$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa File: 47371510-3a26-4c9b-a966-5e5aaf136a2f.roa (raw, json) Hash identifier: dX+x7+eQHcCYk7eKlhQZ0/jNfMTmyLn2c8jVFrdVsg0= Subject key identifier: 22:D2:FE:B1:AD:1F:39:E5:25:57:F8:66:2A:8D:0C:67:3F:80:1F:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35C2BC5962E69846547F6EB33F95A90FDDE01BED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa Signing time: Mon 28 Jul 2025 15:20:38 +0000 ROA not before: Mon 28 Jul 2025 15:20:38 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c2:bc:59:62:e6:98:46:54:7f:6e:b3:3f:95:a9:0f:dd:e0:1b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:20:38 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=f5cd52ebb615f6494d5b4005dd7ff7867bb0df3cddeb522f24a1613784c1c90b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:17:f1:a2:fe:e0:42:4b:c6:dd:2d:a4:01:e2: 48:cf:ff:0b:fc:1c:10:d4:22:7c:98:01:4d:44:b7: 97:03:a9:2b:3a:0c:50:3b:40:74:4e:d4:e7:20:6a: 85:65:ee:cc:48:6f:42:a8:cf:38:66:08:9d:fb:e7: 6f:78:72:84:f0:24:57:96:02:57:9b:8f:e0:ee:ab: 23:04:f9:89:c3:47:5c:e0:ae:22:63:55:9e:eb:89: af:d7:c0:e6:1a:06:b1:f6:50:13:fc:8b:fc:74:f0: 91:ba:07:05:40:d7:c4:e6:bc:1c:26:0a:ce:c2:91: 05:64:d7:98:67:74:c1:a8:fa:52:97:2c:aa:64:5c: 3b:bb:e2:a6:03:40:5e:6c:54:84:12:b8:91:36:c7: 86:d0:77:81:45:4e:0e:e1:0e:b3:81:b6:de:52:0b: a7:82:2c:63:4f:1d:9d:0c:f5:25:a3:e3:02:94:07: b8:55:7b:59:f2:6e:74:d6:8e:ac:3b:32:5c:47:4b: 3e:ff:db:a2:7e:07:1a:fe:92:ed:8e:bb:d4:01:c8: be:7b:5a:c6:ab:5c:c8:35:a0:2b:d6:b9:1a:90:24: cb:0f:1c:a0:20:7e:ed:c7:70:b6:ea:93:14:d3:5d: b2:d8:80:49:87:2f:ef:77:85:a7:1d:be:6a:77:9b: d1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:FE:B1:AD:1F:39:E5:25:57:F8:66:2A:8D:0C:67:3F:80:1F:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b040::/48 Signature Algorithm: sha256WithRSAEncryption 01:5e:f3:b9:08:8b:dc:f9:ee:d6:af:7b:47:f7:18:3e:67:1a: 8a:98:1e:52:a0:c3:20:b0:93:8a:e3:9c:b6:65:40:34:94:d3: 43:c1:1b:80:b5:1e:30:96:f1:de:28:bc:38:22:07:b3:51:e6: 76:e0:a3:c4:2e:64:0a:6b:0d:85:0f:85:99:b3:13:63:f5:e7: a5:f0:0f:b4:7a:13:bc:29:68:c6:a3:4c:d0:25:38:a3:10:03: 11:cf:bb:a3:23:5e:30:f0:4c:e5:46:0a:67:da:19:00:e1:4d: 7d:1c:d9:26:2c:5e:d1:e7:0e:e9:a5:04:4c:93:05:72:0a:13: e4:c5:00:48:8b:53:ca:f7:57:c1:0d:49:4e:a9:85:11:2e:c2: e5:5a:a5:d5:58:f0:f5:48:ea:99:54:ce:71:f1:fb:1c:0a:1b: 10:b0:b3:9f:be:a9:bb:94:b2:85:f5:2d:18:ec:ac:b7:a0:89: 41:52:a5:58:44:f2:40:df:a0:5a:7a:9e:18:70:d5:91:df:c6: 52:40:ee:72:b6:fa:fd:aa:9e:71:fd:99:1a:55:be:8c:75:5e: 6e:ed:9a:03:e8:e1:23:6a:db:8d:26:78:38:6f:7c:54:90:55: 74:b2:ca:67:81:45:4f:72:14:05:32:30:3a:b6:c1:96:07:d8: 5b:1d:23:a4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNcK8WWLmmEZUf26zP5WpD93gG+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MjAzOFoX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAZjVjZDUyZWJiNjE1ZjY0OTRkNWI0 MDA1ZGQ3ZmY3ODY3YmIwZGYzY2RkZWI1MjJmMjRhMTYxMzc4NGMxYzkwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xfxov7gQkvG3S2kAeJIz/8L/BwQ 1CJ8mAFNRLeXA6krOgxQO0B0TtTnIGqFZe7MSG9CqM84Zgid++dveHKE8CRXlgJX m4/g7qsjBPmJw0dc4K4iY1We64mv18DmGgax9lAT/Iv8dPCRugcFQNfE5rwcJgrO wpEFZNeYZ3TBqPpSlyyqZFw7u+KmA0BebFSEEriRNseG0HeBRU4O4Q6zgbbeUgun gixjTx2dDPUlo+MClAe4VXtZ8m501o6sOzJcR0s+/9uifgca/pLtjrvUAci+e1rG q1zINaAr1rkakCTLDxygIH7tx3C26pMU012y2IBJhy/vd4WnHb5qd5vRLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCLS/rGtHznlJVf4ZiqNDGc/gB8RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3MzcxNTEwLTNhMjYtNGM5Yi1hOTY2LTVlNWFhZjEzNmEyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYbBAMA0GCSqGSIb3DQEBCwUAA4IBAQABXvO5CIvc+e7Wr3tH 9xg+ZxqKmB5SoMMgsJOK45y2ZUA0lNNDwRuAtR4wlvHeKLw4IgezUeZ24KPELmQK aw2FD4WZsxNj9eel8A+0ehO8KWjGo0zQJTijEAMRz7ujI14w8EzlRgpn2hkA4U19 HNkmLF7R5w7ppQRMkwVyChPkxQBIi1PK91fBDUlOqYURLsLlWqXVWPD1SOqZVM5x 8fscChsQsLOfvqm7lLKF9S0Y7Ky3oIlBUqVYRPJA36Baep4YcNWR38ZSQO5ytvr9 qp5x/ZkaVb6MdV5u7ZoD6OEjatuNJng4b3xUkFV0sspngUVPchQFMjA6tsGWB9hb HSOk -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:16 2025 by rpki-client