: 31:19:0a:1d:71:50:49:55:79:da:8f:63:cb:0e:d6: 51:07:fb:47:67:9a:96:27:ca:7e:f6:62:34:b4:95: 83:c9:68:46:1e:76:5c:b7:d0:eb:3b:cb:30:cf:68: e2:ce:33:aa:eb:9b:0a:06:f2:47:65:60:fd:12:15: 55:bf:2c:62:db:21:ac:fa:53:8d:e9:a8:16:cd:6a: ff:1d:d1:32:00:19:f7:09:c5:29:c2:0e:43:d3:e8: 73:51:52:c5:a0:e1:8c:cf:58:cc:0c:64:df:af:ea: df:e0:1b:e5:96:67:70:cb:98:dd:9d:e1:df:ae:04: 97:ce:63:2b:4e:11:47:4c:66:4c:79:04:c3:da:de: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:05:68:44:F7:D6:50:2A:87:F5:61:72:57:82:BC:B9:EF:6F:3F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21152065-60c9-41ef-ae06-c350c175101e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:b000::/40 Signature Algorithm: sha256WithRSAEncryption 20:1c:ac:f1:6d:43:f1:fe:49:98:21:a8:cf:2d:96:90:c8:42: b8:51:0a:ce:7e:3b:50:37:c5:29:ed:aa:30:7a:2e:72:0a:41: f4:15:c3:e0:a1:24:d9:79:20:ed:44:e1:8d:0b:ac:2a:3c:f6: bf:35:e1:2f:68:5f:a8:f7:c4:aa:83:65:51:18:a4:de:05:c9: 4b:49:23:9f:94:36:2e:6d:7f:57:06:4d:40:1c:de:91:5e:0a: f6:3b:cd:5f:78:8e:c2:a9:55:0b:87:65:fa:73:43:3a:62:73: 17:b7:36:da:1d:ce:af:24:59:19:69:6e:4d:a1:e7:de:b5:12: 26:01:83:b8:8b:5b:40:f0:92:e9:3b:ea:94:e0:74:96:99:21: d3:6e:51:5e:f2:2b:84:1d:a9:9a:cf:af:40:bd:37:9b:08:17: 3d:7f:f1:cd:7f:3a:20:96:0c:2f:6f:e8:2f:1f:81:74:e3:73: a5:95:36:f0:89:29:55:c7:95:56:ef:e2:96:8f:75:db:40:e4: c5:3c:2a:cb:42:1e:14:16:4b:b1:97:05:16:24:50:17:d5:1e: f0:5a:56:a8:a7:42:73:bc:29:4f:cf:f0:e7:8a:37:a9:b5:49: 56:d2:6b:c8:cc:5f:84:ef:41:d1:5a:d0:d2:d4:10:d7:5f:9f: 3c:4d:c5:d1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfjGKD2MCmKdcGLl3ndZKtBTcRHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDExMVoX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAMDNmMmY2ZjdmYmY1ZjBiMTBkNWY5 ZDgzYmQwYmRlNzBjYzIyOTY2MjczMzlkYjE1NTJkZTZhZDIxMGIxZjIwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvNvNp7hUA+jsISDTsws5P6jUARa 7kOhxw+Uj7pGxhuPoe9OyU7CxKATEUpK62kZ74KqNZP3NLzYmjCJs5dyE4TkMkH7 W/7Rf0KgrekVDef/qEjmYr89P0hM9us+d9ivWgH6+nnk30SoH6oOs8V2H0JXJKb1 v44xGQodcVBJVXnaj2PLDtZRB/tHZ5qWJ8p+9mI0tJWDyWhGHnZct9DrO8swz2ji zjOq65sKBvJHZWD9EhVVvyxi2yGs+lON6agWzWr/HdEyABn3CcUpwg5D0+hzUVLF oOGMz1jMDGTfr+rf4Bvllmdwy5jdneHfrgSXzmMrThFHTGZMeQTD2t4FxwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN1UBWhE99ZQKof1YXJXgry5728/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIxMTUyMDY1LTYwYzktNDFlZi1hZTA2LWMzNTBjMTc1MTAxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba77AwDQYJKoZIhvcNAQELBQADggEBACAcrPFtQ/H+SZghqM8t lpDIQrhRCs5+O1A3xSntqjB6LnIKQfQVw+ChJNl5IO1E4Y0LrCo89r814S9oX6j3 xKqDZVEYpN4FyUtJI5+UNi5tf1cGTUAc3pFeCvY7zV94jsKpVQuHZfpzQzpicxe3 Ntodzq8kWRlpbk2h5961EiYBg7iLW0Dwkuk76pTgdJaZIdNuUV7yK4QdqZrPr0C9 N5sIFz1/8c1/OiCWDC9v6C8fgXTjc6WVNvCJKVXHlVbv4paPddtA5MU8KstCHhQW S7GXBRYkUBfVHvBaVqinQnO8KU/P8OeKN6m1SVbSa8jMX4TvQdFa0NLUENdfnzxN xdE= -----END CERTIFICATE-----Generated at Sun Jun 29 14:35:28 2025 by rpki-client