$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa File: 4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa (raw, json) Hash identifier: RtqNasIWEWTzRWy6AVp4oJXYBTpDflY4qxDtmYYKubE= Subject key identifier: 3A:FD:9A:15:D0:B3:B3:4E:37:15:98:83:E4:AD:DF:6C:A9:1E:5B:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EC251037530A99722600E805C78CF81FA1D0632 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa Signing time: Wed 25 Jun 2025 00:00:04 +0000 ROA not before: Wed 25 Jun 2025 00:00:04 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c2:51:03:75:30:a9:97:22:60:0e:80:5c:78:cf:81:fa:1d:06:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 25 00:00:04 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=4385cf7213be27597e306654d9a93a6ae7356ebd1f2736752cfe221e66dbc702, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:04:ce:68:25:9e:12:f9:81:e9:d0:8b:70: 26:e6:e9:94:3e:6b:a6:05:c8:8e:f7:6a:c8:1e:3b: 8a:32:23:dc:db:0b:ac:bc:06:b8:02:e3:1d:51:57: f8:e7:51:9a:21:b7:df:20:46:47:ce:f3:22:13:18: 86:b6:b1:e9:6b:66:91:bd:5c:70:c8:29:2c:b4:62: 29:c6:43:11:b4:88:42:ab:57:c8:fe:7c:ab:e7:97: 94:55:2c:1a:c6:c6:36:e4:10:04:1a:0d:8a:22:5b: 6a:cc:21:60:52:0f:30:89:b4:ca:01:3e:ee:97:48: 5f:af:03:1c:d2:a8:a5:78:d1:07:8f:40:bc:74:3c: 7d:4c:92:cf:3d:08:a0:bf:76:46:3b:47:6b:ee:f2: 5a:70:b4:b9:24:0f:59:69:87:fc:38:60:25:98:f0: 47:71:70:a0:30:52:0d:f5:e6:6d:9c:e0:7a:77:e6: ce:ec:9c:b8:89:22:91:3b:d2:f9:19:96:95:d4:46: ee:8d:ec:0a:69:6f:59:3d:5c:d0:e7:75:88:44:5e: fa:4b:29:c4:99:5a:c1:15:fe:62:6e:69:2a:76:f2: 72:4e:19:f8:95:90:e3:7a:bc:30:a9:f3:4c:9e:d4: 3c:b4:56:69:8e:ef:ad:4f:ec:a2:63:a4:fb:a0:a4: f9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FD:9A:15:D0:B3:B3:4E:37:15:98:83:E4:AD:DF:6C:A9:1E:5B:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:e000::/40 Signature Algorithm: sha256WithRSAEncryption 32:ab:3f:24:e2:5c:a0:ed:8d:14:81:fa:b8:ab:a4:41:8d:e2: 26:61:be:d5:da:5f:08:b9:df:51:80:e4:0a:f5:9f:b7:76:96: 07:3f:89:5f:ab:9b:70:ac:7d:36:78:04:c6:f8:96:9d:70:a6: 74:a0:38:ed:92:b5:c8:5c:90:41:37:cc:f8:64:ec:7f:4f:18: dc:6f:b8:c6:ca:66:a0:39:56:e4:83:9f:08:fc:d0:13:c0:26: 4b:10:b8:c5:35:59:6c:d0:1e:c7:57:12:88:fa:93:64:3a:b3: 7a:33:48:a6:75:2a:50:ad:0e:d6:3e:6d:38:d2:e8:8a:a4:83: bc:18:66:1e:83:3f:22:10:0b:c3:a5:ac:64:6b:83:e3:6a:7e: a7:87:e9:91:34:ac:f6:f4:d6:0e:39:56:74:42:f4:51:cb:da: e0:4a:63:34:e7:c5:53:de:46:8c:18:1e:c8:3a:b4:50:c9:22: 56:7f:57:83:7a:ae:4e:d3:f7:a2:b4:89:4c:55:83:6f:bb:2d: 74:6e:85:ec:82:2a:54:98:2d:d9:7c:d1:51:15:b8:07:0a:f5: f9:38:ec:a2:fb:e9:d2:b2:7b:a7:96:d3:f5:99:95:44:38:be: a7:c4:db:3c:5d:23:07:e2:5c:04:3a:c1:bd:3b:8b:45:c3:97: f4:84:19:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPsJRA3UwqZciYA6AXHjPgfodBjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNTAwMDAwNFoX DTI1MDczMDIzNTk1OVowejFJMEcGA1UEBRNANDM4NWNmNzIxM2JlMjc1OTdlMzA2 NjU0ZDlhOTNhNmFlNzM1NmViZDFmMjczNjc1MmNmZTIyMWU2NmRiYzcwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSoEzmglnhL5genQi3Am5umUPmum BciO92rIHjuKMiPc2wusvAa4AuMdUVf451GaIbffIEZHzvMiExiGtrHpa2aRvVxw yCkstGIpxkMRtIhCq1fI/nyr55eUVSwaxsY25BAEGg2KIltqzCFgUg8wibTKAT7u l0hfrwMc0qileNEHj0C8dDx9TJLPPQigv3ZGO0dr7vJacLS5JA9ZaYf8OGAlmPBH cXCgMFIN9eZtnOB6d+bO7Jy4iSKRO9L5GZaV1EbujewKaW9ZPVzQ53WIRF76SynE mVrBFf5ibmkqdvJyThn4lZDjerwwqfNMntQ8tFZpju+tT+yiY6T7oKT57wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDr9mhXQs7NONxWYg+St32ypHlvDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlMjRlYmFiLTVmMzEtNGViNS05OWRkLWU1ZmUxMTNmMjFmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauOAwDQYJKoZIhvcNAQELBQADggEBADKrPyTiXKDtjRSB+rir pEGN4iZhvtXaXwi531GA5Ar1n7d2lgc/iV+rm3CsfTZ4BMb4lp1wpnSgOO2Stchc kEE3zPhk7H9PGNxvuMbKZqA5VuSDnwj80BPAJksQuMU1WWzQHsdXEoj6k2Q6s3oz SKZ1KlCtDtY+bTjS6Iqkg7wYZh6DPyIQC8OlrGRrg+NqfqeH6ZE0rPb01g45VnRC 9FHL2uBKYzTnxVPeRowYHsg6tFDJIlZ/V4N6rk7T96K0iUxVg2+7LXRuheyCKlSY Ldl80VEVuAcK9fk47KL76dKye6eW0/WZlUQ4vqfE2zxdIwfiXAQ6wb07i0XDl/SE GTE= -----END CERTIFICATE-----Generated at Sun Jun 29 03:46:01 2025 by rpki-client