$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0508eaff-f950-49b5-b1ff-bbf90813c764.roa File: 0508eaff-f950-49b5-b1ff-bbf90813c764.roa (raw, json) Hash identifier: c54HTFLrbAaHEAdvQcUk4FK0LacV1VHFZunulVYmVYs= Subject key identifier: 46:CE:44:04:5B:38:28:81:59:5F:94:F7:5C:C4:8D:97:F2:2B:1F:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FB7A245844938B33D50322B459BD46E5C2938A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0508eaff-f950-49b5-b1ff-bbf90813c764.roa Signing time: Fri 16 May 2025 00:01:03 +0000 ROA not before: Fri 16 May 2025 00:01:03 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:b040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b7:a2:45:84:49:38:b3:3d:50:32:2b:45:9b:d4:6e:5c:29:38:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:01:03 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=3b6b7b7fe1f85fc49053dd5a907bd0d343a31a828e564d25c276c2f5d317a3be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:f2:c8:54:97:d6:6d:55:70:c8:5c:ce:2b: 22:09:1b:76:42:26:ac:f3:76:c2:5b:21:05:8a:ed: 4b:a5:0b:79:86:ac:ac:a0:82:1e:4a:cf:fd:59:7c: 17:80:71:c3:e6:52:85:d3:6a:51:5f:c5:24:a4:69: 9a:03:9f:fe:d8:e0:a2:6c:f1:5c:b6:0b:36:62:80: aa:9b:c8:2e:44:24:07:51:80:65:cb:25:6b:3c:a0: d2:ac:aa:f9:b2:ea:12:76:73:d9:ce:01:77:ad:e9: 17:96:9e:f8:ab:53:0c:8a:74:5b:0e:6a:0b:9f:9c: ea:9f:45:4a:97:06:af:bb:85:26:70:c3:6a:ca:f0: 29:bb:db:69:3b:37:8b:02:77:0a:40:c9:9c:92:6d: e0:d1:ce:b8:30:82:1f:b7:56:30:b1:8e:45:a5:8c: 04:62:96:96:89:0c:50:58:e9:92:d2:77:17:95:1d: 7b:7f:dd:b6:aa:e0:66:25:e2:29:a5:bf:8a:67:3d: 59:b7:4b:72:aa:06:a6:f9:c3:02:e4:ed:0a:07:fd: 71:87:e8:33:a1:aa:e3:65:99:26:ae:6b:6d:17:1b: 5f:6a:3b:ed:b1:09:af:e1:ec:a1:18:ce:fb:4c:6d: db:90:ee:1c:47:e0:08:b1:d1:3c:33:97:60:bf:8a: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CE:44:04:5B:38:28:81:59:5F:94:F7:5C:C4:8D:97:F2:2B:1F:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0508eaff-f950-49b5-b1ff-bbf90813c764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:b040::/46 Signature Algorithm: sha256WithRSAEncryption 7d:ab:3a:d8:7f:00:a9:ac:46:f8:d5:6c:74:6f:97:a0:d7:97: a3:10:9f:63:bb:91:f9:84:7d:79:f2:00:e3:c0:6e:49:06:5d: c2:ae:26:46:3c:a3:81:f7:7e:64:3d:53:ff:7c:92:67:53:ac: 5a:4a:9f:de:ec:13:8a:3d:e2:ca:fd:d8:d0:26:f5:0e:30:45: 48:5c:78:ab:d5:f8:72:9f:37:19:8b:bf:bb:cd:3f:43:6c:5f: 68:6e:d9:5d:9a:39:80:5c:f9:b4:6c:df:24:d0:ea:35:e7:07: 7d:e5:33:ce:26:e5:d7:50:34:90:88:90:09:6c:58:d3:83:de: 6f:50:53:6a:c9:db:59:77:6e:88:d8:b6:95:14:6f:63:0f:64: 00:0c:6f:02:e4:86:44:c9:8f:77:41:80:93:4a:85:12:81:c9: 17:fd:6c:1a:de:16:55:c6:b1:e4:39:90:cd:a0:f1:f9:8c:51: 67:7c:1e:88:43:01:54:11:0b:c5:cb:7b:52:99:ad:e5:bb:30: 54:19:fe:91:c5:51:53:c1:f4:dc:56:a8:6a:03:9c:22:da:08: 08:10:12:ed:c6:b0:0c:b0:b2:ab:c5:6d:2b:36:5c:2c:09:46: 82:2c:ce:d1:00:1f:f2:a3:cd:cb:12:1a:b2:5d:e9:2c:00:16: f2:13:6d:26 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUP7eiRYRJOLM9UDIrRZvUblwpOKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMDEwM1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAM2I2YjdiN2ZlMWY4NWZjNDkwNTNk ZDVhOTA3YmQwZDM0M2EzMWE4MjhlNTY0ZDI1YzI3NmMyZjVkMzE3YTNiZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+7yyFSX1m1VcMhczisiCRt2Qias 83bCWyEFiu1LpQt5hqysoIIeSs/9WXwXgHHD5lKF02pRX8UkpGmaA5/+2OCibPFc tgs2YoCqm8guRCQHUYBlyyVrPKDSrKr5suoSdnPZzgF3rekXlp74q1MMinRbDmoL n5zqn0VKlwavu4UmcMNqyvApu9tpOzeLAncKQMmckm3g0c64MIIft1YwsY5FpYwE YpaWiQxQWOmS0ncXlR17f922quBmJeIppb+KZz1Zt0tyqgam+cMC5O0KB/1xh+gz oarjZZkmrmttFxtfajvtsQmv4eyhGM77TG3bkO4cR+AIsdE8M5dgv4qVTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEbORARbOCiBWV+U91zEjZfyKx9DMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1MDhlYWZmLWY5NTAtNDliNS1iMWZmLWJiZjkwODEzYzc2NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+7BAMA0GCSqGSIb3DQEBCwUAA4IBAQB9qzrYfwCprEb41Wx0 b5eg15ejEJ9ju5H5hH158gDjwG5JBl3CriZGPKOB935kPVP/fJJnU6xaSp/e7BOK PeLK/djQJvUOMEVIXHir1fhynzcZi7+7zT9DbF9obtldmjmAXPm0bN8k0Oo15wd9 5TPOJuXXUDSQiJAJbFjTg95vUFNqydtZd26I2LaVFG9jD2QADG8C5IZEyY93QYCT SoUSgckX/Wwa3hZVxrHkOZDNoPH5jFFnfB6IQwFUEQvFy3tSma3luzBUGf6RxVFT wfTcVqhqA5wi2ggIEBLtxrAMsLKrxW0rNlwsCUaCLM7RAB/yo83LEhqyXeksABby E20m -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:01 2025 by rpki-client