$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa File: 08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa (raw, json) Hash identifier: XkUrKsFjyzJe5LnVVaX8RRdlFsGmyKCoAagtVc2ATeM= Subject key identifier: 4D:0F:9D:E9:88:CF:D1:B6:C0:89:1A:F5:93:1F:39:56:9A:F8:2A:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 223ACB1EDD538E4731E0764BD69B1BCDE4F4BC66 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa Signing time: Fri 23 May 2025 00:00:16 +0000 ROA not before: Fri 23 May 2025 00:00:16 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:cb:1e:dd:53:8e:47:31:e0:76:4b:d6:9b:1b:cd:e4:f4:bc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 23 00:00:16 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=5d2a1bf3965de2a364f9fb8099e6092a508e9348694c9a7f317f5927d2d43dda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:bf:19:60:b8:65:3d:ce:3e:13:58:bf:73: b4:d0:d4:cd:a0:03:0a:50:5f:be:5d:1b:38:19:21: 93:be:59:f0:5a:23:09:18:65:d1:5f:76:b1:16:6b: 91:25:8f:4f:47:50:b9:ca:61:af:fe:0b:ff:00:92: e6:3d:f2:d8:4c:95:e2:07:6c:46:e9:0f:88:8d:ad: fa:26:0b:52:cf:0e:95:c2:4e:46:63:aa:17:6c:d2: da:3b:e7:59:68:65:28:7d:3f:4d:e5:eb:ef:f5:26: 33:29:18:d9:f5:ab:45:f1:47:d5:38:a8:2c:d1:ac: 36:37:9d:ad:33:0b:6c:db:8a:2b:43:80:8f:58:47: b7:0d:80:d8:d2:0b:52:84:bf:a4:7c:fa:e0:50:51: 82:88:da:98:ee:8a:91:8d:a8:79:2b:05:d3:1b:98: 26:fe:b8:6d:bc:af:e4:e8:19:54:80:cd:4d:0e:a2: 16:26:f8:ca:59:31:b9:07:d9:dc:b8:4e:73:d5:e8: b7:2f:0c:4d:d6:79:f2:b1:e3:7d:10:bb:72:f6:cf: b4:fb:72:3f:8b:05:22:fe:bf:01:66:dd:8e:b2:40: bc:78:69:6c:c6:05:ee:50:da:56:36:e3:15:75:d9: 5f:ec:28:e7:03:65:be:f8:8f:39:26:da:d9:e2:82: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:9D:E9:88:CF:D1:B6:C0:89:1A:F5:93:1F:39:56:9A:F8:2A:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2000::/40 Signature Algorithm: sha256WithRSAEncryption a3:e3:72:54:25:64:90:0d:36:60:96:a4:72:0a:ec:ef:68:34: 02:7a:6c:bf:0f:b1:b3:0c:e0:ad:2d:f3:c1:81:21:6f:63:27: fd:b5:cd:bd:7c:4a:08:af:7a:4c:16:16:45:72:3d:1b:fb:43: de:e4:76:d6:2a:d4:2e:c3:6e:be:f0:db:10:cd:67:72:6b:bd: d8:8e:46:ca:41:04:25:15:c8:bb:5f:12:c2:6f:71:90:46:65: da:cb:51:60:b2:b9:ba:49:26:0f:83:25:72:f3:10:9c:9d:39: 57:d6:7d:2a:ff:98:55:ac:18:01:58:19:9f:f8:1f:f4:fc:ad: 58:ae:3d:9a:65:69:73:5d:9e:4f:92:58:93:fd:0f:86:fd:ad: 7e:fc:f1:32:c8:ae:3d:48:08:0f:23:b3:dd:72:13:46:80:12: ce:5b:42:b0:c8:b1:f8:4b:59:7b:2d:fb:df:7e:f1:2d:dc:5a: d4:25:1a:c5:48:fa:4c:b2:ed:ca:3c:f3:16:6c:00:c5:d3:aa: 16:43:2e:2e:fe:7c:17:ac:b8:9a:dc:21:fc:e2:6a:8d:e2:b4: 5f:13:b9:7b:6e:7d:0c:7d:77:b2:63:0e:94:3d:c8:a0:78:a9: 57:20:61:44:58:7a:2b:49:e2:7f:76:ef:47:d3:0b:fc:a0:83: 32:00:f7:ff -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIjrLHt1Tjkcx4HZL1psbzeT0vGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMzAwMDAxNloX DTI1MDYyNzIzNTk1OVowejFJMEcGA1UEBRNANWQyYTFiZjM5NjVkZTJhMzY0Zjlm YjgwOTllNjA5MmE1MDhlOTM0ODY5NGM5YTdmMzE3ZjU5MjdkMmQ0M2RkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oq/GWC4ZT3OPhNYv3O00NTNoAMK UF++XRs4GSGTvlnwWiMJGGXRX3axFmuRJY9PR1C5ymGv/gv/AJLmPfLYTJXiB2xG 6Q+Ija36JgtSzw6Vwk5GY6oXbNLaO+dZaGUofT9N5evv9SYzKRjZ9atF8UfVOKgs 0aw2N52tMwts24orQ4CPWEe3DYDY0gtShL+kfPrgUFGCiNqY7oqRjah5KwXTG5gm /rhtvK/k6BlUgM1NDqIWJvjKWTG5B9ncuE5z1ei3LwxN1nnyseN9ELty9s+0+3I/ iwUi/r8BZt2OskC8eGlsxgXuUNpWNuMVddlf7CjnA2W++I85JtrZ4oI62wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE0PnemIz9G2wIka9ZMfOVaa+CozMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4Y2ZjNzQ4LWEwZmUtNDBiMC05MzA2LTZiNGZlY2YwOTdlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7yAwDQYJKoZIhvcNAQELBQADggEBAKPjclQlZJANNmCWpHIK 7O9oNAJ6bL8PsbMM4K0t88GBIW9jJ/21zb18SgivekwWFkVyPRv7Q97kdtYq1C7D br7w2xDNZ3JrvdiORspBBCUVyLtfEsJvcZBGZdrLUWCyubpJJg+DJXLzEJydOVfW fSr/mFWsGAFYGZ/4H/T8rViuPZplaXNdnk+SWJP9D4b9rX788TLIrj1ICA8js91y E0aAEs5bQrDIsfhLWXst+99+8S3cWtQlGsVI+kyy7co88xZsAMXTqhZDLi7+fBes uJrcIfziao3itF8TuXtufQx9d7JjDpQ9yKB4qVcgYURYeitJ4n9270fTC/yggzIA 9/8= -----END CERTIFICATE-----Generated at Mon Jun 2 06:14:18 2025 by rpki-client