$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa File: bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa (raw, json) Hash identifier: D1PBBDXfzxqbG9Uyq3irG4bGQYRfSr/bwPETBqn63HM= Subject key identifier: C8:23:9C:73:49:C2:AF:76:6B:BF:D9:22:85:92:A2:F2:BA:B2:83:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20ADABAB95AF11B4F652E5B2F9FF1CCB28E91EAE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa Signing time: Mon 19 May 2025 15:00:51 +0000 ROA not before: Mon 19 May 2025 15:00:51 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da13::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ad:ab:ab:95:af:11:b4:f6:52:e5:b2:f9:ff:1c:cb:28:e9:1e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 15:00:51 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=942a22193742f9740c4a4a2c74b3a3a649a7e5005d011bc9da649f865e302647, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1f:c6:ba:e7:67:d7:5d:84:b3:de:0a:85:2f: 19:78:81:5a:bd:82:23:f5:95:9a:ac:c9:75:9b:e8: 64:91:48:03:7c:aa:ef:d9:0c:f6:aa:b9:73:24:71: 21:d8:16:65:66:6e:d1:df:17:fd:73:83:be:63:e9: 0b:78:1a:40:60:03:b1:2d:3e:ed:a6:e1:12:1b:e5: dd:0f:99:a9:33:dc:7a:64:25:c0:21:02:56:52:88: dc:ad:1d:fd:60:1c:00:3f:a8:fa:8a:76:c3:c2:13: 72:69:24:e6:b6:65:c4:e6:c8:39:e2:5a:a3:77:15: a5:21:b6:e4:01:e7:ce:b9:d0:f6:ce:46:fa:88:a5: 34:d0:54:49:db:31:5d:43:94:d5:fa:65:cb:6c:e4: 9e:3a:cc:f0:e9:ed:7e:77:d5:67:31:df:77:f2:ed: 19:8d:6b:6e:e2:13:dc:3e:ed:75:d8:0f:08:33:6e: 01:8e:21:be:50:73:18:85:1c:af:90:82:d9:8b:6a: 60:09:ea:6e:bb:59:54:81:f1:79:79:42:14:45:e7: 4c:0f:e6:9b:c9:bb:e6:ca:7d:37:6c:63:d3:46:07: ae:91:ad:ba:d1:be:fe:b8:46:72:e5:a3:a7:b3:53: c6:d6:96:f6:e6:2d:da:ad:5d:00:fb:e0:19:41:8f: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:23:9C:73:49:C2:AF:76:6B:BF:D9:22:85:92:A2:F2:BA:B2:83:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da13::/36 Signature Algorithm: sha256WithRSAEncryption 6d:3f:01:4c:f8:5d:d7:bd:cb:9e:d5:96:bc:e6:4d:c2:ee:df: c8:02:ca:7b:89:d0:3f:05:9d:1b:93:ab:d4:a5:1f:a8:2b:1a: 90:09:04:a1:c1:8f:c4:da:58:52:36:1f:02:f2:71:98:16:de: c7:25:57:6b:06:31:ca:80:d9:86:f5:b5:ba:63:2b:6a:a6:92: 96:77:ab:30:bc:01:99:4d:0f:c9:3a:5e:63:93:c6:b2:cd:3a: 32:96:30:21:e8:7e:64:b9:6f:c3:99:f1:68:db:f5:53:d7:4e: 47:3e:70:b3:9f:89:63:50:b3:24:e4:5e:61:b1:24:06:40:da: 9c:7f:63:d3:f4:20:80:a1:b8:88:93:84:df:57:b6:87:d6:54: f9:f9:ca:f3:9f:1e:40:0b:5c:4f:4d:b2:ac:8d:ba:47:7e:ab: d7:eb:cf:36:40:54:01:03:1c:78:2e:cd:05:66:5f:24:3c:58: bd:6f:ef:ff:15:a1:0b:c9:8b:ef:2b:54:fd:12:ee:fd:7a:e7: 07:41:ac:72:0b:2a:6c:a1:46:47:e0:0d:e1:aa:31:a5:a6:61: 60:b0:9d:02:af:a2:64:e4:2c:74:11:65:82:1f:9b:f7:b5:46: cd:ee:e4:34:1f:b0:76:f9:75:20:b0:75:32:9b:d0:69:75:9d: d4:f5:31:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIK2rq5WvEbT2UuWy+f8cyyjpHq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxOTE1MDA1MVoX DTI1MDYyMzIzNTk1OVowejFJMEcGA1UEBRNAOTQyYTIyMTkzNzQyZjk3NDBjNGE0 YTJjNzRiM2EzYTY0OWE3ZTUwMDVkMDExYmM5ZGE2NDlmODY1ZTMwMjY0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x/Guudn112Es94KhS8ZeIFavYIj 9ZWarMl1m+hkkUgDfKrv2Qz2qrlzJHEh2BZlZm7R3xf9c4O+Y+kLeBpAYAOxLT7t puESG+XdD5mpM9x6ZCXAIQJWUojcrR39YBwAP6j6inbDwhNyaSTmtmXE5sg54lqj dxWlIbbkAefOudD2zkb6iKU00FRJ2zFdQ5TV+mXLbOSeOszw6e1+d9VnMd938u0Z jWtu4hPcPu112A8IM24BjiG+UHMYhRyvkILZi2pgCepuu1lUgfF5eUIURedMD+ab ybvmyn03bGPTRgeuka260b7+uEZy5aOns1PG1pb25i3arV0A++AZQY+B0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMgjnHNJwq92a7/ZIoWSovK6soMTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmODEzMWU4LTNiMDctNGI1ZS05NDdkLWQ2ZWU0YzJlN2I1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEwAwDQYJKoZIhvcNAQELBQADggEBAG0/AUz4Xde9y57Vlrzm TcLu38gCynuJ0D8FnRuTq9SlH6grGpAJBKHBj8TaWFI2HwLycZgW3sclV2sGMcqA 2Yb1tbpjK2qmkpZ3qzC8AZlND8k6XmOTxrLNOjKWMCHofmS5b8OZ8Wjb9VPXTkc+ cLOfiWNQsyTkXmGxJAZA2px/Y9P0IIChuIiThN9XtofWVPn5yvOfHkALXE9NsqyN ukd+q9frzzZAVAEDHHguzQVmXyQ8WL1v7/8VoQvJi+8rVP0S7v165wdBrHILKmyh RkfgDeGqMaWmYWCwnQKvomTkLHQRZYIfm/e1Rs3u5DQfsHb5dSCwdTKb0Gl1ndT1 MQE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:24 2025 by rpki-client