$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/902bd60c-e304-442a-a82f-7f3a3e22b00b.roa File: 902bd60c-e304-442a-a82f-7f3a3e22b00b.roa (raw, json) Hash identifier: Xmf3aLY+1iF39nP0qtf1a4FfnB82W778euxmJAbr0Ok= Subject key identifier: 6C:54:51:CA:2E:87:97:C7:26:0F:75:D0:16:7C:54:5A:46:9A:9A:34 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 257EBB41077C37FF4E0F77E592718E40057BA528 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/902bd60c-e304-442a-a82f-7f3a3e22b00b.roa Signing time: Fri 20 Jun 2025 00:00:06 +0000 ROA not before: Fri 20 Jun 2025 00:00:06 +0000 ROA not after: Fri 25 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7e:bb:41:07:7c:37:ff:4e:0f:77:e5:92:71:8e:40:05:7b:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 20 00:00:06 2025 GMT Not After : Jul 25 23:59:59 2025 GMT Subject: serialNumber=ca69bd418a01bcbd4cd9f99dee2bd6a22501ba33fd8a705f7a3f8529fb9f07a8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:96:59:00:bb:3f:be:e9:1c:c9:8d:da:52: c0:fa:3f:b9:a2:e8:65:ca:bc:52:6c:d4:59:67:ad: a0:4a:d2:dd:28:da:d7:39:34:1b:67:04:94:02:99: 56:0d:33:57:5d:2c:d9:f0:cc:5e:92:df:be:a5:51: 31:c0:2d:5d:89:de:71:fb:49:0b:5e:4c:f8:3f:6f: 84:c9:8e:17:7e:6c:c3:d2:60:d4:6c:7c:c9:60:a2: b1:0b:04:9b:32:42:f6:08:8d:1f:68:0e:ce:a0:3c: 63:ca:31:38:ef:4b:c1:39:02:ca:0d:55:e1:81:9b: 7c:17:5d:9d:f7:63:5b:09:35:e1:7d:04:45:6c:bd: ed:74:e0:44:4f:e1:e3:7f:04:61:ce:8f:5a:1c:9c: 4b:0a:96:42:bd:d4:5d:34:2d:fd:bb:92:d0:89:4d: 87:97:cf:39:6b:f6:5e:2a:70:e2:97:a2:21:ad:35: 31:f3:d9:b0:87:aa:f3:29:68:fe:d2:3c:a8:03:c3: 56:60:bf:d2:b4:1f:3f:9c:64:6c:c9:7e:55:06:bb: 76:2c:c5:0b:dc:dc:50:d4:3f:24:a1:c0:0e:5e:16: 4c:7a:8c:d3:86:7d:b1:9f:05:ee:7c:24:5f:98:68: 50:cd:0f:37:09:d5:82:83:39:ee:5d:5d:7a:3d:1b: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:51:CA:2E:87:97:C7:26:0F:75:D0:16:7C:54:5A:46:9A:9A:34 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/902bd60c-e304-442a-a82f-7f3a3e22b00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 0d:74:33:23:c8:c5:a6:6c:d5:ee:eb:63:de:a2:fc:d5:1e:b7: 53:a2:2e:7f:81:07:6c:e6:03:4e:68:1f:df:64:2c:aa:ae:fc: 73:c5:04:52:90:87:74:08:77:ee:db:cf:a0:51:dc:3b:57:69: 69:09:c1:58:36:02:36:94:c3:8d:cb:4d:82:77:6e:cf:37:56: 1f:83:f4:f3:14:8c:77:9b:5d:5b:60:10:43:10:fd:8c:39:d0: 6c:0b:e0:9b:c6:15:f5:21:3e:6f:29:c3:f1:9a:f8:13:99:21: 76:69:fb:75:0b:2c:73:a1:8d:9d:4d:29:85:49:21:dd:3d:3c: a5:fc:3d:af:61:70:0d:d5:2b:d7:64:a4:37:7f:53:7f:29:0e: 42:12:23:4c:f6:b2:2c:d4:a0:86:78:d9:e6:2a:cb:ef:b1:6a: 10:61:c0:49:03:0e:db:b2:6d:e2:fa:38:9e:d9:2d:d8:79:1d: 0d:3a:90:9f:ad:02:ff:a0:78:8c:97:e9:2a:7e:c1:a2:a4:ca: b8:45:9d:47:bb:62:09:65:4b:f3:57:b6:54:73:b4:32:9b:f3: 4f:8a:4c:3d:8d:c8:d4:4a:dd:c8:a6:ff:c9:51:5b:a4:73:46: f6:86:b0:6c:76:ac:ef:59:d4:98:cd:7f:2f:cc:a9:1b:8c:15: 09:bd:cb:7b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJX67QQd8N/9OD3flknGOQAV7pSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyMDAwMDAwNloX DTI1MDcyNTIzNTk1OVowejFJMEcGA1UEBRNAY2E2OWJkNDE4YTAxYmNiZDRjZDlm OTlkZWUyYmQ2YTIyNTAxYmEzM2ZkOGE3MDVmN2EzZjg1MjlmYjlmMDdhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmWWQC7P77pHMmN2lLA+j+5ouhl yrxSbNRZZ62gStLdKNrXOTQbZwSUAplWDTNXXSzZ8Mxekt++pVExwC1did5x+0kL Xkz4P2+EyY4XfmzD0mDUbHzJYKKxCwSbMkL2CI0faA7OoDxjyjE470vBOQLKDVXh gZt8F12d92NbCTXhfQRFbL3tdOBET+HjfwRhzo9aHJxLCpZCvdRdNC39u5LQiU2H l885a/ZeKnDil6IhrTUx89mwh6rzKWj+0jyoA8NWYL/StB8/nGRsyX5VBrt2LMUL 3NxQ1D8kocAOXhZMeozThn2xnwXufCRfmGhQzQ83CdWCgznuXV16PRuV7QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGxUUcouh5fHJg910BZ8VFpGmpo0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwMmJkNjBjLWUzMDQtNDQyYS1hODJmLTdmM2EzZTIyYjAwYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQANdDMjyMWmbNXu62Pe ovzVHrdToi5/gQds5gNOaB/fZCyqrvxzxQRSkId0CHfu28+gUdw7V2lpCcFYNgI2 lMONy02Cd27PN1Yfg/TzFIx3m11bYBBDEP2MOdBsC+CbxhX1IT5vKcPxmvgTmSF2 aft1CyxzoY2dTSmFSSHdPTyl/D2vYXAN1SvXZKQ3f1N/KQ5CEiNM9rIs1KCGeNnm KsvvsWoQYcBJAw7bsm3i+jie2S3YeR0NOpCfrQL/oHiMl+kqfsGipMq4RZ1Hu2IJ ZUvzV7ZUc7Qym/NPikw9jcjUSt3Ipv/JUVukc0b2hrBsdqzvWdSYzX8vzKkbjBUJ vct7 -----END CERTIFICATE-----Generated at Sun Jun 29 03:04:23 2025 by rpki-client