$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa File: 2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa (raw, json) Hash identifier: q/8OzgH+9sXNIHznZ4bpkfPjHnhPwzkLbAoTSY6L29g= Subject key identifier: D2:F4:AF:97:17:E6:ED:8B:95:BF:F1:6C:FD:54:C2:84:26:59:81:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A41D132FEAF98034E990A2531E836ECD7BEA0A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa Signing time: Wed 14 May 2025 00:21:11 +0000 ROA not before: Wed 14 May 2025 00:21:11 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:d1:32:fe:af:98:03:4e:99:0a:25:31:e8:36:ec:d7:be:a0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:21:11 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=b3c54988cf93327b992d151bed92b957b16948f1063ea86ae5c9c8c6861e1e2c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:cb:8d:13:2b:27:16:68:c1:10:9b:b5:fc: 33:91:2f:49:19:0f:d2:9a:24:c9:e3:0c:25:f5:f8: 1a:16:a1:3f:bc:2e:ae:1f:fa:63:2a:0e:6c:44:98: 40:5c:d9:77:78:2e:32:b4:d8:20:25:15:9d:b2:41: df:9a:b9:69:c0:ea:54:55:86:7c:13:0c:8c:45:16: bd:2c:0f:74:e6:f1:eb:53:02:ba:3e:66:57:79:ac: 02:32:2b:a9:73:08:95:aa:9c:ab:eb:63:3e:6c:ac: 9d:b6:3f:bc:55:0f:d9:31:f3:ac:66:49:cf:6f:36: 8b:9c:59:0d:23:91:2a:07:d3:b2:7b:be:3c:42:c4: ff:f5:6a:f4:35:e1:f1:17:92:3a:1d:b5:59:7e:ee: f4:87:c7:0d:b0:14:6d:3e:15:e8:e6:c3:e8:a1:6c: c2:23:c6:76:da:24:dd:6c:7b:d2:ba:8b:11:1a:32: c1:f1:f6:86:ae:8b:25:87:af:7e:17:49:d4:5c:ec: 30:3d:1e:8c:25:48:23:83:52:c1:15:44:bf:a6:cb: 44:74:aa:f9:88:0b:4f:f3:3a:17:d3:b3:19:9f:7d: 2a:81:52:a7:3d:81:1f:68:18:db:9a:10:4d:83:9c: 24:ac:49:92:8b:d4:67:e9:28:f6:f0:fe:d0:c5:24: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:AF:97:17:E6:ED:8B:95:BF:F1:6C:FD:54:C2:84:26:59:81:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f722ed1-c2d3-4f34-93db-f2625e7e189a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b040::/48 Signature Algorithm: sha256WithRSAEncryption 76:d4:f0:79:3c:9b:fa:fd:3a:8b:24:5a:5b:c8:e8:c9:18:f1: 33:9c:43:ef:95:37:85:06:2f:4b:8d:5f:36:14:03:fd:aa:29: e0:bf:43:e9:02:bc:4f:69:cf:80:b8:97:36:49:d6:d7:b4:b3: 25:ed:a5:65:97:99:ec:ed:1f:b6:1c:de:19:8d:bd:0f:12:e6: 67:5e:86:91:c4:e5:27:ee:13:7f:35:3c:28:a4:24:a7:d5:6f: 9d:a0:70:e7:c7:66:d4:cb:d1:41:b3:fc:ce:b5:c6:f4:ef:13: 97:dc:b5:4b:52:20:66:2a:07:8d:b2:c9:4f:ad:57:0c:8a:0f: a2:41:12:e8:06:d6:b4:2a:f2:4a:5f:c4:6e:50:79:bf:9c:06: cf:dc:fa:e8:18:15:98:6f:47:6a:dc:d6:90:b9:b9:8d:e9:39: cd:1e:ca:c5:a4:ba:53:68:01:6d:f0:e1:fd:0a:bc:0d:e5:d7: 55:56:62:2b:2e:7c:ea:d8:3e:a5:23:fd:64:df:f6:2e:bf:8b: 96:80:b1:fd:52:04:7f:6b:45:da:f1:13:1c:08:e4:22:f0:a6: c2:4b:f6:5c:97:16:32:99:b3:f9:c4:42:dc:e3:10:ff:17:f1: 4c:a6:a2:82:cb:be:a1:0d:27:19:f1:a6:33:10:7d:36:f4:d1: 95:69:7c:0d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSkHRMv6vmANOmQolMeg27Ne+oKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMjExMVoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAYjNjNTQ5ODhjZjkzMzI3Yjk5MmQx NTFiZWQ5MmI5NTdiMTY5NDhmMTA2M2VhODZhZTVjOWM4YzY4NjFlMWUyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSnLjRMrJxZowRCbtfwzkS9JGQ/S miTJ4wwl9fgaFqE/vC6uH/pjKg5sRJhAXNl3eC4ytNggJRWdskHfmrlpwOpUVYZ8 EwyMRRa9LA905vHrUwK6PmZXeawCMiupcwiVqpyr62M+bKydtj+8VQ/ZMfOsZknP bzaLnFkNI5EqB9Oye748QsT/9Wr0NeHxF5I6HbVZfu70h8cNsBRtPhXo5sPooWzC I8Z22iTdbHvSuosRGjLB8faGroslh69+F0nUXOwwPR6MJUgjg1LBFUS/pstEdKr5 iAtP8zoX07MZn30qgVKnPYEfaBjbmhBNg5wkrEmSi9Rn6Sj28P7QxSRC/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNL0r5cX5u2Llb/xbP1UwoQmWYEIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzIyZWQxLWMyZDMtNGYzNC05M2RiLWYyNjI1ZTdlMTg5YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rBAMA0GCSqGSIb3DQEBCwUAA4IBAQB21PB5PJv6/TqLJFpb yOjJGPEznEPvlTeFBi9LjV82FAP9qingv0PpArxPac+AuJc2SdbXtLMl7aVll5ns 7R+2HN4Zjb0PEuZnXoaRxOUn7hN/NTwopCSn1W+doHDnx2bUy9FBs/zOtcb07xOX 3LVLUiBmKgeNsslPrVcMig+iQRLoBta0KvJKX8RuUHm/nAbP3ProGBWYb0dq3NaQ ubmN6TnNHsrFpLpTaAFt8OH9CrwN5ddVVmIrLnzq2D6lI/1k3/Yuv4uWgLH9UgR/ a0Xa8RMcCOQi8KbCS/ZclxYymbP5xELc4xD/F/FMpqKCy76hDScZ8aYzEH029NGV aXwN -----END CERTIFICATE-----Generated at Tue Jun 3 23:08:32 2025 by rpki-client