$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/847b9c0c-678e-4e94-a64e-5d6f161a958d.roa File: 847b9c0c-678e-4e94-a64e-5d6f161a958d.roa (raw, json) Hash identifier: qKe6/l4/0555QOxgg8m+qSUsYVmUw8SSaRqcfWlZqRI= Subject key identifier: FF:5B:FA:66:7B:13:61:02:DA:67:CC:07:00:9A:DE:D5:CA:50:3E:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C2B7F92D5F35E0264B1FB8C7AAA2B2DCEC33DF6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/847b9c0c-678e-4e94-a64e-5d6f161a958d.roa Signing time: Mon 12 May 2025 15:10:52 +0000 ROA not before: Mon 12 May 2025 15:10:52 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dabb:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2b:7f:92:d5:f3:5e:02:64:b1:fb:8c:7a:aa:2b:2d:ce:c3:3d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 15:10:52 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=90e50d9674a9164e507e8b6f5c7662d72bdc20ae11da6f2d2f7d215e496cf8d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:07:b4:ac:7d:3b:af:a2:bc:a8:e9:a7:a4: 85:d8:ae:94:52:36:5f:0f:b3:9d:8d:69:7b:03:4c: 01:4d:fb:93:eb:fa:94:fd:64:f7:3d:d5:27:6a:29: 3a:96:d3:ea:55:4b:be:d3:ca:60:35:a6:12:1e:43: 67:50:28:ee:1e:fd:1b:d0:80:df:20:de:cd:54:f0: 8c:ed:e8:03:d0:6b:92:66:83:b9:62:e0:dd:5e:42: 32:2e:dc:2e:8f:ef:c4:a2:8d:90:47:82:0d:25:7b: f3:c1:da:30:5b:97:b6:bd:47:c1:6e:e6:b2:fe:4d: f1:50:54:08:f3:84:a1:5a:5d:e4:bc:af:8b:74:90: 0f:99:3c:12:92:fd:c4:31:0f:14:69:37:20:f3:b1: 87:62:b8:97:4f:6f:cd:53:58:d4:32:d3:6e:2c:92: 0a:19:73:12:03:a5:a8:1a:01:b9:1f:91:51:ef:8a: 1d:b4:c7:cd:7d:87:27:5d:6a:b2:38:57:ec:4c:7a: 09:97:97:14:7f:98:1a:e0:59:87:a3:9c:06:54:cc: da:4c:d0:57:55:18:5e:83:c5:27:26:cb:42:19:bd: 12:28:fd:24:62:30:11:93:c6:7d:2d:82:c2:8f:cd: f4:b7:63:b8:33:26:e8:50:a3:71:1c:13:7f:cb:dd: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5B:FA:66:7B:13:61:02:DA:67:CC:07:00:9A:DE:D5:CA:50:3E:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/847b9c0c-678e-4e94-a64e-5d6f161a958d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dabb:c000::/40 Signature Algorithm: sha256WithRSAEncryption 64:d2:cd:2a:b6:8b:5f:4e:79:5f:65:7f:74:5f:f7:12:db:4d: 91:16:24:1b:d8:06:8d:d1:b7:ad:9c:f6:fb:75:b0:02:52:31: 3d:df:ab:e9:91:c7:f5:49:c9:b5:98:ae:be:e0:98:25:5e:08: ba:41:e0:45:b6:a0:1e:7a:01:83:db:2f:c7:59:41:cf:25:18: 7f:f2:46:4b:b5:10:a4:3f:64:21:05:f9:5a:e5:c4:a9:e2:80: 67:c2:4c:24:ce:28:fb:c7:ab:99:91:8e:64:bc:8c:b5:ae:8b: 6c:e1:79:7f:6b:99:3e:1b:0d:78:f8:58:e3:d1:34:f3:b4:5e: a4:35:38:ac:c8:e9:73:80:57:e8:48:09:30:e3:df:00:d1:0c: 69:7e:52:54:1c:f5:f2:92:78:a0:4c:11:6a:24:21:03:8d:3a: f6:7b:f9:40:43:b9:24:a6:06:e8:ec:51:50:41:0a:9f:47:30: da:b7:92:2b:83:62:93:a9:a6:d6:4f:6f:2e:f1:e3:d2:4d:ef: c8:f3:07:69:3d:cd:e1:c7:9b:82:24:6a:98:d3:f6:a3:c9:c5: bc:9e:5e:2f:5f:4f:ab:11:8b:bb:31:d4:bf:17:24:ae:6c:58: 91:5b:04:fc:d8:98:2b:ec:c3:b5:54:07:53:26:fa:66:b1:3a: 0e:74:f8:77 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXCt/ktXzXgJksfuMeqorLc7DPfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMjE1MTA1MloX DTI1MDYxNjIzNTk1OVowejFJMEcGA1UEBRNAOTBlNTBkOTY3NGE5MTY0ZTUwN2U4 YjZmNWM3NjYyZDcyYmRjMjBhZTExZGE2ZjJkMmY3ZDIxNWU0OTZjZjhkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld8HtKx9O6+ivKjpp6SF2K6UUjZf D7OdjWl7A0wBTfuT6/qU/WT3PdUnaik6ltPqVUu+08pgNaYSHkNnUCjuHv0b0IDf IN7NVPCM7egD0GuSZoO5YuDdXkIyLtwuj+/Eoo2QR4INJXvzwdowW5e2vUfBbuay /k3xUFQI84ShWl3kvK+LdJAPmTwSkv3EMQ8UaTcg87GHYriXT2/NU1jUMtNuLJIK GXMSA6WoGgG5H5FR74odtMfNfYcnXWqyOFfsTHoJl5cUf5ga4FmHo5wGVMzaTNBX VRheg8UnJstCGb0SKP0kYjARk8Z9LYLCj830t2O4MyboUKNxHBN/y90nmQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP9b+mZ7E2EC2mfMBwCa3tXKUD4PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0N2I5YzBjLTY3OGUtNGU5NC1hNjRlLTVkNmYxNjFhOTU4ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbau8AwDQYJKoZIhvcNAQELBQADggEBAGTSzSq2i19OeV9lf3Rf 9xLbTZEWJBvYBo3Rt62c9vt1sAJSMT3fq+mRx/VJybWYrr7gmCVeCLpB4EW2oB56 AYPbL8dZQc8lGH/yRku1EKQ/ZCEF+VrlxKnigGfCTCTOKPvHq5mRjmS8jLWui2zh eX9rmT4bDXj4WOPRNPO0XqQ1OKzI6XOAV+hICTDj3wDRDGl+UlQc9fKSeKBMEWok IQONOvZ7+UBDuSSmBujsUVBBCp9HMNq3kiuDYpOpptZPby7x49JN78jzB2k9zeHH m4IkapjT9qPJxbyeXi9fT6sRi7sx1L8XJK5sWJFbBPzYmCvsw7VUB1Mm+maxOg50 +Hc= -----END CERTIFICATE-----Generated at Mon Jun 2 06:12:21 2025 by rpki-client