$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa File: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (raw, json) Hash identifier: bFH370PmA8NdApji5JUEhv3LC5nPfUtJhanuTSl2WF8= Subject key identifier: 4E:86:88:5B:67:DD:D9:14:1B:FD:F0:88:DF:71:FC:6B:54:F4:8F:80 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4E6679E832CF46A35674A7224BE9FCB841310059 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa Signing time: Fri 16 May 2025 16:00:07 +0000 ROA not before: Fri 16 May 2025 16:00:07 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 15:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:66:79:e8:32:cf:46:a3:56:74:a7:22:4b:e9:fc:b8:41:31:00:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: May 16 16:00:07 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=7a88017196966253a213427cf750dc0ef044fd7044193691dbb305cd3af2ee50, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:ff:e1:c9:07:59:ab:e2:ee:27:44:71:d0: 99:4b:c4:0a:7c:a8:e3:32:97:30:8d:59:a9:c9:38: cf:a7:61:b2:40:92:65:f7:c5:41:10:21:7a:e9:9b: 1f:28:42:00:9c:ae:7a:2a:5e:6b:e7:b1:d5:4f:f0: d5:22:3b:e3:91:e5:6f:93:26:15:14:80:da:57:3a: 5d:b9:ff:7a:bd:40:d5:f3:2c:b3:ca:e4:fd:4d:b6: 26:2d:13:56:aa:c9:e0:16:59:96:9e:c7:f1:cf:c6: aa:de:23:4a:8c:5b:2a:ea:a0:75:73:f5:ee:2a:a4: 7d:75:b1:15:9e:a1:cf:eb:40:bd:6b:45:17:54:f5: c6:81:23:19:e1:6f:ea:5c:fc:ad:6d:43:7c:a2:84: b2:48:d7:36:0a:93:6a:4d:7e:3f:09:83:75:3b:5a: 83:33:7c:f1:7d:5a:55:95:b1:7f:31:39:4b:84:61: 2a:00:bb:08:75:62:57:30:a2:c0:2a:b9:75:6e:ae: a6:8e:3f:96:74:b4:7a:bd:04:6f:e3:98:62:36:dc: b4:d5:d3:9a:cd:af:7c:e3:26:67:e4:bb:8b:cb:2f: 7f:f8:fc:05:cc:2d:43:c8:4f:53:f2:b8:3e:9b:a5: 95:83:5b:36:d9:97:69:8c:9c:8c:b9:95:87:ce:ca: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:86:88:5B:67:DD:D9:14:1B:FD:F0:88:DF:71:FC:6B:54:F4:8F:80 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 3b:4e:8f:14:65:55:00:ba:6e:21:56:23:6e:9c:1e:d6:f6:ab: f3:ef:20:2f:84:d1:fd:96:0c:ac:32:1b:af:e5:ee:cf:03:c6: c2:b1:7f:4e:2b:09:2c:e6:f9:42:6d:49:fc:35:f1:3c:1d:6c: 7c:9e:ad:14:7e:91:92:31:fa:8a:f7:26:52:17:8d:0f:4b:a2: c5:f4:6b:2a:24:e0:e4:97:76:b5:61:d5:32:4b:ff:c1:12:7d: f9:c8:d1:d1:e2:0a:79:13:08:6a:36:f4:7d:55:f1:01:c2:fc: b5:aa:25:39:a9:31:09:2a:dd:91:d8:40:03:1e:70:38:d7:62: a0:e2:9e:b7:d5:51:2b:e4:ba:06:35:18:f2:3e:5e:25:b3:b3: 20:a4:08:92:48:18:22:82:fd:a7:3e:34:3c:58:3d:35:77:95: 0c:a0:9b:a6:40:32:d2:e3:d1:96:b4:69:07:26:90:20:49:9a: b4:dc:a2:c4:43:31:ce:5e:60:14:49:33:8f:ba:eb:b5:37:30: aa:f8:62:9b:91:6c:bb:4d:ca:cc:2a:26:bf:95:04:9b:ab:52: 79:d2:26:7c:b1:5a:50:7f:7f:d3:b4:bc:dc:01:61:e4:76:73: 0c:3a:5c:de:c9:bc:85:c1:8f:b1:b0:e6:b9:e2:06:c5:f7:44: c5:4f:bc:ab -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTmZ56DLPRqNWdKciS+n8uEExAFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDUxNjE2MDAwN1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAN2E4ODAxNzE5Njk2NjI1M2EyMTM0 MjdjZjc1MGRjMGVmMDQ0ZmQ3MDQ0MTkzNjkxZGJiMzA1Y2QzYWYyZWU1MDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycP/4ckHWavi7idEcdCZS8QKfKjj MpcwjVmpyTjPp2GyQJJl98VBECF66ZsfKEIAnK56Kl5r57HVT/DVIjvjkeVvkyYV FIDaVzpduf96vUDV8yyzyuT9TbYmLRNWqsngFlmWnsfxz8aq3iNKjFsq6qB1c/Xu KqR9dbEVnqHP60C9a0UXVPXGgSMZ4W/qXPytbUN8ooSySNc2CpNqTX4/CYN1O1qD M3zxfVpVlbF/MTlLhGEqALsIdWJXMKLAKrl1bq6mjj+WdLR6vQRv45hiNty01dOa za984yZn5LuLyy9/+PwFzC1DyE9T8rg+m6WVg1s22ZdpjJyMuZWHzsrXsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE6GiFtn3dkUG/3wiN9x/GtU9I+AMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzBiMGMyZDE4LTJiNDItNGU1My05ZTZhLWQ2ZjdkNWRjMjMzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQA7To8UZVUAum4hViNu nB7W9qvz7yAvhNH9lgysMhuv5e7PA8bCsX9OKwks5vlCbUn8NfE8HWx8nq0UfpGS MfqK9yZSF40PS6LF9GsqJODkl3a1YdUyS//BEn35yNHR4gp5EwhqNvR9VfEBwvy1 qiU5qTEJKt2R2EADHnA412Kg4p631VEr5LoGNRjyPl4ls7MgpAiSSBgigv2nPjQ8 WD01d5UMoJumQDLS49GWtGkHJpAgSZq03KLEQzHOXmAUSTOPuuu1NzCq+GKbkWy7 TcrMKia/lQSbq1J50iZ8sVpQf3/TtLzcAWHkdnMMOlzeybyFwY+xsOa54gbF90TF T7yr -----END CERTIFICATE-----Generated at Mon Jun 2 06:15:33 2025 by rpki-client