$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa File: 30b671bd-156b-4a81-a500-a0a4b031317e.roa (raw, json) Hash identifier: 7pp3IvsmJfavVJm9kyaChCqct3lGrHaOb5SPL+dj+54= Subject key identifier: FC:40:C6:21:C9:59:7E:78:4A:68:AD:66:68:48:DF:C7:B6:58:C6:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F9DB59153CC8110FBBF7E574EB3333BAF37143F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa Signing time: Tue 29 Jul 2025 00:20:08 +0000 ROA not before: Tue 29 Jul 2025 00:20:08 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9d:b5:91:53:cc:81:10:fb:bf:7e:57:4e:b3:33:3b:af:37:14:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:20:08 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=476a1cad6587496e3f9dbab8dc2b5bf27cc702610b458dcda2580eeb365e3b85, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:a6:b2:0a:bd:20:ff:b8:9e:48:4f:fb:38: ed:dc:5d:a1:ea:fb:c1:2e:d1:dc:47:f6:51:c6:ef: 5a:f6:a0:43:e2:18:52:8c:7b:44:28:d3:f0:34:cb: 84:3a:8f:32:ad:77:5f:f0:17:b7:37:d2:e1:ea:94: 09:85:99:92:0b:db:74:d8:fd:63:0f:ec:50:29:3c: 6e:ee:1a:78:11:08:c1:ea:6e:0d:1d:c2:77:c3:82: 6e:d4:60:1d:1c:00:81:4e:09:d2:d9:fe:e1:d6:2a: 03:ae:b0:62:04:a3:8b:a3:71:53:71:63:6b:b0:f0: 43:2c:8d:da:29:61:43:1b:25:96:af:f7:60:4c:f7: 0a:48:b3:19:35:77:32:88:2a:da:fb:3f:d4:e0:51: 47:b0:c2:f5:04:b8:12:b8:3e:82:d5:13:1e:7d:b4: ec:6d:a7:c6:c5:b6:47:6f:fc:40:a0:e9:a9:c4:57: e3:7c:ef:5b:d9:c1:0c:19:53:b4:73:7c:d2:bb:28: 97:be:37:d7:15:b3:51:d9:3e:48:ed:70:5e:ae:d7: 38:17:0e:a2:9b:98:0a:2b:2c:1a:bc:8e:d7:b3:06: 2b:7a:ab:6e:8b:5d:77:c5:a4:f9:7f:ad:cc:53:6a: f7:f7:f0:ca:2c:f4:13:3c:8a:57:00:1d:4d:47:0b: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:C6:21:C9:59:7E:78:4A:68:AD:66:68:48:DF:C7:B6:58:C6:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6020::/48 Signature Algorithm: sha256WithRSAEncryption 08:e1:8c:f7:de:d5:e9:2d:65:26:d6:bc:16:20:f1:c0:89:f4: 07:7a:1c:ae:79:2a:ca:b0:b8:5b:2b:50:dd:1a:4d:6b:e7:ea: 75:2c:bf:b9:db:d3:c4:05:46:76:81:f2:87:3b:db:27:05:e3: 6a:76:cc:8d:5d:27:cb:5a:a2:19:54:6b:5c:2f:44:61:20:07: 01:6e:46:c5:40:ea:52:a7:d2:dc:46:72:6e:42:02:56:85:4c: 49:99:72:ce:02:cd:d3:b6:5b:8b:52:6a:2e:a5:98:50:7f:4f: df:af:45:61:e2:6c:62:b0:b4:8e:9a:88:6c:a0:94:00:78:a0: 00:d0:c4:8e:2d:be:7e:b0:3a:fa:d9:15:50:84:27:e9:38:d7: 82:06:e3:25:61:68:c2:c0:cc:df:ae:17:ff:c6:72:49:cc:57: 76:94:9e:96:07:ef:7b:da:44:b2:9c:5f:2c:44:fe:6e:a1:84: 3e:cd:35:cb:6b:85:91:fa:c8:a6:0d:9f:30:df:1f:d3:83:2e: df:c5:af:34:78:e2:c6:71:a4:7d:85:01:14:96:f4:35:98:d9: be:72:01:3c:d1:a4:09:f8:d8:ea:2a:08:47:fe:9c:cb:01:38: 01:2d:1f:91:e1:f5:f1:8e:ff:0f:3f:a6:06:5f:10:48:71:85: 6b:2e:fa:58 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf521kVPMgRD7v35XTrMzO683FD8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjAwOFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANDc2YTFjYWQ2NTg3NDk2ZTNmOWRi YWI4ZGMyYjViZjI3Y2M3MDI2MTBiNDU4ZGNkYTI1ODBlZWIzNjVlM2I4NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ymsgq9IP+4nkhP+zjt3F2h6vvB LtHcR/ZRxu9a9qBD4hhSjHtEKNPwNMuEOo8yrXdf8Be3N9Lh6pQJhZmSC9t02P1j D+xQKTxu7hp4EQjB6m4NHcJ3w4Ju1GAdHACBTgnS2f7h1ioDrrBiBKOLo3FTcWNr sPBDLI3aKWFDGyWWr/dgTPcKSLMZNXcyiCra+z/U4FFHsML1BLgSuD6C1RMefbTs bafGxbZHb/xAoOmpxFfjfO9b2cEMGVO0c3zSuyiXvjfXFbNR2T5I7XBertc4Fw6i m5gKKywavI7XswYreqtui113xaT5f63MU2r39/DKLPQTPIpXAB1NRwvNCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPxAxiHJWX54SmitZmhI38e2WMYsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwYjY3MWJkLTE1NmItNGE4MS1hNTAwLWEwYTRiMDMxMzE3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGAgMA0GCSqGSIb3DQEBCwUAA4IBAQAI4Yz33tXpLWUm1rwW IPHAifQHehyueSrKsLhbK1DdGk1r5+p1LL+529PEBUZ2gfKHO9snBeNqdsyNXSfL WqIZVGtcL0RhIAcBbkbFQOpSp9LcRnJuQgJWhUxJmXLOAs3TtluLUmoupZhQf0/f r0Vh4mxisLSOmohsoJQAeKAA0MSOLb5+sDr62RVQhCfpONeCBuMlYWjCwMzfrhf/ xnJJzFd2lJ6WB+972kSynF8sRP5uoYQ+zTXLa4WR+simDZ8w3x/Tgy7fxa80eOLG caR9hQEUlvQ1mNm+cgE80aQJ+NjqKghH/pzLATgBLR+R4fXxjv8PP6YGXxBIcYVr LvpY -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:23 2025 by rpki-client