$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa File: 23781dbd-24b4-4813-8de5-02c4d3e40236.roa (raw, json) Hash identifier: ruvJwtcw8T/L5e3kNOpmEco1TC7L5+pW6dm41XaUMLE= Subject key identifier: 60:E4:4D:BE:80:50:B5:DB:BB:96:06:34:A8:27:49:3B:11:7E:DF:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55EB3F54EA2376092EF1F735D892019BCBCF1742 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa Signing time: Fri 23 May 2025 00:00:18 +0000 ROA not before: Fri 23 May 2025 00:00:18 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:eb:3f:54:ea:23:76:09:2e:f1:f7:35:d8:92:01:9b:cb:cf:17:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 23 00:00:18 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=2a269e2c6a05c4d4a9e6cee406a1c4e006745e5a6f7286a729589b9ff7227f5c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:3e:95:0c:a1:79:8a:41:1d:9e:2b:2f:6f: 62:1a:78:f3:63:c7:1f:06:84:36:75:c1:66:b1:51: 9b:d1:29:bb:da:06:ce:82:a1:77:a9:3a:da:e9:74: 86:7b:8c:83:41:17:4b:41:28:cc:5d:66:8f:14:7f: fd:d9:5c:be:83:b7:9e:7b:01:83:6f:93:a8:de:bb: 02:20:7f:24:94:11:c0:c7:9d:90:71:66:26:43:5e: e9:27:37:dd:24:77:de:19:e1:04:28:80:09:a3:b9: f9:82:81:aa:1c:fd:60:17:1c:94:e1:3b:74:23:ec: 9b:f4:31:cb:44:2e:5f:d4:a4:78:0c:8e:56:ab:77: 3d:e2:eb:2d:6d:09:ac:0f:91:17:53:bd:53:cd:56: bf:2f:5c:b5:6f:0e:29:9a:43:c4:ae:11:fa:4f:bd: 6a:aa:ac:61:b3:66:b5:b8:1f:9a:f8:38:10:d7:5a: 97:bc:af:ce:9b:b9:16:10:1f:00:b4:7c:39:95:11: 6d:88:7b:32:67:7b:d9:65:b6:99:09:99:b1:00:a2: d4:a2:31:ef:77:cb:de:62:de:ad:36:93:1a:3a:54: 27:05:54:87:ea:1e:4b:c0:54:2f:eb:e3:88:1e:c2: 39:4b:49:46:7f:c0:02:3a:65:bc:45:e4:95:d9:67: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E4:4D:BE:80:50:B5:DB:BB:96:06:34:A8:27:49:3B:11:7E:DF:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:a000::/40 Signature Algorithm: sha256WithRSAEncryption 07:a8:db:bf:f5:80:d0:db:3f:bc:64:5d:48:54:4b:d1:da:85: 5a:38:23:9a:22:fb:55:eb:46:f8:58:21:28:09:33:71:a3:e0: 8f:13:37:05:d5:a3:37:52:4b:0d:1e:a2:88:c9:3e:b0:b1:a5: e1:69:3d:5b:02:fd:e0:e5:b6:83:45:09:30:6d:ad:d7:37:b2: b1:c7:f9:d8:01:f4:c0:d3:53:07:63:63:10:33:b2:38:32:f5: 54:13:1c:ba:3b:04:58:c4:3a:01:32:c5:a9:45:e3:23:cd:45: 87:29:db:a8:86:8b:f5:68:ee:20:a4:a6:81:50:76:a2:29:08: a2:c3:08:d5:02:79:b3:a3:b8:fe:f1:cc:8e:90:0e:34:f5:8a: fe:73:a9:c4:ba:1c:45:c5:c7:63:0c:13:4a:84:48:c0:c3:6b: c4:92:aa:c2:ac:29:36:a5:41:ff:ed:d2:d1:4f:33:8d:d9:d5: 6b:79:d7:51:71:ce:51:40:2e:66:7d:c7:be:b2:42:90:17:81: 7d:89:ee:8d:f3:00:33:5a:a5:2f:6a:8c:93:39:de:b6:de:19: ba:77:40:6a:ac:d3:56:40:75:ff:16:a0:65:b7:aa:99:94:95: be:9e:09:0e:f6:3c:8d:eb:c5:9c:86:09:d5:78:29:43:ba:dc: e2:a7:68:2a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVes/VOojdgku8fc12JIBm8vPF0IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMzAwMDAxOFoX DTI1MDYyNzIzNTk1OVowejFJMEcGA1UEBRNAMmEyNjllMmM2YTA1YzRkNGE5ZTZj ZWU0MDZhMWM0ZTAwNjc0NWU1YTZmNzI4NmE3Mjk1ODliOWZmNzIyN2Y1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33w+lQyheYpBHZ4rL29iGnjzY8cf BoQ2dcFmsVGb0Sm72gbOgqF3qTra6XSGe4yDQRdLQSjMXWaPFH/92Vy+g7eeewGD b5Oo3rsCIH8klBHAx52QcWYmQ17pJzfdJHfeGeEEKIAJo7n5goGqHP1gFxyU4Tt0 I+yb9DHLRC5f1KR4DI5Wq3c94ustbQmsD5EXU71TzVa/L1y1bw4pmkPErhH6T71q qqxhs2a1uB+a+DgQ11qXvK/Om7kWEB8AtHw5lRFtiHsyZ3vZZbaZCZmxAKLUojHv d8veYt6tNpMaOlQnBVSH6h5LwFQv6+OIHsI5S0lGf8ACOmW8ReSV2WfDQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGDkTb6AULXbu5YGNKgnSTsRft//MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzNzgxZGJkLTI0YjQtNDgxMy04ZGU1LTAyYzRkM2U0MDIzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba76AwDQYJKoZIhvcNAQELBQADggEBAAeo27/1gNDbP7xkXUhU S9HahVo4I5oi+1XrRvhYISgJM3Gj4I8TNwXVozdSSw0eoojJPrCxpeFpPVsC/eDl toNFCTBtrdc3srHH+dgB9MDTUwdjYxAzsjgy9VQTHLo7BFjEOgEyxalF4yPNRYcp 26iGi/Vo7iCkpoFQdqIpCKLDCNUCebOjuP7xzI6QDjT1iv5zqcS6HEXFx2MME0qE SMDDa8SSqsKsKTalQf/t0tFPM43Z1Wt511FxzlFALmZ9x76yQpAXgX2J7o3zADNa pS9qjJM53rbeGbp3QGqs01ZAdf8WoGW3qpmUlb6eCQ72PI3rxZyGCdV4KUO63OKn aCo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:36 2025 by rpki-client