$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa File: ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa (raw, json) Hash identifier: qtXBl5pXCnmJq9AHvWiWf2sTver4QW4KOYkVfsEXz84= Subject key identifier: 54:67:F3:EF:D8:B3:42:67:1D:E6:81:D4:39:F8:C1:B9:60:D9:BE:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A6EA92A48CB8170370F159605AFB43A79502143 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa Signing time: Thu 22 May 2025 00:36:50 +0000 ROA not before: Thu 22 May 2025 00:36:50 +0000 ROA not after: Thu 26 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6e:a9:2a:48:cb:81:70:37:0f:15:96:05:af:b4:3a:79:50:21:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 00:36:50 2025 GMT Not After : Jun 26 23:59:59 2025 GMT Subject: serialNumber=86ca5b391b9fb9eca3944c42bf2dac51341dd832247e93b89d4d0086e110ef4a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:8b:70:be:98:f7:bf:2e:58:a9:8c:18:a8: 9c:60:ba:3d:2d:0e:5a:fe:b3:74:5e:6c:05:4d:a1: 09:60:95:8d:89:f7:f5:cc:b9:01:67:0d:26:40:5b: 1b:e9:dd:d8:44:6a:6e:cf:fb:d0:98:d0:e3:dc:2c: 8a:e0:01:7a:c3:a3:fe:54:21:54:ab:99:0a:ea:32: 5d:1f:4d:38:37:81:68:6a:a2:b2:8e:d4:c6:ac:d5: 64:65:d0:7c:ed:aa:58:d7:94:d7:20:ef:ee:32:80: c4:b9:79:0a:eb:ec:94:3b:5b:94:2c:c1:ab:a1:4b: 68:b3:84:28:d8:8d:bd:9e:92:a1:14:11:97:20:92: b8:9f:e3:33:38:d9:f8:f2:4c:4e:9f:5e:f0:db:36: 49:0a:c7:3c:6e:06:f3:f8:87:da:32:1f:a6:76:5d: b7:14:8a:ce:b6:7d:85:75:cb:cb:94:22:80:02:17: bb:01:3e:38:38:57:41:2e:4e:4e:96:f2:e0:62:bd: fb:98:4d:60:d4:b0:39:7b:91:f7:76:61:69:6f:be: dc:8f:30:2f:e0:9c:8c:e3:db:c0:41:33:b2:65:45: f5:88:6a:a0:74:21:41:e8:51:b7:3a:8d:f2:81:d6: 67:cf:e0:bf:d6:84:50:b3:2d:c6:80:19:f2:67:59: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:F3:EF:D8:B3:42:67:1D:E6:81:D4:39:F8:C1:B9:60:D9:BE:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:8800::/40 Signature Algorithm: sha256WithRSAEncryption a7:41:5a:77:b7:2e:28:d4:d1:03:28:44:3d:a6:bd:f4:40:40: f1:62:cd:db:52:d2:b9:9d:be:9a:f6:b8:82:6d:91:96:68:86: 89:ed:7d:cd:9b:dc:05:7d:7e:b4:eb:4c:6f:73:10:31:4d:ef: 22:86:d8:7b:c9:52:cc:f4:69:af:14:9b:a1:1e:db:b5:1f:61: 8c:bc:de:d6:45:df:f4:41:02:0a:c9:bc:27:c3:42:e0:35:b7: f4:62:28:1f:ee:6f:cb:e9:07:41:a3:56:87:46:af:8b:1e:25: a7:5e:c1:e9:fd:e8:8e:da:c3:bb:50:58:4d:c9:d9:87:30:48: ac:6a:87:5e:b6:ed:09:0f:d5:8f:7f:55:ee:98:fc:23:5d:54: 1d:ce:76:92:96:4e:88:46:db:f8:b0:05:21:45:b5:f9:1c:9d: bb:74:51:5e:55:3e:9b:70:73:a0:0d:08:0f:00:ca:63:2c:b3: f0:ff:9d:04:04:fa:0b:6c:90:29:a6:7e:c0:2c:5e:11:a2:ec: f3:4b:d0:11:56:76:36:2a:46:4d:c3:c4:56:0d:dd:4a:ed:55: ee:d7:ec:0f:de:2a:f3:84:45:d0:22:28:04:14:4a:36:88:41: 15:03:b1:00:c9:8b:90:20:d3:be:60:07:ef:f5:55:ad:2d:04: f1:76:37:f6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOm6pKkjLgXA3DxWWBa+0OnlQIUMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMjAwMzY1MFoX DTI1MDYyNjIzNTk1OVowejFJMEcGA1UEBRNAODZjYTViMzkxYjlmYjllY2EzOTQ0 YzQyYmYyZGFjNTEzNDFkZDgzMjI0N2U5M2I4OWQ0ZDAwODZlMTEwZWY0YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ciLcL6Y978uWKmMGKicYLo9LQ5a /rN0XmwFTaEJYJWNiff1zLkBZw0mQFsb6d3YRGpuz/vQmNDj3CyK4AF6w6P+VCFU q5kK6jJdH004N4FoaqKyjtTGrNVkZdB87apY15TXIO/uMoDEuXkK6+yUO1uULMGr oUtos4Qo2I29npKhFBGXIJK4n+MzONn48kxOn17w2zZJCsc8bgbz+IfaMh+mdl23 FIrOtn2FdcvLlCKAAhe7AT44OFdBLk5OlvLgYr37mE1g1LA5e5H3dmFpb77cjzAv 4JyM49vAQTOyZUX1iGqgdCFB6FG3Oo3ygdZnz+C/1oRQsy3GgBnyZ1k8pQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFRn8+/Ys0JnHeaB1Dn4wblg2b70MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlZDc3Yzk1LThiYjctNDVlNC04Yzk5LTI4MDM3ZjdkOTBmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7YgwDQYJKoZIhvcNAQELBQADggEBAKdBWne3LijU0QMoRD2m vfRAQPFizdtS0rmdvpr2uIJtkZZohontfc2b3AV9frTrTG9zEDFN7yKG2HvJUsz0 aa8Um6Ee27UfYYy83tZF3/RBAgrJvCfDQuA1t/RiKB/ub8vpB0GjVodGr4seJade wen96I7aw7tQWE3J2YcwSKxqh1627QkP1Y9/Ve6Y/CNdVB3OdpKWTohG2/iwBSFF tfkcnbt0UV5VPptwc6ANCA8AymMss/D/nQQE+gtskCmmfsAsXhGi7PNL0BFWdjYq Rk3DxFYN3UrtVe7X7A/eKvOERdAiKAQUSjaIQRUDsQDJi5Ag075gB+/1Va0tBPF2 N/Y= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:11 2025 by rpki-client