$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43106760-fb11-4c13-8812-4fe15299b252.roa File: 43106760-fb11-4c13-8812-4fe15299b252.roa (raw, json) Hash identifier: sQJYLc5t98+KjMq0EQlJJUf39fmQwyj2id5N8hvlW8w= Subject key identifier: 45:EE:89:1E:19:40:8D:43:F2:70:E4:66:C6:D0:F6:31:B2:66:86:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C6B93C0273486DACE836270C1D961823D3DFE3F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43106760-fb11-4c13-8812-4fe15299b252.roa Signing time: Sat 26 Jul 2025 00:01:43 +0000 ROA not before: Sat 26 Jul 2025 00:01:43 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6b:93:c0:27:34:86:da:ce:83:62:70:c1:d9:61:82:3d:3d:fe:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 26 00:01:43 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=6d5bf21f78f0e9d0498a6b2d0f7785bcbe3e65a45c699ae0146dd796d891a3c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:11:48:5e:ff:92:8f:39:13:d5:e1:66:90: 5a:4b:04:3c:bc:4d:19:f6:b9:50:51:60:cb:d0:3e: 2e:28:10:1b:20:f7:d8:03:1f:9d:46:93:85:ce:d7: 13:7b:f2:e5:e6:d1:97:33:3e:41:9d:d0:3f:7c:0a: c5:9f:98:7e:ba:32:e0:1b:a7:4e:bb:d9:2a:c4:9b: 18:bb:cd:6a:8a:19:f2:c6:76:6a:8d:50:55:e9:20: ae:2e:0f:e7:d9:a1:b8:11:41:20:b5:4c:16:a1:ba: 58:84:6a:44:f4:36:89:0d:b9:83:8e:9f:3d:87:67: 94:a8:c6:1f:3c:ed:52:47:c5:0a:ee:c3:8a:49:fa: fb:ef:79:d5:0d:de:22:ee:57:cc:e7:62:d7:ce:04: fe:1c:16:e6:d2:d2:59:84:78:9c:2b:ea:7b:14:cd: 17:70:7e:97:5e:a8:2c:92:a4:73:b4:b2:eb:c8:d1: e1:48:fc:9b:1c:52:7d:ee:f2:24:b5:99:fb:94:7c: 65:9b:5d:49:fc:5e:be:36:79:36:a6:11:18:66:bb: f1:2f:e1:9d:86:77:cf:eb:87:b2:d3:61:40:69:c3: 10:74:72:c7:c5:c8:51:d6:6d:1a:20:0a:f6:0f:90: e3:71:2d:56:31:dc:d0:b8:5d:19:b3:12:95:0c:40: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EE:89:1E:19:40:8D:43:F2:70:E4:66:C6:D0:F6:31:B2:66:86:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43106760-fb11-4c13-8812-4fe15299b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:2000::/48 Signature Algorithm: sha256WithRSAEncryption 32:8d:63:27:bc:c2:34:9f:80:56:1a:6c:cb:a0:d0:3d:2f:17: 2d:3a:93:91:07:41:33:90:cb:fc:d5:b7:a1:35:4d:5c:da:e2: 3c:78:09:f2:d8:00:13:53:be:bc:46:05:14:a3:68:6a:f3:bb: 68:84:e6:57:69:f8:51:a2:bc:d8:a5:c0:03:47:f6:34:dc:6b: 0a:10:04:5d:00:bb:9e:64:a6:5e:b2:7d:97:11:c4:30:7a:d7: 7f:64:ce:98:fe:c9:2d:0b:66:67:8a:4d:4f:63:47:05:75:10: 52:1b:fb:7d:a4:12:36:d5:a5:83:7c:94:2a:ed:f3:9d:dc:7f: 74:43:ee:88:48:52:56:21:31:99:14:96:d0:41:0f:05:95:4b: 97:92:d8:27:e6:75:58:86:56:13:15:02:0c:8d:cd:05:5e:79: 04:33:9b:02:13:5a:8d:55:63:16:65:e1:bf:53:1f:b8:bf:11: 00:2e:d1:3b:f9:71:7c:50:6e:07:38:d7:d5:02:4f:9c:95:d9: 11:9e:19:42:17:36:96:18:29:c1:8a:fe:17:8c:3c:05:f5:1a: 7c:60:0e:24:e9:ab:82:2d:71:3e:dd:b2:64:13:87:d4:32:eb: 2a:17:ee:21:50:82:7f:06:2b:73:ad:98:99:52:7b:4d:13:84: 9b:1a:e8:43 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXGuTwCc0htrOg2Jwwdlhgj09/j8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyNjAwMDE0M1oX DTI1MDgzMDIzNTk1OVowejFJMEcGA1UEBRNANmQ1YmYyMWY3OGYwZTlkMDQ5OGE2 YjJkMGY3Nzg1YmNiZTNlNjVhNDVjNjk5YWUwMTQ2ZGQ3OTZkODkxYTNjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP0RSF7/ko85E9XhZpBaSwQ8vE0Z 9rlQUWDL0D4uKBAbIPfYAx+dRpOFztcTe/Ll5tGXMz5BndA/fArFn5h+ujLgG6dO u9kqxJsYu81qihnyxnZqjVBV6SCuLg/n2aG4EUEgtUwWobpYhGpE9DaJDbmDjp89 h2eUqMYfPO1SR8UK7sOKSfr773nVDd4i7lfM52LXzgT+HBbm0tJZhHicK+p7FM0X cH6XXqgskqRztLLryNHhSPybHFJ97vIktZn7lHxlm11J/F6+Nnk2phEYZrvxL+Gd hnfP64ey02FAacMQdHLHxchR1m0aIAr2D5DjcS1WMdzQuF0ZsxKVDEDXfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEXuiR4ZQI1D8nDkZsbQ9jGyZoYfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzMTA2NzYwLWZiMTEtNGMxMy04ODEyLTRmZTE1Mjk5YjI1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9iAAMA0GCSqGSIb3DQEBCwUAA4IBAQAyjWMnvMI0n4BWGmzL oNA9LxctOpORB0EzkMv81behNU1c2uI8eAny2AATU768RgUUo2hq87tohOZXafhR orzYpcADR/Y03GsKEARdALueZKZesn2XEcQwetd/ZM6Y/sktC2Znik1PY0cFdRBS G/t9pBI21aWDfJQq7fOd3H90Q+6ISFJWITGZFJbQQQ8FlUuXktgn5nVYhlYTFQIM jc0FXnkEM5sCE1qNVWMWZeG/Ux+4vxEALtE7+XF8UG4HONfVAk+cldkRnhlCFzaW GCnBiv4XjDwF9Rp8YA4k6auCLXE+3bJkE4fUMusqF+4hUIJ/BitzrZiZUntNE4Sb GuhD -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:52 2025 by rpki-client