$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa File: 7fbd42aa-d252-487d-808d-23e478a07d5e.roa (raw, json) Hash identifier: qWsN9rNALx0XdSe0Ic4S6nM54IlgQUKo3l3ODnVZMic= Subject key identifier: 41:4F:D7:BD:78:1A:22:84:00:CB:46:1D:E3:CE:6A:5E:88:55:4F:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1EC76044D3B50DF0229E7BA362F92AAE308A10F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa Signing time: Fri 16 May 2025 00:20:54 +0000 ROA not before: Fri 16 May 2025 00:20:54 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c7:60:44:d3:b5:0d:f0:22:9e:7b:a3:62:f9:2a:ae:30:8a:10:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:20:54 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=99f6490100e7ee7b3fbb16ba503dd882aab6d34c10ced40e10786fead081a5ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:60:6b:92:ff:6d:3d:d5:e0:f4:8e:65:7a: 07:37:44:9f:57:30:84:61:ba:1b:4f:99:fd:e3:28: 4e:d9:8d:74:62:47:5b:44:4f:9b:18:97:e1:88:f3: 9d:26:0a:9c:70:42:14:81:fd:dd:a1:0b:fe:d3:61: 14:2e:cc:19:f3:11:52:e1:fd:d0:92:74:7d:e5:72: d7:7f:1a:ce:c2:2b:63:51:28:09:e3:89:f5:23:a5: 08:fe:26:44:5f:12:1b:66:50:7e:89:08:a1:69:d5: 66:d9:0a:28:a4:f1:59:8b:30:6e:28:eb:e2:03:c9: 6e:d1:84:36:fc:e5:3d:1b:f5:5d:4e:b6:89:a7:9b: 2a:21:e5:14:01:5e:f8:5c:85:07:34:47:d4:33:99: bc:b4:42:e6:07:9e:ef:91:06:1f:f0:3a:80:7a:38: a9:a0:4a:21:e6:ef:8e:47:ed:1b:a1:64:ca:09:c0: e4:dd:36:e9:2c:37:be:b8:90:1c:5d:ff:84:0c:8d: b4:0e:30:24:f9:dc:45:6b:d9:a2:a0:21:32:45:b7: 98:88:11:60:5e:6a:95:ff:af:51:7f:83:9b:0d:29: 82:ee:3e:12:c3:79:ac:6d:0b:c8:39:4a:23:b2:34: b4:f5:7f:13:a9:96:58:31:8e:2f:15:7a:cb:6e:61: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4F:D7:BD:78:1A:22:84:00:CB:46:1D:E3:CE:6A:5E:88:55:4F:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b080::/48 Signature Algorithm: sha256WithRSAEncryption 00:52:58:68:f1:b0:4a:5c:3b:d4:ca:d6:a6:4c:d0:29:1e:b4: 15:ab:ee:08:d5:3e:3b:d5:78:4a:9d:bb:e0:8f:05:33:bd:b9: 3e:a2:ee:01:40:26:eb:4e:e9:4b:0c:ab:16:23:62:2f:a7:69: c4:3c:1d:bd:c0:7b:1f:3f:8b:4f:d1:2c:27:4f:6a:64:44:be: 6a:ef:6a:3a:12:e8:85:ff:82:92:89:0a:6a:08:f0:4a:cc:ff: 6f:d3:fc:69:ae:8a:37:47:5d:bf:6c:24:e9:a0:cf:38:ca:a4: 5f:22:96:b4:4f:c7:fc:fc:53:94:0d:79:dc:a7:5d:5a:08:b0: aa:12:dc:76:8c:45:03:bb:97:55:8a:dc:63:a6:e1:35:a3:f3: 5f:14:a5:2e:c4:c3:ae:c9:7a:4a:3a:6a:d6:97:92:60:5c:bb: 1a:3e:48:7d:27:30:3e:b2:30:5c:c1:78:ec:c9:b8:c3:35:db: bb:d2:fa:f0:ee:e9:ce:7a:07:61:78:36:31:31:41:81:c4:30: a9:50:2d:5f:83:04:f6:fe:b9:16:d0:2e:8a:7e:40:7a:1f:3a: d5:22:cc:0d:93:df:24:81:5e:d8:41:83:c4:3c:d1:57:b4:26: a7:ec:cf:28:80:f4:d4:fa:e9:ec:08:81:5e:4f:1a:b5:14:a6: 6b:6f:c0:02 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHsdgRNO1DfAinnujYvkqrjCKEPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjA1NFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOTlmNjQ5MDEwMGU3ZWU3YjNmYmIx NmJhNTAzZGQ4ODJhYWI2ZDM0YzEwY2VkNDBlMTA3ODZmZWFkMDgxYTVhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfhga5L/bT3V4PSOZXoHN0SfVzCE YbobT5n94yhO2Y10YkdbRE+bGJfhiPOdJgqccEIUgf3doQv+02EULswZ8xFS4f3Q knR95XLXfxrOwitjUSgJ44n1I6UI/iZEXxIbZlB+iQihadVm2QoopPFZizBuKOvi A8lu0YQ2/OU9G/VdTraJp5sqIeUUAV74XIUHNEfUM5m8tELmB57vkQYf8DqAejip oEoh5u+OR+0boWTKCcDk3TbpLDe+uJAcXf+EDI20DjAk+dxFa9mioCEyRbeYiBFg XmqV/69Rf4ObDSmC7j4Sw3msbQvIOUojsjS09X8TqZZYMY4vFXrLbmGpAQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEFP1714GiKEAMtGHePOal6IVU/oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmYmQ0MmFhLWQyNTItNDg3ZC04MDhkLTIzZTQ3OGEwN2Q1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYbCAMA0GCSqGSIb3DQEBCwUAA4IBAQAAUlho8bBKXDvUytam TNApHrQVq+4I1T471XhKnbvgjwUzvbk+ou4BQCbrTulLDKsWI2Ivp2nEPB29wHsf P4tP0SwnT2pkRL5q72o6EuiF/4KSiQpqCPBKzP9v0/xproo3R12/bCTpoM84yqRf Ipa0T8f8/FOUDXncp11aCLCqEtx2jEUDu5dVitxjpuE1o/NfFKUuxMOuyXpKOmrW l5JgXLsaPkh9JzA+sjBcwXjsybjDNdu70vrw7unOegdheDYxMUGBxDCpUC1fgwT2 /rkW0C6KfkB6HzrVIswNk98kgV7YQYPEPNFXtCan7M8ogPTU+unsCIFeTxq1FKZr b8AC -----END CERTIFICATE-----Generated at Mon Jun 2 06:21:18 2025 by rpki-client