$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa File: 1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa (raw, json) Hash identifier: kX8zWUwOCmMWAFcEgWdic2i5U4w9oRx6Hcifeevt7gE= Subject key identifier: 7D:B4:F8:69:FE:E6:A4:05:85:C4:BA:32:FE:CF:17:A5:A5:C8:30:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 574F753992BBE323A5A2D10A8C684418035334F9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa Signing time: Tue 29 Jul 2025 00:00:13 +0000 ROA not before: Tue 29 Jul 2025 00:00:13 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4f:75:39:92:bb:e3:23:a5:a2:d1:0a:8c:68:44:18:03:53:34:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:00:13 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=289ebb85e3722b41725681fdc4aedb73267918f4cd30bd84ddf0e784b4139774, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:da:26:a2:26:64:50:7a:1f:8c:83:ec:4b: ec:8e:4e:de:ee:0b:d2:81:07:7e:58:71:bf:4c:96: e7:97:f8:a1:1c:62:80:1a:64:24:07:4f:0f:20:6a: 7c:76:26:71:91:3c:71:d8:43:3d:ea:2b:4f:be:75: aa:80:26:7a:ca:eb:b8:cd:48:fd:e5:38:e4:1e:df: 5d:34:e2:19:d8:75:08:db:33:f5:23:f4:9e:84:e3: 8d:92:ff:1b:b8:a4:81:3e:e9:9a:66:7b:f1:36:2c: 81:ac:60:04:21:59:29:18:03:a6:89:dd:b3:75:7c: ec:9a:7d:37:81:82:f3:20:cd:72:0a:46:44:c2:83: 22:b9:29:98:e4:3e:6c:24:b7:b2:5f:ca:ff:ff:6c: f9:a3:69:2e:5e:5d:15:ef:a0:e1:1b:e6:9e:cf:84: 4b:84:8f:c2:b4:b1:a7:c5:6e:3d:bb:11:7d:56:2b: 74:c3:aa:07:28:71:40:39:23:56:05:d7:34:e9:36: 60:34:75:01:f5:c4:f6:77:36:b8:de:03:6f:b7:63: 0d:47:bc:40:22:b5:90:12:01:8b:46:81:52:93:da: cc:f1:6f:5f:13:1f:d6:7a:2c:70:8d:58:5b:d7:92: 5e:48:22:57:2a:d8:cd:b1:66:96:92:41:f9:7a:81: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B4:F8:69:FE:E6:A4:05:85:C4:BA:32:FE:CF:17:A5:A5:C8:30:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4020::/48 Signature Algorithm: sha256WithRSAEncryption 09:d1:2b:6f:08:01:96:09:63:55:25:18:62:c9:ba:a1:ba:de: c6:d9:ea:17:fa:6c:90:b7:ad:b5:8b:98:55:4e:7e:f3:c9:ae: 47:35:9a:91:8c:83:85:76:53:db:1e:fb:96:7d:2a:ef:ea:08: 49:7d:6b:63:ba:3c:fe:be:0d:b5:3f:ce:63:43:73:6d:ba:e9: 05:7b:03:5e:05:2d:5b:25:e1:08:02:35:cf:d1:c1:66:ea:b3: 05:6f:d3:9c:fd:89:75:61:75:e2:8f:9e:bf:f2:18:b7:03:de: 07:ce:4b:ee:6d:4f:48:c2:06:a1:90:a8:ff:58:7f:81:5f:72: 67:81:41:6d:82:a3:80:b8:c7:90:37:ab:3b:76:7f:19:84:fc: 40:4e:83:86:f5:52:b6:a0:48:30:bf:1b:de:07:7d:37:93:d2: f2:53:c9:8d:bb:99:06:17:2b:38:1c:b0:10:ba:7c:d6:42:02: 87:3b:a9:00:0a:0d:ee:54:84:b8:92:ea:b8:f1:85:99:2c:a3: fc:a6:c1:a5:0b:99:0f:51:f4:3b:87:10:d1:e5:0a:fb:b2:62: 77:97:af:30:3d:b1:0f:6f:d9:76:7e:49:dc:28:a6:00:3c:01: 88:14:22:ab:e0:c2:c4:64:04:48:7b:57:a1:54:6d:50:cc:3b: 8e:39:94:18 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUV091OZK74yOlotEKjGhEGANTNPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMDAxM1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMjg5ZWJiODVlMzcyMmI0MTcyNTY4 MWZkYzRhZWRiNzMyNjc5MThmNGNkMzBiZDg0ZGRmMGU3ODRiNDEzOTc3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nfaJqImZFB6H4yD7Evsjk7e7gvS gQd+WHG/TJbnl/ihHGKAGmQkB08PIGp8diZxkTxx2EM96itPvnWqgCZ6yuu4zUj9 5TjkHt9dNOIZ2HUI2zP1I/SehOONkv8buKSBPumaZnvxNiyBrGAEIVkpGAOmid2z dXzsmn03gYLzIM1yCkZEwoMiuSmY5D5sJLeyX8r//2z5o2kuXl0V76DhG+aez4RL hI/CtLGnxW49uxF9Vit0w6oHKHFAOSNWBdc06TZgNHUB9cT2dza43gNvt2MNR7xA IrWQEgGLRoFSk9rM8W9fEx/WeixwjVhb15JeSCJXKtjNsWaWkkH5eoEAtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH20+Gn+5qQFhcS6Mv7PF6WlyDApMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiNWRhOTg3LTY5ZjMtNGYxMi1hYTNiLTBkNmY5YWU0YzA2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEAgMA0GCSqGSIb3DQEBCwUAA4IBAQAJ0StvCAGWCWNVJRhi ybqhut7G2eoX+myQt621i5hVTn7zya5HNZqRjIOFdlPbHvuWfSrv6ghJfWtjujz+ vg21P85jQ3NtuukFewNeBS1bJeEIAjXP0cFm6rMFb9Oc/Yl1YXXij56/8hi3A94H zkvubU9IwgahkKj/WH+BX3JngUFtgqOAuMeQN6s7dn8ZhPxAToOG9VK2oEgwvxve B303k9LyU8mNu5kGFys4HLAQunzWQgKHO6kACg3uVIS4kuq48YWZLKP8psGlC5kP UfQ7hxDR5Qr7smJ3l68wPbEPb9l2fkncKKYAPAGIFCKr4MLEZARIe1ehVG1QzDuO OZQY -----END CERTIFICATE-----Generated at Thu Jul 31 00:57:21 2025 by rpki-client