$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa File: 68f22ed7-c8a5-4cae-956a-e93f94070791.roa (raw, json) Hash identifier: 9t6NcRbosbRhkYKeOX5vfMxYf70OY7a0hmbuIWRUjNA= Subject key identifier: D1:31:2B:26:90:DB:C9:98:73:61:9F:32:F8:CB:37:34:F8:36:99:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A176E5B94D5A582604068DD1816358B2B3457CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa Signing time: Wed 14 May 2025 00:00:59 +0000 ROA not before: Wed 14 May 2025 00:00:59 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:17:6e:5b:94:d5:a5:82:60:40:68:dd:18:16:35:8b:2b:34:57:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:00:59 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=6f9120c9e802a4cc1161d2d9321e4c9bc5075395d2754ce1baadac7fc2277582, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:55:04:12:45:04:8e:2e:21:e8:ca:91:c8: a7:44:28:d8:ee:75:ec:3d:2e:27:9d:84:9a:88:87: f2:1e:a7:41:66:ae:1a:b7:e8:5c:50:6c:c0:03:52: 01:ce:75:a0:42:fb:50:16:bd:40:3d:9e:54:7a:b6: f2:98:ed:a2:4f:e8:71:8a:ca:f4:cc:4e:e2:cb:a1: 11:fe:18:bf:ab:ce:8c:08:97:8b:29:78:fa:68:2b: 3a:2a:83:5e:0b:71:6d:8c:14:c8:7e:46:b1:e4:3b: f8:e1:df:64:d5:8c:93:3e:13:1e:5f:2c:51:cb:ed: 8f:65:5a:cf:d8:7d:a5:c5:d1:54:22:7c:27:9e:d5: c3:14:af:25:50:2d:32:a9:a0:6e:f9:c6:ca:4c:00: ea:57:98:9e:9c:4b:a6:d0:12:27:47:fc:de:97:ae: 4b:d1:2b:69:45:59:89:e9:c8:5a:e2:48:05:72:8e: 96:c4:0b:c4:68:3c:67:08:21:f8:a4:1b:aa:a3:40: 4c:c7:d9:1e:71:4e:16:48:83:62:bd:1b:6c:ef:2e: 6b:bf:a9:fa:85:80:47:fb:48:d4:08:4d:8b:a4:3b: e7:0f:40:45:1e:51:12:e2:56:97:7d:d8:ea:ef:e3: e6:c0:9f:a5:05:ec:f2:fa:fe:1c:54:6c:89:aa:75: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:2B:26:90:DB:C9:98:73:61:9F:32:F8:CB:37:34:F8:36:99:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e080::/48 Signature Algorithm: sha256WithRSAEncryption 33:b2:6b:a9:b3:5b:84:0b:4b:d0:50:28:58:91:6c:37:17:a1: 99:42:40:78:95:4b:62:92:c1:85:ca:36:67:35:34:87:c6:1f: 57:1c:ee:66:3a:9f:cd:17:fb:b2:6c:24:5f:db:fd:1d:24:34: 52:23:27:2a:3f:1a:3e:cc:80:94:cf:73:c1:6d:15:5a:fa:71: a8:6d:48:f8:c4:fc:0e:e9:b9:92:5f:bc:84:9b:17:49:93:3d: c0:58:0d:24:3b:44:91:ec:c1:5d:29:12:6c:10:eb:cd:1e:f3: dd:2a:18:ce:bd:86:6b:98:76:18:3a:b4:59:33:fe:3d:72:da: 0d:50:6e:ba:55:f3:12:31:c4:00:d2:f3:dd:04:80:e6:c3:44: 64:36:05:0f:fb:80:8c:ab:ae:bb:b2:3a:29:f2:58:20:48:41: 9e:6b:71:09:d7:f2:ff:7e:2a:38:ef:22:ce:2c:bd:82:5b:c7: 1a:2f:4e:3d:ba:0d:48:df:14:c4:47:1a:be:e1:df:67:24:6c: 41:9f:f5:9e:49:6d:ac:d3:49:e3:8c:f6:cd:2c:72:69:61:e8: 83:f8:82:de:70:78:cd:f9:7b:50:2a:e4:b0:21:7e:8e:10:17: 64:7a:a3:8f:8d:aa:7a:ec:06:49:d9:ea:3d:69:8f:ac:cf:57: df:0d:86:78 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUehduW5TVpYJgQGjdGBY1iys0V84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMDA1OVoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNANmY5MTIwYzllODAyYTRjYzExNjFk MmQ5MzIxZTRjOWJjNTA3NTM5NWQyNzU0Y2UxYmFhZGFjN2ZjMjI3NzU4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIJVBBJFBI4uIejKkcinRCjY7nXs PS4nnYSaiIfyHqdBZq4at+hcUGzAA1IBznWgQvtQFr1APZ5UerbymO2iT+hxisr0 zE7iy6ER/hi/q86MCJeLKXj6aCs6KoNeC3FtjBTIfkax5Dv44d9k1YyTPhMeXyxR y+2PZVrP2H2lxdFUInwnntXDFK8lUC0yqaBu+cbKTADqV5ienEum0BInR/zel65L 0StpRVmJ6cha4kgFco6WxAvEaDxnCCH4pBuqo0BMx9kecU4WSINivRts7y5rv6n6 hYBH+0jUCE2LpDvnD0BFHlES4laXfdjq7+PmwJ+lBezy+v4cVGyJqnX86QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNExKyaQ28mYc2GfMvjLNzT4NpkkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4ZjIyZWQ3LWM4YTUtNGNhZS05NTZhLWU5M2Y5NDA3MDc5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uCAMA0GCSqGSIb3DQEBCwUAA4IBAQAzsmups1uEC0vQUChY kWw3F6GZQkB4lUtiksGFyjZnNTSHxh9XHO5mOp/NF/uybCRf2/0dJDRSIycqPxo+ zICUz3PBbRVa+nGobUj4xPwO6bmSX7yEmxdJkz3AWA0kO0SR7MFdKRJsEOvNHvPd KhjOvYZrmHYYOrRZM/49ctoNUG66VfMSMcQA0vPdBIDmw0RkNgUP+4CMq667sjop 8lggSEGea3EJ1/L/fio47yLOLL2CW8caL049ug1I3xTERxq+4d9nJGxBn/WeSW2s 00njjPbNLHJpYeiD+ILecHjN+XtQKuSwIX6OEBdkeqOPjap67AZJ2eo9aY+sz1ff DYZ4 -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:55 2025 by rpki-client