$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37101188-5633-4c45-bcef-282cba7950d2.roa File: 37101188-5633-4c45-bcef-282cba7950d2.roa (raw, json) Hash identifier: ySV8m76n1SPeHV+MgZk01G9JxgJevgAY5ndlqH76Tig= Subject key identifier: 82:5C:FF:16:CC:43:54:F5:24:33:9F:D9:65:C6:F6:28:90:B5:0D:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74B1347B26959E89A36C6ACC016C20FB26AC0EBF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37101188-5633-4c45-bcef-282cba7950d2.roa Signing time: Wed 14 May 2025 00:30:45 +0000 ROA not before: Wed 14 May 2025 00:30:45 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b1:34:7b:26:95:9e:89:a3:6c:6a:cc:01:6c:20:fb:26:ac:0e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:30:45 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=5903ebea174a305ef05d73a1d0a724db497c6c895151b8359f70ae3dde8043a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:c6:6b:eb:7c:5b:21:f1:41:4e:a6:d2:9d: 9b:11:c1:dc:d9:bc:44:43:29:5f:ad:8b:98:5b:55: c0:85:73:8b:e4:85:ee:66:98:d8:dc:6b:63:5b:12: ac:06:ad:84:55:db:b1:08:68:d9:11:c3:3e:63:67: 4a:f3:e2:7d:21:f3:9b:47:dc:d2:cf:ac:9c:03:0a: 90:5b:06:45:5b:c6:51:37:f7:14:0e:5c:f4:6f:64: f8:cd:59:83:a7:29:19:17:bf:40:2b:db:c2:ef:8b: b2:f0:40:3e:26:b9:7e:f8:18:d6:db:75:8c:4c:c2: c9:20:0f:16:34:c9:a8:fc:32:57:81:38:09:12:a0: 92:c6:51:67:83:e4:91:e8:96:3f:a3:f0:16:50:19: da:20:7c:ca:8c:02:fe:bb:82:45:63:ce:a7:c1:f8: 70:8e:0b:b4:c1:da:21:3e:47:1d:0b:f5:22:78:8d: 5b:4e:ca:45:d7:8a:90:60:8b:26:89:fb:0e:77:52: 2e:b4:af:4d:fd:a2:b5:eb:e6:71:94:02:7f:fe:7c: c5:05:36:91:3b:ff:6d:a2:47:aa:b9:3c:28:dc:29: 42:81:aa:40:ba:02:b3:5e:e5:57:75:e8:2b:b5:56: f4:81:b4:f4:9d:36:b4:3b:df:92:1d:dd:c2:61:c9: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5C:FF:16:CC:43:54:F5:24:33:9F:D9:65:C6:F6:28:90:B5:0D:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37101188-5633-4c45-bcef-282cba7950d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:f040::/48 Signature Algorithm: sha256WithRSAEncryption 03:70:36:5e:97:bb:95:7d:a8:57:8c:da:31:02:c6:87:71:2c: e1:a8:51:f2:8d:f3:15:f9:57:af:1b:01:d7:d3:c7:de:46:20: 6a:2a:71:4e:0f:c7:95:da:b7:1c:db:54:d5:d1:91:dd:20:d9: b8:84:0e:28:1c:9d:5d:5a:ba:20:c3:cc:7f:bb:75:19:84:71: 7c:c2:af:26:9c:22:f6:0f:79:1a:bf:f0:9b:92:c6:1e:51:62: ff:a4:83:5a:1c:f9:f0:e5:97:6c:82:90:f6:41:09:2c:c2:d9: 41:c7:c1:9e:15:0b:61:7e:ff:00:3b:6d:23:81:d0:cc:94:13: b9:83:f0:51:79:0f:9a:f7:8a:0b:a1:76:0d:66:64:16:cf:fa: 70:02:11:44:90:33:07:0b:36:67:f8:54:46:0b:16:02:1b:fe: ff:05:f6:6c:63:a2:7e:b2:93:73:0e:fc:af:b1:c6:36:23:9b: 05:e7:f1:25:d1:40:cb:70:47:28:65:78:1a:c9:bf:70:5e:19: db:23:dc:14:28:fc:49:9f:2d:a7:e6:c4:ab:7c:d8:41:3c:78: 3f:1f:17:f7:6c:d3:b9:26:c2:75:fe:54:86:e4:d3:96:6c:73: 82:ab:bb:1c:89:10:d4:67:de:8b:2c:a6:f6:93:ff:18:c0:29: 39:a8:5f:6e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdLE0eyaVnomjbGrMAWwg+yasDr8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMzA0NVoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNANTkwM2ViZWExNzRhMzA1ZWYwNWQ3 M2ExZDBhNzI0ZGI0OTdjNmM4OTUxNTFiODM1OWY3MGFlM2RkZTgwNDNhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrGa+t8WyHxQU6m0p2bEcHc2bxE QylfrYuYW1XAhXOL5IXuZpjY3GtjWxKsBq2EVduxCGjZEcM+Y2dK8+J9IfObR9zS z6ycAwqQWwZFW8ZRN/cUDlz0b2T4zVmDpykZF79AK9vC74uy8EA+Jrl++BjW23WM TMLJIA8WNMmo/DJXgTgJEqCSxlFng+SR6JY/o/AWUBnaIHzKjAL+u4JFY86nwfhw jgu0wdohPkcdC/UieI1bTspF14qQYIsmifsOd1IutK9N/aK16+ZxlAJ//nzFBTaR O/9tokequTwo3ClCgapAugKzXuVXdegrtVb0gbT0nTa0O9+SHd3CYcnUMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIJc/xbMQ1T1JDOf2WXG9iiQtQ0eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3MTAxMTg4LTU2MzMtNGM0NS1iY2VmLTI4MmNiYTc5NTBkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba//BAMA0GCSqGSIb3DQEBCwUAA4IBAQADcDZel7uVfahXjNox AsaHcSzhqFHyjfMV+VevGwHX08feRiBqKnFOD8eV2rcc21TV0ZHdINm4hA4oHJ1d Wrogw8x/u3UZhHF8wq8mnCL2D3kav/CbksYeUWL/pINaHPnw5ZdsgpD2QQkswtlB x8GeFQthfv8AO20jgdDMlBO5g/BReQ+a94oLoXYNZmQWz/pwAhFEkDMHCzZn+FRG CxYCG/7/BfZsY6J+spNzDvyvscY2I5sF5/El0UDLcEcoZXgayb9wXhnbI9wUKPxJ ny2n5sSrfNhBPHg/Hxf3bNO5JsJ1/lSG5NOWbHOCq7sciRDUZ96LLKb2k/8YwCk5 qF9u -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:42 2025 by rpki-client