$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22d6913e-5f3d-4f99-9a60-48579f471838.roa File: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (raw, json) Hash identifier: fCMWwlq7r64lnXLdelYFeIbgkRv8V76xhHBjaLF1TI8= Subject key identifier: 1C:E3:13:5E:E0:85:4B:D1:C8:CE:56:CA:DD:A6:72:90:E7:B5:6E:C9 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 02A0FAEB25B7129BBFD91A8F23F980E8B35F7E1D Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22d6913e-5f3d-4f99-9a60-48579f471838.roa Signing time: Sat 14 Jun 2025 00:00:06 +0000 ROA not before: Sat 14 Jun 2025 00:00:06 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a0:fa:eb:25:b7:12:9b:bf:d9:1a:8f:23:f9:80:e8:b3:5f:7e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Jun 14 00:00:06 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=87b35530392ae45b6f3f2e81b878b42eee66a8f69d1e5dda35551d3e4c781dec, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:43:c2:82:26:32:5f:d8:85:85:cf:e3:4b: 9f:39:5e:b1:82:22:e6:ef:db:b1:21:c9:55:2b:07: 6c:88:57:c7:9e:a9:9c:a6:66:8f:ae:a4:6b:6d:c7: d6:4d:ff:af:1d:bc:b4:25:3d:27:a4:13:e8:16:8d: 13:33:69:db:ae:c2:af:ff:01:ef:75:99:0d:3d:88: ab:15:8f:35:c6:c7:21:47:89:08:4d:5d:89:0d:80: 2d:3d:d3:b7:72:ef:38:97:3d:48:0d:2d:92:cb:27: 8a:9e:d0:8b:69:51:ac:cd:a2:b5:7d:8b:3b:97:20: 25:4b:7e:c8:11:a1:07:5c:10:64:67:6c:04:86:d7: a7:3d:b5:e3:64:2a:85:59:bc:49:35:da:bd:0c:6a: 2d:e3:31:10:e6:b1:86:09:3d:ce:81:cb:c0:02:5b: 3c:2e:7c:56:95:9a:09:16:98:cc:e2:65:3e:3b:7e: 27:fa:74:f4:09:48:2f:69:bc:c1:0a:13:24:4f:23: 12:ae:7b:f2:b7:22:89:23:4c:a0:85:31:6a:49:ec: b4:92:81:99:04:7b:ce:34:fd:d8:81:ed:2e:76:50: 83:92:7f:93:d9:c7:cf:2b:30:43:10:19:46:42:af: 56:85:59:6b:09:5d:1f:64:7c:6c:65:73:50:9f:18: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E3:13:5E:E0:85:4B:D1:C8:CE:56:CA:DD:A6:72:90:E7:B5:6E:C9 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22d6913e-5f3d-4f99-9a60-48579f471838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500:2000::/36 Signature Algorithm: sha256WithRSAEncryption 45:6e:29:c7:1c:69:fb:4d:b8:ff:56:c1:a6:5e:08:74:63:3e: 16:e4:ef:62:d5:bf:63:d9:ac:08:70:f5:18:ae:cd:b4:04:fe: 77:b1:ce:74:29:aa:1e:00:62:b5:f4:34:38:89:c3:f3:76:df: e6:f7:fd:f1:b1:0d:c8:8c:64:25:da:4d:51:3c:cc:e4:df:a7: 4e:9b:f3:bd:1b:6a:34:a1:ee:b8:d1:0c:ea:77:a6:e5:2d:54: 9f:8c:91:da:a9:10:e0:52:b3:18:ee:4f:5e:09:22:c7:de:d5: 5f:20:cb:61:a3:31:30:31:28:86:55:f5:b3:09:17:92:19:ee: 04:55:26:80:bf:ac:66:71:5b:17:b2:b5:36:4d:c9:ca:b9:37: be:ab:f8:a5:81:9b:b8:a7:5a:95:7f:f8:4e:20:91:6c:45:bf: bb:73:53:0a:48:9e:14:8a:9c:79:fc:6c:af:1d:90:b7:5a:05: 70:ab:f0:40:50:96:10:25:48:64:e6:c6:05:0d:31:7e:21:23: 0d:4d:46:7b:bc:fe:ce:3a:2e:5c:c9:36:c7:9c:aa:4b:56:a8: 84:0b:2a:58:8a:69:03:e2:8e:f0:15:b2:3e:4d:41:62:1d:74: 86:eb:19:f6:ad:a7:0f:26:36:11:f5:ab:4d:aa:fd:83:21:25: 0b:09:58:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAqD66yW3Epu/2RqPI/mA6LNffh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDYxNDAwMDAwNloX DTI1MDcxOTIzNTk1OVowejFJMEcGA1UEBRNAODdiMzU1MzAzOTJhZTQ1YjZmM2Yy ZTgxYjg3OGI0MmVlZTY2YThmNjlkMWU1ZGRhMzU1NTFkM2U0Yzc4MWRlYzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I1DwoImMl/YhYXP40ufOV6xgiLm 79uxIclVKwdsiFfHnqmcpmaPrqRrbcfWTf+vHby0JT0npBPoFo0TM2nbrsKv/wHv dZkNPYirFY81xschR4kITV2JDYAtPdO3cu84lz1IDS2SyyeKntCLaVGszaK1fYs7 lyAlS37IEaEHXBBkZ2wEhtenPbXjZCqFWbxJNdq9DGot4zEQ5rGGCT3OgcvAAls8 LnxWlZoJFpjM4mU+O34n+nT0CUgvabzBChMkTyMSrnvytyKJI0yghTFqSey0koGZ BHvONP3Yge0udlCDkn+T2cfPKzBDEBlGQq9WhVlrCV0fZHxsZXNQnxg60QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBzjE17ghUvRyM5Wyt2mcpDntW7JMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzIyZDY5MTNlLTVmM2QtNGY5OS05YTYwLTQ4NTc5ZjQ3MTgzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJABlACAwDQYJKoZIhvcNAQELBQADggEBAEVuKcccaftNuP9WwaZe CHRjPhbk72LVv2PZrAhw9RiuzbQE/nexznQpqh4AYrX0NDiJw/N23+b3/fGxDciM ZCXaTVE8zOTfp06b870bajSh7rjRDOp3puUtVJ+MkdqpEOBSsxjuT14JIsfe1V8g y2GjMTAxKIZV9bMJF5IZ7gRVJoC/rGZxWxeytTZNycq5N76r+KWBm7inWpV/+E4g kWxFv7tzUwpInhSKnHn8bK8dkLdaBXCr8EBQlhAlSGTmxgUNMX4hIw1NRnu8/s46 LlzJNsecqktWqIQLKliKaQPijvAVsj5NQWIddIbrGfatpw8mNhH1q02q/YMhJQsJ WAQ= -----END CERTIFICATE-----Generated at Sun Jun 29 04:21:23 2025 by rpki-client