$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa File: f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa (raw, json) Hash identifier: iXcTmmNi+TEymVVWnrYe5kO2hd1X4zamDSv/NxkBJH0= Subject key identifier: 96:40:E0:E5:9D:CE:3C:CE:FE:E0:22:7B:24:16:8B:E7:41:2F:0E:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 788BF3F7A18B2488A0538C5E119AB6A542D581A3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa Signing time: Fri 16 May 2025 00:00:19 +0000 ROA not before: Fri 16 May 2025 00:00:19 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8b:f3:f7:a1:8b:24:88:a0:53:8c:5e:11:9a:b6:a5:42:d5:81:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:00:19 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=93368293b760cbe115c197da29c913ffb38904b8a350c222fe0853b0f8d11db5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:89:7c:de:66:4d:af:1c:61:dd:1c:b2:5a:af: ec:93:d5:0f:cb:99:23:f4:1e:f4:26:a9:a0:49:85: ec:cb:66:63:22:f1:85:1f:48:e7:7a:5c:07:b0:cf: 1f:ae:88:ac:80:74:a0:ab:9f:cc:c8:1a:c2:44:a5: e7:a3:b2:2f:9d:be:2a:61:c8:e2:c5:25:62:1e:33: e0:7f:6b:9f:3e:79:4e:d2:17:ee:a8:52:e8:67:b0: 56:d8:63:0c:e2:86:44:da:7c:c6:95:48:22:cd:9e: 89:1a:78:5f:52:d4:73:2c:7c:22:13:8e:f3:5b:e8: 3e:a0:31:8a:26:70:25:b7:8a:d6:9c:46:50:2d:a8: 6a:71:48:97:c6:08:14:e0:8a:79:cb:05:d0:44:ef: 5d:cc:ed:c7:b6:e6:f8:63:da:3d:f0:f0:1d:38:da: 7f:e0:af:76:ed:84:b3:05:02:e5:d5:6f:3d:93:27: 78:81:4a:28:d9:4b:f1:6e:7d:6e:e0:be:28:e7:bd: dc:22:85:b6:7c:fd:30:a4:1f:99:16:df:60:28:92: 2b:f2:95:fa:4a:b7:0f:45:d0:66:31:e5:47:18:b5: b6:bd:cb:f8:d2:cb:6f:b8:9b:f6:82:02:0a:14:4c: 3a:de:99:7f:cf:83:39:6c:c4:7a:10:bd:b9:1d:2a: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:40:E0:E5:9D:CE:3C:CE:FE:E0:22:7B:24:16:8B:E7:41:2F:0E:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:e080::/46 Signature Algorithm: sha256WithRSAEncryption 7e:93:ac:24:95:db:75:fd:c3:ae:8d:9f:b4:b0:d3:8a:4d:8e: b3:6d:09:85:1c:b3:fc:1d:c4:78:4b:a3:35:98:03:c2:2c:ce: c3:44:43:16:92:c8:dd:b1:3d:5f:9e:2c:cd:8c:a3:79:e3:35: 3d:1d:77:39:ce:18:7f:9e:64:1c:9e:6c:38:04:26:ad:4b:a6: 30:fd:89:b0:9f:26:b3:0c:0c:3b:ef:03:a3:0e:d1:75:a9:78: 6f:d8:ab:9c:58:b9:81:08:e7:7a:66:e6:bc:10:da:a1:9d:c8: 44:60:7a:94:7d:79:43:3a:aa:43:c2:ce:29:a7:c6:99:c8:69: e3:c5:ea:25:38:aa:8b:78:4e:2a:cf:3d:63:28:bb:dd:1a:ac: 38:56:1b:db:e9:48:d0:92:55:5e:d4:e3:8b:bb:d0:28:ed:cf: f4:77:3e:1e:38:ff:d8:32:87:b8:9d:46:cc:f8:15:25:e4:e3: 1c:fe:90:3d:63:77:08:6a:06:de:ae:1c:8e:f5:ed:88:9d:b5: 58:a6:b9:6f:c2:ff:4f:54:56:74:6d:2a:04:df:4b:9e:f8:55: 71:33:ac:92:f6:af:4c:06:d6:c7:69:45:cd:ea:57:e6:ae:7f: 0c:ed:73:ed:c6:8a:41:f4:24:08:8d:27:a8:63:60:b0:04:84: 97:54:ef:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeIvz96GLJIigU4xeEZq2pULVgaMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMDAxOVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOTMzNjgyOTNiNzYwY2JlMTE1YzE5 N2RhMjljOTEzZmZiMzg5MDRiOGEzNTBjMjIyZmUwODUzYjBmOGQxMWRiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIl83mZNrxxh3RyyWq/sk9UPy5kj 9B70JqmgSYXsy2ZjIvGFH0jnelwHsM8froisgHSgq5/MyBrCRKXno7Ivnb4qYcji xSViHjPgf2ufPnlO0hfuqFLoZ7BW2GMM4oZE2nzGlUgizZ6JGnhfUtRzLHwiE47z W+g+oDGKJnAlt4rWnEZQLahqcUiXxggU4Ip5ywXQRO9dzO3Htub4Y9o98PAdONp/ 4K927YSzBQLl1W89kyd4gUoo2Uvxbn1u4L4o573cIoW2fP0wpB+ZFt9gKJIr8pX6 SrcPRdBmMeVHGLW2vcv40stvuJv2ggIKFEw63pl/z4M5bMR6EL25HSrXTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJZA4OWdzjzO/uAieyQWi+dBLw4dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1M2Y3YTcyLTY0YzAtNDBlZS05YWI2LWRiMGUwNGIxYjI4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9+CAMA0GCSqGSIb3DQEBCwUAA4IBAQB+k6wkldt1/cOujZ+0 sNOKTY6zbQmFHLP8HcR4S6M1mAPCLM7DREMWksjdsT1fnizNjKN54zU9HXc5zhh/ nmQcnmw4BCatS6Yw/YmwnyazDAw77wOjDtF1qXhv2KucWLmBCOd6Zua8ENqhnchE YHqUfXlDOqpDws4pp8aZyGnjxeolOKqLeE4qzz1jKLvdGqw4Vhvb6UjQklVe1OOL u9Ao7c/0dz4eOP/YMoe4nUbM+BUl5OMc/pA9Y3cIagberhyO9e2InbVYprlvwv9P VFZ0bSoE30ue+FVxM6yS9q9MBtbHaUXN6lfmrn8M7XPtxopB9CQIjSeoY2CwBISX VO9F -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:23 2025 by rpki-client