$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2d1d305-50e8-4e72-ac37-971983992213.roa File: b2d1d305-50e8-4e72-ac37-971983992213.roa (raw, json) Hash identifier: 8eohFI8Tlq0MiqTrhg3n3vKiw9OZ/Hesg15qJUFW3Sw= Subject key identifier: 9E:4B:06:0E:73:F3:38:38:4B:76:C3:45:20:C6:69:F8:73:A8:EA:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1786F30B939030BF4A724A2BB1D1D68BDD7727 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2d1d305-50e8-4e72-ac37-971983992213.roa Signing time: Mon 12 May 2025 15:00:59 +0000 ROA not before: Mon 12 May 2025 15:00:59 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dabb:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:86:f3:0b:93:90:30:bf:4a:72:4a:2b:b1:d1:d6:8b:dd:77:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 15:00:59 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=5247be53bfe12a68552765b39a77eae63e276c95fb83c4db44e7728f108719ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:b8:97:2a:2d:3f:0f:b7:cb:6c:d6:41:9e: db:2d:54:df:d7:5b:9f:be:04:73:96:53:99:e5:a3: 32:d2:21:bc:ed:dc:df:b6:eb:da:0a:d4:5e:1c:91: 6c:c8:8a:e1:13:f8:01:ad:15:1f:5c:59:84:90:68: 1f:d7:12:84:34:a9:4b:6a:5b:ef:70:40:93:59:c1: 92:3d:e4:f4:ff:90:a2:d3:b3:6b:24:5f:0a:02:a5: 97:2f:b2:1f:54:56:e1:75:ee:be:37:7f:d7:fb:e9: 57:7c:0e:1f:1d:a5:ad:e8:1e:fa:a5:0a:d5:6a:db: 43:36:03:77:0c:50:99:69:65:d5:a0:36:85:b2:35: 4e:43:42:c7:aa:4a:a9:36:c8:4e:b2:1f:d2:98:94: c4:b7:6c:d8:a0:f1:0e:a9:9f:84:86:fc:a5:1a:8d: ae:ae:35:fd:32:08:d0:d1:d3:f7:aa:d6:55:06:4c: c4:48:0a:0b:ba:a0:26:d8:02:03:8d:ad:8f:d5:48: e6:58:fe:ae:3c:60:f1:58:6b:9e:c3:07:ec:51:8a: 00:c6:3c:4a:c5:44:2d:9f:e5:8c:e2:56:81:98:ba: 6e:6d:50:1f:5a:9d:74:a6:ae:e5:25:a8:9b:9d:03: da:f9:84:24:7b:93:cb:d3:0f:a7:e4:55:cb:c8:46: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:06:0E:73:F3:38:38:4B:76:C3:45:20:C6:69:F8:73:A8:EA:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2d1d305-50e8-4e72-ac37-971983992213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dabb:800::/40 Signature Algorithm: sha256WithRSAEncryption 8f:1b:66:18:82:4c:ba:16:7d:c6:05:81:d8:1f:be:31:89:4f: ef:f7:c7:46:9a:21:0d:44:12:7b:09:86:ec:6c:c4:97:fc:cd: d9:cb:3e:80:77:9f:00:03:a6:a9:c0:cd:4b:6e:28:86:cd:80: f4:08:f9:65:24:05:e1:2a:5a:31:f2:e8:30:b5:88:ca:a7:67: b8:18:4d:21:cd:c7:75:45:dd:eb:d3:57:60:e5:84:e6:60:ca: 53:95:a7:b4:d0:44:92:e1:48:e1:98:d2:c7:10:1e:d8:31:c6: 85:56:ec:6f:d1:55:9b:11:e3:1e:27:97:ac:3d:a4:d0:fe:43: a0:2f:e0:13:e6:14:02:94:00:05:07:a4:93:e4:65:68:56:17: a4:01:c2:17:96:e6:14:e9:1a:d8:ea:7a:11:4e:c7:c3:a4:c8: d3:1b:f2:2d:06:a8:0f:61:2e:6a:dd:c4:42:cf:b8:01:b6:90: 91:5d:93:7d:20:98:38:51:87:4c:8a:58:3e:65:b8:d1:66:43: 8a:c2:0b:ab:c0:c5:10:62:90:59:94:5b:6b:8a:29:0c:e0:85: e2:09:12:a6:6b:56:09:9e:89:12:56:72:4f:a1:b3:4f:63:2c: 83:97:70:c6:4d:5e:2e:12:d9:da:19:32:d4:17:bc:d1:dc:6a: 45:db:be:24 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITF4bzC5OQML9KckorsdHWi913JzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUwNTEyMTUwMDU5WhcN MjUwNjE2MjM1OTU5WjB6MUkwRwYDVQQFE0A1MjQ3YmU1M2JmZTEyYTY4NTUyNzY1 YjM5YTc3ZWFlNjNlMjc2Yzk1ZmI4M2M0ZGI0NGU3NzI4ZjEwODcxOWVlMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RLiXKi0/D7fLbNZBntstVN/XW5++ BHOWU5nlozLSIbzt3N+269oK1F4ckWzIiuET+AGtFR9cWYSQaB/XEoQ0qUtqW+9w QJNZwZI95PT/kKLTs2skXwoCpZcvsh9UVuF17r43f9f76Vd8Dh8dpa3oHvqlCtVq 20M2A3cMUJlpZdWgNoWyNU5DQseqSqk2yE6yH9KYlMS3bNig8Q6pn4SG/KUaja6u Nf0yCNDR0/eq1lUGTMRICgu6oCbYAgONrY/VSOZY/q48YPFYa57DB+xRigDGPErF RC2f5YziVoGYum5tUB9anXSmruUlqJudA9r5hCR7k8vTD6fkVcvIRsSdAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUnksGDnPzODhLdsNFIMZp+HOo6pYwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv YjJkMWQzMDUtNTBlOC00ZTcyLWFjMzctOTcxOTgzOTkyMjEzLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtq7CDANBgkqhkiG9w0BAQsFAAOCAQEAjxtmGIJMuhZ9xgWB2B++ MYlP7/fHRpohDUQSewmG7GzEl/zN2cs+gHefAAOmqcDNS24ohs2A9Aj5ZSQF4Spa MfLoMLWIyqdnuBhNIc3HdUXd69NXYOWE5mDKU5WntNBEkuFI4ZjSxxAe2DHGhVbs b9FVmxHjHieXrD2k0P5DoC/gE+YUApQABQekk+RlaFYXpAHCF5bmFOka2Op6EU7H w6TI0xvyLQaoD2Euat3EQs+4AbaQkV2TfSCYOFGHTIpYPmW40WZDisILq8DFEGKQ WZRba4opDOCF4gkSpmtWCZ6JElZyT6GzT2Msg5dwxk1eLhLZ2hky1Be80dxqRdu+ JA== -----END CERTIFICATE-----Generated at Mon Jun 2 06:27:40 2025 by rpki-client