$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa File: f30265ee-dfe7-4906-974a-06db74656ac8.roa (raw, json) Hash identifier: mcV1T0c75KwybZUEeqfqWHAEshgjEdmqqpyRr7HQmqQ= Subject key identifier: 29:67:3F:C6:72:BD:69:14:A0:EB:78:EA:D2:54:02:FA:9C:9F:B2:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 052C7C53C49EDC116914139FE82271087AC6EC53 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa Signing time: Tue 13 May 2025 00:10:57 +0000 ROA not before: Tue 13 May 2025 00:10:57 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 00:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2c:7c:53:c4:9e:dc:11:69:14:13:9f:e8:22:71:08:7a:c6:ec:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:10:57 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=16e8231571fa67a587e17a36b0c694b0f0b68bf562053fa12b74ed92f9c53188, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:38:58:45:11:4e:c1:98:82:45:f8:03:13: de:14:32:85:dc:d1:f2:fc:1a:22:a0:e2:75:98:06: 7c:d0:54:f0:92:90:fb:be:fa:6e:42:29:ab:67:74: fc:7e:7f:b1:cc:7f:ad:6f:94:f6:a2:4d:5c:23:60: f5:28:56:1c:c7:06:d8:ee:2c:64:bc:f1:6d:da:89: 6a:50:02:54:cd:f1:7b:5d:8e:97:ef:c2:e5:a5:f0: 19:35:ac:a9:b6:e0:fe:dd:8d:97:60:b0:ce:44:7b: a2:e3:27:d9:ea:da:56:8d:fc:ab:ba:3c:31:85:57: 73:bd:32:ee:f8:f7:b4:fe:61:7c:3a:f6:ac:40:26: af:0e:8f:81:b3:6e:55:e0:42:f5:8c:9d:bc:e0:0a: 55:e8:01:99:7a:0a:49:57:11:39:c7:c5:d7:5b:8c: e3:2f:56:38:66:fc:e8:98:7b:07:d4:9b:31:d9:5d: 9d:23:e1:d4:10:31:3b:4c:d8:5c:bd:49:20:e5:ea: 8d:64:37:56:cd:b1:01:a3:87:f4:f9:a9:df:cf:6b: 9a:cc:52:47:95:80:6d:b9:fa:75:7a:e3:f8:0f:ed: db:7e:76:dc:a1:e9:5a:b3:2d:f3:cf:5f:e6:84:dd: 98:e9:13:c2:c6:87:0a:e3:3b:01:e5:e5:19:50:0a: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:67:3F:C6:72:BD:69:14:A0:EB:78:EA:D2:54:02:FA:9C:9F:B2:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption ac:e5:b4:73:b4:30:1c:ea:d2:a6:7d:6d:12:c5:e6:31:e2:d1: ed:51:6e:48:72:67:bf:26:a7:7b:92:4b:6f:aa:e8:f8:a6:c8: 0b:25:70:da:cb:5b:8b:03:c6:75:49:98:c5:f8:24:4a:a6:0b: 41:57:b8:65:fa:c0:cd:f3:23:e2:2b:0d:82:a9:6f:06:f7:4b: 2b:b6:2b:19:f4:bc:9c:49:01:4b:d6:57:4f:ed:26:e0:4b:10: 3d:ef:f1:2d:3b:a9:fc:6d:12:da:ef:0e:89:67:04:1c:6b:53: ef:dd:79:99:ec:8e:fd:f7:ee:65:d0:6a:8a:85:8c:95:32:e6: 79:6a:b2:82:27:ce:41:c4:fc:44:7f:6d:7e:f2:69:13:06:3d: 04:ad:ef:c5:e7:35:4a:10:d5:46:40:32:b2:ef:8a:04:ab:63: 11:3d:ba:42:4c:62:f4:c3:8c:51:e4:5f:86:70:d2:9b:71:78: 0b:f3:23:3a:61:f7:c3:50:19:ca:89:d4:c1:49:2a:73:8b:31: d1:4d:46:4f:b1:e2:9d:02:39:44:e5:a9:3c:41:15:3d:45:81: 4a:b8:02:76:41:79:8f:b5:fd:db:4a:3f:e8:b2:78:72:d2:66: 2e:f9:3b:56:62:a6:6f:b4:88:0b:b8:ce:1d:9a:3f:27:51:1d: ae:86:ae:fb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBSx8U8Se3BFpFBOf6CJxCHrG7FMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMTA1N1oX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAMTZlODIzMTU3MWZhNjdhNTg3ZTE3 YTM2YjBjNjk0YjBmMGI2OGJmNTYyMDUzZmExMmI3NGVkOTJmOWM1MzE4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPQ4WEURTsGYgkX4AxPeFDKF3NHy /BoioOJ1mAZ80FTwkpD7vvpuQimrZ3T8fn+xzH+tb5T2ok1cI2D1KFYcxwbY7ixk vPFt2olqUAJUzfF7XY6X78LlpfAZNayptuD+3Y2XYLDORHui4yfZ6tpWjfyrujwx hVdzvTLu+Pe0/mF8OvasQCavDo+Bs25V4EL1jJ284ApV6AGZegpJVxE5x8XXW4zj L1Y4ZvzomHsH1Jsx2V2dI+HUEDE7TNhcvUkg5eqNZDdWzbEBo4f0+anfz2uazFJH lYBtufp1euP4D+3bfnbcoelasy3zz1/mhN2Y6RPCxocK4zsB5eUZUApliQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFClnP8ZyvWkUoOt46tJUAvqcn7JnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzMDI2NWVlLWRmZTctNDkwNi05NzRhLTA2ZGI3NDY1NmFjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMCgMA0GCSqGSIb3DQEBCwUAA4IBAQCs5bRztDAc6tKmfW0S xeYx4tHtUW5Icme/Jqd7kktvquj4psgLJXDay1uLA8Z1SZjF+CRKpgtBV7hl+sDN 8yPiKw2CqW8G90srtisZ9LycSQFL1ldP7SbgSxA97/EtO6n8bRLa7w6JZwQca1Pv 3XmZ7I799+5l0GqKhYyVMuZ5arKCJ85BxPxEf21+8mkTBj0Ere/F5zVKENVGQDKy 74oEq2MRPbpCTGL0w4xR5F+GcNKbcXgL8yM6YffDUBnKidTBSSpzizHRTUZPseKd AjlE5ak8QRU9RYFKuAJ2QXmPtf3bSj/osnhy0mYu+TtWYqZvtIgLuM4dmj8nUR2u hq77 -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:17 2025 by rpki-client