$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/413a21d9-48ac-481c-9e81-c3f530176f78.roa File: 413a21d9-48ac-481c-9e81-c3f530176f78.roa (raw, json) Hash identifier: qHoZpJoV+UW4ALfShvpVqyc4URni4LhsLa6fcs94BmY= Subject key identifier: 1F:13:3B:48:78:EE:D7:8A:E6:9B:B2:42:B4:3B:88:57:05:73:E3:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62BD01F0E138AB23B121BB51D613FC2B6875A419 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/413a21d9-48ac-481c-9e81-c3f530176f78.roa Signing time: Mon 07 Jul 2025 15:50:50 +0000 ROA not before: Mon 07 Jul 2025 15:50:50 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:bd:01:f0:e1:38:ab:23:b1:21:bb:51:d6:13:fc:2b:68:75:a4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:50:50 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=d2d592815c9dae285746da57c0ac1d22903a7fe76780b30c135dbda053463a4c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:7a:05:e0:e0:74:72:c1:cb:e3:dd:e8:54: 05:d1:57:7b:4f:bf:d5:07:54:e2:9b:55:6a:65:7b: b4:c5:53:9b:49:28:97:bd:40:5d:1d:c6:8d:bd:2d: a4:28:c4:f9:9f:2b:26:2a:66:10:aa:13:66:6a:d0: 25:ba:67:7e:79:e4:0e:57:76:68:bd:69:89:d8:c4: 61:d7:fe:39:eb:c0:40:bd:73:bc:78:33:a5:f0:b1: 81:15:86:31:23:90:b8:91:c0:9f:c5:10:5a:b5:f3: eb:93:72:5a:78:ee:48:55:56:85:f7:05:b2:13:4b: a7:d6:4c:81:44:ec:cf:54:34:bd:42:d1:11:ab:ca: c6:da:e8:16:de:78:54:b1:95:09:eb:32:cb:40:3b: 8c:a3:17:12:87:fd:85:08:24:ac:8b:e0:17:88:4c: 8c:f4:e2:2e:fb:e3:3a:0c:6c:8b:ae:51:96:67:69: 6d:98:f3:56:b9:19:48:69:d8:e1:38:67:bd:52:71: d6:7a:61:4b:58:9f:6f:29:bd:07:8b:a3:d8:5a:f7: 8d:3e:c9:60:00:88:88:a9:8e:50:e2:41:ae:66:d3: 3e:c4:58:aa:01:46:6f:97:d7:7f:71:82:a7:28:e2: 55:94:aa:9c:15:65:0f:87:0f:6b:af:da:b4:df:81: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:13:3B:48:78:EE:D7:8A:E6:9B:B2:42:B4:3B:88:57:05:73:E3:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/413a21d9-48ac-481c-9e81-c3f530176f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:800::/38 Signature Algorithm: sha256WithRSAEncryption 3a:f7:45:b4:11:1a:07:51:52:6b:0f:8f:92:93:35:4b:06:da: ca:70:09:0b:49:da:cd:bb:40:5f:18:f1:24:47:89:fd:dc:73: b9:6b:64:83:45:a1:01:c9:08:a3:72:a5:51:de:28:f2:fe:b7: 54:f0:b2:47:e2:e7:23:57:db:e0:66:a5:ec:60:d5:83:66:e7: 91:5c:4a:b7:25:7d:99:53:2a:65:9c:2e:08:e6:88:83:2e:5d: 0d:de:26:7c:61:75:cf:ab:58:68:2a:35:c1:cd:46:7c:ea:aa: 57:9c:86:31:73:01:4c:f7:aa:6b:17:b7:ba:a6:63:ba:78:0e: 85:ce:0a:08:d4:e9:fd:9f:a1:21:75:11:75:ac:3b:9e:fb:4c: 18:93:df:f6:62:64:56:ea:4b:57:34:17:aa:a1:30:71:52:7c: 71:d9:79:2c:e2:ed:97:76:02:ff:d5:c4:19:ee:ab:50:19:eb: 2f:b5:bc:46:89:fa:d2:ae:71:77:a0:87:45:86:81:50:25:02: 4b:55:80:5d:c2:06:04:d0:5f:d2:23:8a:28:65:a4:28:15:2c: f3:b1:f3:62:33:b4:ca:9e:d8:d8:8c:38:90:d8:0c:7e:4d:0b: 26:9b:fb:5b:09:42:e9:f0:2e:dd:f4:53:ae:78:41:19:7b:f5: b3:26:6f:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYr0B8OE4qyOxIbtR1hP8K2h1pBkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NTA1MFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZDJkNTkyODE1YzlkYWUyODU3NDZk YTU3YzBhYzFkMjI5MDNhN2ZlNzY3ODBiMzBjMTM1ZGJkYTA1MzQ2M2E0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnB6BeDgdHLBy+Pd6FQF0Vd7T7/V B1Tim1VqZXu0xVObSSiXvUBdHcaNvS2kKMT5nysmKmYQqhNmatAlumd+eeQOV3Zo vWmJ2MRh1/4568BAvXO8eDOl8LGBFYYxI5C4kcCfxRBatfPrk3JaeO5IVVaF9wWy E0un1kyBROzPVDS9QtERq8rG2ugW3nhUsZUJ6zLLQDuMoxcSh/2FCCSsi+AXiEyM 9OIu++M6DGyLrlGWZ2ltmPNWuRlIadjhOGe9UnHWemFLWJ9vKb0Hi6PYWveNPslg AIiIqY5Q4kGuZtM+xFiqAUZvl9d/cYKnKOJVlKqcFWUPhw9rr9q034HfTQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB8TO0h47teK5puyQrQ7iFcFc+PGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQxM2EyMWQ5LTQ4YWMtNDgxYy05ZTgxLWMzZjUzMDE3NmY3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAgwDQYJKoZIhvcNAQELBQADggEBADr3RbQRGgdRUmsPj5KT NUsG2spwCQtJ2s27QF8Y8SRHif3cc7lrZINFoQHJCKNypVHeKPL+t1Twskfi5yNX 2+Bmpexg1YNm55FcSrclfZlTKmWcLgjmiIMuXQ3eJnxhdc+rWGgqNcHNRnzqqlec hjFzAUz3qmsXt7qmY7p4DoXOCgjU6f2foSF1EXWsO577TBiT3/ZiZFbqS1c0F6qh MHFSfHHZeSzi7Zd2Av/VxBnuq1AZ6y+1vEaJ+tKucXegh0WGgVAlAktVgF3CBgTQ X9IjiihlpCgVLPOx82IztMqe2NiMOJDYDH5NCyab+1sJQunwLt30U654QRl79bMm byc= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:34 2025 by rpki-client