$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29bedfc3-5012-48c2-8699-377e478d8269.roa File: 29bedfc3-5012-48c2-8699-377e478d8269.roa (raw, json) Hash identifier: zHoFHDbK3CCzuyd367p+9lQZqK1DgFfEtJIQ8xLzbQw= Subject key identifier: F6:AE:6B:B2:6D:35:1D:5E:29:1D:4B:25:54:00:A3:C4:B1:EE:BB:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D08851035486E3A212DECB7BFE85C4B8DE68D8E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29bedfc3-5012-48c2-8699-377e478d8269.roa Signing time: Fri 16 May 2025 15:10:03 +0000 ROA not before: Fri 16 May 2025 15:10:03 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:08:85:10:35:48:6e:3a:21:2d:ec:b7:bf:e8:5c:4b:8d:e6:8d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:10:03 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=bf692f68d9ab3e402d53716d369dc9958c9f938ce03157d28aa5d2d5c6405ce5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1e:f8:b7:84:a0:04:6e:50:84:d9:f2:24:9e: bd:79:13:c6:70:35:8c:bb:f2:8d:07:bb:6c:40:c8: 4f:9a:44:28:4c:2e:1c:c9:0a:76:97:ee:b0:96:39: 6d:79:ad:70:f6:ff:c5:86:dc:da:6b:89:4a:2f:97: 6f:f2:86:d1:3a:5e:87:22:5a:3b:ce:ad:49:2c:44: 47:57:92:b9:ad:08:57:bd:e3:e3:d7:96:09:22:c6: c7:f4:1f:71:2c:d5:df:7e:19:71:b9:f9:8d:05:4f: a8:08:ab:4f:53:d5:3f:50:90:f4:ea:f8:73:e6:e5: 2b:c2:85:57:f7:b2:38:af:75:af:43:dd:8e:fb:42: d9:5c:c0:a3:71:06:7a:b3:b0:48:af:f7:9b:f1:52: 71:11:57:29:6a:9e:d1:98:48:3b:32:ad:33:ff:d4: be:6d:e5:03:95:d7:f0:83:0d:68:57:26:c7:39:80: 5a:a5:51:48:e7:29:3e:10:bf:16:c8:3d:f7:71:aa: 01:ec:e9:54:65:3a:c7:fa:bc:26:94:79:31:4c:c4: 43:37:4d:a2:0b:2e:03:69:57:88:d1:55:ff:d2:bf: 5f:ac:e7:3a:eb:eb:a0:34:df:7f:72:07:1c:8a:af: d7:18:24:30:22:46:73:c4:20:e4:b3:04:fa:ed:37: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AE:6B:B2:6D:35:1D:5E:29:1D:4B:25:54:00:A3:C4:B1:EE:BB:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29bedfc3-5012-48c2-8699-377e478d8269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:1000::/40 Signature Algorithm: sha256WithRSAEncryption 38:1a:a4:df:12:77:ea:81:24:6b:cc:4b:43:7b:e3:e3:27:ed: 4c:c2:3f:99:1e:7b:9a:31:c1:dc:a6:d9:ce:1e:ae:9a:be:8f: 4e:e7:3d:e2:6e:2a:5e:59:7d:41:82:e5:61:f4:a2:45:8b:6e: 56:6e:b2:09:f7:8b:8b:fe:15:0a:a8:cf:53:ca:c8:94:46:7f: 38:4f:8f:aa:30:5a:57:ec:49:b6:39:a2:23:d0:fb:1f:88:d7: 6d:f7:31:fd:f3:aa:b6:70:27:86:33:0b:94:ee:4b:e6:0e:cf: c4:15:26:d8:b7:90:3a:57:5d:ea:cb:e8:04:28:ae:ef:2c:b7: c8:60:5f:30:e4:c2:f5:3a:ee:cf:d4:45:71:7e:d9:f8:f6:74: 65:c4:15:a2:16:95:5f:ca:37:db:dc:f3:97:81:d7:7f:3e:e6: 1e:42:71:d2:8c:65:7a:f5:97:64:a7:4a:83:e9:3b:d0:3c:16: 5f:3a:46:16:08:9b:31:f1:40:57:d9:ba:fd:11:a7:a7:bc:40: dd:fc:90:3c:24:c1:e0:0c:af:ef:43:8c:3e:25:09:3d:da:b4: 06:fa:cf:79:40:54:ba:5a:25:1a:47:89:b0:ab:ea:bb:30:92: 1b:20:18:03:63:e7:9f:0d:5e:fc:a0:a9:84:3c:d3:f4:3e:3e: 16:b6:96:67 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHQiFEDVIbjohLey3v+hcS43mjY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MTAwM1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYmY2OTJmNjhkOWFiM2U0MDJkNTM3 MTZkMzY5ZGM5OTU4YzlmOTM4Y2UwMzE1N2QyOGFhNWQyZDVjNjQwNWNlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x74t4SgBG5QhNnyJJ69eRPGcDWM u/KNB7tsQMhPmkQoTC4cyQp2l+6wljltea1w9v/Fhtzaa4lKL5dv8obROl6HIlo7 zq1JLERHV5K5rQhXvePj15YJIsbH9B9xLNXffhlxufmNBU+oCKtPU9U/UJD06vhz 5uUrwoVX97I4r3WvQ92O+0LZXMCjcQZ6s7BIr/eb8VJxEVcpap7RmEg7Mq0z/9S+ beUDldfwgw1oVybHOYBapVFI5yk+EL8WyD33caoB7OlUZTrH+rwmlHkxTMRDN02i Cy4DaVeI0VX/0r9frOc66+ugNN9/cgcciq/XGCQwIkZzxCDkswT67TeMJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPaua7JtNR1eKR1LJVQAo8Sx7rvQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI5YmVkZmMzLTUwMTItNDhjMi04Njk5LTM3N2U0NzhkODI2OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNhAwDQYJKoZIhvcNAQELBQADggEBADgapN8Sd+qBJGvMS0N7 4+Mn7UzCP5kee5oxwdym2c4erpq+j07nPeJuKl5ZfUGC5WH0okWLblZusgn3i4v+ FQqoz1PKyJRGfzhPj6owWlfsSbY5oiPQ+x+I1233Mf3zqrZwJ4YzC5TuS+YOz8QV Jti3kDpXXerL6AQoru8st8hgXzDkwvU67s/URXF+2fj2dGXEFaIWlV/KN9vc85eB 138+5h5CcdKMZXr1l2SnSoPpO9A8Fl86RhYImzHxQFfZuv0Rp6e8QN38kDwkweAM r+9DjD4lCT3atAb6z3lAVLpaJRpHibCr6rswkhsgGANj558NXvygqYQ80/Q+Pha2 lmc= -----END CERTIFICATE-----Generated at Mon Jun 2 06:28:07 2025 by rpki-client