$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa File: 07bbdcc6-3088-4488-9174-6e4b19fef87e.roa (raw, json) Hash identifier: q4N/y0Hq3fEFAiikw7I5cXr4tVnu8b47+uP83/2DOR4= Subject key identifier: 1C:F9:B6:4E:4D:20:C0:5C:F4:2D:4A:29:99:E0:2A:1C:57:D9:7D:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B0E0B30382AAD1550752E53677ECADBE65FCA48 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa Signing time: Fri 11 Jul 2025 00:00:19 +0000 ROA not before: Fri 11 Jul 2025 00:00:19 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0e:0b:30:38:2a:ad:15:50:75:2e:53:67:7e:ca:db:e6:5f:ca:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 11 00:00:19 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=8fdf1addce3ebbdf204403affd721b261e3ec46785481fec56d6f74ad31165fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:3d:23:13:91:1a:f2:da:06:57:d1:c0:36: 6e:1b:44:a7:e2:f7:63:78:78:10:cb:12:73:79:d1: de:af:0a:23:e7:a8:0c:57:66:1e:e9:ca:41:54:7c: 5f:cc:d5:8d:22:b8:1a:ee:35:a0:a3:51:4b:a6:e3: 66:e0:3c:aa:0f:2e:80:9f:e3:79:96:08:ef:0d:a5: 15:90:e6:c8:ea:19:7f:10:6d:65:d6:3a:4f:f9:1a: fa:ab:21:54:45:33:50:69:58:dc:5a:b4:be:fe:72: 46:fc:99:e0:f9:12:17:11:c6:84:66:01:ea:13:d9: 0c:3f:da:bc:3a:cf:48:4d:97:a2:26:67:c3:3d:dd: 07:25:fb:5f:b6:11:78:04:11:be:c2:a7:f4:fb:92: 33:11:7e:ab:d9:6a:bf:99:a5:1b:6f:f6:34:2f:7c: ab:1f:2f:f8:60:ed:f8:3d:77:82:48:ff:4a:04:03: 6b:d9:12:4d:28:a9:65:e1:81:6f:50:7a:98:39:a6: 0b:ac:69:b2:25:c3:78:d8:ba:3f:8b:f9:c2:84:f2: 01:18:84:86:23:fa:ac:e7:d6:47:6a:8e:cf:32:57: 73:56:56:50:b2:38:6b:f0:7d:8a:5f:e0:80:b7:02: ef:67:a9:98:61:02:b9:84:21:df:af:07:ba:cd:e8: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F9:B6:4E:4D:20:C0:5C:F4:2D:4A:29:99:E0:2A:1C:57:D9:7D:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:2000::/40 Signature Algorithm: sha256WithRSAEncryption 82:59:2f:76:e9:97:8a:27:61:77:83:f0:53:40:99:98:e2:a7: c2:ce:0e:2b:15:a6:a5:85:1c:9f:47:61:75:ae:c1:55:3a:04: a1:cf:a5:90:e7:0b:0d:59:6b:07:84:12:41:b9:75:23:53:62: 40:88:a9:0f:be:7b:90:d1:cb:5b:c0:d3:d6:47:09:5a:ff:fb: 62:f3:ef:72:4f:95:42:73:72:8a:ff:a8:bc:0c:82:3f:55:4d: a8:74:ee:09:76:d7:17:f1:c2:7a:f2:03:10:77:03:0a:d5:60: 0d:4f:06:89:79:73:15:a0:2b:33:80:4d:ac:95:e4:0d:91:4d: 05:a7:d2:99:c3:0d:f7:05:93:7e:f7:ca:43:5d:2a:fd:18:b6: c8:9e:55:ed:ce:5d:82:13:98:f7:d0:87:c5:6e:01:dd:9f:24: cb:62:e2:10:84:d0:80:ba:78:54:2d:1d:12:8b:21:10:ca:34: 28:04:37:7f:2e:7e:60:c0:34:03:ba:27:69:d5:2e:66:a7:51: 29:9b:2b:6e:f0:fc:7f:a1:2d:1d:6f:4b:44:ec:cd:a8:69:81: 22:c2:2b:73:40:e8:83:21:e0:95:5b:8f:96:09:93:25:33:23: d3:74:8e:4a:46:f1:24:48:c0:ca:2e:68:07:09:78:13:a2:ac: 7e:ad:80:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSw4LMDgqrRVQdS5TZ37K2+ZfykgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxMTAwMDAxOVoX DTI1MDgxNTIzNTk1OVowejFJMEcGA1UEBRNAOGZkZjFhZGRjZTNlYmJkZjIwNDQw M2FmZmQ3MjFiMjYxZTNlYzQ2Nzg1NDgxZmVjNTZkNmY3NGFkMzExNjVmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWA9IxORGvLaBlfRwDZuG0Sn4vdj eHgQyxJzedHerwoj56gMV2Ye6cpBVHxfzNWNIrga7jWgo1FLpuNm4DyqDy6An+N5 lgjvDaUVkObI6hl/EG1l1jpP+Rr6qyFURTNQaVjcWrS+/nJG/Jng+RIXEcaEZgHq E9kMP9q8Os9ITZeiJmfDPd0HJftfthF4BBG+wqf0+5IzEX6r2Wq/maUbb/Y0L3yr Hy/4YO34PXeCSP9KBANr2RJNKKll4YFvUHqYOaYLrGmyJcN42Lo/i/nChPIBGISG I/qs59ZHao7PMldzVlZQsjhr8H2KX+CAtwLvZ6mYYQK5hCHfrwe6zegH+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBz5tk5NIMBc9C1KKZngKhxX2X3MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3YmJkY2M2LTMwODgtNDQ4OC05MTc0LTZlNGIxOWZlZjg3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7SAwDQYJKoZIhvcNAQELBQADggEBAIJZL3bpl4onYXeD8FNA mZjip8LODisVpqWFHJ9HYXWuwVU6BKHPpZDnCw1ZaweEEkG5dSNTYkCIqQ++e5DR y1vA09ZHCVr/+2Lz73JPlUJzcor/qLwMgj9VTah07gl21xfxwnryAxB3AwrVYA1P Bol5cxWgKzOATayV5A2RTQWn0pnDDfcFk373ykNdKv0YtsieVe3OXYITmPfQh8Vu Ad2fJMti4hCE0IC6eFQtHRKLIRDKNCgEN38ufmDANAO6J2nVLmanUSmbK27w/H+h LR1vS0TszahpgSLCK3NA6IMh4JVbj5YJkyUzI9N0jkpG8SRIwMouaAcJeBOirH6t gD4= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:46 2025 by rpki-client