$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa File: 43b679b3-4697-405a-940d-1245ad38a867.roa (raw, json) Hash identifier: bMpegob5yxYYxqIduZPeC1zsrzXo/4Hlr3jUkNITzbQ= Subject key identifier: 0D:B9:B5:7C:11:A6:CF:06:C2:4E:02:C8:99:D4:05:5D:D5:4D:6A:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5AFA4013C86E9831CC417933CFC2FABE2575CF5A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa Signing time: Mon 09 Jun 2025 15:31:26 +0000 ROA not before: Mon 09 Jun 2025 15:31:26 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fa:40:13:c8:6e:98:31:cc:41:79:33:cf:c2:fa:be:25:75:cf:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:31:26 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=a14647cbf1881a0ed57e576267fe1b86935324f6400f48d62ffca44576078c3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:16:91:2e:eb:16:8d:db:c7:ec:28:8b:e7: e7:3e:5b:85:9c:a2:c4:0e:0c:25:f2:51:45:59:5d: 57:1f:29:9c:4e:b5:29:51:9b:af:cd:a9:0d:13:25: 35:86:d6:be:77:6e:ad:55:35:74:02:3d:1c:60:d5: cc:b0:e2:40:d2:17:77:f0:4b:f4:e8:42:85:f2:89: 78:cf:be:46:73:24:68:a7:38:83:26:cf:96:7f:47: 47:a5:6f:2d:e6:f8:84:81:8d:c0:73:4d:f0:fb:2d: 8a:61:e3:be:c4:7e:db:57:ad:06:cd:62:ca:05:b5: 05:ca:eb:df:4c:cf:14:90:92:e3:9e:6a:6c:bf:d0: 4c:9f:42:41:b4:5d:e9:6f:2e:4b:b0:21:20:9e:7e: 22:99:7b:42:43:b8:e0:76:fc:3b:e1:e1:79:93:df: af:53:33:95:bf:31:d2:ea:fd:ac:e8:ee:b2:8a:38: 0b:75:4d:f3:31:cc:99:97:b8:5c:88:88:84:f5:ae: b7:d5:38:3e:2e:c2:5c:c1:7c:3c:68:e6:ac:27:da: 97:5e:8b:a9:8f:da:96:c8:e1:07:18:f5:15:c3:13: 87:6e:dc:24:57:5d:4c:25:06:27:6a:58:26:c1:46: b0:7a:18:64:92:a2:06:0a:e4:f2:64:b7:6a:87:87: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B9:B5:7C:11:A6:CF:06:C2:4E:02:C8:99:D4:05:5D:D5:4D:6A:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f000::/40 Signature Algorithm: sha256WithRSAEncryption a2:23:bb:65:c2:df:03:b5:32:a7:69:26:26:84:e3:ff:ea:cb: 4e:1a:53:f5:75:3f:b6:29:b1:3b:dd:1d:db:91:ec:7e:77:1d: 8f:6a:fe:bb:86:dd:59:52:31:ec:e9:81:72:0f:be:cb:42:c1: a1:72:44:11:98:d5:d2:b5:43:f2:19:7c:6b:f6:53:c1:a0:63: bb:a9:bb:ae:38:40:4a:52:09:d1:2d:9c:dd:ef:e6:9d:ea:15: 83:cd:a0:d4:d4:52:3d:a5:f3:3b:a5:d1:a7:0c:cd:9e:86:69: ca:07:34:8b:24:cf:f1:56:d0:a6:63:e5:9c:21:80:b4:35:db: 3a:0b:9c:b2:37:0b:f8:48:73:f8:a4:e8:f6:7b:08:1c:ca:f8: 93:79:db:c4:ed:17:ce:b4:11:33:67:67:18:86:52:db:09:bf: 4f:7e:61:cf:db:16:24:2a:b6:d1:57:94:f3:09:f9:1a:23:7e: f0:cd:66:3d:8d:60:19:97:a8:17:b1:b9:92:5c:65:3b:f0:7a: f8:f7:de:ac:30:a3:40:e7:aa:42:58:51:64:b8:f6:66:58:de: 91:cf:73:42:b0:43:bf:75:48:91:ee:09:d0:64:f9:a6:d3:5e: 50:1e:25:3b:9a:b3:20:6d:7e:4e:12:5e:df:2d:d0:7e:4c:f0: b7:28:06:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWvpAE8humDHMQXkzz8L6viV1z1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MzEyNloX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAYTE0NjQ3Y2JmMTg4MWEwZWQ1N2U1 NzYyNjdmZTFiODY5MzUzMjRmNjQwMGY0OGQ2MmZmY2E0NDU3NjA3OGMzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtUWkS7rFo3bx+woi+fnPluFnKLE Dgwl8lFFWV1XHymcTrUpUZuvzakNEyU1hta+d26tVTV0Aj0cYNXMsOJA0hd38Ev0 6EKF8ol4z75GcyRopziDJs+Wf0dHpW8t5viEgY3Ac03w+y2KYeO+xH7bV60GzWLK BbUFyuvfTM8UkJLjnmpsv9BMn0JBtF3pby5LsCEgnn4imXtCQ7jgdvw74eF5k9+v UzOVvzHS6v2s6O6yijgLdU3zMcyZl7hciIiE9a631Tg+LsJcwXw8aOasJ9qXXoup j9qWyOEHGPUVwxOHbtwkV11MJQYnalgmwUawehhkkqIGCuTyZLdqh4eTjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA25tXwRps8Gwk4CyJnUBV3VTWr7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjY3OWIzLTQ2OTctNDA1YS05NDBkLTEyNDVhZDM4YTg2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAPAwDQYJKoZIhvcNAQELBQADggEBAKIju2XC3wO1MqdpJiaE 4//qy04aU/V1P7YpsTvdHduR7H53HY9q/ruG3VlSMezpgXIPvstCwaFyRBGY1dK1 Q/IZfGv2U8GgY7upu644QEpSCdEtnN3v5p3qFYPNoNTUUj2l8zul0acMzZ6GacoH NIskz/FW0KZj5ZwhgLQ12zoLnLI3C/hIc/ik6PZ7CBzK+JN528TtF860ETNnZxiG UtsJv09+Yc/bFiQqttFXlPMJ+RojfvDNZj2NYBmXqBexuZJcZTvwevj33qwwo0Dn qkJYUWS49mZY3pHPc0KwQ791SJHuCdBk+abTXlAeJTuasyBtfk4SXt8t0H5M8Lco Brg= -----END CERTIFICATE-----Generated at Mon Jun 30 16:05:57 2025 by rpki-client