$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa File: f9d49fe9-a284-47e5-8002-41310ce8752e.roa (raw, json) Hash identifier: dupkiUSG0o64G8bO5e5EXYQkR7sQq7i+1VikmEc15Sc= Subject key identifier: 78:02:1F:6A:A2:96:8E:6E:EC:7D:82:46:60:71:74:54:EF:08:FB:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7753356CD8F463D5BF1D54842FD74355F578DBB5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa Signing time: Tue 13 May 2025 00:10:19 +0000 ROA not before: Tue 13 May 2025 00:10:19 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:53:35:6c:d8:f4:63:d5:bf:1d:54:84:2f:d7:43:55:f5:78:db:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:10:19 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=cfe2b10b6ae082a0ba5fe8a2f4fe05ef18c70bce19fd598da317004d987e9fa6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:4d:fe:0a:f9:5f:21:1c:3a:4e:1b:e4:cf: 5f:ec:5e:e6:30:15:9f:0d:0a:22:54:2d:ae:aa:3c: 3f:7b:7b:32:de:ea:63:c0:92:a5:64:67:02:98:c0: 94:c3:1d:b7:2c:0e:d2:f9:7c:4f:0f:72:89:c3:85: 52:80:6f:71:aa:92:ba:97:d8:ca:d5:44:36:4f:4f: bb:03:9f:06:e0:43:d1:d8:ef:eb:8f:d8:9a:73:7d: 8a:dd:5c:80:86:20:a8:69:cf:6b:ba:01:ae:a1:48: 08:1f:e6:2a:98:37:da:ed:ad:b0:fc:bd:e9:90:1e: 84:32:f3:c6:84:06:7f:2e:c0:9c:cb:18:f2:96:e0: 64:0d:89:37:ed:ea:e1:0e:61:08:75:12:77:7f:5d: 7d:fc:14:9d:52:3e:38:37:71:ff:91:7c:05:43:0b: 6b:5f:78:10:ab:22:d2:f8:99:37:08:fa:91:23:a3: b8:3d:60:95:81:b3:40:3f:0c:4f:1f:ae:15:91:24: 91:c2:87:82:e6:f7:4c:60:7b:af:f3:11:db:23:c6: 55:7c:66:75:6e:21:0c:ea:71:f4:23:14:f1:f6:77: 65:f2:16:98:03:90:05:54:e2:dd:19:d4:d0:03:36: 33:c3:74:ee:a5:d6:aa:8a:82:98:54:65:70:41:47: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:02:1F:6A:A2:96:8E:6E:EC:7D:82:46:60:71:74:54:EF:08:FB:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1040::/48 Signature Algorithm: sha256WithRSAEncryption 67:24:fd:9b:6e:f0:e0:58:34:fb:a4:3a:b2:fb:5a:9d:6e:6c: 18:80:a7:7f:70:cd:fd:b0:8c:fb:c2:99:29:f5:ce:a6:94:f9: 28:7f:69:d9:80:93:1b:8d:53:95:c7:5d:e1:8f:43:0b:ab:e4: 47:59:89:3f:f8:76:6c:95:5c:7e:3a:d8:22:7c:b5:44:aa:3b: 24:22:af:4e:16:0e:67:9e:de:a2:2e:bb:ac:94:bf:43:d3:eb: 2f:2f:dc:bc:7f:49:e4:d0:6c:2c:91:03:03:e3:76:08:b4:d0: 9e:73:a2:a7:79:d7:75:b9:85:9c:48:54:90:3c:d3:2e:a0:96: 9e:5f:42:b1:35:d7:86:ef:f1:11:6e:d4:12:88:58:e9:18:91: 64:dc:76:ea:61:08:14:9c:59:df:59:88:2f:e6:2a:9b:ee:af: 80:2c:85:b9:7f:20:80:b9:32:e6:00:92:00:27:1c:15:76:cc: 2a:c1:9f:ff:0c:fc:0e:f4:9f:0d:fa:d0:8a:4b:26:4f:62:67: 72:38:08:d7:22:08:c2:0d:16:b9:a0:4a:d9:c5:1b:4b:2b:f6: 38:f7:33:60:a3:f1:f2:1a:97:e1:b3:42:8a:c7:b7:87:8f:cb: 48:d3:88:1e:e7:34:f2:ab:5d:99:06:9f:12:54:22:8e:4c:3a: 7c:1a:93:03 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd1M1bNj0Y9W/HVSEL9dDVfV427UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMTAxOVoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAY2ZlMmIxMGI2YWUwODJhMGJhNWZl OGEyZjRmZTA1ZWYxOGM3MGJjZTE5ZmQ1OThkYTMxNzAwNGQ5ODdlOWZhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqFN/gr5XyEcOk4b5M9f7F7mMBWf DQoiVC2uqjw/e3sy3upjwJKlZGcCmMCUwx23LA7S+XxPD3KJw4VSgG9xqpK6l9jK 1UQ2T0+7A58G4EPR2O/rj9iac32K3VyAhiCoac9rugGuoUgIH+YqmDfa7a2w/L3p kB6EMvPGhAZ/LsCcyxjyluBkDYk37erhDmEIdRJ3f119/BSdUj44N3H/kXwFQwtr X3gQqyLS+Jk3CPqRI6O4PWCVgbNAPwxPH64VkSSRwoeC5vdMYHuv8xHbI8ZVfGZ1 biEM6nH0IxTx9ndl8haYA5AFVOLdGdTQAzYzw3TupdaqioKYVGVwQUe7dQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHgCH2qilo5u7H2CRmBxdFTvCPsEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y5ZDQ5ZmU5LWEyODQtNDdlNS04MDAyLTQxMzEwY2U4NzUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaABBAMA0GCSqGSIb3DQEBCwUAA4IBAQBnJP2bbvDgWDT7pDqy +1qdbmwYgKd/cM39sIz7wpkp9c6mlPkof2nZgJMbjVOVx13hj0MLq+RHWYk/+HZs lVx+OtgifLVEqjskIq9OFg5nnt6iLruslL9D0+svL9y8f0nk0GwskQMD43YItNCe c6Knedd1uYWcSFSQPNMuoJaeX0KxNdeG7/ERbtQSiFjpGJFk3HbqYQgUnFnfWYgv 5iqb7q+ALIW5fyCAuTLmAJIAJxwVdswqwZ//DPwO9J8N+tCKSyZPYmdyOAjXIgjC DRa5oErZxRtLK/Y49zNgo/HyGpfhs0KKx7eHj8tI04ge5zTyq12ZBp8SVCKOTDp8 GpMD -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:17 2025 by rpki-client