$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18c0c353-8021-483e-a98b-44dbaff4b805.roa File: 18c0c353-8021-483e-a98b-44dbaff4b805.roa (raw, json) Hash identifier: DjNLsRcutAk3fLT4SUj8jSWbtgs/YnMsFzkZqt8sKhI= Subject key identifier: 1A:BB:D6:11:B5:5E:50:A3:E8:5F:50:13:84:FF:A3:16:4C:E2:31:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E91C94F24C86AF61F1169CB6BA5DB2DC9C841B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18c0c353-8021-483e-a98b-44dbaff4b805.roa Signing time: Tue 29 Jul 2025 00:10:21 +0000 ROA not before: Tue 29 Jul 2025 00:10:21 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:91:c9:4f:24:c8:6a:f6:1f:11:69:cb:6b:a5:db:2d:c9:c8:41:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:10:21 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=2926640e00f1d1e4727012ff834a21b5f016e9d591a91cdcaea603611a31c083, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:6b:c1:85:f3:a4:0e:a1:4d:d8:3d:22:71: 72:45:1b:be:7b:62:e8:a6:80:ac:50:c5:40:45:d2: 8c:2e:be:46:6c:27:b5:61:ea:4b:ea:ca:8d:c3:9f: 5c:c2:06:b0:2b:6d:6d:31:c1:f7:5f:34:5d:c3:b8: 63:9e:ab:8b:0b:07:43:8d:11:8f:2f:27:4e:9e:7a: 25:01:82:d2:b1:a7:a9:22:1f:8e:e9:e2:13:97:9d: e8:34:f5:89:eb:d5:60:18:8e:a2:d9:3c:0b:00:f8: 26:82:58:2a:69:f3:5b:1d:9e:4c:5a:f2:f2:80:d5: 57:73:b2:15:40:bf:ac:b8:a1:46:a7:25:ea:9e:bc: a8:95:8b:a8:a7:0e:19:dc:c6:ee:38:5c:3f:f7:46: 9a:c9:d7:ca:2c:55:9d:ce:c7:32:5f:a7:84:38:6a: 74:73:44:5c:a6:c4:5c:0c:9d:fc:4c:44:1f:46:a6: bc:ce:8c:0d:f8:05:d5:ca:ba:84:da:47:d2:e8:0a: 46:23:7d:bc:cd:93:56:71:a7:81:1f:ba:d3:66:c3: 76:8e:64:73:ff:57:7a:5e:aa:0a:d7:97:4b:a8:97: c8:8c:63:0e:6c:27:9e:62:24:28:41:a6:26:ab:21: e9:b9:d5:9b:09:17:25:2d:b4:a2:1b:fb:ab:70:ad: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BB:D6:11:B5:5E:50:A3:E8:5F:50:13:84:FF:A3:16:4C:E2:31:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18c0c353-8021-483e-a98b-44dbaff4b805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:6080::/48 Signature Algorithm: sha256WithRSAEncryption a2:29:c3:c1:d2:88:9b:5d:f8:3c:c8:7c:b3:93:3c:80:b8:77: 31:2d:2b:90:ed:46:00:26:35:0f:df:86:f5:aa:d7:51:0c:7e: 1d:db:72:c6:a0:c4:53:7a:15:a7:84:be:a4:dd:bb:3d:2d:93: 5e:71:34:08:8c:f0:74:bd:8b:c1:4a:fd:a0:9f:a8:9a:d7:97: 04:71:c6:5a:66:da:b0:c9:7e:97:43:3a:f1:6d:52:7a:49:ef: 3a:3c:52:16:c6:69:07:cc:bb:13:7c:3f:33:d7:32:00:19:ce: 4d:45:29:45:36:37:18:2a:a5:1e:e9:46:b4:a0:1d:1b:36:69: 4a:2d:bf:16:77:11:53:b0:bb:ff:6c:79:c3:b3:32:3d:74:ac: e9:53:f7:86:04:94:f6:99:2b:d5:76:3e:e2:19:ae:8e:79:56: 4b:1f:8e:7f:be:85:aa:fe:db:db:d7:0f:eb:18:db:7e:03:9d: 37:af:c7:55:5e:c1:40:8e:fb:5c:80:29:3a:35:64:f8:69:c5: 39:64:23:3f:f9:d8:24:a9:25:93:78:c3:95:38:d7:84:aa:95: b5:e2:f8:35:d1:82:a8:cd:39:c8:36:f5:b9:7f:bf:7a:0e:40: 03:5e:64:94:1c:4b:04:23:7c:36:10:7b:c0:f9:bb:2a:58:79: 94:4e:34:68 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfpHJTyTIavYfEWnLa6XbLcnIQbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMTAyMVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMjkyNjY0MGUwMGYxZDFlNDcyNzAx MmZmODM0YTIxYjVmMDE2ZTlkNTkxYTkxY2RjYWVhNjAzNjExYTMxYzA4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi9rwYXzpA6hTdg9InFyRRu+e2Lo poCsUMVARdKMLr5GbCe1YepL6sqNw59cwgawK21tMcH3XzRdw7hjnquLCwdDjRGP LydOnnolAYLSsaepIh+O6eITl53oNPWJ69VgGI6i2TwLAPgmglgqafNbHZ5MWvLy gNVXc7IVQL+suKFGpyXqnryolYuopw4Z3MbuOFw/90aaydfKLFWdzscyX6eEOGp0 c0RcpsRcDJ38TEQfRqa8zowN+AXVyrqE2kfS6ApGI328zZNWcaeBH7rTZsN2jmRz /1d6XqoK15dLqJfIjGMObCeeYiQoQaYmqyHpudWbCRclLbSiG/urcK0fNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBq71hG1XlCj6F9QE4T/oxZM4jGXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4YzBjMzUzLTgwMjEtNDgzZS1hOThiLTQ0ZGJhZmY0YjgwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8mCAMA0GCSqGSIb3DQEBCwUAA4IBAQCiKcPB0oibXfg8yHyz kzyAuHcxLSuQ7UYAJjUP34b1qtdRDH4d23LGoMRTehWnhL6k3bs9LZNecTQIjPB0 vYvBSv2gn6ia15cEccZaZtqwyX6XQzrxbVJ6Se86PFIWxmkHzLsTfD8z1zIAGc5N RSlFNjcYKqUe6Ua0oB0bNmlKLb8WdxFTsLv/bHnDszI9dKzpU/eGBJT2mSvVdj7i Ga6OeVZLH45/voWq/tvb1w/rGNt+A503r8dVXsFAjvtcgCk6NWT4acU5ZCM/+dgk qSWTeMOVONeEqpW14vg10YKozTnINvW5f796DkADXmSUHEsEI3w2EHvA+bsqWHmU TjRo -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:14 2025 by rpki-client