$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/328cea91-878c-4f36-ad16-29b649a79487.roa File: 328cea91-878c-4f36-ad16-29b649a79487.roa (raw, json) Hash identifier: VMnKu5JuQ++KwnjVkffxcE2diF9Bd0dhOtoet4tlTwg= Subject key identifier: C2:4E:1B:07:C6:99:8F:79:94:69:84:D8:55:49:0C:76:CE:08:71:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E7DF9FDF8229B26ECDAE9BD2D96C015EAB036C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/328cea91-878c-4f36-ad16-29b649a79487.roa Signing time: Wed 30 Jul 2025 00:01:59 +0000 ROA not before: Wed 30 Jul 2025 00:01:59 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7d:f9:fd:f8:22:9b:26:ec:da:e9:bd:2d:96:c0:15:ea:b0:36:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:01:59 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=8125cfbea813893b3cf3d8d24d93c976cb72d72f8e025f433186ace97c15bcd8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:7d:4d:ac:e0:c1:35:b3:3d:02:6f:95:43: 9b:3a:21:b1:bf:5e:6e:b7:bb:46:40:e7:27:a9:19: 4d:5d:24:34:4f:3c:c0:c3:c8:aa:66:58:b6:06:6d: ca:fd:50:b2:3a:ba:54:75:8a:56:12:93:14:50:d7: d3:9a:55:b9:04:b8:30:d0:87:e7:ca:63:9d:3d:76: a1:0d:0a:5d:cc:01:22:c1:68:e5:84:38:eb:2b:7b: 50:56:70:c0:91:2a:bf:4a:86:d9:a9:d2:d3:7e:b1: 3f:e1:ef:db:8a:ff:80:f0:1c:35:8b:bd:0f:bb:b5: 9f:73:ee:97:62:64:f2:0c:12:cb:ef:c7:ac:fe:bb: 8b:04:26:60:5f:96:f3:c7:46:0b:bf:61:48:ce:5a: ad:12:4a:32:38:c0:e8:86:d8:d0:a0:50:38:18:25: 1f:df:08:94:06:3c:00:36:ad:6e:b4:92:ea:86:ba: 87:cf:b8:a7:07:b0:13:41:8b:fa:17:6c:5b:d6:16: dd:16:56:06:90:63:6b:3b:2a:6a:97:a1:05:c5:32: 32:66:bf:e6:9e:90:e3:80:45:56:64:00:f4:68:de: 8a:9f:19:58:ea:a9:d5:99:b7:61:1d:84:f7:39:b5: 02:9a:03:a3:05:01:52:fc:1c:35:7c:8f:0d:e6:20: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4E:1B:07:C6:99:8F:79:94:69:84:D8:55:49:0C:76:CE:08:71:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/328cea91-878c-4f36-ad16-29b649a79487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption c0:a7:2e:24:3a:1c:e8:b7:97:2e:1a:91:ce:34:ea:48:ae:6f: 8e:07:37:81:87:71:0a:e1:56:38:43:89:bc:02:a9:ae:c1:d0: cd:c7:cc:15:fc:38:b1:91:ea:26:d1:a2:45:fa:a5:cd:b3:b3: 3d:ae:2d:df:19:e9:e4:0d:34:42:f2:c0:01:49:f7:7f:c5:52: 9c:54:02:67:51:a1:e3:a2:1c:45:bf:3d:61:2c:c9:5a:0e:d8: 57:f6:9b:7c:4e:34:9b:d4:f7:1c:ec:64:6e:db:b7:91:20:a6: 5c:1e:ae:07:c1:4b:f6:c5:cd:d2:40:9d:07:47:c9:2b:4b:75: cd:fc:72:5d:8e:33:30:b5:5d:70:51:91:c9:9d:b7:9e:11:f3: ca:82:de:5e:c8:7e:20:d7:45:b8:6d:9c:be:04:b0:73:dc:7f: aa:31:b2:16:27:8a:39:83:65:05:2d:5b:01:2a:a0:70:93:8f: 1c:4b:dd:1d:4b:c4:3b:df:22:53:e3:04:14:2a:c0:c8:eb:9b: 27:6e:ce:a0:70:65:3b:94:a7:db:87:d6:7e:1d:fe:a3:62:4d: 44:2e:60:15:51:c2:60:52:2c:50:6d:6f:30:55:16:b0:5b:2a: b3:fb:54:20:ed:de:28:4c:68:ff:55:3c:82:6f:4f:d5:78:6e: fe:58:63:b7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTn35/fgimybs2um9LZbAFeqwNsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMDE1OVoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAODEyNWNmYmVhODEzODkzYjNjZjNk OGQyNGQ5M2M5NzZjYjcyZDcyZjhlMDI1ZjQzMzE4NmFjZTk3YzE1YmNkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJ9TazgwTWzPQJvlUObOiGxv15u t7tGQOcnqRlNXSQ0TzzAw8iqZli2Bm3K/VCyOrpUdYpWEpMUUNfTmlW5BLgw0Ifn ymOdPXahDQpdzAEiwWjlhDjrK3tQVnDAkSq/SobZqdLTfrE/4e/biv+A8Bw1i70P u7Wfc+6XYmTyDBLL78es/ruLBCZgX5bzx0YLv2FIzlqtEkoyOMDohtjQoFA4GCUf 3wiUBjwANq1utJLqhrqHz7inB7ATQYv6F2xb1hbdFlYGkGNrOypql6EFxTIyZr/m npDjgEVWZAD0aN6KnxlY6qnVmbdhHYT3ObUCmgOjBQFS/Bw1fI8N5iC/2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMJOGwfGmY95lGmE2FVJDHbOCHFgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyOGNlYTkxLTg3OGMtNGYzNi1hZDE2LTI5YjY0OWE3OTQ4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8jAMA0GCSqGSIb3DQEBCwUAA4IBAQDApy4kOhzot5cuGpHO NOpIrm+OBzeBh3EK4VY4Q4m8AqmuwdDNx8wV/Dixkeom0aJF+qXNs7M9ri3fGenk DTRC8sABSfd/xVKcVAJnUaHjohxFvz1hLMlaDthX9pt8TjSb1Pcc7GRu27eRIKZc Hq4HwUv2xc3SQJ0HR8krS3XN/HJdjjMwtV1wUZHJnbeeEfPKgt5eyH4g10W4bZy+ BLBz3H+qMbIWJ4o5g2UFLVsBKqBwk48cS90dS8Q73yJT4wQUKsDI65snbs6gcGU7 lKfbh9Z+Hf6jYk1ELmAVUcJgUixQbW8wVRawWyqz+1Qg7d4oTGj/VTyCb0/VeG7+ WGO3 -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:11 2025 by rpki-client