$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa File: 996429fb-4fb5-4437-9fbd-29531436e253.roa (raw, json) Hash identifier: YIXJz8cxUXiqpQ2oQsWOzKwwrA3CsnYWxmJGF+04DSQ= Subject key identifier: 48:F6:F5:2E:19:26:3E:73:2E:79:6E:BE:F0:8E:30:4E:73:0C:0F:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0AF7C6302D62204D79D8E52687B43D47D797D9DE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa Signing time: Fri 16 May 2025 15:00:55 +0000 ROA not before: Fri 16 May 2025 15:00:55 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f7:c6:30:2d:62:20:4d:79:d8:e5:26:87:b4:3d:47:d7:97:d9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:00:55 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=b1ac52da8a9170d799e996ef15b5eef4677415f56822f75be6bdb0908d12db16, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:ef:a1:e0:53:8b:e0:d5:db:e5:c0:c4:40: 4d:57:b2:98:07:c8:32:4e:98:ee:ca:46:8b:3e:bb: e1:84:f5:66:b1:33:99:f2:20:97:a9:76:0e:d5:78: f9:73:d6:2b:a5:a7:6e:53:4d:42:b8:75:50:a2:98: de:f1:77:56:de:95:94:50:d7:38:94:f2:94:8e:e3: 6b:26:e2:a0:13:a7:d8:27:90:4f:33:4c:68:64:da: 37:3d:9c:79:a9:09:41:b9:e9:07:a3:9d:cd:e7:3c: 22:22:7b:24:6c:a9:af:bd:b3:91:64:47:e1:00:63: d8:f4:0b:fe:ec:b0:80:66:c6:40:ee:a4:15:da:ed: 32:24:ee:f4:34:ca:82:0e:7a:09:17:f8:d3:b1:ec: a2:2a:b7:82:81:a1:ff:77:7e:0f:e3:b9:17:d6:50: 79:48:bf:ce:dc:eb:b4:e0:b8:ea:69:45:fd:4e:5a: 52:34:d0:a7:7f:f7:7c:8b:77:9a:6a:48:19:a7:e0: 71:11:f3:33:c9:7c:72:80:bc:b6:d0:6a:fe:15:a2: 21:1f:3c:38:61:b5:aa:e0:c9:a3:22:df:07:8d:f6: 72:2b:e4:83:6b:5d:19:bd:32:82:42:fc:bb:a9:29: 5a:76:4b:d2:66:70:09:dc:d8:ab:dc:76:8a:6f:20: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F6:F5:2E:19:26:3E:73:2E:79:6E:BE:F0:8E:30:4E:73:0C:0F:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c000::/40 Signature Algorithm: sha256WithRSAEncryption 42:34:ac:41:9c:d0:28:f3:62:f1:c5:1f:5a:55:65:dc:90:ca: 8b:fc:26:de:12:df:87:55:ea:19:ef:05:94:62:2e:ef:9f:b2: f7:b3:bb:b3:aa:7e:25:4c:27:e2:07:bb:3d:3b:a8:d6:dc:f2: a7:49:10:d8:3e:4a:e3:ee:01:26:94:d4:12:d2:0c:e4:11:30: b3:fc:15:3a:2e:9f:d3:c3:a5:82:f2:79:aa:a6:e8:ee:7c:ca: 9c:4c:d5:e0:f2:b7:37:fb:0a:e6:80:05:7b:0c:9b:4a:87:b3: 6b:2f:6b:0a:7f:08:18:3b:68:4f:f0:39:42:a6:c7:f5:56:db: 07:05:98:31:8e:d4:37:ca:2c:6c:99:5b:52:30:87:81:b4:44: a3:d0:d1:b8:21:c6:bd:28:37:91:aa:00:97:ac:8c:bb:51:1e: 6f:a0:dd:e2:0f:f8:c0:a3:26:ce:cf:71:80:cc:39:3a:e9:68: 02:a0:88:54:c1:a4:74:bb:ab:81:ae:9b:37:6b:7e:9b:30:42: 30:f1:4d:ad:fb:ce:92:05:b7:d6:23:ac:c0:27:15:20:a0:37: 40:f3:f0:85:6b:55:f6:88:47:8d:23:26:16:e8:d9:93:d2:d3: 5a:68:3d:2b:f9:c9:5b:d0:8b:51:b3:0d:a4:3c:60:24:5a:92: 0e:d6:ea:60 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCvfGMC1iIE152OUmh7Q9R9eX2d4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MDA1NVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYjFhYzUyZGE4YTkxNzBkNzk5ZTk5 NmVmMTViNWVlZjQ2Nzc0MTVmNTY4MjJmNzViZTZiZGIwOTA4ZDEyZGIxNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHDvoeBTi+DV2+XAxEBNV7KYB8gy TpjuykaLPrvhhPVmsTOZ8iCXqXYO1Xj5c9YrpaduU01CuHVQopje8XdW3pWUUNc4 lPKUjuNrJuKgE6fYJ5BPM0xoZNo3PZx5qQlBuekHo53N5zwiInskbKmvvbORZEfh AGPY9Av+7LCAZsZA7qQV2u0yJO70NMqCDnoJF/jTseyiKreCgaH/d34P47kX1lB5 SL/O3Ou04LjqaUX9TlpSNNCnf/d8i3eaakgZp+BxEfMzyXxygLy20Gr+FaIhHzw4 YbWq4MmjIt8HjfZyK+SDa10ZvTKCQvy7qSladkvSZnAJ3Nir3HaKbyCrOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEj29S4ZJj5zLnluvvCOME5zDA/bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NjQyOWZiLTRmYjUtNDQzNy05ZmJkLTI5NTMxNDM2ZTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucAwDQYJKoZIhvcNAQELBQADggEBAEI0rEGc0CjzYvHFH1pV ZdyQyov8Jt4S34dV6hnvBZRiLu+fsvezu7OqfiVMJ+IHuz07qNbc8qdJENg+SuPu ASaU1BLSDOQRMLP8FToun9PDpYLyeaqm6O58ypxM1eDytzf7CuaABXsMm0qHs2sv awp/CBg7aE/wOUKmx/VW2wcFmDGO1DfKLGyZW1Iwh4G0RKPQ0bghxr0oN5GqAJes jLtRHm+g3eIP+MCjJs7PcYDMOTrpaAKgiFTBpHS7q4GumzdrfpswQjDxTa37zpIF t9YjrMAnFSCgN0Dz8IVrVfaIR40jJhbo2ZPS01poPSv5yVvQi1GzDaQ8YCRakg7W 6mA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:30 2025 by rpki-client