$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa File: 0f3544c3-90af-45ac-b6c1-f680a3230f34.roa (raw, json) Hash identifier: wEcuTxI24CtOgShMeh7guJILo4UkH1xE1gGmeik+peE= Subject key identifier: C7:5A:78:88:84:D3:F6:A8:48:C5:DB:00:2B:D7:68:31:EF:E8:CE:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 067D683B5F9C853B3B6CB2C2D33D5B3B0B3B232E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa Signing time: Mon 28 Jul 2025 15:20:49 +0000 ROA not before: Mon 28 Jul 2025 15:20:49 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7d:68:3b:5f:9c:85:3b:3b:6c:b2:c2:d3:3d:5b:3b:0b:3b:23:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:20:49 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=24d4e2c5d30ca6b8445aa1d8c534af0a6502399b84a0bf9e1eeeaae899ab71e9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:73:58:37:98:b4:cb:a9:19:91:d2:39:2c: 64:33:1a:21:83:7b:e6:15:16:58:a4:7d:fc:46:f3: 70:a4:55:c9:f9:6f:41:26:21:53:0c:ff:d9:44:d6: 5c:8b:9e:a2:b1:cd:88:df:53:af:8c:88:0d:69:41: 70:5e:e7:23:ae:a8:5b:95:63:22:a1:c6:d3:f6:ef: ce:f4:4d:b3:be:10:77:c2:27:eb:c1:0f:d6:02:66: 92:ab:04:7b:f7:8e:16:84:01:df:17:c7:b2:fc:70: 9e:2c:45:f1:45:11:27:8d:25:63:4c:96:d2:84:6a: 4f:a3:66:d4:b0:bc:90:93:1d:62:73:b8:86:43:f4: 94:6a:bc:ef:de:e7:33:7b:b6:2c:b8:08:64:ca:25: b2:00:7d:82:f5:66:f5:17:08:3b:a2:13:5b:c8:d1: 45:72:5c:ac:3f:0d:86:6e:80:aa:de:94:4e:98:61: 86:f6:95:16:2e:ea:56:13:d8:28:dc:a2:0b:f6:6e: 73:63:1c:f4:c8:5d:64:7d:c5:71:8c:d5:5a:d5:30: e2:c7:d1:d8:c2:52:11:35:7c:7a:b9:8e:4d:77:08: b3:45:b0:a7:d9:81:7c:4b:cd:e7:86:a1:b6:7f:4b: 55:75:81:00:b9:8c:27:82:26:b5:23:c0:08:cd:44: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5A:78:88:84:D3:F6:A8:48:C5:DB:00:2B:D7:68:31:EF:E8:CE:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b040::/48 Signature Algorithm: sha256WithRSAEncryption 67:1c:33:75:ad:8a:97:0a:b1:99:df:32:fc:92:03:63:11:aa: c2:63:ba:bc:a8:7b:9a:d9:6a:cf:df:21:25:49:8b:b2:be:40: 51:76:d1:70:e4:e5:09:63:39:51:21:11:62:ef:4a:9b:ca:2a: 55:61:dc:84:3f:c3:d5:5e:b0:1e:62:77:95:80:68:59:b8:f7: 09:c1:88:44:8e:d2:dd:cc:4d:23:75:e4:88:f4:9b:4b:50:6b: af:4a:48:fe:44:ef:50:4c:f4:d4:7e:85:d4:fb:8b:bc:62:a8: 47:6c:6a:a9:71:02:19:a2:94:74:f0:92:3e:7a:65:f8:cf:7d: 69:68:ed:a8:ad:f6:64:46:00:35:1d:d8:ad:0a:48:bc:f1:0b: 33:cf:1c:45:62:ec:6e:76:3a:9c:2f:01:8b:52:1a:84:53:61: 34:45:78:6f:49:2d:1c:b1:1c:43:ce:21:b4:a9:96:e0:c0:ae: 2a:3e:3f:4a:09:7c:dc:e0:af:e2:4f:02:fe:54:ed:bf:7e:5c: 8d:c8:d7:38:15:f5:07:88:5c:97:25:5d:89:b1:98:86:4d:22: bb:31:9c:50:51:40:9d:0b:e2:5e:7f:e5:c2:26:87:59:cb:29: 94:a1:c5:5a:61:fc:15:91:c2:a9:1a:47:17:4f:39:59:19:f4: d4:19:6f:cf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBn1oO1+chTs7bLLC0z1bOws7Iy4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MjA0OVoX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAMjRkNGUyYzVkMzBjYTZiODQ0NWFh MWQ4YzUzNGFmMGE2NTAyMzk5Yjg0YTBiZjllMWVlZWFhZTg5OWFiNzFlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMZzWDeYtMupGZHSOSxkMxohg3vm FRZYpH38RvNwpFXJ+W9BJiFTDP/ZRNZci56isc2I31OvjIgNaUFwXucjrqhblWMi ocbT9u/O9E2zvhB3wifrwQ/WAmaSqwR7944WhAHfF8ey/HCeLEXxRREnjSVjTJbS hGpPo2bUsLyQkx1ic7iGQ/SUarzv3ucze7YsuAhkyiWyAH2C9Wb1Fwg7ohNbyNFF clysPw2GboCq3pROmGGG9pUWLupWE9go3KIL9m5zYxz0yF1kfcVxjNVa1TDix9HY wlIRNXx6uY5NdwizRbCn2YF8S83nhqG2f0tVdYEAuYwngia1I8AIzUTAwwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMdaeIiE0/aoSMXbACvXaDHv6M7zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzU0NGMzLTkwYWYtNDVhYy1iNmMxLWY2ODBhMzIzMGYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALBAMA0GCSqGSIb3DQEBCwUAA4IBAQBnHDN1rYqXCrGZ3zL8 kgNjEarCY7q8qHua2WrP3yElSYuyvkBRdtFw5OUJYzlRIRFi70qbyipVYdyEP8PV XrAeYneVgGhZuPcJwYhEjtLdzE0jdeSI9JtLUGuvSkj+RO9QTPTUfoXU+4u8YqhH bGqpcQIZopR08JI+emX4z31paO2orfZkRgA1HditCki88QszzxxFYuxudjqcLwGL UhqEU2E0RXhvSS0csRxDziG0qZbgwK4qPj9KCXzc4K/iTwL+VO2/flyNyNc4FfUH iFyXJV2JsZiGTSK7MZxQUUCdC+Jef+XCJodZyymUocVaYfwVkcKpGkcXTzlZGfTU GW/P -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:52 2025 by rpki-client