$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa File: 13126cec-b0b1-4417-bf14-3d918163685c.roa (raw, json) Hash identifier: GQbLHLnIynkXReZd2cR932CVTurI2/R3s1WQMNsJXqM= Subject key identifier: 06:B7:07:DA:FD:02:FC:0C:29:C3:BB:2F:2E:D0:F3:26:89:29:6D:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 426E16400C8D0139BAA7E69D9CFC3004FE924C1E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa Signing time: Mon 28 Jul 2025 15:10:11 +0000 ROA not before: Mon 28 Jul 2025 15:10:11 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6e:16:40:0c:8d:01:39:ba:a7:e6:9d:9c:fc:30:04:fe:92:4c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:10:11 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=53b25235ae12f52a75c4f547c732fb47a8fc80edb2eb5a7b81f068b774c71930, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:e3:54:03:88:e9:08:31:59:23:30:56:40: bb:d5:5b:89:aa:fa:15:4d:54:0b:76:7b:be:6d:71: 77:9c:ea:58:05:62:75:58:13:fa:87:b6:e1:81:28: 90:b0:44:68:83:c8:71:e5:35:fd:b3:33:ad:7d:aa: 2c:0d:14:fa:92:00:4e:32:dc:c5:2e:83:ae:fa:a2: 20:5f:f4:b1:78:c9:94:40:59:aa:18:ad:53:8b:8a: b5:25:22:f4:fe:f5:8d:2a:09:2e:13:22:1d:40:61: f7:69:65:a4:dd:73:82:17:ab:88:d5:11:d9:f9:ca: a9:c9:6a:2a:ab:a7:b2:86:2b:4c:b8:5e:cd:a3:b4: 82:2f:47:b2:48:c3:22:52:df:df:b9:02:ba:f2:14: f4:58:56:be:1e:ac:e8:04:ca:2b:42:f1:6d:d5:ac: e7:2d:7e:25:1e:f4:64:49:d9:7d:53:30:e0:9b:23: 3c:f3:0c:a0:bf:9d:d6:ce:68:86:2a:33:2b:05:a3: b3:05:2b:77:47:7e:0d:54:cd:8e:09:c4:61:c2:cc: ef:ce:6d:2b:61:a1:1a:cd:00:a6:df:5f:e4:e4:3b: d3:68:a0:18:8d:0b:ee:f7:c9:60:6b:6e:0c:ae:54: 21:75:d3:db:7f:d6:69:b9:af:98:b1:37:70:b1:10: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B7:07:DA:FD:02:FC:0C:29:C3:BB:2F:2E:D0:F3:26:89:29:6D:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e040::/48 Signature Algorithm: sha256WithRSAEncryption 5d:c0:ff:6d:72:43:85:64:76:2d:d4:6e:67:94:b7:2e:a7:41: 65:73:3d:89:2f:f1:5c:42:b4:26:17:e3:ca:e9:7b:52:24:d2: 8d:52:5c:f8:de:5a:7e:a6:e1:15:ed:75:9e:80:e4:17:47:60: f2:5f:37:95:28:58:5c:98:70:c9:3e:03:8e:23:f1:5c:9b:91: 5a:a7:ad:47:2c:73:03:08:34:4c:d6:d5:7c:dd:69:91:45:52: 27:64:b4:d9:1d:c8:c8:60:ca:f0:25:dc:4d:99:1e:de:60:7c: 68:1b:87:14:13:c3:26:23:56:3d:36:54:22:99:0d:d2:6e:a1: 9d:e0:35:a3:1c:6f:5e:58:02:08:9e:ae:d8:9d:09:a0:e9:39: d4:18:a1:97:38:aa:7e:26:da:12:67:09:24:52:3c:7e:81:87: 18:0c:71:1d:7e:5d:45:00:8a:55:43:09:f2:af:66:a4:12:64: 86:07:17:8b:26:29:9e:a6:e3:f2:86:f8:86:a3:97:e2:7e:f8: 01:ce:0e:93:38:d7:9f:da:2b:6b:79:0d:93:79:c0:b5:14:55: e0:7a:5f:52:c9:4d:c4:93:f3:6a:d0:b4:71:78:97:c8:b7:25: 82:0d:f7:d8:2c:a7:f8:10:02:c2:09:f0:a5:a9:55:9d:f9:d2: 5d:86:b5:e9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQm4WQAyNATm6p+adnPwwBP6STB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MTAxMVoX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNANTNiMjUyMzVhZTEyZjUyYTc1YzRm NTQ3YzczMmZiNDdhOGZjODBlZGIyZWI1YTdiODFmMDY4Yjc3NGM3MTkzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgnjVAOI6QgxWSMwVkC71VuJqvoV TVQLdnu+bXF3nOpYBWJ1WBP6h7bhgSiQsERog8hx5TX9szOtfaosDRT6kgBOMtzF LoOu+qIgX/SxeMmUQFmqGK1Ti4q1JSL0/vWNKgkuEyIdQGH3aWWk3XOCF6uI1RHZ +cqpyWoqq6eyhitMuF7No7SCL0eySMMiUt/fuQK68hT0WFa+HqzoBMorQvFt1azn LX4lHvRkSdl9UzDgmyM88wygv53WzmiGKjMrBaOzBSt3R34NVM2OCcRhwszvzm0r YaEazQCm31/k5DvTaKAYjQvu98lga24MrlQhddPbf9Zpua+YsTdwsRD4mQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAa3B9r9AvwMKcO7Ly7Q8yaJKW29MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTI2Y2VjLWIwYjEtNDQxNy1iZjE0LTNkOTE4MTYzNjg1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uBAMA0GCSqGSIb3DQEBCwUAA4IBAQBdwP9tckOFZHYt1G5n lLcup0Flcz2JL/FcQrQmF+PK6XtSJNKNUlz43lp+puEV7XWegOQXR2DyXzeVKFhc mHDJPgOOI/Fcm5Fap61HLHMDCDRM1tV83WmRRVInZLTZHcjIYMrwJdxNmR7eYHxo G4cUE8MmI1Y9NlQimQ3SbqGd4DWjHG9eWAIInq7YnQmg6TnUGKGXOKp+JtoSZwkk Ujx+gYcYDHEdfl1FAIpVQwnyr2akEmSGBxeLJimepuPyhviGo5fifvgBzg6TONef 2itreQ2TecC1FFXgel9SyU3Ek/Nq0LRxeJfItyWCDffYLKf4EALCCfClqVWd+dJd hrXp -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:50 2025 by rpki-client