$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa File: d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa (raw, json) Hash identifier: nj2v7vALCp7t3X1HPeujZa+1aRi/vQsy2vNkN+3yJX0= Subject key identifier: 4F:18:50:07:53:B9:2E:CB:69:94:CF:76:D3:9A:BB:AD:D2:31:C5:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5AB09F0674BB8B66D566026167B464765BDA40D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa Signing time: Wed 14 May 2025 00:41:18 +0000 ROA not before: Wed 14 May 2025 00:41:18 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b0:9f:06:74:bb:8b:66:d5:66:02:61:67:b4:64:76:5b:da:40:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:41:18 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=89ec94bee0d4d701acfa7b90425fb3bb1d64cd799e931ef1ef499eca684b7645, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:4f:4f:b9:40:ae:37:71:9d:97:b9:f6:f7: 2c:e9:90:80:9f:5b:f0:3b:db:14:17:23:82:79:3d: a8:f3:e6:76:2c:9e:10:b2:ad:d4:0e:80:f8:c5:3d: ca:c7:fc:df:ef:4e:7a:6b:23:e1:30:b4:b6:d7:a1: e5:68:6f:4e:7a:70:84:8e:31:4e:d1:0c:7b:09:f1: 02:7e:92:19:91:22:06:de:a5:d4:61:59:1d:42:c1: 06:63:98:8c:40:5d:14:60:56:a0:27:20:7e:c4:37: 62:ea:bd:d6:a0:61:c9:e2:53:40:49:be:f2:63:67: 33:af:3b:ea:e8:e3:bc:5f:ef:2f:75:a0:65:e5:cd: ee:eb:3d:35:a8:cf:17:fc:20:71:d9:59:2a:f9:18: 53:c9:6e:af:3c:55:cc:60:4e:4d:c0:c2:88:64:15: db:8d:21:04:a2:09:1f:0f:3e:3b:b3:90:3d:6f:1c: 83:62:7a:11:7f:d0:b2:91:16:cb:f7:15:53:db:c8: a8:9b:a7:63:c7:6b:f6:dc:58:45:e1:25:04:69:06: d2:85:8e:fa:b3:fe:51:f7:93:7c:af:70:49:05:b2: e7:88:c5:21:c0:de:37:02:3f:f3:26:a6:3b:19:52: 87:f4:90:68:bb:c4:76:1b:71:e4:59:38:1b:cd:49: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:18:50:07:53:B9:2E:CB:69:94:CF:76:D3:9A:BB:AD:D2:31:C5:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8880::/48 Signature Algorithm: sha256WithRSAEncryption aa:c1:6c:bf:b3:56:ab:58:a0:58:b8:05:4f:aa:e5:80:c1:a4: fc:27:2d:a8:eb:d7:e1:10:ad:3f:be:bd:43:96:bb:1e:3a:6a: 37:c4:ce:a0:a6:15:be:38:c3:eb:5d:95:33:20:45:c8:dd:26: 10:12:40:05:89:6b:ca:92:ce:3a:ab:e8:b0:73:e9:8b:23:f6: a7:de:57:3c:0f:44:41:77:21:1d:5f:08:91:a2:f2:ff:ae:da: 60:96:96:16:e1:2d:d0:19:6d:c1:2d:d0:fd:4d:46:e7:36:de: a0:85:5c:4a:08:40:5f:1f:9e:7b:1a:fe:c1:68:e4:9d:fc:c8: 81:fe:87:5e:95:11:2f:84:b8:80:33:72:1b:b1:13:f7:37:37: 33:53:e9:1d:fb:1b:e4:62:47:2b:d7:79:a5:04:5e:3e:a4:67: ff:58:10:a9:5e:f4:c7:83:1a:d9:11:3b:a9:0a:3f:32:17:63: 7b:da:a8:05:02:a1:6b:39:a4:3b:76:01:38:72:aa:cb:ca:ab: 5b:2c:dd:94:33:f0:99:ce:74:5b:be:93:57:98:17:33:9b:df: 8a:95:59:6e:b9:18:ae:a9:03:84:66:3d:8f:ec:60:be:34:b8: 95:2a:db:74:9f:6a:cd:d5:bf:e7:7f:c5:48:da:99:09:60:b3: 23:97:2b:84 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWrCfBnS7i2bVZgJhZ7RkdlvaQNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDExOFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAODllYzk0YmVlMGQ0ZDcwMWFjZmE3 YjkwNDI1ZmIzYmIxZDY0Y2Q3OTllOTMxZWYxZWY0OTllY2E2ODRiNzY0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEJPT7lArjdxnZe59vcs6ZCAn1vw O9sUFyOCeT2o8+Z2LJ4Qsq3UDoD4xT3Kx/zf7056ayPhMLS216HlaG9OenCEjjFO 0Qx7CfECfpIZkSIG3qXUYVkdQsEGY5iMQF0UYFagJyB+xDdi6r3WoGHJ4lNASb7y Y2czrzvq6OO8X+8vdaBl5c3u6z01qM8X/CBx2Vkq+RhTyW6vPFXMYE5NwMKIZBXb jSEEogkfDz47s5A9bxyDYnoRf9CykRbL9xVT28iom6djx2v23FhF4SUEaQbShY76 s/5R95N8r3BJBbLniMUhwN43Aj/zJqY7GVKH9JBou8R2G3HkWTgbzUkHIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE8YUAdTuS7LaZTPdtOau63SMcVlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1MWY2YTg2LWQzZTMtNDQ2Yy1hNTM4LTQ2ZjJhN2U3NzI0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYiAMA0GCSqGSIb3DQEBCwUAA4IBAQCqwWy/s1arWKBYuAVP quWAwaT8Jy2o69fhEK0/vr1DlrseOmo3xM6gphW+OMPrXZUzIEXI3SYQEkAFiWvK ks46q+iwc+mLI/an3lc8D0RBdyEdXwiRovL/rtpglpYW4S3QGW3BLdD9TUbnNt6g hVxKCEBfH557Gv7BaOSd/MiB/odelREvhLiAM3IbsRP3NzczU+kd+xvkYkcr13ml BF4+pGf/WBCpXvTHgxrZETupCj8yF2N72qgFAqFrOaQ7dgE4cqrLyqtbLN2UM/CZ znRbvpNXmBczm9+KlVluuRiuqQOEZj2P7GC+NLiVKtt0n2rN1b/nf8VI2pkJYLMj lyuE -----END CERTIFICATE-----Generated at Mon Jun 2 06:14:15 2025 by rpki-client