$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa File: 91d6523c-4ab1-4850-a8cf-025e394ee348.roa (raw, json) Hash identifier: j+iAJNwY3PEuHnjKUANxu54YAN8PpEhrZ4b96gtXuKM= Subject key identifier: 97:7F:C7:D2:7B:35:A6:8E:B6:44:30:6F:81:98:CB:B9:A3:D0:F8:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 788FEDC7F2C6ABF3973EE0A5DA1F34834CC5A555 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa Signing time: Sat 10 May 2025 00:00:55 +0000 ROA not before: Sat 10 May 2025 00:00:55 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8f:ed:c7:f2:c6:ab:f3:97:3e:e0:a5:da:1f:34:83:4c:c5:a5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 10 00:00:55 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=6a93933e490fcdde1da00208826f2c534cbd07c8a5c985fb15943dbc943846c9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:a0:89:14:62:21:f6:5c:25:fc:67:b7:83: 0e:e4:34:f2:c1:ff:8e:b0:b8:8f:1d:89:35:4b:98: 3d:2c:67:ec:dd:50:4b:c7:4b:0b:05:d8:e6:6e:22: 2f:ef:1b:7f:ca:ad:a6:fc:a5:6f:73:27:99:bf:cb: d7:0a:ea:32:8e:1f:8d:1d:00:0f:46:90:dc:f7:1a: 8a:e6:a7:cb:d5:b5:d9:60:ca:c9:dd:22:85:f3:be: 35:24:b5:89:bf:8c:26:f4:d3:17:25:b4:57:52:9b: 71:e7:49:88:e1:30:73:d3:6e:0a:cc:11:34:3d:a0: b4:f7:f6:02:69:bd:86:2f:c7:2d:23:06:16:a7:1d: da:62:ee:6b:ca:9f:91:31:22:b0:2a:df:6b:c9:2a: ac:a4:8b:4f:53:58:e0:0e:a2:35:57:64:6d:36:c7: 50:2f:4c:1f:78:70:94:bb:ad:28:93:7c:f0:2a:3e: 28:cc:40:e5:79:f0:5f:b7:3a:ee:5b:4f:28:57:83: de:89:ce:cf:d3:a6:05:f2:1e:df:d6:dc:c3:b8:0c: 13:a3:b9:11:09:da:3a:d7:10:19:dd:24:0b:82:a3: 54:e8:2b:6d:19:73:a0:fa:6a:4e:ad:6f:fe:fd:90: 2e:d1:1d:8c:5b:b9:84:32:a3:70:a4:de:e5:2a:41: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7F:C7:D2:7B:35:A6:8E:B6:44:30:6F:81:98:CB:B9:A3:D0:F8:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:6000::/40 Signature Algorithm: sha256WithRSAEncryption 72:4d:b3:82:23:0e:fe:ce:8b:4d:26:2b:cc:ff:70:89:45:7a: 0e:66:7c:18:5b:53:2e:05:8d:42:f2:fe:f3:65:97:79:a2:f6: 66:f1:00:da:b1:27:1b:40:36:45:93:96:e0:c7:91:9d:a9:9f: cb:af:72:3e:f1:42:44:a4:6a:be:31:9e:e8:ad:22:13:9d:5e: 89:a4:32:70:db:40:23:91:9f:82:f3:ee:f0:a0:cb:f2:dc:9c: f1:f3:1d:8c:8f:ed:20:9e:25:ce:af:9a:76:71:b1:0a:c5:65: e0:2b:71:56:94:81:f2:55:5c:8b:0a:27:20:28:c2:76:6b:b6: 34:c4:00:a6:00:25:53:e8:ab:24:8b:28:af:85:14:6c:43:7f: aa:95:0c:50:ae:d3:63:f7:2c:ab:b8:09:63:45:48:ec:84:fa: 13:84:81:7e:17:9c:5d:2f:48:3d:c6:ee:41:1c:5a:0d:cc:35: 42:b4:68:db:d0:c0:5d:97:d4:5d:be:8d:1c:ae:c3:64:1f:57: 64:ce:f6:c4:8d:fb:b2:b5:52:bd:90:7b:82:2a:29:2b:d1:62: 15:91:ae:b7:98:41:86:bd:85:3f:de:c7:37:b7:ec:59:26:26: 73:0c:62:f2:d6:3f:0a:97:62:7e:34:59:ee:7d:89:2d:a4:c1: c7:80:79:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeI/tx/LGq/OXPuCl2h80g0zFpVUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMDAwMDA1NVoX DTI1MDYxNDIzNTk1OVowejFJMEcGA1UEBRNANmE5MzkzM2U0OTBmY2RkZTFkYTAw MjA4ODI2ZjJjNTM0Y2JkMDdjOGE1Yzk4NWZiMTU5NDNkYmM5NDM4NDZjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjugiRRiIfZcJfxnt4MO5DTywf+O sLiPHYk1S5g9LGfs3VBLx0sLBdjmbiIv7xt/yq2m/KVvcyeZv8vXCuoyjh+NHQAP RpDc9xqK5qfL1bXZYMrJ3SKF8741JLWJv4wm9NMXJbRXUptx50mI4TBz024KzBE0 PaC09/YCab2GL8ctIwYWpx3aYu5ryp+RMSKwKt9rySqspItPU1jgDqI1V2RtNsdQ L0wfeHCUu60ok3zwKj4ozEDlefBftzruW08oV4Peic7P06YF8h7f1tzDuAwTo7kR Cdo61xAZ3SQLgqNU6CttGXOg+mpOrW/+/ZAu0R2MW7mEMqNwpN7lKkEtgwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJd/x9J7NaaOtkQwb4GYy7mj0PjsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxZDY1MjNjLTRhYjEtNDg1MC1hOGNmLTAyNWUzOTRlZTM0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYGAwDQYJKoZIhvcNAQELBQADggEBAHJNs4IjDv7Oi00mK8z/ cIlFeg5mfBhbUy4FjULy/vNll3mi9mbxANqxJxtANkWTluDHkZ2pn8uvcj7xQkSk ar4xnuitIhOdXomkMnDbQCORn4Lz7vCgy/LcnPHzHYyP7SCeJc6vmnZxsQrFZeAr cVaUgfJVXIsKJyAownZrtjTEAKYAJVPoqySLKK+FFGxDf6qVDFCu02P3LKu4CWNF SOyE+hOEgX4XnF0vSD3G7kEcWg3MNUK0aNvQwF2X1F2+jRyuw2QfV2TO9sSN+7K1 Ur2Qe4IqKSvRYhWRrreYQYa9hT/exze37FkmJnMMYvLWPwqXYn40We59iS2kwceA eco= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:28 2025 by rpki-client