$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/191ccdc3-51c8-4489-9abe-90b3e791b963.roa File: 191ccdc3-51c8-4489-9abe-90b3e791b963.roa (raw, json) Hash identifier: 4n8u7gT6vcrs4L8laLI/45+gx4CrJxhi+CZkg5IvY4Y= Subject key identifier: E0:5B:DA:09:3B:F5:B3:A8:24:8D:61:B6:B9:78:0A:47:18:72:0F:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26BD3B964ABC204C1B67EEF568776AAF2E3B1301 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/191ccdc3-51c8-4489-9abe-90b3e791b963.roa Signing time: Fri 16 May 2025 00:21:36 +0000 ROA not before: Fri 16 May 2025 00:21:36 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bd:3b:96:4a:bc:20:4c:1b:67:ee:f5:68:77:6a:af:2e:3b:13:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:21:36 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=5043b05b3e2f255883881b442ab2bc6505cae28ab037954c7c41b6141bde6119, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:22:72:82:a5:8b:2f:a6:49:bc:44:f1:79: 60:fd:b1:01:24:81:7e:0c:1f:01:53:6d:98:fa:3c: 9f:b6:4e:38:be:9f:21:e5:ba:4c:ba:a4:8c:a3:b1: 19:c1:70:b3:a4:12:6f:13:15:e8:3e:2b:b6:bd:d5: b7:87:28:f7:ee:12:19:3c:8a:46:ad:03:5f:7e:1a: ea:b6:96:bb:fe:f5:95:72:90:b0:11:08:16:68:56: 4b:bd:88:a8:42:38:06:b9:a0:34:2e:30:05:f5:25: 6a:bc:d7:5c:50:ae:e9:34:5a:d5:9d:df:20:a9:b5: 7d:9c:6e:d8:77:9e:13:e4:93:c5:d8:1e:25:6c:d9: 37:f3:51:0c:a0:b1:da:5d:78:ba:1c:8f:60:e0:25: 3f:50:22:00:f4:6f:55:d7:6b:b7:c2:fe:e1:45:e4: c5:59:ec:bd:b1:32:2a:a0:2c:6c:cf:6d:0a:e0:bc: 3f:94:41:08:86:e6:a2:1a:11:e1:c7:13:8c:52:46: 46:e8:e2:6b:bf:1c:b1:d6:ac:3a:ca:38:be:6d:1e: 11:fd:f7:6e:c6:cb:c0:4c:b1:d5:88:ff:9c:d5:17: 48:5a:25:b8:8b:46:cd:6e:73:59:05:82:dc:79:65: ef:1f:e6:2a:eb:73:86:cb:ea:a0:5b:ea:f0:19:e5: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5B:DA:09:3B:F5:B3:A8:24:8D:61:B6:B9:78:0A:47:18:72:0F:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/191ccdc3-51c8-4489-9abe-90b3e791b963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c040::/46 Signature Algorithm: sha256WithRSAEncryption 7c:e0:ae:ec:36:68:54:60:e7:89:4b:fb:13:3b:1c:7d:be:d0: 65:fb:b7:e5:12:cd:d5:64:7a:98:df:95:76:37:8d:d9:c3:fe: 00:86:89:40:2d:99:bc:40:0b:3d:17:fc:84:86:ef:31:5b:6c: 53:e5:34:8a:22:9f:eb:aa:6c:34:43:01:e6:ee:da:7c:3a:0b: 82:5d:53:13:3f:24:32:98:a7:3e:ab:f5:f1:09:31:6e:ea:90: 4d:2e:3f:b3:ad:40:f9:eb:1f:82:a6:92:75:0e:27:01:ff:22: ca:86:aa:b4:14:ee:31:95:fe:05:4b:64:14:e5:23:83:44:df: 33:62:56:3f:0d:4e:95:cd:3d:a4:93:a5:d9:7c:3a:d1:a0:ac: 85:4d:c2:4a:32:fc:52:f9:e8:57:ac:12:61:08:73:0b:e3:2c: df:c4:75:22:69:07:5b:0e:16:c4:51:fc:38:fc:56:8a:81:8e: 05:56:80:5c:b4:56:b0:7e:48:98:b3:d8:5d:e9:e4:49:05:96: 5a:3b:a5:dc:4e:d1:2d:4d:da:35:86:dd:d1:28:20:49:2b:08: 57:a0:8f:c0:ae:55:40:9e:c5:44:ba:24:69:66:a9:fc:2e:e6: 50:3c:30:3f:15:20:1e:3b:56:f9:3d:e3:3b:3d:49:5d:f9:2b: e5:c3:22:8b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJr07lkq8IEwbZ+71aHdqry47EwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjEzNloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANTA0M2IwNWIzZTJmMjU1ODgzODgx YjQ0MmFiMmJjNjUwNWNhZTI4YWIwMzc5NTRjN2M0MWI2MTQxYmRlNjExOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mQicoKliy+mSbxE8Xlg/bEBJIF+ DB8BU22Y+jyftk44vp8h5bpMuqSMo7EZwXCzpBJvExXoPiu2vdW3hyj37hIZPIpG rQNffhrqtpa7/vWVcpCwEQgWaFZLvYioQjgGuaA0LjAF9SVqvNdcUK7pNFrVnd8g qbV9nG7Yd54T5JPF2B4lbNk381EMoLHaXXi6HI9g4CU/UCIA9G9V12u3wv7hReTF Wey9sTIqoCxsz20K4Lw/lEEIhuaiGhHhxxOMUkZG6OJrvxyx1qw6yji+bR4R/fdu xsvATLHViP+c1RdIWiW4i0bNbnNZBYLceWXvH+Yq63OGy+qgW+rwGeVOLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOBb2gk79bOoJI1htrl4CkcYcg8WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5MWNjZGMzLTUxYzgtNDQ4OS05YWJlLTkwYjNlNzkxYjk2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98BAMA0GCSqGSIb3DQEBCwUAA4IBAQB84K7sNmhUYOeJS/sT Oxx9vtBl+7flEs3VZHqY35V2N43Zw/4AholALZm8QAs9F/yEhu8xW2xT5TSKIp/r qmw0QwHm7tp8OguCXVMTPyQymKc+q/XxCTFu6pBNLj+zrUD56x+CppJ1DicB/yLK hqq0FO4xlf4FS2QU5SODRN8zYlY/DU6VzT2kk6XZfDrRoKyFTcJKMvxS+ehXrBJh CHML4yzfxHUiaQdbDhbEUfw4/FaKgY4FVoBctFawfkiYs9hd6eRJBZZaO6XcTtEt Tdo1ht3RKCBJKwhXoI/ArlVAnsVEuiRpZqn8LuZQPDA/FSAeO1b5PeM7PUld+Svl wyKL -----END CERTIFICATE-----Generated at Mon Jun 2 06:27:21 2025 by rpki-client