$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cbc61353-f2ad-46af-90cb-49c0a23063ed.roa File: cbc61353-f2ad-46af-90cb-49c0a23063ed.roa (raw, json) Hash identifier: 7M6K6+/ERqTWNxXBTZXX/UIvbvwwhmceBuNP2Thz9as= Subject key identifier: D8:F3:02:3F:8B:F3:37:D5:49:6B:0C:E0:2E:E3:DF:A0:BE:43:3C:8C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25CEE5CC5D20169AA394A4BECAF92C193D84B874 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cbc61353-f2ad-46af-90cb-49c0a23063ed.roa Signing time: Mon 12 May 2025 15:10:50 +0000 ROA not before: Mon 12 May 2025 15:10:50 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daee:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ce:e5:cc:5d:20:16:9a:a3:94:a4:be:ca:f9:2c:19:3d:84:b8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 15:10:50 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=fd11b22a1bb5abe9bbc122b32f8eca16cd6f8fc31e760fdb5cfda033c63e011b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:f5:cc:ea:f6:73:35:c8:b8:3e:78:f2:17: ae:ca:4c:f9:d0:54:5d:e6:38:79:82:79:6c:02:53: 2a:e2:0b:4d:b4:f5:6e:26:d7:c9:bd:d5:b3:18:9f: 66:f7:b8:17:9d:9d:fa:36:1b:ef:6a:df:00:aa:ad: ba:25:2f:0e:d3:bc:f4:b6:f5:14:a6:6a:6b:73:57: a4:d0:5e:fc:7b:3e:a1:62:9b:8b:ef:de:88:5c:73: ac:59:32:8a:2b:9a:59:47:c7:c7:6b:db:79:01:1d: a6:9b:93:26:e2:06:dd:49:83:44:35:d0:dd:7a:bd: 14:3d:75:4f:77:2f:20:b4:dd:64:2e:b4:ac:2c:f0: a7:51:16:86:b3:31:b7:42:5b:6a:52:b6:02:93:bf: 94:33:27:1c:f2:95:89:3a:b7:6e:5a:ea:b8:25:9c: 4b:1b:a7:eb:16:20:01:75:eb:6a:9a:64:52:80:12: 49:f9:3a:60:e1:0f:29:9d:6c:29:f1:3b:35:dd:01: 55:d0:04:19:a8:75:c5:86:1d:d1:4f:da:22:0a:86: 5d:55:10:55:f7:d9:43:2e:9e:1d:00:77:d2:71:89: a6:32:d3:55:0f:77:63:74:13:63:2f:df:95:dc:1e: 0d:75:89:4e:ef:b8:31:24:aa:41:38:a5:73:ea:5d: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:02:3F:8B:F3:37:D5:49:6B:0C:E0:2E:E3:DF:A0:BE:43:3C:8C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cbc61353-f2ad-46af-90cb-49c0a23063ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daee:b000::/40 Signature Algorithm: sha256WithRSAEncryption 88:5c:11:32:7f:7e:57:a8:dc:b6:2e:a2:f0:2d:77:01:f5:5a: 54:9b:1d:be:f2:56:2d:5d:e6:ea:39:e2:23:97:13:d6:b0:32: bf:af:06:34:7c:a7:ac:67:d3:b0:a7:e7:f9:c2:b9:c1:86:7d: 7d:66:6c:34:f9:b4:cf:91:34:31:a0:cd:12:f9:bb:12:0b:75: 72:bd:75:4c:33:03:b5:17:3a:a0:47:ab:47:70:66:b8:1c:ac: db:df:6e:c1:ee:cc:6c:38:5a:f8:f8:4f:17:3a:d9:d2:03:cf: 6a:3c:e8:39:dd:ab:85:22:07:78:24:72:07:40:be:b3:99:c7: c5:16:b0:36:54:fa:29:41:aa:2c:fa:2f:42:6c:c5:40:d0:5a: cc:2f:69:3f:45:19:58:22:af:89:c2:96:00:1f:b5:e4:1b:21: 12:e5:43:83:9d:45:ea:8a:c3:e0:ef:51:03:a1:99:23:d3:96: 1c:7b:e3:79:c6:09:88:90:1a:5f:f0:cc:e4:61:53:9e:7c:ff: 90:30:89:48:1d:b4:d3:ce:b5:67:40:82:e4:0e:b5:7c:51:e4: c5:71:d2:35:11:ae:2a:56:03:1e:62:fa:e9:31:4e:97:3e:ad: be:44:71:fb:45:eb:2a:87:bf:03:12:f3:18:53:77:03:7e:40: 81:21:b6:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJc7lzF0gFpqjlKS+yvksGT2EuHQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMjE1MTA1MFoX DTI1MDYxNjIzNTk1OVowejFJMEcGA1UEBRNAZmQxMWIyMmExYmI1YWJlOWJiYzEy MmIzMmY4ZWNhMTZjZDZmOGZjMzFlNzYwZmRiNWNmZGEwMzNjNjNlMDExYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2L1zOr2czXIuD548heuykz50FRd 5jh5gnlsAlMq4gtNtPVuJtfJvdWzGJ9m97gXnZ36Nhvvat8Aqq26JS8O07z0tvUU pmprc1ek0F78ez6hYpuL796IXHOsWTKKK5pZR8fHa9t5AR2mm5Mm4gbdSYNENdDd er0UPXVPdy8gtN1kLrSsLPCnURaGszG3QltqUrYCk7+UMycc8pWJOrduWuq4JZxL G6frFiABdetqmmRSgBJJ+Tpg4Q8pnWwp8Ts13QFV0AQZqHXFhh3RT9oiCoZdVRBV 99lDLp4dAHfScYmmMtNVD3djdBNjL9+V3B4NdYlO77gxJKpBOKVz6l2/UwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNjzAj+L8zfVSWsM4C7j36C+QzyMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NiYzYxMzUzLWYyYWQtNDZhZi05MGNiLTQ5YzBhMjMwNjNlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7rAwDQYJKoZIhvcNAQELBQADggEBAIhcETJ/fleo3LYuovAt dwH1WlSbHb7yVi1d5uo54iOXE9awMr+vBjR8p6xn07Cn5/nCucGGfX1mbDT5tM+R NDGgzRL5uxILdXK9dUwzA7UXOqBHq0dwZrgcrNvfbsHuzGw4Wvj4Txc62dIDz2o8 6Dndq4UiB3gkcgdAvrOZx8UWsDZU+ilBqiz6L0JsxUDQWswvaT9FGVgir4nClgAf teQbIRLlQ4OdReqKw+DvUQOhmSPTlhx743nGCYiQGl/wzORhU558/5AwiUgdtNPO tWdAguQOtXxR5MVx0jURripWAx5i+ukxTpc+rb5EcftF6yqHvwMS8xhTdwN+QIEh tgI= -----END CERTIFICATE-----Generated at Mon Jun 2 06:34:02 2025 by rpki-client