$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa File: 3119727a-0085-4a38-8cdf-7eaddddb55e5.roa (raw, json) Hash identifier: AJ9a+VlCb+cGs/Yxf3rm5hj9v9mp6ouccN+N8WMRpVE= Subject key identifier: CE:F6:42:92:64:85:F0:E4:89:F0:6F:1F:81:D6:25:24:98:21:5E:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D7A09174028210EEEB4B972B0E85AB991D4EC83 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa Signing time: Fri 25 Jul 2025 00:01:01 +0000 ROA not before: Fri 25 Jul 2025 00:01:01 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7a:09:17:40:28:21:0e:ee:b4:b9:72:b0:e8:5a:b9:91:d4:ec:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:01:01 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=b950e12854bf422a434860ab8f11aa917c40ec18f2ffeb214a9026bf02459c4f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:c2:c9:57:0c:b3:aa:18:b1:87:17:a4:9f: 6c:a4:06:4b:8c:c9:f4:e3:61:90:c3:19:b2:3d:af: 41:83:f8:8d:28:74:fb:57:5f:0f:46:b3:04:e3:c3: 15:5a:58:21:6e:10:79:5e:a5:5b:4b:ea:3b:9f:e7: 8a:5d:78:66:13:02:c0:46:c2:5f:60:9e:f9:66:c2: 03:4d:ac:98:61:57:86:bb:c9:bb:05:f3:bd:ce:79: 61:bc:d0:be:a4:c9:bc:88:10:e9:0f:2f:90:d5:d6: ec:9e:d3:43:42:a7:5f:59:25:a4:1d:a1:1c:00:61: 9c:09:b7:7c:da:f1:89:84:3c:b9:3d:2d:bf:fd:fa: 63:7e:35:f9:3f:14:79:b9:cb:97:3e:7c:a2:26:db: 25:88:9f:d3:df:d0:77:3c:ce:78:fa:30:65:6c:19: a3:ff:be:4b:1f:e4:11:6c:f7:6c:58:32:22:3d:89: 0a:91:ca:26:97:7e:15:2f:05:60:cb:81:f0:50:e7: 3c:c7:68:be:df:eb:7a:a6:93:e9:2b:6d:e0:03:75: ac:83:57:26:30:3d:bf:66:0a:ec:c1:1f:38:7d:c5: 36:5f:b9:6f:77:87:14:63:36:93:6f:a6:59:43:6c: e2:b6:a0:0e:80:0c:fd:10:b6:36:b1:c0:e2:7b:05: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:42:92:64:85:F0:E4:89:F0:6F:1F:81:D6:25:24:98:21:5E:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:800::/40 Signature Algorithm: sha256WithRSAEncryption 69:25:6b:6e:f3:88:3b:d4:1d:af:12:ab:93:1a:2f:2b:dd:14: 19:6f:6e:51:f0:4e:03:73:73:eb:a8:bc:76:3a:d3:eb:3b:e7: 50:a5:5d:cb:8c:ea:ab:ce:2d:ab:06:78:42:75:2a:e5:d7:0a: 36:9b:c8:22:56:3a:3a:09:00:74:2b:13:fa:48:9a:e1:71:74: d6:a0:34:e2:63:3b:51:5c:b5:3b:e5:1e:53:d5:65:08:97:bc: 50:d2:09:7c:e1:4a:0d:d8:ba:ce:c8:ea:19:dc:62:44:3c:07: 71:d1:1e:0f:55:17:65:97:60:a2:61:16:a5:cb:cd:bf:b5:03: 34:ac:e2:53:db:ac:9b:e7:0b:d5:8d:e8:66:1d:87:15:00:47: ce:ef:f3:d3:95:2d:d1:a5:93:56:13:64:4d:2e:7f:65:c0:57: 78:0a:e4:b8:ae:4f:88:75:3c:0a:71:62:83:a1:90:7f:b7:25: ac:e2:19:e1:90:c6:fc:d0:b7:bc:55:1e:a3:23:46:62:74:6d: b9:b9:71:58:51:3e:29:20:10:f5:38:21:8f:1a:33:23:59:31: c2:57:cc:78:e0:7a:49:8c:b7:d1:88:e4:72:f5:15:71:c1:04: ba:ed:f6:9e:87:e5:8b:2a:10:01:d1:3b:16:45:27:86:2c:73: cb:63:c7:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfXoJF0AoIQ7utLlysOhauZHU7IMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyNTAwMDEwMVoX DTI1MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAYjk1MGUxMjg1NGJmNDIyYTQzNDg2 MGFiOGYxMWFhOTE3YzQwZWMxOGYyZmZlYjIxNGE5MDI2YmYwMjQ1OWM0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2jCyVcMs6oYsYcXpJ9spAZLjMn0 42GQwxmyPa9Bg/iNKHT7V18PRrME48MVWlghbhB5XqVbS+o7n+eKXXhmEwLARsJf YJ75ZsIDTayYYVeGu8m7BfO9znlhvNC+pMm8iBDpDy+Q1dbsntNDQqdfWSWkHaEc AGGcCbd82vGJhDy5PS2//fpjfjX5PxR5ucuXPnyiJtsliJ/T39B3PM54+jBlbBmj /75LH+QRbPdsWDIiPYkKkcoml34VLwVgy4HwUOc8x2i+3+t6ppPpK23gA3Wsg1cm MD2/ZgrswR84fcU2X7lvd4cUYzaTb6ZZQ2zitqAOgAz9ELY2scDiewXc+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM72QpJkhfDkifBvH4HWJSSYIV5zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxMTk3MjdhLTAwODUtNGEzOC04Y2RmLTdlYWRkZGRiNTVlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYAgwDQYJKoZIhvcNAQELBQADggEBAGkla27ziDvUHa8Sq5Ma LyvdFBlvblHwTgNzc+uovHY60+s751ClXcuM6qvOLasGeEJ1KuXXCjabyCJWOjoJ AHQrE/pImuFxdNagNOJjO1FctTvlHlPVZQiXvFDSCXzhSg3Yus7I6hncYkQ8B3HR Hg9VF2WXYKJhFqXLzb+1AzSs4lPbrJvnC9WN6GYdhxUAR87v89OVLdGlk1YTZE0u f2XAV3gK5LiuT4h1PApxYoOhkH+3JaziGeGQxvzQt7xVHqMjRmJ0bbm5cVhRPikg EPU4IY8aMyNZMcJXzHjgekmMt9GI5HL1FXHBBLrt9p6H5YsqEAHROxZFJ4Ysc8tj x8A= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:21 2025 by rpki-client