$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa File: 995f333a-490f-44be-baae-a7428f2d9a63.roa (raw, json) Hash identifier: 2pzLHz9olqNnIDDOzBqKiEOkEYeN3xmhQ8HlzrSKwY8= Subject key identifier: 97:3A:AB:0D:68:AE:5A:6E:B7:12:21:44:01:1F:D4:29:6A:55:1B:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0518E46991C87B467BB64373D25EB1193A7AE274 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa Signing time: Tue 17 Jun 2025 00:00:11 +0000 ROA not before: Tue 17 Jun 2025 00:00:11 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:18:e4:69:91:c8:7b:46:7b:b6:43:73:d2:5e:b1:19:3a:7a:e2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:00:11 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=92ab3b8cc3a31b72fb7e2210c6380f586782d8bde47063c9a538adcc84951ba0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:55:88:3a:1e:dc:3d:14:d6:fe:75:fd:6d: ca:c0:c8:06:e6:5c:7d:d8:5a:8d:b7:a0:ac:85:18: da:bb:0d:33:32:84:5a:01:95:31:6e:e4:da:01:f3: 6c:17:ce:7e:6a:0e:31:dd:0b:aa:35:a4:8e:74:7d: da:e3:4a:fb:87:0c:c7:3d:eb:8c:7e:13:48:44:b0: d2:24:20:3c:cb:40:ac:f6:59:5a:db:0b:1b:29:5d: b0:22:28:cc:5a:d5:b9:31:6d:c0:91:a1:e8:d8:98: 10:b4:d1:65:b2:8b:d4:35:a5:43:71:fc:49:35:2e: b4:23:fe:93:80:31:43:2f:aa:ba:f4:5e:d3:c8:14: 55:08:fa:e8:15:c6:fe:d1:27:d7:b7:6c:47:7e:37: e2:c4:01:55:55:2e:64:57:a7:de:b1:a7:77:37:83: 9d:5b:2b:27:fb:e6:14:ca:34:f6:c6:03:83:64:d2: 20:e7:3f:3d:31:ce:44:64:94:89:1e:c8:a1:31:c0: 5c:da:24:a9:8c:6c:4d:e1:11:49:f6:d1:a4:a5:ce: 4d:85:6c:88:a0:72:30:7c:95:26:65:07:5c:e8:0c: d2:43:de:f9:7f:cc:1e:9c:9b:05:66:16:f2:6b:b4: 68:61:b4:a6:15:47:ad:28:2a:0e:be:c0:8f:37:d7: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3A:AB:0D:68:AE:5A:6E:B7:12:21:44:01:1F:D4:29:6A:55:1B:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:1000::/40 Signature Algorithm: sha256WithRSAEncryption 33:c5:a4:91:06:08:fc:9a:5b:4b:2c:8c:a2:65:86:05:5f:e2: 06:30:74:76:fb:0c:0e:4c:a0:26:f5:a7:76:d7:3a:d8:81:3f: f3:c2:af:1d:73:9b:f5:46:ab:23:15:f7:5f:b0:3e:be:57:11: 74:12:7d:3b:07:6e:0b:5b:d4:d9:6d:8c:dd:9a:4f:24:38:be: b7:42:bc:af:8f:54:72:d2:a4:82:94:ea:da:5f:a0:17:ab:a3: a0:f0:42:9f:c2:3e:2c:95:1c:c2:7c:c8:56:e3:82:c0:36:b2: 0a:16:3e:c6:ba:ba:aa:6f:a6:f9:a3:3f:1a:6f:fe:3d:6b:b5: 4c:b7:56:80:1b:fd:21:0e:53:a8:91:42:8a:a3:be:08:ee:dc: 05:bb:39:31:1b:44:a9:d6:12:ec:21:e5:ff:ab:44:16:51:90: 89:dd:50:00:42:86:94:4a:3c:73:3f:05:ab:2d:af:4e:5c:45: b5:f1:d5:c0:2c:8a:19:10:d7:37:dd:aa:07:2f:fa:3c:50:7f: 28:61:7a:a9:cd:ec:b2:88:c6:e2:13:53:ee:01:8b:e0:82:4c: ca:85:27:04:bc:1e:f0:e5:3d:31:45:31:aa:67:da:d0:c8:64: 61:16:45:b4:03:ce:99:35:78:6e:9a:dc:54:27:a0:3d:f8:96: b9:cf:3f:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBRjkaZHIe0Z7tkNz0l6xGTp64nQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDAxMVoX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAOTJhYjNiOGNjM2EzMWI3MmZiN2Uy MjEwYzYzODBmNTg2NzgyZDhiZGU0NzA2M2M5YTUzOGFkY2M4NDk1MWJhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ixViDoe3D0U1v51/W3KwMgG5lx9 2FqNt6CshRjauw0zMoRaAZUxbuTaAfNsF85+ag4x3QuqNaSOdH3a40r7hwzHPeuM fhNIRLDSJCA8y0Cs9lla2wsbKV2wIijMWtW5MW3AkaHo2JgQtNFlsovUNaVDcfxJ NS60I/6TgDFDL6q69F7TyBRVCProFcb+0SfXt2xHfjfixAFVVS5kV6fesad3N4Od Wysn++YUyjT2xgODZNIg5z89Mc5EZJSJHsihMcBc2iSpjGxN4RFJ9tGkpc5NhWyI oHIwfJUmZQdc6AzSQ975f8wenJsFZhbya7RoYbSmFUetKCoOvsCPN9cNWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJc6qw1orlputxIhRAEf1ClqVRvAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NWYzMzNhLTQ5MGYtNDRiZS1iYWFlLWE3NDI4ZjJkOWE2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7xAwDQYJKoZIhvcNAQELBQADggEBADPFpJEGCPyaW0ssjKJl hgVf4gYwdHb7DA5MoCb1p3bXOtiBP/PCrx1zm/VGqyMV91+wPr5XEXQSfTsHbgtb 1NltjN2aTyQ4vrdCvK+PVHLSpIKU6tpfoBero6DwQp/CPiyVHMJ8yFbjgsA2sgoW Psa6uqpvpvmjPxpv/j1rtUy3VoAb/SEOU6iRQoqjvgju3AW7OTEbRKnWEuwh5f+r RBZRkIndUABChpRKPHM/Bastr05cRbXx1cAsihkQ1zfdqgcv+jxQfyhheqnN7LKI xuITU+4Bi+CCTMqFJwS8HvDlPTFFMapn2tDIZGEWRbQDzpk1eG6a3FQnoD34lrnP P2g= -----END CERTIFICATE-----Generated at Sun Jun 29 01:44:11 2025 by rpki-client