$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa File: 445d78ad-29c7-49fd-ad71-7cd16140cfce.roa (raw, json) Hash identifier: rwS9zW3RxgJpPRvAxa4lQ8DK37jOdddJ/RmztqPoPR8= Subject key identifier: 9F:7A:13:75:FD:A9:C3:20:2C:FC:AC:7C:C4:11:E5:77:0C:E3:58:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 779B50B5DFA36AF6281CB350933C743DEB594315 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa Signing time: Sat 12 Jul 2025 00:01:22 +0000 ROA not before: Sat 12 Jul 2025 00:01:22 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9b:50:b5:df:a3:6a:f6:28:1c:b3:50:93:3c:74:3d:eb:59:43:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 12 00:01:22 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=76a0ba8bed237156a3745d1d17ee2d1cc1518d405e1a9833feb2f6dcf0d5b9d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:19:c8:93:a6:ea:be:a8:30:bb:ef:cb:3c: a7:3a:b0:3f:49:85:21:f0:ca:0c:cf:2f:03:69:9d: ee:55:12:29:d2:8d:c0:d6:25:25:47:45:79:19:4a: fd:be:78:9a:2e:df:5c:bd:8b:21:48:9f:5a:1b:96: 19:0d:41:ff:ea:d4:00:41:14:03:86:21:c2:21:a8: f8:c1:5d:db:26:08:ce:b4:3a:b8:35:94:93:52:88: c8:9c:d3:df:8b:37:06:b5:de:74:ba:de:cf:52:29: 48:d4:f1:49:5b:07:01:5d:10:3f:83:a6:77:90:24: 1b:1e:50:73:b9:57:f5:98:ad:7b:57:b5:d4:76:e5: d6:f7:86:47:4a:07:97:81:c0:59:2d:09:3d:87:6b: f9:c7:60:46:57:c5:5b:7f:27:15:66:e6:c8:01:04: b4:07:63:83:26:ad:62:21:6e:66:a0:1c:d1:9e:fd: b8:d6:30:78:86:4d:d1:8d:6f:fb:61:84:55:0c:a6: 93:40:9d:a5:cb:df:c4:27:1a:1c:f2:1e:4b:42:30: 6a:b1:58:81:a9:d7:9c:75:0f:2b:5a:22:d5:cf:31: aa:ea:cf:6f:e0:a6:19:70:08:e0:6c:12:aa:ec:90: 81:13:b1:8d:bb:c5:e8:de:ce:e5:e6:b6:7b:7c:0e: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7A:13:75:FD:A9:C3:20:2C:FC:AC:7C:C4:11:E5:77:0C:E3:58:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 04:e9:4a:d0:36:65:61:e2:f4:e9:ac:59:42:77:57:bd:db:0e: 4b:2e:62:de:d6:5a:24:ee:54:f2:1b:ec:ad:9a:45:46:8b:bd: da:a6:35:d7:ad:e5:08:c8:a6:69:8f:c2:19:dd:6c:67:11:5f: 7c:25:bc:be:0c:cf:f9:0d:78:9c:52:4b:a2:e9:7a:16:30:e5: 1d:b8:7b:73:b0:5e:20:34:cb:aa:f6:c1:2d:1e:e8:f4:dd:fd: c7:f0:9d:e3:6e:2e:f6:b3:50:63:2f:1c:ff:07:52:43:8a:69: 5a:76:7e:fc:9f:33:0c:56:87:e0:89:05:7d:5f:0e:00:c2:40: d8:ce:83:9c:1c:8d:70:fd:11:9d:7f:28:57:fb:d9:66:a7:f6: 89:59:5c:9f:72:43:37:af:4d:6d:81:53:73:d0:a6:bb:7e:64: 8c:4e:cd:3b:08:7f:6a:80:92:e8:64:13:bc:75:25:8a:bd:a0: 4d:f2:04:ec:48:0d:84:5f:44:4d:bb:4b:6d:48:6f:dc:e0:f0: 3d:cd:f2:7b:bd:73:03:90:59:9d:04:27:3f:36:1a:3e:6a:36: 93:06:60:aa:d4:c6:52:3e:11:42:0d:85:7f:5c:46:6c:c0:96: 34:df:a1:50:05:37:ec:b9:3e:5a:26:f7:1b:81:c1:21:10:26: cb:1d:52:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd5tQtd+javYoHLNQkzx0PetZQxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxMjAwMDEyMloX DTI1MDgxNjIzNTk1OVowejFJMEcGA1UEBRNANzZhMGJhOGJlZDIzNzE1NmEzNzQ1 ZDFkMTdlZTJkMWNjMTUxOGQ0MDVlMWE5ODMzZmViMmY2ZGNmMGQ1YjlkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaoZyJOm6r6oMLvvyzynOrA/SYUh 8MoMzy8DaZ3uVRIp0o3A1iUlR0V5GUr9vniaLt9cvYshSJ9aG5YZDUH/6tQAQRQD hiHCIaj4wV3bJgjOtDq4NZSTUojInNPfizcGtd50ut7PUilI1PFJWwcBXRA/g6Z3 kCQbHlBzuVf1mK17V7XUduXW94ZHSgeXgcBZLQk9h2v5x2BGV8VbfycVZubIAQS0 B2ODJq1iIW5moBzRnv241jB4hk3RjW/7YYRVDKaTQJ2ly9/EJxoc8h5LQjBqsViB qdecdQ8rWiLVzzGq6s9v4KYZcAjgbBKq7JCBE7GNu8Xo3s7l5rZ7fA6nKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ96E3X9qcMgLPysfMQR5XcM41gXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWQ3OGFkLTI5YzctNDlmZC1hZDcxLTdjZDE2MTQwY2ZjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAATpStA2ZWHi9OmsWUJ3 V73bDksuYt7WWiTuVPIb7K2aRUaLvdqmNdet5QjIpmmPwhndbGcRX3wlvL4Mz/kN eJxSS6LpehYw5R24e3OwXiA0y6r2wS0e6PTd/cfwneNuLvazUGMvHP8HUkOKaVp2 fvyfMwxWh+CJBX1fDgDCQNjOg5wcjXD9EZ1/KFf72Wan9olZXJ9yQzevTW2BU3PQ prt+ZIxOzTsIf2qAkuhkE7x1JYq9oE3yBOxIDYRfRE27S21Ib9zg8D3N8nu9cwOQ WZ0EJz82Gj5qNpMGYKrUxlI+EUINhX9cRmzAljTfoVAFN+y5Plom9xuBwSEQJssd UtY= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:21 2025 by rpki-client