$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52887821-8ea1-4c00-aade-d864665119f4.roa File: 52887821-8ea1-4c00-aade-d864665119f4.roa (raw, json) Hash identifier: V6g7gdciyHipuRaKpCf9W+WEPf4WCGC2Xn2Zk4zcsFw= Subject key identifier: 22:1B:4D:7E:FC:5F:79:70:59:23:A9:51:F5:38:C3:10:AF:55:7D:AD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 275D1261042036E4380BE0FE512B38CA85B69F77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52887821-8ea1-4c00-aade-d864665119f4.roa Signing time: Fri 16 May 2025 15:50:53 +0000 ROA not before: Fri 16 May 2025 15:50:53 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5d:12:61:04:20:36:e4:38:0b:e0:fe:51:2b:38:ca:85:b6:9f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:50:53 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=f1f09f96647386aaf6ade18311b209b0e913599926e902b0feec2d095c6a0d6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:f3:7a:46:58:57:87:90:a0:a3:04:af:68: c9:5c:7d:8a:96:84:fc:38:fe:ad:68:8f:31:07:1f: 08:48:5c:35:ea:27:19:8b:7a:09:11:e1:68:e8:3d: 6a:d2:ec:9b:ba:55:9b:da:fb:84:f8:ed:32:db:6d: 20:b8:3c:87:33:d4:02:23:e7:6d:96:b0:2d:e2:ba: b1:2e:30:10:52:11:61:f6:a5:71:f0:41:0f:91:e3: 4a:1a:be:e9:ea:29:74:11:a4:e4:49:7c:13:43:8e: 80:09:75:48:cb:8e:73:be:25:93:bf:c7:6a:78:f6: 49:07:c2:f7:d0:cf:d7:30:dc:95:c7:29:6e:ad:a1: 61:e4:b8:aa:4f:93:f1:91:3c:6e:68:94:5f:22:c8: aa:e1:7d:27:95:a2:31:fe:68:fb:a3:6c:78:c8:1a: 7b:40:30:d6:78:63:2e:ec:e4:c7:ce:80:7b:58:2f: 97:74:32:43:80:9d:f1:c1:e5:64:fe:dc:72:9d:30: 55:1e:d3:57:07:68:27:b3:c3:c0:af:a5:1f:82:58: b3:43:c0:ab:a0:a8:a4:9c:ab:13:d9:18:cb:33:10: 7b:51:e4:f5:4a:a5:4b:16:91:98:c5:cf:df:a9:e6: 47:c7:23:a8:9e:09:0d:8a:49:b5:73:a4:f8:5f:20: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1B:4D:7E:FC:5F:79:70:59:23:A9:51:F5:38:C3:10:AF:55:7D:AD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52887821-8ea1-4c00-aade-d864665119f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:400::/38 Signature Algorithm: sha256WithRSAEncryption 53:e7:26:84:c9:d7:97:e3:33:80:3a:4a:a4:60:7a:80:94:24: aa:55:ec:18:4c:fe:33:f3:66:1d:6f:03:2f:50:d3:73:51:2f: d0:a7:26:5e:58:94:45:04:38:de:ae:5c:30:55:fe:f6:01:8d: 1b:f5:18:e3:29:49:e9:e8:77:eb:7a:d3:40:35:f4:5b:aa:ad: 86:cb:87:a4:43:dd:25:b0:3d:05:86:8d:86:e2:f4:a1:62:5b: f2:ed:8a:9f:f7:fe:49:2b:0b:19:8a:cf:e1:ad:d6:da:86:91: de:f7:e1:9f:a9:e8:e6:be:69:0d:34:fe:87:9b:d4:0a:20:f7: d9:ff:87:b2:be:da:dd:8a:b0:5f:f4:d2:89:b6:b6:9f:97:86: ad:e5:39:22:8e:4e:d6:32:71:48:c2:7d:72:41:67:c7:c9:a0: 8d:eb:69:8c:85:eb:4b:48:d7:89:53:7d:e1:63:f7:13:f8:85: 37:f2:5d:23:90:04:d1:2e:e4:54:b4:66:38:9a:04:85:2e:32: 23:7c:d5:e8:d1:21:b4:3f:94:da:9b:d3:b3:8e:17:2f:80:b5: 09:1e:4a:50:63:ce:81:98:a0:7d:34:11:64:81:ad:1f:7c:91: 65:e1:10:44:f0:1b:56:c5:b3:ad:61:d6:6a:71:b6:de:27:aa: 0c:e7:5b:e5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ10SYQQgNuQ4C+D+USs4yoW2n3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTA1M1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZjFmMDlmOTY2NDczODZhYWY2YWRl MTgzMTFiMjA5YjBlOTEzNTk5OTI2ZTkwMmIwZmVlYzJkMDk1YzZhMGQ2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q3zekZYV4eQoKMEr2jJXH2KloT8 OP6taI8xBx8ISFw16icZi3oJEeFo6D1q0uybulWb2vuE+O0y220guDyHM9QCI+dt lrAt4rqxLjAQUhFh9qVx8EEPkeNKGr7p6il0EaTkSXwTQ46ACXVIy45zviWTv8dq ePZJB8L30M/XMNyVxyluraFh5LiqT5PxkTxuaJRfIsiq4X0nlaIx/mj7o2x4yBp7 QDDWeGMu7OTHzoB7WC+XdDJDgJ3xweVk/txynTBVHtNXB2gns8PAr6UfglizQ8Cr oKiknKsT2RjLMxB7UeT1SqVLFpGYxc/fqeZHxyOongkNikm1c6T4XyD4kQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCIbTX78X3lwWSOpUfU4wxCvVX2tMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyODg3ODIxLThlYTEtNGMwMC1hYWRlLWQ4NjQ2NjUxMTlmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQQwDQYJKoZIhvcNAQELBQADggEBAFPnJoTJ15fjM4A6SqRg eoCUJKpV7BhM/jPzZh1vAy9Q03NRL9CnJl5YlEUEON6uXDBV/vYBjRv1GOMpSeno d+t600A19FuqrYbLh6RD3SWwPQWGjYbi9KFiW/Ltip/3/kkrCxmKz+Gt1tqGkd73 4Z+p6Oa+aQ00/oeb1Aog99n/h7K+2t2KsF/00om2tp+Xhq3lOSKOTtYycUjCfXJB Z8fJoI3raYyF60tI14lTfeFj9xP4hTfyXSOQBNEu5FS0ZjiaBIUuMiN81ejRIbQ/ lNqb07OOFy+AtQkeSlBjzoGYoH00EWSBrR98kWXhEETwG1bFs61h1mpxtt4nqgzn W+U= -----END CERTIFICATE-----Generated at Mon Jun 2 06:30:15 2025 by rpki-client