$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa File: a7ca9837-1d67-452f-8fea-80250f36d360.roa (raw, json) Hash identifier: Lzh+njPBc2Fz1IMtORvjx5jDQoXgJX2jRZ66t1E066s= Subject key identifier: 9D:05:1D:F8:FC:20:A3:B5:00:F4:68:76:6E:3B:FE:FD:61:C3:E8:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74973BAC3AA8018FE30F49CEB3FB09F2D46991AF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa Signing time: Fri 16 May 2025 15:21:30 +0000 ROA not before: Fri 16 May 2025 15:21:30 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:97:3b:ac:3a:a8:01:8f:e3:0f:49:ce:b3:fb:09:f2:d4:69:91:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:21:30 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=6034e9f25c9311dbf22de94de530dca5425d3aa5c622c7f20edc9bd67828bc79, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:fe:2d:2f:b2:9d:bb:8d:be:1e:c9:86:b7: 4c:ef:7c:b8:b9:e8:26:05:66:cd:96:b4:08:38:57: a3:27:1f:5a:86:f7:07:a2:7b:0a:dd:1a:62:c6:63: 48:24:43:6c:1f:d8:22:b0:96:65:ef:c3:d9:e0:10: 25:cf:73:7b:09:38:ef:ef:f7:d5:7b:32:20:b3:7f: 77:71:5b:8f:1f:e4:a5:e5:9b:eb:35:d5:e2:f3:be: 6c:89:1a:1d:f6:56:2b:c3:6a:24:c6:b6:6d:44:3a: b6:a6:da:46:c6:43:06:44:5e:5a:c2:51:48:30:57: 24:74:d2:a4:86:49:3b:4d:f6:8f:23:7f:cf:95:cb: d9:bf:de:21:c1:0c:78:dc:e0:d5:4d:3f:4f:b7:6c: 90:78:99:de:a4:fa:d0:25:f2:5b:b1:93:0a:ca:7d: ab:3e:64:56:b2:04:1c:7e:1c:e3:0b:e6:98:87:2e: e6:b0:fa:b4:be:9d:86:22:28:5e:51:7e:91:3b:ec: af:7f:f6:5c:b7:6d:cd:a1:99:d0:ab:75:af:92:cf: e0:17:f5:2a:46:3a:32:18:96:91:14:99:b5:03:7a: 3a:98:7d:86:b3:df:85:7f:08:b8:26:2c:ba:56:1a: 8d:65:18:f7:40:d3:d1:93:32:75:35:bd:05:8c:d5: b1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:1D:F8:FC:20:A3:B5:00:F4:68:76:6E:3B:FE:FD:61:C3:E8:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 9b:7f:fa:c4:ca:38:f9:c4:02:56:e5:8b:aa:3c:4d:77:17:7a: 90:6d:50:2a:f2:e0:f5:2d:b5:7f:56:72:d7:25:ba:88:6b:d6: 85:df:02:13:74:22:5b:82:ff:20:f1:e1:70:3d:90:fc:9f:60: db:fa:d2:c5:78:ad:f1:0e:3e:fc:d6:b7:7f:b7:b3:fb:76:54: c1:51:7d:ec:67:13:01:37:b4:27:ee:a9:49:dd:66:cc:14:d4: 0b:df:c5:21:b5:d6:e6:f1:5b:b3:e7:77:d1:40:bf:f9:84:70: 81:f6:63:3c:9e:80:50:4f:23:da:07:9e:01:53:28:a0:0a:ba: 6a:89:16:a5:53:8d:06:e6:ea:03:3b:08:4a:82:66:56:24:ef: d2:be:08:02:2c:71:6a:81:b0:c4:3b:57:dd:07:69:06:4b:08: 0b:e0:37:91:d4:34:f5:22:96:df:fd:a5:46:0c:07:04:bc:d1: ec:41:ce:61:c4:3e:b6:38:bf:d5:17:6d:f9:4e:ae:0c:a9:4a: 20:20:2f:31:39:96:90:de:b3:eb:e0:80:f5:e1:d6:99:b1:9d: 87:25:4c:2d:64:97:f2:78:f7:2a:00:49:b7:3a:da:84:48:1c: b7:68:95:3f:75:05:4f:8f:4e:2b:73:61:49:ad:db:a7:fb:bd: 04:8b:4b:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdJc7rDqoAY/jD0nOs/sJ8tRpka8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjEzMFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANjAzNGU5ZjI1YzkzMTFkYmYyMmRl OTRkZTUzMGRjYTU0MjVkM2FhNWM2MjJjN2YyMGVkYzliZDY3ODI4YmM3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPj+LS+ynbuNvh7JhrdM73y4uegm BWbNlrQIOFejJx9ahvcHonsK3RpixmNIJENsH9gisJZl78PZ4BAlz3N7CTjv7/fV ezIgs393cVuPH+Sl5ZvrNdXi875siRod9lYrw2okxrZtRDq2ptpGxkMGRF5awlFI MFckdNKkhkk7TfaPI3/PlcvZv94hwQx43ODVTT9Pt2yQeJnepPrQJfJbsZMKyn2r PmRWsgQcfhzjC+aYhy7msPq0vp2GIiheUX6RO+yvf/Zct23NoZnQq3Wvks/gF/Uq RjoyGJaRFJm1A3o6mH2Gs9+Ffwi4Jiy6VhqNZRj3QNPRkzJ1Nb0FjNWxYQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ0FHfj8IKO1APRodm47/v1hw+j9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3Y2E5ODM3LTFkNjctNDUyZi04ZmVhLTgwMjUwZjM2ZDM2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+BAwDQYJKoZIhvcNAQELBQADggEBAJt/+sTKOPnEAlbli6o8 TXcXepBtUCry4PUttX9Wctcluohr1oXfAhN0IluC/yDx4XA9kPyfYNv60sV4rfEO PvzWt3+3s/t2VMFRfexnEwE3tCfuqUndZswU1AvfxSG11ubxW7Pnd9FAv/mEcIH2 YzyegFBPI9oHngFTKKAKumqJFqVTjQbm6gM7CEqCZlYk79K+CAIscWqBsMQ7V90H aQZLCAvgN5HUNPUilt/9pUYMBwS80exBzmHEPrY4v9UXbflOrgypSiAgLzE5lpDe s+vggPXh1pmxnYclTC1kl/J49yoASbc62oRIHLdolT91BU+PTitzYUmt26f7vQSL S+I= -----END CERTIFICATE-----Generated at Mon Jun 2 06:17:18 2025 by rpki-client