$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa File: b9c913ee-ed05-4815-9620-c3c48eb368a1.roa (raw, json) Hash identifier: Jr+0w7wQ01G2CStJfaykYEKAauMVlcVdLBO61jxyiwA= Subject key identifier: 84:37:8D:31:64:3E:0E:B6:74:C4:39:5F:20:30:69:40:56:66:EA:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E7DEBE287C5C11D004F2662E7EB86FBFB917F97 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa Signing time: Fri 16 May 2025 00:50:18 +0000 ROA not before: Fri 16 May 2025 00:50:18 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7d:eb:e2:87:c5:c1:1d:00:4f:26:62:e7:eb:86:fb:fb:91:7f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:50:18 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=30b25bd6ae92192aa980610fd3c527de36c67fa624096f21eebb100b7e66bff5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:95:7a:4c:0a:de:42:ec:ef:7b:c9:8f:ed: 29:cc:66:11:d7:31:f8:a0:1f:31:f5:42:3c:24:c4: 1a:32:2c:ac:40:77:ed:7d:a0:94:85:7d:c3:6f:4e: b6:50:1d:3e:73:dc:dc:11:d7:65:bf:58:e2:19:ef: 88:c8:d8:35:0c:6a:33:25:ba:6d:99:26:6a:1c:55: eb:c9:7a:ff:15:ef:28:ac:bf:6a:0d:26:81:e8:5c: 77:2e:8f:d1:e6:53:43:46:ad:ae:1c:56:e9:66:68: 8c:cb:49:d1:a2:2d:e8:10:66:13:1c:be:27:18:d1: 36:52:37:66:bc:61:ce:c4:cc:10:c8:f4:99:cd:28: f8:9e:61:3c:14:ef:cc:38:a9:f6:df:de:35:66:dd: c0:bc:17:57:0e:7d:fb:e8:88:74:a5:bc:3e:e1:47: a8:7a:41:65:a3:d6:4d:95:2c:98:b8:2a:99:bc:be: ed:6a:eb:57:60:92:81:1b:41:fb:b3:6a:a2:76:71: 4e:43:ad:ff:55:9b:36:18:a9:1f:c6:13:57:b4:13: 9e:04:75:b9:b2:4d:20:7d:a1:d0:dd:78:00:a8:c7: ae:3b:e2:df:79:00:2d:84:b7:a5:74:55:b0:0e:82: 31:b8:55:de:db:7a:62:ac:fa:83:52:d0:f3:bb:7b: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:37:8D:31:64:3E:0E:B6:74:C4:39:5F:20:30:69:40:56:66:EA:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:2800::/40 Signature Algorithm: sha256WithRSAEncryption 22:60:96:91:6f:20:af:fa:0b:c2:b9:a0:87:d8:a5:90:15:8d: b3:6c:09:88:e4:60:1e:42:f4:7e:72:d2:63:2f:e3:ff:e2:33: ce:89:67:d6:0e:c8:56:45:b0:6d:ae:10:99:e5:0b:f6:70:9b: e3:04:3a:69:13:c8:56:2b:6a:4c:a4:e9:25:15:14:65:e8:4d: 70:40:d3:14:18:6a:de:ac:0d:90:6f:8d:c5:f5:bb:ce:6c:18: c2:61:d5:fc:d1:b5:a7:81:7b:42:5e:f6:97:56:d8:c1:98:51: 6f:04:59:94:a5:94:fe:f8:54:2a:3c:3d:d5:48:03:b4:75:3a: db:c6:24:65:d5:0e:e3:eb:2b:03:07:d0:b7:82:24:1c:e0:5c: 2e:30:eb:6c:6e:58:3a:0f:f3:e6:7d:9b:e6:b7:da:14:05:b5: f7:e7:11:ac:46:01:bc:29:57:1b:ab:bb:a7:e3:af:27:2f:65: 9d:93:a5:07:14:fa:3c:69:1d:f8:1d:a4:82:17:76:c7:53:d4: 5d:55:08:24:32:ef:45:ae:45:37:b1:7a:56:71:5b:72:03:de: 6e:52:2f:52:72:5e:b9:58:0a:96:9b:b0:f3:f4:d0:76:f2:a3: 5f:22:8a:2a:6e:cf:e5:8e:84:97:40:a7:ee:ca:6d:ad:54:76: cd:65:2a:ea -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULn3r4ofFwR0ATyZi5+uG+/uRf5cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNTAxOFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMzBiMjViZDZhZTkyMTkyYWE5ODA2 MTBmZDNjNTI3ZGUzNmM2N2ZhNjI0MDk2ZjIxZWViYjEwMGI3ZTY2YmZmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyCVekwK3kLs73vJj+0pzGYR1zH4 oB8x9UI8JMQaMiysQHftfaCUhX3Db062UB0+c9zcEddlv1jiGe+IyNg1DGozJbpt mSZqHFXryXr/Fe8orL9qDSaB6Fx3Lo/R5lNDRq2uHFbpZmiMy0nRoi3oEGYTHL4n GNE2UjdmvGHOxMwQyPSZzSj4nmE8FO/MOKn23941Zt3AvBdXDn376Ih0pbw+4Ueo ekFlo9ZNlSyYuCqZvL7tautXYJKBG0H7s2qidnFOQ63/VZs2GKkfxhNXtBOeBHW5 sk0gfaHQ3XgAqMeuO+LfeQAthLeldFWwDoIxuFXe23pirPqDUtDzu3vu5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIQ3jTFkPg62dMQ5XyAwaUBWZurCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5YzkxM2VlLWVkMDUtNDgxNS05NjIwLWMzYzQ4ZWIzNjhhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaSgwDQYJKoZIhvcNAQELBQADggEBACJglpFvIK/6C8K5oIfY pZAVjbNsCYjkYB5C9H5y0mMv4//iM86JZ9YOyFZFsG2uEJnlC/Zwm+MEOmkTyFYr akyk6SUVFGXoTXBA0xQYat6sDZBvjcX1u85sGMJh1fzRtaeBe0Je9pdW2MGYUW8E WZSllP74VCo8PdVIA7R1OtvGJGXVDuPrKwMH0LeCJBzgXC4w62xuWDoP8+Z9m+a3 2hQFtffnEaxGAbwpVxuru6fjrycvZZ2TpQcU+jxpHfgdpIIXdsdT1F1VCCQy70Wu RTexelZxW3ID3m5SL1JyXrlYCpabsPP00Hbyo18iiipuz+WOhJdAp+7Kba1Uds1l Kuo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:11 2025 by rpki-client