$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa File: 4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa (raw, json) Hash identifier: 1NNoKjScHXazMwdrqAyNUtvaVWReicj/G0VQmbf0xNw= Subject key identifier: 74:D4:4D:C9:29:B4:3C:EA:D7:8B:B1:9A:B9:DB:CD:DF:16:1F:F5:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DBE44ACE0B6918483764184DEA1AE14029C7FF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa Signing time: Tue 13 May 2025 00:21:05 +0000 ROA not before: Tue 13 May 2025 00:21:05 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:be:44:ac:e0:b6:91:84:83:76:41:84:de:a1:ae:14:02:9c:7f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:21:05 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=7be53e29a540e26aca9500bbf4d4ad749bb71d22ccdde9bdcb6bdbc280af928d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:df:0f:88:04:b8:d8:b8:c6:a0:ba:43:cc: 02:9e:4b:40:a5:25:7a:5a:84:07:c2:8b:4a:c5:96: d1:b4:45:a7:92:33:69:d1:66:11:69:42:c4:e5:80: cc:ab:04:af:ad:fe:a0:0f:86:2b:ec:5e:c9:f3:5a: a2:cd:be:ed:af:aa:83:2e:ba:79:48:44:63:40:69: 09:9d:db:46:34:5d:7d:a9:fb:ae:9d:32:74:c1:5b: 9c:74:12:5a:dd:f8:38:0e:c5:f6:d7:ec:ea:bc:59: c7:66:1b:ca:8d:d4:22:61:5b:78:ad:9f:a7:ae:87: a5:e0:7e:0e:1e:8e:4e:63:3e:82:c5:e8:7a:b8:fb: ff:cc:ab:d7:53:8e:dc:3e:13:ee:de:40:e9:43:96: ed:95:ec:86:a5:91:ad:bf:f1:e9:1c:81:aa:b8:f8: 6d:56:d9:44:13:8e:53:cd:8a:96:7b:88:38:93:5c: f9:69:b4:53:9b:62:fb:40:02:4b:de:5e:be:66:c9: f4:d5:3b:86:6e:1b:99:3a:fc:31:37:78:c4:57:33: 72:59:86:1d:0d:50:95:0d:cc:c2:0d:ea:22:aa:4d: 29:3d:7c:e0:67:ee:b6:df:61:c7:de:33:24:60:e8: 73:8f:1d:34:bd:91:4e:31:80:fd:6e:da:4c:27:f6: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D4:4D:C9:29:B4:3C:EA:D7:8B:B1:9A:B9:DB:CD:DF:16:1F:F5:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:80a0::/48 Signature Algorithm: sha256WithRSAEncryption ac:8d:8f:c1:9a:c4:7e:de:1d:ee:58:a3:ce:84:c9:00:5e:a4: 72:d1:e5:26:88:2f:f4:5e:1a:22:06:9d:19:b1:2e:81:52:a7: 77:4d:bd:57:a4:cf:51:b0:6c:45:f9:6c:07:b5:82:e5:25:9f: 04:72:bc:47:25:8e:2c:0f:e6:49:94:50:d3:42:49:c4:05:bd: 3b:23:1d:df:29:3f:87:ab:b8:58:3c:22:8b:49:6d:57:c1:ac: 4d:bc:b5:3c:2d:ff:a1:93:39:d1:29:53:3c:b4:07:aa:94:af: 73:da:5a:4d:00:ec:83:1d:b9:1a:95:70:33:cf:4c:53:87:d5: d6:77:57:a3:32:a7:1f:47:5b:f6:04:23:29:ec:35:81:d4:67: cb:5b:0f:bf:9c:5d:ae:30:c3:62:99:9c:4c:de:a8:8d:8e:d6: d9:93:96:30:c4:28:15:67:c2:46:35:7e:2a:39:de:15:7d:bc: 4e:82:d2:5b:96:04:8f:ad:52:37:f3:35:76:89:ce:ce:92:be: c8:36:b0:9d:10:cc:18:7a:81:f1:42:d9:cd:da:59:d0:53:66: 4b:c3:f3:e5:c2:d2:26:b6:ff:b5:25:46:bf:13:b4:17:b1:be: 40:6f:7f:46:e3:c5:f3:53:33:41:81:27:32:ba:71:ef:b8:1c: 48:1c:bf:46 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPb5ErOC2kYSDdkGE3qGuFAKcf/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMjEwNVoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAN2JlNTNlMjlhNTQwZTI2YWNhOTUw MGJiZjRkNGFkNzQ5YmI3MWQyMmNjZGRlOWJkY2I2YmRiYzI4MGFmOTI4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGHfD4gEuNi4xqC6Q8wCnktApSV6 WoQHwotKxZbRtEWnkjNp0WYRaULE5YDMqwSvrf6gD4Yr7F7J81qizb7tr6qDLrp5 SERjQGkJndtGNF19qfuunTJ0wVucdBJa3fg4DsX21+zqvFnHZhvKjdQiYVt4rZ+n roel4H4OHo5OYz6Cxeh6uPv/zKvXU47cPhPu3kDpQ5btleyGpZGtv/HpHIGquPht VtlEE45TzYqWe4g4k1z5abRTm2L7QAJL3l6+Zsn01TuGbhuZOvwxN3jEVzNyWYYd DVCVDczCDeoiqk0pPXzgZ+6232HH3jMkYOhzjx00vZFOMYD9btpMJ/aBQwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHTUTckptDzq14uxmrnbzd8WH/V5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiOTVlM2I0LTMwNDktNGVhMC1hMzljLTc1MjJjYzBiZWEwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAICgMA0GCSqGSIb3DQEBCwUAA4IBAQCsjY/BmsR+3h3uWKPO hMkAXqRy0eUmiC/0XhoiBp0ZsS6BUqd3Tb1XpM9RsGxF+WwHtYLlJZ8EcrxHJY4s D+ZJlFDTQknEBb07Ix3fKT+Hq7hYPCKLSW1XwaxNvLU8Lf+hkznRKVM8tAeqlK9z 2lpNAOyDHbkalXAzz0xTh9XWd1ejMqcfR1v2BCMp7DWB1GfLWw+/nF2uMMNimZxM 3qiNjtbZk5YwxCgVZ8JGNX4qOd4VfbxOgtJblgSPrVI38zV2ic7Okr7INrCdEMwY eoHxQtnN2lnQU2ZLw/PlwtImtv+1JUa/E7QXsb5Ab39G48XzUzNBgScyunHvuBxI HL9G -----END CERTIFICATE-----Generated at Mon Jun 2 06:14:45 2025 by rpki-client