$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa File: d1071032-5bb5-48fb-ad34-13668ce372b7.roa (raw, json) Hash identifier: BXx/P0e5l/z+5eh1Es/nVtzBz/AugrhgPDbow+NYRSQ= Subject key identifier: 48:DA:71:9B:80:03:B0:0C:5D:F5:45:E7:C2:0B:04:4E:5C:0F:B4:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D7DE3DCC0A9D97E7A13871759DEA92038F82FDC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa Signing time: Sat 28 Jun 2025 00:00:12 +0000 ROA not before: Sat 28 Jun 2025 00:00:12 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7d:e3:dc:c0:a9:d9:7e:7a:13:87:17:59:de:a9:20:38:f8:2f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 28 00:00:12 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=10c0f66946cade244b0aa9e6c3d016befec053c7f204c1d0f62a3c8af1ed7075, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:8e:96:19:90:0b:7d:cf:4e:8a:f0:78:29: c0:7b:eb:ca:c2:5c:82:b1:ea:33:32:40:c1:79:99: 5b:8a:af:3b:70:64:cc:e6:4c:02:2f:a4:be:42:c8: 93:e6:db:e2:74:3e:f6:be:9e:1b:f5:66:81:ac:54: 89:5d:0d:f4:99:24:cb:59:f5:99:64:20:f3:46:bb: fa:24:df:14:b3:79:69:5a:a8:a9:ff:0c:5b:fc:ea: 87:b0:74:ae:c8:0c:e3:94:83:38:ed:17:a9:c1:cf: ac:27:30:9a:fa:b8:e4:3d:5b:73:3a:e7:ee:d0:f8: 1a:ff:91:78:5f:ff:90:15:d4:c0:6b:81:97:77:19: 9f:df:b1:d8:45:85:11:08:50:82:b6:a6:f4:21:c7: 0a:e4:eb:96:d1:0b:f9:89:4b:35:3a:34:4c:f2:1f: dd:33:31:11:53:22:80:21:dc:83:8f:0e:35:8a:cd: 6a:6b:c9:3e:e0:c2:45:29:76:a6:3a:49:db:b7:1d: 47:f2:a6:3c:85:5f:8c:bb:dd:03:7b:d0:25:bf:19: 57:ab:24:4e:d8:ac:92:4b:88:4a:22:7e:05:3a:18: d7:35:c6:af:f0:97:b4:85:b5:f9:7a:59:49:3f:55: 69:2d:0a:03:e6:0b:83:25:d9:55:2f:5c:2f:8e:42: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:71:9B:80:03:B0:0C:5D:F5:45:E7:C2:0B:04:4E:5C:0F:B4:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2d::/36 Signature Algorithm: sha256WithRSAEncryption bf:a7:36:f8:34:55:d2:ed:a1:16:24:d3:95:7d:30:a0:e1:1b: 4a:42:31:e9:3c:0c:bc:6d:26:53:35:82:56:26:ce:cc:84:fa: 4c:ca:25:91:67:80:99:8e:c8:b9:23:29:d1:40:ed:13:aa:ae: 32:96:db:de:00:d1:08:97:c1:e4:13:00:98:c9:0e:c5:dd:e0: 24:85:67:85:90:62:5e:4e:bd:e9:7c:8f:92:8e:24:71:f3:21: 3a:17:17:cd:9a:82:85:c7:55:e5:e6:59:dc:0a:f6:fc:0f:72: 48:02:a5:5d:c2:28:ee:b6:6e:17:80:ec:2f:65:af:75:0f:36: 31:1f:76:a3:10:73:7d:92:24:d8:96:9d:6d:a6:16:b5:01:86: 01:e4:3a:43:37:7c:a2:32:5d:85:a6:20:3a:4b:ac:fb:9b:ba: e4:8a:b8:d0:14:cc:4e:70:3b:87:90:29:67:bf:26:18:cc:df: 5e:1e:19:4d:05:ed:ce:a3:02:14:6c:b4:61:e8:60:c5:01:4b: bb:8f:7e:b6:5d:61:48:9b:ee:44:39:4f:67:79:de:2a:de:d2: 1e:3c:7d:0e:c9:ce:11:ab:1d:f3:ef:2a:a0:54:46:81:76:83: ac:d5:ae:df:c6:e7:1a:7a:aa:8d:54:49:f3:da:e5:e0:3c:1c: 81:1c:be:29 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPX3j3MCp2X56E4cXWd6pIDj4L9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyODAwMDAxMloX DTI1MDgwMjIzNTk1OVowejFJMEcGA1UEBRNAMTBjMGY2Njk0NmNhZGUyNDRiMGFh OWU2YzNkMDE2YmVmZWMwNTNjN2YyMDRjMWQwZjYyYTNjOGFmMWVkNzA3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTCOlhmQC33PTorweCnAe+vKwlyC seozMkDBeZlbiq87cGTM5kwCL6S+QsiT5tvidD72vp4b9WaBrFSJXQ30mSTLWfWZ ZCDzRrv6JN8Us3lpWqip/wxb/OqHsHSuyAzjlIM47Repwc+sJzCa+rjkPVtzOufu 0Pga/5F4X/+QFdTAa4GXdxmf37HYRYURCFCCtqb0IccK5OuW0Qv5iUs1OjRM8h/d MzERUyKAIdyDjw41is1qa8k+4MJFKXamOknbtx1H8qY8hV+Mu90De9AlvxlXqyRO 2KySS4hKIn4FOhjXNcav8Je0hbX5ellJP1VpLQoD5guDJdlVL1wvjkJWyQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEjacZuAA7AMXfVF58ILBE5cD7QAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxMDcxMDMyLTViYjUtNDhmYi1hZDM0LTEzNjY4Y2UzNzJiNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLQAwDQYJKoZIhvcNAQELBQADggEBAL+nNvg0VdLtoRYk05V9 MKDhG0pCMek8DLxtJlM1glYmzsyE+kzKJZFngJmOyLkjKdFA7ROqrjKW294A0QiX weQTAJjJDsXd4CSFZ4WQYl5Ovel8j5KOJHHzIToXF82agoXHVeXmWdwK9vwPckgC pV3CKO62bheA7C9lr3UPNjEfdqMQc32SJNiWnW2mFrUBhgHkOkM3fKIyXYWmIDpL rPubuuSKuNAUzE5wO4eQKWe/JhjM314eGU0F7c6jAhRstGHoYMUBS7uPfrZdYUib 7kQ5T2d53ire0h48fQ7JzhGrHfPvKqBURoF2g6zVrt/G5xp6qo1USfPa5eA8HIEc vik= -----END CERTIFICATE-----Generated at Sun Jun 29 04:06:10 2025 by rpki-client