$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0522006-6063-4b32-b972-6b9c57c75a41.roa File: f0522006-6063-4b32-b972-6b9c57c75a41.roa (raw, json) Hash identifier: yTbZEv7jSt5QA+oRXZmG5ljdsA9YVUAPHwkkTRl/mwM= Subject key identifier: FA:A3:F7:60:9D:74:52:A1:CB:E8:DF:95:F3:0C:47:FC:FB:20:8F:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58ECC3705340C1E223E544A03BC7EE807624F981 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0522006-6063-4b32-b972-6b9c57c75a41.roa Signing time: Wed 14 May 2025 00:11:24 +0000 ROA not before: Wed 14 May 2025 00:11:24 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 00:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ec:c3:70:53:40:c1:e2:23:e5:44:a0:3b:c7:ee:80:76:24:f9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:11:24 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=828e37186f5b9b813776c976284a50697e9e1fda91563aa3f4c1037537839d36, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f9:be:15:e8:af:d2:c4:0e:bf:40:c7:d0:cf: fd:f8:81:ef:59:8a:38:43:28:e0:0f:3d:a9:04:06: a4:ba:0f:59:c5:f6:0f:55:4e:fb:38:b4:b4:8f:ef: 51:1a:40:fe:40:bd:09:39:f5:96:eb:c5:ce:c5:19: 76:b4:b2:33:11:80:08:a2:f9:59:f4:e5:2c:5c:70: 45:d0:66:12:67:17:12:12:0c:b0:6b:40:20:91:0b: 53:d4:78:c0:57:c5:69:65:88:f2:40:14:b8:55:07: 96:af:f2:eb:b7:bc:f0:31:be:c8:5d:b9:55:59:1b: 47:ef:12:99:7c:a7:7c:4f:d4:02:fc:ca:38:d0:53: b6:fc:f3:32:bf:1d:cf:de:4b:c5:60:da:34:f4:d9: 2a:32:93:34:ca:23:fc:07:3a:57:1f:10:62:1a:4f: 52:a7:09:40:8e:01:45:98:33:89:3c:4e:fb:2e:09: 28:86:8f:de:04:e7:8c:ea:3b:38:51:ca:77:a1:80: 63:6c:0f:af:f3:bf:ba:fc:65:a0:07:51:e6:3d:68: c5:29:45:75:2d:3e:35:10:f2:f0:f5:ed:22:f7:1a: 0e:39:d8:22:0a:42:cf:44:7e:89:66:36:b0:2a:d0: 1b:3e:2f:2f:87:2b:60:c0:6d:e8:8e:37:90:de:7c: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A3:F7:60:9D:74:52:A1:CB:E8:DF:95:F3:0C:47:FC:FB:20:8F:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0522006-6063-4b32-b972-6b9c57c75a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b080::/48 Signature Algorithm: sha256WithRSAEncryption 2f:7a:95:b1:1f:c5:20:e6:34:4c:b1:26:b0:a2:73:27:61:69: bf:2c:81:bf:dc:f2:f1:c9:50:b4:5a:ca:64:95:1d:3e:ef:00: 34:10:0f:f4:d4:52:49:d1:da:ea:41:a5:8b:68:77:bd:d3:af: e2:85:40:f1:b3:f0:26:08:2b:2f:a1:d3:83:b8:1d:b3:16:51: 41:ae:22:9c:f7:b5:dc:05:a3:6c:82:d6:04:3a:2f:0d:f2:21: a3:ec:f0:b1:7a:e5:b3:0b:d0:7e:08:5e:c8:df:ba:de:95:98: a5:3e:76:1d:ce:ac:77:29:1c:73:c1:8e:f6:1e:ee:09:9b:2d: c8:d6:4d:5a:b0:75:b5:c6:32:1f:e7:08:83:d2:33:c7:a3:93: e0:52:7a:bc:e3:38:3f:a3:59:c3:0f:dd:11:d1:5b:fd:6f:bb: ea:4d:2c:96:34:8f:1e:1c:96:1c:29:45:0f:51:90:31:df:5e: ff:ad:1d:ae:43:28:8c:06:55:ff:df:2e:cb:f0:26:3c:bf:da: 82:0a:0e:bb:ec:5a:39:b2:3a:bc:b8:4d:d2:7c:a2:9f:e4:a6: 61:82:12:fb:71:c6:af:3b:52:13:3d:bf:14:c9:a9:e3:63:2b: 63:55:14:32:f7:38:e1:e7:42:2a:80:09:35:a0:58:88:f1:a7: b1:82:1a:d1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWOzDcFNAweIj5USgO8fugHYk+YEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMTEyNFoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAODI4ZTM3MTg2ZjViOWI4MTM3NzZj OTc2Mjg0YTUwNjk3ZTllMWZkYTkxNTYzYWEzZjRjMTAzNzUzNzgzOWQzNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fm+Feiv0sQOv0DH0M/9+IHvWYo4 QyjgDz2pBAakug9ZxfYPVU77OLS0j+9RGkD+QL0JOfWW68XOxRl2tLIzEYAIovlZ 9OUsXHBF0GYSZxcSEgywa0AgkQtT1HjAV8VpZYjyQBS4VQeWr/Lrt7zwMb7IXblV WRtH7xKZfKd8T9QC/Mo40FO2/PMyvx3P3kvFYNo09NkqMpM0yiP8BzpXHxBiGk9S pwlAjgFFmDOJPE77Lgkoho/eBOeM6js4Ucp3oYBjbA+v87+6/GWgB1HmPWjFKUV1 LT41EPLw9e0i9xoOOdgiCkLPRH6JZjawKtAbPi8vhytgwG3ojjeQ3nxoGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPqj92CddFKhy+jflfMMR/z7II/FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwNTIyMDA2LTYwNjMtNGIzMi1iOTcyLTZiOWM1N2M3NWE0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALCAMA0GCSqGSIb3DQEBCwUAA4IBAQAvepWxH8Ug5jRMsSaw onMnYWm/LIG/3PLxyVC0WspklR0+7wA0EA/01FJJ0drqQaWLaHe906/ihUDxs/Am CCsvodODuB2zFlFBriKc97XcBaNsgtYEOi8N8iGj7PCxeuWzC9B+CF7I37relZil PnYdzqx3KRxzwY72Hu4Jmy3I1k1asHW1xjIf5wiD0jPHo5PgUnq84zg/o1nDD90R 0Vv9b7vqTSyWNI8eHJYcKUUPUZAx317/rR2uQyiMBlX/3y7L8CY8v9qCCg677Fo5 sjq8uE3SfKKf5KZhghL7ccavO1ITPb8UyanjYytjVRQy9zjh50IqgAk1oFiI8aex ghrR -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:19 2025 by rpki-client