$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa File: 10683670-b448-4b46-8e10-aa3682be179f.roa (raw, json) Hash identifier: kK5hbWvXXKvT/aXuI4Gb/qzwr/nJQVuicovh/Ssh7vg= Subject key identifier: 8F:21:76:F1:63:B3:41:DD:11:1A:61:80:C5:08:F8:4D:A2:7A:F3:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6191B9EDBCD1A5F9BF62C54DB68027230CB9D37C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa Signing time: Tue 29 Jul 2025 00:20:16 +0000 ROA not before: Tue 29 Jul 2025 00:20:16 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:91:b9:ed:bc:d1:a5:f9:bf:62:c5:4d:b6:80:27:23:0c:b9:d3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:20:16 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=777e1ced5f0437a9aa9ee46eda6ad4589000338fc98bda2b7430b87853016615, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:81:08:7b:78:2a:72:5e:3e:65:08:65:1e: 08:9c:71:1a:09:46:dc:34:6a:11:b2:11:4d:7d:5c: ba:c0:47:89:71:53:28:b3:11:e4:97:d6:72:f5:f3: da:e5:f9:6b:e5:9b:85:8b:54:03:a5:d4:32:17:99: f7:2a:3d:15:72:cb:50:a3:f7:04:fd:11:f4:02:5e: 7c:0e:c0:71:c6:91:6c:d4:ef:ba:c6:59:49:94:72: 39:e3:22:ce:5c:40:fe:9f:9e:03:46:ad:05:be:e6: 0c:01:f7:b3:2d:0e:4e:3b:f2:73:46:3a:43:d1:45: 09:e1:ed:37:b5:eb:d4:8d:8d:b6:c8:07:2f:b7:48: 7b:a9:bd:8f:b8:3b:f9:cb:da:55:ea:09:e3:44:3c: a0:7f:c1:8d:78:50:6b:c9:97:a5:f8:6b:4a:20:53: 51:cc:73:2e:97:fa:bc:b4:c3:3d:ec:71:27:8d:55: a0:13:74:8c:7a:48:9f:88:59:9a:e2:d0:62:e8:da: b1:d0:f3:f2:66:cd:78:59:28:38:36:ff:28:07:ed: 7d:e2:b0:ab:17:e4:ab:20:3f:17:af:69:53:60:08: ca:ef:bb:4a:3b:7f:82:d0:2f:bb:1b:f0:a2:6a:cd: 45:19:a8:a1:c0:f9:9d:86:63:23:ea:d3:be:d5:c9: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:21:76:F1:63:B3:41:DD:11:1A:61:80:C5:08:F8:4D:A2:7A:F3:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:840::/48 Signature Algorithm: sha256WithRSAEncryption 5a:17:b8:aa:ad:7d:2d:da:e5:b1:08:f0:ef:15:b7:d9:a2:3d: a6:3c:60:ad:f5:94:59:93:29:43:7a:f3:17:6c:f7:d5:6e:b9: e9:67:c4:07:b5:87:2e:ca:8d:77:a5:f4:63:97:17:29:20:72: 17:ec:ca:ef:46:4d:b3:5b:c1:c7:a7:34:a4:ad:da:7a:91:30: 87:eb:c7:11:0e:57:f0:32:c2:89:a6:01:79:14:f2:08:c3:66: 9b:85:45:fd:66:1e:38:47:03:a0:1f:a8:bb:27:65:bd:fc:16: 5c:40:cd:a6:a4:48:e9:d2:82:6b:4c:d7:11:61:d7:35:73:3b: 2f:78:d1:3f:15:a9:fb:23:38:b6:41:06:f5:c0:eb:af:c8:67: ea:98:fa:73:a5:e0:7b:4b:63:bf:a3:22:52:32:ee:90:41:36: 36:91:4f:86:51:50:ed:ee:8d:8a:63:02:db:82:40:c8:37:c3: 0c:96:06:ea:ed:ef:fa:9e:4f:44:c2:6f:b2:d0:99:c5:c1:de: 82:af:3b:b1:e0:68:7c:60:57:de:05:0c:a3:43:be:2a:90:67: f4:4d:36:2f:c1:68:03:c6:43:e6:11:56:de:7e:18:2f:66:38: 0c:e8:e7:b0:af:b2:26:17:5f:91:f3:6f:9e:ad:3b:de:a5:5a: ad:b9:58:16 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYZG57bzRpfm/YsVNtoAnIwy503wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjAxNloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANzc3ZTFjZWQ1ZjA0MzdhOWFhOWVl NDZlZGE2YWQ0NTg5MDAwMzM4ZmM5OGJkYTJiNzQzMGI4Nzg1MzAxNjYxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw66BCHt4KnJePmUIZR4InHEaCUbc NGoRshFNfVy6wEeJcVMosxHkl9Zy9fPa5flr5ZuFi1QDpdQyF5n3Kj0VcstQo/cE /RH0Al58DsBxxpFs1O+6xllJlHI54yLOXED+n54DRq0FvuYMAfezLQ5OO/JzRjpD 0UUJ4e03tevUjY22yAcvt0h7qb2PuDv5y9pV6gnjRDygf8GNeFBryZel+GtKIFNR zHMul/q8tMM97HEnjVWgE3SMekifiFma4tBi6Nqx0PPyZs14WSg4Nv8oB+194rCr F+SrID8Xr2lTYAjK77tKO3+C0C+7G/Cias1FGaihwPmdhmMj6tO+1ckWZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI8hdvFjs0HdERphgMUI+E2ievMiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNjgzNjcwLWI0NDgtNGI0Ni04ZTEwLWFhMzY4MmJlMTc5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAhAMA0GCSqGSIb3DQEBCwUAA4IBAQBaF7iqrX0t2uWxCPDv FbfZoj2mPGCt9ZRZkylDevMXbPfVbrnpZ8QHtYcuyo13pfRjlxcpIHIX7MrvRk2z W8HHpzSkrdp6kTCH68cRDlfwMsKJpgF5FPIIw2abhUX9Zh44RwOgH6i7J2W9/BZc QM2mpEjp0oJrTNcRYdc1czsveNE/Fan7Izi2QQb1wOuvyGfqmPpzpeB7S2O/oyJS Mu6QQTY2kU+GUVDt7o2KYwLbgkDIN8MMlgbq7e/6nk9Ewm+y0JnFwd6Crzux4Gh8 YFfeBQyjQ74qkGf0TTYvwWgDxkPmEVbefhgvZjgM6Oewr7ImF1+R82+erTvepVqt uVgW -----END CERTIFICATE-----Generated at Thu Jul 31 00:59:11 2025 by rpki-client