$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa File: 6982f3ac-c7ae-423c-a028-517d7541d973.roa (raw, json) Hash identifier: f/eQpqGbNPQvmnQ9yoefIJfjBe5BzYvQaZ/qi+sd/+k= Subject key identifier: 60:2D:91:95:A9:43:8E:33:2A:AA:38:6F:41:ED:30:30:64:0F:A6:4F Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 604B599BBABB4874E38A477EC293E83980227E15 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa Signing time: Mon 07 Jul 2025 16:00:03 +0000 ROA not before: Mon 07 Jul 2025 16:00:03 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4b:59:9b:ba:bb:48:74:e3:8a:47:7e:c2:93:e8:39:80:22:7e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 7 16:00:03 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=23639cfc1e2152d9e6d444ad72f4e9ce10706692879768a450031ad714e757c7, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:fa:50:0f:62:5e:2e:33:70:27:c7:57:0d: 99:98:ea:ef:6e:c0:dd:80:64:dd:fb:d6:e0:9d:31: 93:32:3d:ae:db:f1:a8:1e:b5:57:02:e9:1a:fe:46: 09:af:23:5e:09:66:c8:f2:0e:6e:08:23:71:80:23: 25:8b:a6:4c:8e:eb:53:66:8a:b4:fa:d8:ef:3c:b7: d0:2b:8b:ed:6a:4f:02:e6:44:cb:55:c8:ee:7e:2e: 18:f4:1a:0a:64:45:f6:ac:bd:f2:d7:f6:92:2c:b7: 23:ad:85:88:dd:88:7d:df:e3:d1:28:e1:ec:84:9b: f7:e1:8e:0a:62:47:f6:e9:e4:ca:56:06:55:a0:9a: ea:f4:50:51:4a:62:f0:ae:83:3b:cc:ec:b3:82:56: 64:ec:a7:7f:29:f5:bf:e4:5f:d3:20:8b:48:2a:4b: 20:25:d9:e1:78:bf:d6:d7:e2:40:7d:c9:ff:f7:ac: 8d:a9:39:4b:e2:64:83:81:50:74:ea:19:17:90:f4: 08:87:e6:f9:f2:58:5b:9e:38:f4:3c:fc:14:10:ed: 26:b1:f3:91:a4:b3:ac:58:da:62:d3:ff:22:be:71: 3a:6d:37:15:78:b4:a2:63:31:ae:48:c2:cc:9a:a6: 17:fe:21:fd:66:05:3d:00:7d:72:36:19:52:2f:9d: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2D:91:95:A9:43:8E:33:2A:AA:38:6F:41:ED:30:30:64:0F:A6:4F X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:8d:3a:c8:0a:f7:7b:f4:32:de:8e:d8:6f:63:0f:50:2e:b1: 61:9f:97:dd:6f:6f:59:b9:ef:69:86:6f:f6:d7:67:e2:24:54: 23:a8:a8:60:ed:b2:2e:10:5c:18:a5:8e:55:d2:07:39:4e:1a: e4:3e:02:62:34:76:e3:5c:c2:2d:1a:e0:4a:ba:3e:d2:7d:d2: 65:d6:ec:72:d6:1d:c1:32:a0:96:e4:49:65:f3:b2:c2:93:87: f3:5f:b9:b2:1f:d7:5b:87:05:fc:56:9d:f9:1b:72:e4:8b:75: f8:ec:c1:6f:df:89:d8:0c:1f:5e:be:a8:df:a9:98:b6:42:8d: c6:86:17:b3:7e:de:57:59:d1:0b:c4:4c:6a:dd:d6:74:4d:61: 5a:75:81:13:52:d2:89:39:e6:ad:0e:03:c4:63:a6:36:cf:00: 35:d2:b0:3c:19:b8:af:65:d8:c9:8c:dd:0a:b0:a4:2c:cd:d5: ae:59:14:ed:f3:38:a9:13:a4:82:b9:c7:5a:97:03:94:68:c4: 5a:d1:95:c3:4b:d5:b7:33:90:d5:65:c1:bd:85:57:ed:33:e8: 79:e4:04:ae:cc:51:4e:7f:31:76:15:41:5b:9c:d2:ac:33:5c: 53:51:7e:fb:c0:59:cb:a8:db:7b:a8:85:74:51:37:44:e2:cf: 40:c2:7b:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYEtZm7q7SHTjikd+wpPoOYAifhUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDcwNzE2MDAwM1oX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMjM2MzljZmMxZTIxNTJkOWU2ZDQ0 NGFkNzJmNGU5Y2UxMDcwNjY5Mjg3OTc2OGE0NTAwMzFhZDcxNGU3NTdjNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnH6UA9iXi4zcCfHVw2ZmOrvbsDd gGTd+9bgnTGTMj2u2/GoHrVXAuka/kYJryNeCWbI8g5uCCNxgCMli6ZMjutTZoq0 +tjvPLfQK4vtak8C5kTLVcjufi4Y9BoKZEX2rL3y1/aSLLcjrYWI3Yh93+PRKOHs hJv34Y4KYkf26eTKVgZVoJrq9FBRSmLwroM7zOyzglZk7Kd/KfW/5F/TIItIKksg JdnheL/W1+JAfcn/96yNqTlL4mSDgVB06hkXkPQIh+b58lhbnjj0PPwUEO0msfOR pLOsWNpi0/8ivnE6bTcVeLSiYzGuSMLMmqYX/iH9ZgU9AH1yNhlSL5138QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGAtkZWpQ44zKqo4b0HtMDBkD6ZPMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzY5ODJmM2FjLWM3YWUtNDIzYy1hMDI4LTUxN2Q3NTQxZDk3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAOzABAwDQYJKoZIhvcNAQELBQADggEBAFuNOsgK93v0Mt6O2G9j D1AusWGfl91vb1m572mGb/bXZ+IkVCOoqGDtsi4QXBiljlXSBzlOGuQ+AmI0duNc wi0a4Eq6PtJ90mXW7HLWHcEyoJbkSWXzssKTh/NfubIf11uHBfxWnfkbcuSLdfjs wW/fidgMH16+qN+pmLZCjcaGF7N+3ldZ0QvETGrd1nRNYVp1gRNS0ok55q0OA8Rj pjbPADXSsDwZuK9l2MmM3QqwpCzN1a5ZFO3zOKkTpIK5x1qXA5RoxFrRlcNL1bcz kNVlwb2FV+0z6HnkBK7MUU5/MXYVQVuc0qwzXFNRfvvAWcuo23uohXRRN0Tiz0DC ewI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:22:41 2025 by rpki-client