$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa File: 47371510-3a26-4c9b-a966-5e5aaf136a2f.roa (raw, json) Hash identifier: bUvGo2QuPHuSgkM+UcDU5aqncUulnUW2S4VOQQbEZl4= Subject key identifier: 41:37:AD:F2:34:43:A8:27:E6:D2:2F:3D:24:74:57:B9:13:3C:15:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DFA22348BBD10900F1FD2736C91D5AAEDE6F5BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa Signing time: Sat 07 Jun 2025 00:20:50 +0000 ROA not before: Sat 07 Jun 2025 00:20:50 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:22:34:8b:bd:10:90:0f:1f:d2:73:6c:91:d5:aa:ed:e6:f5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:20:50 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=8357925e88ce4109b17e64e79bdb22315f88efd85cb50f724ed0d6649c498204, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:1b:ff:cd:8f:ca:bc:42:4d:fa:92:11:17: d5:bc:e7:24:38:14:7b:0c:77:ef:4a:85:2c:e0:cd: 2a:41:41:ba:ae:1c:63:46:6a:9a:3e:33:2f:6f:00: f4:44:97:5c:e5:b1:c8:7a:eb:e8:76:db:10:fc:0b: e7:80:4f:0e:c5:58:72:02:05:9c:9c:fd:01:e3:04: a7:f7:fe:f6:9c:7e:ab:a0:0d:7b:b2:36:b8:47:52: 7c:16:0d:ab:5b:74:d5:dd:fb:24:0d:02:d2:09:92: c0:ae:3e:8c:94:a0:e0:f3:04:35:9b:66:6f:c1:d8: b3:74:0f:ba:25:05:20:65:8e:cc:2e:42:28:d6:83: a9:bc:c3:ac:4e:a5:20:09:38:a3:ef:5e:57:34:7b: 35:8c:6e:8d:b2:61:f0:21:9e:1d:52:73:52:7b:66: 67:45:6f:24:16:93:9c:06:5c:6c:ff:5e:97:e8:1b: af:7f:5a:4e:d3:53:ed:12:1e:fe:b7:8e:59:02:4a: 5f:73:da:46:09:73:00:75:d2:b4:d8:b6:79:a6:7f: 19:f0:4b:80:68:ed:b6:d6:a3:ff:92:28:a0:db:6b: d5:03:da:95:54:bc:16:3d:5c:6d:3b:d7:f4:ca:bd: 5b:0b:f4:b3:82:96:64:c0:f6:3b:81:3f:16:84:69: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:37:AD:F2:34:43:A8:27:E6:D2:2F:3D:24:74:57:B9:13:3C:15:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b040::/48 Signature Algorithm: sha256WithRSAEncryption 52:97:d1:85:79:e0:99:e6:6f:d3:b0:8a:18:ac:71:db:b9:02: 22:80:d2:62:ab:50:44:a6:3e:e0:28:7b:d2:dd:9c:11:14:ba: 1b:32:59:be:be:48:ea:0d:82:92:9f:e9:b9:af:fe:04:89:27: 63:55:ad:6c:7e:cf:07:85:78:41:a2:61:b3:e1:47:c0:59:fc: a3:7b:ff:4f:de:07:33:b3:a3:d9:8b:6e:f7:f5:50:f9:37:9e: b8:0a:be:e2:ce:73:b3:05:7c:7d:62:58:33:e1:a1:61:28:69: c4:18:e7:3c:50:36:fe:67:c3:1f:69:16:44:3d:3c:da:35:7a: 2d:14:92:33:91:24:70:dd:b5:9b:f7:84:4e:51:eb:0c:62:b5: 23:1b:03:0c:a6:ec:e9:68:2a:9b:ef:75:d2:3a:82:0d:0e:aa: aa:ed:f8:39:3e:f8:40:8d:5b:be:3f:b2:6a:16:ce:ca:cc:0f: b4:9f:aa:41:63:6a:79:28:e0:7c:16:ce:70:62:e0:f2:51:1d: 6a:05:5a:6f:62:d8:3c:e8:3f:32:9c:9c:79:41:28:37:b4:3a: 86:a1:bf:2e:f7:28:c4:58:4d:30:49:c8:eb:cd:9a:e8:df:0c: a8:0f:78:7a:d4:28:14:84:f9:0b:15:3f:1e:39:e1:53:9c:44: 38:34:25:bd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXfoiNIu9EJAPH9JzbJHVqu3m9bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMjA1MFoX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAODM1NzkyNWU4OGNlNDEwOWIxN2U2 NGU3OWJkYjIyMzE1Zjg4ZWZkODVjYjUwZjcyNGVkMGQ2NjQ5YzQ5ODIwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk0b/82PyrxCTfqSERfVvOckOBR7 DHfvSoUs4M0qQUG6rhxjRmqaPjMvbwD0RJdc5bHIeuvodtsQ/AvngE8OxVhyAgWc nP0B4wSn9/72nH6roA17sja4R1J8Fg2rW3TV3fskDQLSCZLArj6MlKDg8wQ1m2Zv wdizdA+6JQUgZY7MLkIo1oOpvMOsTqUgCTij715XNHs1jG6NsmHwIZ4dUnNSe2Zn RW8kFpOcBlxs/16X6Buvf1pO01PtEh7+t45ZAkpfc9pGCXMAddK02LZ5pn8Z8EuA aO221qP/kiig22vVA9qVVLwWPVxtO9f0yr1bC/SzgpZkwPY7gT8WhGk5LwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEE3rfI0Q6gn5tIvPSR0V7kTPBUjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3MzcxNTEwLTNhMjYtNGM5Yi1hOTY2LTVlNWFhZjEzNmEyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYbBAMA0GCSqGSIb3DQEBCwUAA4IBAQBSl9GFeeCZ5m/TsIoY rHHbuQIigNJiq1BEpj7gKHvS3ZwRFLobMlm+vkjqDYKSn+m5r/4EiSdjVa1sfs8H hXhBomGz4UfAWfyje/9P3gczs6PZi2739VD5N564Cr7iznOzBXx9Ylgz4aFhKGnE GOc8UDb+Z8MfaRZEPTzaNXotFJIzkSRw3bWb94ROUesMYrUjGwMMpuzpaCqb73XS OoINDqqq7fg5PvhAjVu+P7JqFs7KzA+0n6pBY2p5KOB8Fs5wYuDyUR1qBVpvYtg8 6D8ynJx5QSg3tDqGob8u9yjEWE0wScjrzZro3wyoD3h61CgUhPkLFT8eOeFTnEQ4 NCW9 -----END CERTIFICATE-----Generated at Sun Jun 29 03:49:23 2025 by rpki-client