$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa File: 9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa (raw, json) Hash identifier: qcq93wVKzv3ZxCdNJy/8iVZiraOfyxxQL3yqNFQvcDw= Subject key identifier: 09:10:C7:38:E8:27:FB:E8:D1:E6:BC:F3:F9:4B:CF:62:B6:FC:EB:6C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C278662834627DA4DAA2C40AB4A60B39B21C983 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa Signing time: Fri 16 May 2025 15:01:02 +0000 ROA not before: Fri 16 May 2025 15:01:02 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:27:86:62:83:46:27:da:4d:aa:2c:40:ab:4a:60:b3:9b:21:c9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:01:02 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=e8000cfbe7c38510ea7d90bf00b4b4b2be663584e7273a2a3cfb3a053f19bd26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:cc:4b:33:b6:79:07:97:09:16:ec:58:4c: db:e2:e7:09:56:bd:a5:2d:24:72:5b:d2:aa:1c:9a: cf:85:62:e2:0b:aa:c3:00:a2:2c:03:91:e8:4e:93: fa:51:be:ef:cd:fa:4f:a8:02:cb:99:8c:58:53:da: ef:15:32:8e:45:ac:3b:4b:16:bc:87:0a:07:7a:e5: f2:a0:3b:73:38:c3:cd:cb:d8:41:10:f0:bc:1b:04: 00:f0:78:e2:ee:2a:a4:f3:25:58:a8:e0:bf:08:92: 2b:12:c9:d0:b3:57:1f:64:d3:df:bb:d1:47:0f:97: c8:e5:bc:b8:15:20:77:85:49:18:96:c1:5b:c2:6f: 71:61:c9:8d:f0:a7:7d:7c:a2:4a:02:ea:88:8c:eb: 3e:f6:88:42:08:8e:89:e2:c2:d5:9c:3d:f0:5e:08: a1:a4:e1:ff:3d:ee:b0:b5:9d:92:85:bd:44:fd:a6: 11:a5:77:c3:f6:3a:80:59:90:6d:4c:14:65:59:1f: d8:9c:37:c5:25:70:2a:5b:9f:57:5d:05:45:17:e8: 09:2c:44:ab:f8:c9:53:13:f0:b1:4a:bc:c0:ba:71: 8d:cf:c3:f0:a5:7b:ae:84:0f:6e:53:23:74:39:69: 73:ff:79:4f:ba:e6:80:43:15:4f:85:c5:60:51:9d: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:10:C7:38:E8:27:FB:E8:D1:E6:BC:F3:F9:4B:CF:62:B6:FC:EB:6C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption 16:a0:f0:f1:f1:5e:ba:cb:ea:02:a7:27:23:3a:74:3a:3f:45: 80:e5:f2:f3:07:fc:25:92:3a:f5:78:24:da:13:be:54:1b:03: de:fb:3a:c0:a2:92:4c:d7:6c:37:b3:49:53:94:2d:88:31:16: 44:23:6e:88:18:f3:a8:0d:00:b7:f5:31:09:95:c1:60:f2:e4: de:25:1c:6c:90:b8:70:00:3a:c5:6a:e7:20:27:4b:89:2e:ae: cf:41:4c:4c:66:d4:38:8e:1d:90:c9:74:07:dc:7b:a6:85:ba: cc:d4:dc:9e:e6:78:62:30:56:14:d5:37:b6:4c:11:e3:05:80: cb:90:e4:48:e8:26:f7:2a:fe:62:b4:36:2f:68:1e:28:9f:14: 41:37:8c:65:c2:c5:cd:92:8c:dc:e5:30:71:21:ef:80:30:a9: 06:5a:02:94:35:e1:cc:8f:c5:18:35:e4:ac:e9:d6:33:0c:45: 42:e5:1c:e9:18:1c:08:5e:50:98:96:a7:d7:bc:08:7f:03:12: 88:c7:f0:77:85:da:21:50:25:45:38:ce:13:5b:14:36:02:94: 24:a1:17:38:7d:91:56:87:eb:68:b3:61:ff:d9:d3:a9:25:8b: 3d:c6:b7:c1:eb:03:1e:e0:65:c0:10:2e:4d:26:68:f0:3a:3a: 29:7f:70:18 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDCeGYoNGJ9pNqixAq0pgs5shyYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MDEwMloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZTgwMDBjZmJlN2MzODUxMGVhN2Q5 MGJmMDBiNGI0YjJiZTY2MzU4NGU3MjczYTJhM2NmYjNhMDUzZjE5YmQyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hTMSzO2eQeXCRbsWEzb4ucJVr2l LSRyW9KqHJrPhWLiC6rDAKIsA5HoTpP6Ub7vzfpPqALLmYxYU9rvFTKORaw7Sxa8 hwoHeuXyoDtzOMPNy9hBEPC8GwQA8Hji7iqk8yVYqOC/CJIrEsnQs1cfZNPfu9FH D5fI5by4FSB3hUkYlsFbwm9xYcmN8Kd9fKJKAuqIjOs+9ohCCI6J4sLVnD3wXgih pOH/Pe6wtZ2Shb1E/aYRpXfD9jqAWZBtTBRlWR/YnDfFJXAqW59XXQVFF+gJLESr +MlTE/CxSrzAunGNz8PwpXuuhA9uUyN0OWlz/3lPuuaAQxVPhcVgUZ1WrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAkQxzjoJ/vo0ea88/lLz2K2/OtsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMzJhZWRjLWEwNzMtNGY5Zi1hMzYyLWZiNmFiNjQ2ZDZkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoGAwDQYJKoZIhvcNAQELBQADggEBABag8PHxXrrL6gKnJyM6 dDo/RYDl8vMH/CWSOvV4JNoTvlQbA977OsCikkzXbDezSVOULYgxFkQjbogY86gN ALf1MQmVwWDy5N4lHGyQuHAAOsVq5yAnS4kurs9BTExm1DiOHZDJdAfce6aFuszU 3J7meGIwVhTVN7ZMEeMFgMuQ5EjoJvcq/mK0Ni9oHiifFEE3jGXCxc2SjNzlMHEh 74AwqQZaApQ14cyPxRg15Kzp1jMMRULlHOkYHAheUJiWp9e8CH8DEojH8HeF2iFQ JUU4zhNbFDYClCShFzh9kVaH62izYf/Z06kliz3Gt8HrAx7gZcAQLk0maPA6Oil/ cBg= -----END CERTIFICATE-----Generated at Mon Jun 2 06:12:11 2025 by rpki-client