$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0233382-d33c-4217-8c68-96d1f3488840.roa File: a0233382-d33c-4217-8c68-96d1f3488840.roa (raw, json) Hash identifier: C3jwrKkY104f9ytpFoNEnkCqIveMAJtn9ib4amXpnS0= Subject key identifier: 7D:45:E3:CD:0B:E8:E2:A3:3F:00:BF:47:3E:16:51:03:C3:3F:49:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BE2E26AD3864FBD12A208497927CC29CC06A3F8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0233382-d33c-4217-8c68-96d1f3488840.roa Signing time: Tue 17 Jun 2025 00:00:08 +0000 ROA not before: Tue 17 Jun 2025 00:00:08 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e2:e2:6a:d3:86:4f:bd:12:a2:08:49:79:27:cc:29:cc:06:a3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 17 00:00:08 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=9319c211160d00c72df29b8a4e6bf04d77ca2fae37da0ed67825780663dc5d5e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:61:56:66:b5:11:e3:73:f3:72:e7:26:ff: 14:00:b6:a2:25:81:2e:57:79:b5:d4:b7:51:36:45: cd:33:b8:a1:43:15:cb:37:e2:41:8e:c0:40:4a:86: c3:5b:86:33:da:54:39:f2:b3:1b:ae:0d:93:ff:8c: e1:89:ae:0c:39:1d:14:ea:99:58:3b:66:53:b2:e0: 0f:9a:e2:c9:a4:ee:99:ea:b3:7a:cc:1d:36:33:65: 8c:0b:24:0e:04:c5:95:5c:41:55:66:3f:a1:b0:29: 41:22:5d:26:1c:f7:0d:85:e4:e4:43:d9:3d:02:2f: 5d:a3:ca:50:3c:b3:5a:52:3d:4e:b6:58:45:e6:43: 4c:12:8f:92:65:30:45:b5:c6:6e:75:71:65:c7:c0: 93:10:44:3c:81:a9:14:f1:12:98:0d:16:1e:c3:31: 9a:7b:b4:b5:3c:57:14:c5:9d:e5:cf:20:26:32:cf: cb:48:d0:d1:d1:6b:ce:ed:ec:59:84:c5:d8:99:14: 94:35:d2:93:c7:38:c6:2f:43:9f:68:23:35:33:a1: f0:b4:84:e5:c3:ee:e2:a1:c6:e6:2d:96:78:4e:a5: 4c:fb:03:0e:8d:54:46:44:1b:47:02:cc:6b:94:00: c7:4f:99:36:d8:6f:e2:ea:54:e6:30:d1:ef:19:ed: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:45:E3:CD:0B:E8:E2:A3:3F:00:BF:47:3E:16:51:03:C3:3F:49:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0233382-d33c-4217-8c68-96d1f3488840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2800::/40 Signature Algorithm: sha256WithRSAEncryption b8:df:f6:82:44:9f:8e:ec:69:11:e6:0c:f0:79:8b:b1:ec:fd: cc:5e:e1:17:50:08:54:9c:c3:e7:97:db:0e:a4:55:63:74:5b: f3:3e:1e:51:94:f4:6b:8f:5a:37:cb:64:cc:a2:e2:9b:a6:72: bf:c8:39:41:ea:b4:ab:e4:e6:7c:aa:28:9b:e1:6a:a5:89:9a: 07:e4:3d:61:02:b2:95:22:4a:6d:63:97:aa:66:00:9b:51:ba: 03:b0:80:a7:b5:5d:ac:18:71:58:56:f3:24:74:d5:19:ad:e1: 2c:b7:3e:e8:98:4e:32:81:1e:e5:33:23:1e:73:62:26:7e:02: 1a:2c:91:2f:0c:c2:56:61:69:df:25:a8:88:d8:ce:24:b4:55: 3a:8a:5b:be:12:8f:02:88:64:2d:d6:8e:17:db:cf:10:43:2d: 1f:ee:38:bd:8e:f9:8c:c1:93:5c:1c:3a:d5:9a:98:a0:b6:b9: e3:d7:42:5a:ea:d9:f8:b2:d9:c3:dc:aa:43:c6:e6:8f:7a:b4: 94:4f:5b:2f:a4:11:fb:cb:24:a7:a5:5d:91:11:a5:a3:3d:5d: ec:4a:d6:4a:10:23:cf:ca:8d:9b:35:14:a1:39:32:0d:cb:a6: 3f:97:30:fb:5c:f5:d6:6f:6c:24:91:cc:f8:9a:42:4e:a3:40: 65:45:16:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC+LiatOGT70SoghJeSfMKcwGo/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNzAwMDAwOFoX DTI1MDcyMjIzNTk1OVowejFJMEcGA1UEBRNAOTMxOWMyMTExNjBkMDBjNzJkZjI5 YjhhNGU2YmYwNGQ3N2NhMmZhZTM3ZGEwZWQ2NzgyNTc4MDY2M2RjNWQ1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuZhVma1EeNz83LnJv8UALaiJYEu V3m11LdRNkXNM7ihQxXLN+JBjsBASobDW4Yz2lQ58rMbrg2T/4zhia4MOR0U6plY O2ZTsuAPmuLJpO6Z6rN6zB02M2WMCyQOBMWVXEFVZj+hsClBIl0mHPcNheTkQ9k9 Ai9do8pQPLNaUj1OtlhF5kNMEo+SZTBFtcZudXFlx8CTEEQ8gakU8RKYDRYewzGa e7S1PFcUxZ3lzyAmMs/LSNDR0WvO7exZhMXYmRSUNdKTxzjGL0OfaCM1M6HwtITl w+7iocbmLZZ4TqVM+wMOjVRGRBtHAsxrlADHT5k22G/i6lTmMNHvGe2T8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH1F480L6OKjPwC/Rz4WUQPDP0lgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EwMjMzMzgyLWQzM2MtNDIxNy04YzY4LTk2ZDFmMzQ4ODg0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ygwDQYJKoZIhvcNAQELBQADggEBALjf9oJEn47saRHmDPB5 i7Hs/cxe4RdQCFScw+eX2w6kVWN0W/M+HlGU9GuPWjfLZMyi4pumcr/IOUHqtKvk 5nyqKJvhaqWJmgfkPWECspUiSm1jl6pmAJtRugOwgKe1XawYcVhW8yR01Rmt4Sy3 PuiYTjKBHuUzIx5zYiZ+AhoskS8MwlZhad8lqIjYziS0VTqKW74SjwKIZC3Wjhfb zxBDLR/uOL2O+YzBk1wcOtWamKC2uePXQlrq2fiy2cPcqkPG5o96tJRPWy+kEfvL JKelXZERpaM9XexK1koQI8/KjZs1FKE5Mg3Lpj+XMPtc9dZvbCSRzPiaQk6jQGVF FnU= -----END CERTIFICATE-----Generated at Sun Jun 29 07:27:16 2025 by rpki-client