$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa File: 9f808762-dd71-4f33-bfa8-cb4244801d34.roa (raw, json) Hash identifier: ksGQEDju6JD7UACAwNWri19y2kv7no/eKBoOi8jEBx0= Subject key identifier: 68:A5:85:D9:CF:CD:AD:B7:6F:B3:63:12:E5:51:7A:6F:42:43:1F:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E40D64E0E9062F8479BB613682C672D8DE5C96D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa Signing time: Tue 10 Jun 2025 00:40:18 +0000 ROA not before: Tue 10 Jun 2025 00:40:18 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:7040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:40:d6:4e:0e:90:62:f8:47:9b:b6:13:68:2c:67:2d:8d:e5:c9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:40:18 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a7206fe1f137b670be7d0b0e49bd747c1524ae70c79f4aba0d3fe7d391eddc59, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:80:7d:e5:66:56:15:a0:6e:85:bb:3f:e1: f4:fd:99:6c:12:9c:5c:80:8d:df:2d:3e:16:0b:7f: 52:62:3e:a1:16:f4:dd:7f:bf:79:c5:d2:de:52:3c: 02:f0:d0:5b:f8:2e:10:40:6a:2f:4a:db:0f:96:26: 3a:94:f4:7a:ab:b8:ee:82:30:01:97:5f:37:04:87: a4:52:26:8d:8e:43:f6:c2:bf:af:d3:6b:08:13:9f: ef:33:cc:ee:25:32:30:28:c0:47:d5:14:c8:28:ed: 88:4a:c0:8f:dd:4e:38:ff:c1:43:bd:42:88:05:00: 52:24:aa:2d:de:be:51:33:ba:57:98:ba:81:10:eb: 81:fb:1c:ec:86:c0:ca:69:c8:c4:bc:bd:ff:8e:70: de:73:d6:ec:16:64:bd:4d:a8:62:f7:68:3f:5c:3e: 8b:2d:c5:cf:c3:f2:9f:77:f4:24:0d:5a:4d:7b:d3: 0c:fc:64:4b:fb:03:6a:27:2b:1b:ec:1d:cc:32:f7: ce:ca:cd:e9:50:71:cf:8e:ed:ac:8c:52:8f:54:e7: b6:97:06:07:61:35:36:b4:24:71:0c:3c:74:6f:4b: 37:01:c2:c8:b2:83:41:41:fa:fe:bd:01:dd:37:93: 9f:8c:5d:90:f9:03:5a:d8:a0:aa:06:a4:cc:66:91: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A5:85:D9:CF:CD:AD:B7:6F:B3:63:12:E5:51:7A:6F:42:43:1F:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:7040::/46 Signature Algorithm: sha256WithRSAEncryption 8c:5b:fc:55:84:5b:8c:c4:83:18:d7:ed:8a:6d:04:c8:4d:b4: d3:7e:5b:c7:56:b9:84:0b:08:70:2d:d8:8e:78:36:9a:41:ff: 0f:a0:65:11:c7:d4:56:28:31:3e:f5:ec:94:61:dc:2b:b5:e8: c0:75:94:81:20:75:ed:69:90:a6:e8:cd:1f:54:3e:4e:4c:6e: 23:89:2a:1f:fd:f5:a2:f2:4a:64:94:dd:f8:4b:4c:38:eb:03: 18:d0:d5:14:08:fe:88:63:dd:39:f9:9a:43:2a:4d:dc:09:b0: 09:ff:ec:bd:7d:83:cd:dc:4b:6e:c6:35:6f:81:67:c6:aa:3d: c1:79:ad:ad:93:d8:ca:c7:3a:b0:2b:ae:33:1f:f2:a9:85:97: 01:12:53:dd:05:cb:22:70:62:f2:c7:63:4e:59:b1:82:51:b3: bb:62:b6:80:db:de:8e:a1:ef:1c:9a:15:16:a4:63:be:07:8b: eb:7f:93:42:32:42:06:3f:7d:16:7c:c0:f4:2f:b8:ca:11:1b: 28:94:02:49:67:13:8f:eb:4e:72:06:c7:33:cd:11:c0:ae:cd: ef:b3:01:a8:f3:6a:6d:20:87:f9:63:05:5e:c5:f8:07:be:0c: 14:0f:60:35:32:93:67:af:75:5f:c0:60:ca:79:97:a3:ae:ca: 20:d0:02:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHkDWTg6QYvhHm7YTaCxnLY3lyW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNDAxOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYTcyMDZmZTFmMTM3YjY3MGJlN2Qw YjBlNDliZDc0N2MxNTI0YWU3MGM3OWY0YWJhMGQzZmU3ZDM5MWVkZGM1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyImAfeVmVhWgboW7P+H0/ZlsEpxc gI3fLT4WC39SYj6hFvTdf795xdLeUjwC8NBb+C4QQGovStsPliY6lPR6q7jugjAB l183BIekUiaNjkP2wr+v02sIE5/vM8zuJTIwKMBH1RTIKO2ISsCP3U44/8FDvUKI BQBSJKot3r5RM7pXmLqBEOuB+xzshsDKacjEvL3/jnDec9bsFmS9Tahi92g/XD6L LcXPw/Kfd/QkDVpNe9MM/GRL+wNqJysb7B3MMvfOys3pUHHPju2sjFKPVOe2lwYH YTU2tCRxDDx0b0s3AcLIsoNBQfr+vQHdN5OfjF2Q+QNa2KCqBqTMZpFaWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGilhdnPza23b7NjEuVRem9CQx+mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODA4NzYyLWRkNzEtNGYzMy1iZmE4LWNiNDI0NDgwMWQzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba93BAMA0GCSqGSIb3DQEBCwUAA4IBAQCMW/xVhFuMxIMY1+2K bQTITbTTflvHVrmECwhwLdiOeDaaQf8PoGURx9RWKDE+9eyUYdwrtejAdZSBIHXt aZCm6M0fVD5OTG4jiSof/fWi8kpklN34S0w46wMY0NUUCP6IY905+ZpDKk3cCbAJ /+y9fYPN3EtuxjVvgWfGqj3Bea2tk9jKxzqwK64zH/KphZcBElPdBcsicGLyx2NO WbGCUbO7YraA296Ooe8cmhUWpGO+B4vrf5NCMkIGP30WfMD0L7jKERsolAJJZxOP 605yBsczzRHArs3vswGo82ptIIf5YwVexfgHvgwUD2A1MpNnr3VfwGDKeZejrsog 0AKF -----END CERTIFICATE-----Generated at Sun Jun 29 14:43:47 2025 by rpki-client