$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa File: 2304fccd-a194-40a7-978d-bdb25807cebe.roa (raw, json) Hash identifier: Zh++s5iRk3a9x+ufh9uHqRcyRZVmQFc1NHYT9dsc96s= Subject key identifier: 50:EF:03:0B:98:DC:6D:3F:11:85:FD:EA:57:DC:DA:48:2A:5A:C4:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37E22A58871621BD15F4849074CA3D29E7558C1E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa Signing time: Sat 12 Jul 2025 00:00:14 +0000 ROA not before: Sat 12 Jul 2025 00:00:14 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e2:2a:58:87:16:21:bd:15:f4:84:90:74:ca:3d:29:e7:55:8c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 12 00:00:14 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=6ef35c952ea15af93b20ed9e258755442d1cc2493322c77c62d377563d6e2468, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:1d:40:63:07:27:f0:d6:e9:81:4e:60:66: 13:d8:af:96:a8:56:f3:65:72:8d:be:cb:de:b8:ee: d2:41:84:24:fa:47:fd:c5:01:cb:84:c9:e7:7f:27: 67:4c:c1:cb:5a:5c:24:9f:93:ac:4b:9f:7f:65:74: 7f:b8:fd:cf:ef:1e:19:48:ba:e3:bd:5d:a5:47:e5: d6:9f:35:c9:99:01:cd:0f:73:a5:8f:a1:64:0e:91: cc:21:5e:98:d3:76:ac:00:15:e5:df:5e:5d:0f:9e: 87:98:dc:c7:65:ad:97:bf:88:ce:69:a6:cc:a6:51: 2b:71:96:5d:6d:ac:a6:29:f1:a6:cb:06:74:cc:7c: e1:cd:ea:de:93:e0:f2:e3:13:bd:27:2c:6a:67:0d: ca:75:05:51:6d:1a:2e:fb:a3:74:a4:2c:95:e7:81: 81:6d:43:c6:45:ff:a6:b8:cc:5c:b4:dd:aa:9c:ea: 22:f9:7e:f5:c0:c5:b5:4a:dc:18:e1:a2:20:0a:32: c6:aa:36:8c:66:3d:32:05:b3:1d:90:27:ea:52:9b: 6e:67:fc:ee:75:af:1f:12:b9:0e:96:cf:bd:03:4d: c3:02:b8:f9:0b:14:22:4e:64:1f:61:e6:4f:28:3e: f8:c0:20:c8:5e:43:55:be:55:4e:18:b4:1c:40:ad: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EF:03:0B:98:DC:6D:3F:11:85:FD:EA:57:DC:DA:48:2A:5A:C4:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption 0a:98:11:47:eb:8e:1c:7a:72:08:ae:0e:50:78:d2:c3:1e:5a: 21:2a:b4:c6:98:65:33:16:01:ee:79:6f:45:39:82:06:42:7b: f4:93:60:ef:de:74:c0:4e:03:24:bd:2f:8c:e4:11:44:76:b3: e1:55:8c:51:af:81:3c:99:3b:db:a3:50:f9:29:3c:1e:ea:7e: 6e:9d:5b:8c:5d:bc:67:a1:41:d9:fa:e2:54:0a:7a:03:3d:3a: 95:06:63:84:5b:d6:3b:26:4a:fb:cd:bb:34:d7:3c:a6:e6:94: c3:c6:ff:4a:93:e5:6f:df:c5:0f:69:47:f0:2e:94:34:d9:57: ff:ad:e8:d5:9e:4f:d8:ae:4e:7c:9f:64:49:73:4a:6a:29:51: f7:36:9e:b8:d3:d5:49:4d:bd:e2:20:5c:28:08:7e:37:d3:b0: 6f:c2:bb:86:fe:8a:14:ab:14:78:68:3f:0a:04:61:81:b0:cb: 6d:62:f4:a7:0e:2e:45:42:7b:9d:df:dd:85:44:7b:a7:c3:bc: cf:87:b7:27:44:7e:26:fc:76:ce:ff:cf:61:1b:d1:1d:c9:2a: 9f:09:66:84:e5:e2:ee:51:f6:9a:3e:f4:c0:d3:a8:c2:a5:60: 31:50:a3:16:3d:60:e5:23:b7:09:0c:9c:7a:7e:6b:ca:6d:8e: 12:70:21:f4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN+IqWIcWIb0V9ISQdMo9KedVjB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxMjAwMDAxNFoX DTI1MDgxNjIzNTk1OVowejFJMEcGA1UEBRNANmVmMzVjOTUyZWExNWFmOTNiMjBl ZDllMjU4NzU1NDQyZDFjYzI0OTMzMjJjNzdjNjJkMzc3NTYzZDZlMjQ2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkEdQGMHJ/DW6YFOYGYT2K+WqFbz ZXKNvsveuO7SQYQk+kf9xQHLhMnnfydnTMHLWlwkn5OsS59/ZXR/uP3P7x4ZSLrj vV2lR+XWnzXJmQHND3Olj6FkDpHMIV6Y03asABXl315dD56HmNzHZa2Xv4jOaabM plErcZZdbaymKfGmywZ0zHzhzerek+Dy4xO9JyxqZw3KdQVRbRou+6N0pCyV54GB bUPGRf+muMxctN2qnOoi+X71wMW1StwY4aIgCjLGqjaMZj0yBbMdkCfqUptuZ/zu da8fErkOls+9A03DArj5CxQiTmQfYeZPKD74wCDIXkNVvlVOGLQcQK1SjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFDvAwuY3G0/EYX96lfc2kgqWsSoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDRmY2NkLWExOTQtNDBhNy05NzhkLWJkYjI1ODA3Y2ViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBAAqYEUfrjhx6cgiuDlB4 0sMeWiEqtMaYZTMWAe55b0U5ggZCe/STYO/edMBOAyS9L4zkEUR2s+FVjFGvgTyZ O9ujUPkpPB7qfm6dW4xdvGehQdn64lQKegM9OpUGY4Rb1jsmSvvNuzTXPKbmlMPG /0qT5W/fxQ9pR/AulDTZV/+t6NWeT9iuTnyfZElzSmopUfc2nrjT1UlNveIgXCgI fjfTsG/Cu4b+ihSrFHhoPwoEYYGwy21i9KcOLkVCe53f3YVEe6fDvM+HtydEfib8 ds7/z2Eb0R3JKp8JZoTl4u5R9po+9MDTqMKlYDFQoxY9YOUjtwkMnHp+a8ptjhJw IfQ= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:35 2025 by rpki-client