$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: atA1jmuAE45ZMCicYfTpC6EnzNQxKLQiSbN2FuMxmR0= Subject key identifier: 2C:57:09:B4:D2:BF:49:7F:43:44:37:3B:EA:A0:A5:42:1E:6C:1C:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 780C016F693D894DD409C4F31DEDF831A8C59710 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Sat 12 Jul 2025 00:01:28 +0000 ROA not before: Sat 12 Jul 2025 00:01:28 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0c:01:6f:69:3d:89:4d:d4:09:c4:f3:1d:ed:f8:31:a8:c5:97:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 12 00:01:28 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=c8ed73029f77bb7d460b987939124a77493ee7c97a18adccb6ad37701164d0d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:98:93:e5:45:04:bd:b8:39:ff:12:a1:66: 8d:1b:3e:21:6a:53:59:52:e4:99:ee:45:ae:7f:bd: 4a:dd:2d:7b:d8:a3:a7:05:a5:7f:a5:df:c3:12:fc: e7:19:2a:58:8d:4b:ae:a9:23:9d:72:1d:18:33:31: 53:b7:9e:3d:d2:8f:de:d8:ed:63:d4:cd:c0:66:45: 35:f9:c7:4a:19:d7:a9:c6:a3:ef:11:58:96:72:9d: 50:d2:1a:a4:ac:61:c5:80:12:60:0f:f9:f7:82:84: 90:8e:1e:58:d5:30:86:f2:eb:d6:22:fe:bd:80:38: 64:d8:b0:bd:f6:aa:7e:44:23:fa:2b:6b:b8:85:32: 7a:a9:62:7a:d2:76:3d:b1:95:1c:8d:37:a4:e2:05: a7:ad:77:ce:ae:43:7a:e6:66:c4:79:31:fd:d7:41: ac:26:76:cb:6b:18:41:c3:c0:c4:c2:1c:b0:8a:84: 0a:c5:42:db:12:72:b1:26:4c:5b:af:ca:82:18:e1: 75:d1:d1:ec:3a:66:d4:0e:d8:77:ab:16:94:f8:1e: bb:06:86:72:f7:29:20:67:3d:34:d6:17:c4:5b:1e: 36:30:93:ab:88:7c:aa:e1:8c:c1:32:db:cd:f9:e4: 58:50:bf:4b:c1:ee:5b:7d:f7:8b:1f:4f:56:ff:91: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:57:09:B4:D2:BF:49:7F:43:44:37:3B:EA:A0:A5:42:1E:6C:1C:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption be:4f:e5:15:24:a1:8c:9b:64:fa:84:75:5a:2c:f2:89:9b:6a: f4:ba:d2:86:8f:de:09:06:7f:96:cf:8d:44:96:a8:a5:31:7a: a3:5b:2f:a7:e0:f8:41:b8:2d:b0:36:67:27:ad:69:8f:89:38: e5:eb:cf:8c:68:2f:c6:4e:28:25:85:21:57:3b:aa:4f:4a:b1: cb:f4:5c:f3:ca:23:41:82:37:7e:0d:1f:c9:ca:38:44:9d:ba: 55:52:14:db:2d:ac:60:f7:5b:9b:af:36:5b:66:9c:e3:0c:43: 02:3a:75:fe:26:a4:01:bc:bc:00:9e:4f:cd:a1:f3:46:25:52: 52:7c:1f:b5:e5:e3:2a:f7:fd:77:b8:ed:c5:8a:d2:df:8c:15: 71:98:76:a1:1a:75:26:f7:f2:85:29:15:5b:2d:ee:5d:14:05: 06:f2:4f:da:fb:da:b3:b2:92:3f:8a:93:30:67:31:2f:db:77: 53:5e:af:a0:f6:fb:11:f3:73:e3:15:a6:75:ed:67:8f:4c:a0: a5:09:b0:92:4e:65:63:29:ff:d5:75:20:61:41:4a:4c:68:84: 4e:86:21:f3:75:c1:3e:41:31:11:b0:6c:db:8a:39:9a:8e:18: ea:5e:8f:e2:a7:89:ee:9d:e6:9e:77:94:34:cf:60:f1:10:d2: 9a:45:f0:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeAwBb2k9iU3UCcTzHe34MajFlxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxMjAwMDEyOFoX DTI1MDgxNjIzNTk1OVowejFJMEcGA1UEBRNAYzhlZDczMDI5Zjc3YmI3ZDQ2MGI5 ODc5MzkxMjRhNzc0OTNlZTdjOTdhMThhZGNjYjZhZDM3NzAxMTY0ZDBkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIGYk+VFBL24Of8SoWaNGz4halNZ UuSZ7kWuf71K3S172KOnBaV/pd/DEvznGSpYjUuuqSOdch0YMzFTt5490o/e2O1j 1M3AZkU1+cdKGdepxqPvEViWcp1Q0hqkrGHFgBJgD/n3goSQjh5Y1TCG8uvWIv69 gDhk2LC99qp+RCP6K2u4hTJ6qWJ60nY9sZUcjTek4gWnrXfOrkN65mbEeTH910Gs JnbLaxhBw8DEwhywioQKxULbEnKxJkxbr8qCGOF10dHsOmbUDth3qxaU+B67BoZy 9ykgZz001hfEWx42MJOriHyq4YzBMtvN+eRYUL9Lwe5bffeLH09W/5G/9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCxXCbTSv0l/Q0Q3O+qgpUIebByQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAL5P5RUkoYybZPqEdVos 8ombavS60oaP3gkGf5bPjUSWqKUxeqNbL6fg+EG4LbA2ZyetaY+JOOXrz4xoL8ZO KCWFIVc7qk9Kscv0XPPKI0GCN34NH8nKOESdulVSFNstrGD3W5uvNltmnOMMQwI6 df4mpAG8vACeT82h80YlUlJ8H7Xl4yr3/Xe47cWK0t+MFXGYdqEadSb38oUpFVst 7l0UBQbyT9r72rOykj+KkzBnMS/bd1Ner6D2+xHzc+MVpnXtZ49MoKUJsJJOZWMp /9V1IGFBSkxohE6GIfN1wT5BMRGwbNuKOZqOGOpej+Knie6d5p53lDTPYPEQ0ppF 8A8= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:23 2025 by rpki-client