$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa File: 036dddcb-4f0b-406f-9899-f83b4c0da917.roa (raw, json) Hash identifier: u29a4aPTUfPFnLSNGIKavHS5ZPfUIoyoGWIJqSEu7a0= Subject key identifier: 88:99:F3:DC:D7:1C:18:C7:05:05:63:8F:A5:15:F0:7E:41:D5:CE:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4153DC4F53CBBD93C99DD24E3963DE82E58BA3E9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa Signing time: Wed 14 May 2025 00:30:47 +0000 ROA not before: Wed 14 May 2025 00:30:47 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:53:dc:4f:53:cb:bd:93:c9:9d:d2:4e:39:63:de:82:e5:8b:a3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:30:47 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=0a789dcf1db93c113daa1afddcb3fd7c1b78cccbd7d60731f8f8c4d3e69d5aa7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:52:ff:51:a0:48:57:83:9f:c4:dc:f0:53: 84:1f:da:89:fe:9d:8f:73:4f:4a:d6:1a:6b:d9:06: 35:1e:68:76:96:c2:1d:f1:11:d6:58:39:1a:a8:33: 23:fd:f0:2a:67:89:9c:44:19:3e:5f:ff:fd:6e:2e: 0e:2a:bb:03:87:c7:51:9a:a5:d5:89:13:08:3b:93: 22:b6:d1:19:b2:74:5f:07:69:eb:71:bc:7c:56:44: 9a:54:1c:8d:7c:b1:a2:43:69:2a:50:09:5d:57:73: a0:cb:51:a8:f1:95:b9:64:de:1b:51:21:3e:56:9d: f3:4e:0a:11:2f:1a:6f:f9:1d:df:c0:48:09:7d:0c: be:16:b6:da:de:4f:2d:c5:b7:38:6c:2c:a1:7e:ac: 50:16:72:5c:20:25:c2:46:38:27:3d:0b:c3:cf:8f: d6:d2:76:32:f3:cd:5b:a1:2f:ee:e2:f4:89:c2:cc: 0f:99:f3:31:f5:5d:bc:18:21:7a:44:08:4a:72:42: 2c:2b:e6:92:c2:49:35:0c:2c:1f:57:32:8d:43:63: 7f:3d:c3:a9:9b:34:14:3b:d3:2e:77:9b:52:26:49: e1:72:49:d1:34:32:8b:28:56:fa:8d:ba:7b:23:47: 7b:61:d4:67:9e:26:55:28:a6:bd:5a:ad:32:c3:0f: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:99:F3:DC:D7:1C:18:C7:05:05:63:8F:A5:15:F0:7E:41:D5:CE:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:7080::/48 Signature Algorithm: sha256WithRSAEncryption 0a:a4:94:bd:14:59:a0:fd:69:03:b7:f1:7f:d9:b6:9b:d9:62: 05:f7:d3:cd:8d:e6:9f:da:cd:d7:c4:6b:ee:84:43:cf:1f:bc: de:1b:28:d5:a0:c5:ad:c1:d6:85:c3:05:56:49:51:21:dc:b3: ba:20:1d:17:6c:85:cd:6d:ba:e3:a9:ba:8a:29:a6:b0:8c:cd: ac:dd:ae:0e:72:ff:a3:50:c9:0e:71:a1:9c:b6:79:fc:f6:b3: 8b:74:0d:53:a0:ca:13:bb:45:07:64:27:dc:df:6f:ce:5b:15: 8d:95:7b:ca:59:48:dc:6b:7f:0c:39:c2:45:7a:08:65:8c:d6: 67:2a:90:12:b8:16:dd:57:33:97:e2:dd:a6:9b:b3:eb:c4:0b: 33:2c:5e:d1:8f:bd:2f:50:f5:41:ea:7b:d1:43:c4:ec:2d:a0: e4:47:b2:81:53:41:d0:ee:c7:a0:20:b6:31:36:b2:a0:ff:c7: 7d:d7:db:2e:ae:55:87:d7:31:09:59:a5:92:5d:c4:d5:39:1c: 6a:b8:48:f8:49:13:f2:f6:de:f0:62:db:de:82:94:f5:01:58: 82:d3:b8:71:03:fd:02:79:2a:7e:5f:4e:5b:93:1e:1f:16:96: db:9b:0d:0f:a4:45:a5:f5:08:8c:89:9a:ee:1c:b4:12:2b:3c: 31:73:15:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQVPcT1PLvZPJndJOOWPeguWLo+kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMzA0N1oX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMGE3ODlkY2YxZGI5M2MxMTNkYWEx YWZkZGNiM2ZkN2MxYjc4Y2NjYmQ3ZDYwNzMxZjhmOGM0ZDNlNjlkNWFhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsxS/1GgSFeDn8Tc8FOEH9qJ/p2P c09K1hpr2QY1Hmh2lsId8RHWWDkaqDMj/fAqZ4mcRBk+X//9bi4OKrsDh8dRmqXV iRMIO5MittEZsnRfB2nrcbx8VkSaVByNfLGiQ2kqUAldV3Ogy1Go8ZW5ZN4bUSE+ Vp3zTgoRLxpv+R3fwEgJfQy+Frba3k8txbc4bCyhfqxQFnJcICXCRjgnPQvDz4/W 0nYy881boS/u4vSJwswPmfMx9V28GCF6RAhKckIsK+aSwkk1DCwfVzKNQ2N/PcOp mzQUO9Mud5tSJknhcknRNDKLKFb6jbp7I0d7YdRnniZVKKa9Wq0yww/N7QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIiZ89zXHBjHBQVjj6UV8H5B1c5LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzNmRkZGNiLTRmMGItNDA2Zi05ODk5LWY4M2I0YzBkYTkxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXCAMA0GCSqGSIb3DQEBCwUAA4IBAQAKpJS9FFmg/WkDt/F/ 2bab2WIF99PNjeaf2s3XxGvuhEPPH7zeGyjVoMWtwdaFwwVWSVEh3LO6IB0XbIXN bbrjqbqKKaawjM2s3a4Ocv+jUMkOcaGctnn89rOLdA1ToMoTu0UHZCfc32/OWxWN lXvKWUjca38MOcJFeghljNZnKpASuBbdVzOX4t2mm7PrxAszLF7Rj70vUPVB6nvR Q8TsLaDkR7KBU0HQ7segILYxNrKg/8d919surlWH1zEJWaWSXcTVORxquEj4SRPy 9t7wYtvegpT1AViC07hxA/0CeSp+X05bkx4fFpbbmw0PpEWl9QiMiZruHLQSKzwx cxVL -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:36 2025 by rpki-client