$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa File: 4f94d4be-2864-45c5-a16e-6384684a8060.roa (raw, json) Hash identifier: JtJE5D1r1RSdmclLtAQz3/USyQzwkGPdqHGRQb6vKKc= Subject key identifier: 3F:D6:3B:0F:29:AB:05:4E:4A:97:F5:19:F0:8C:65:20:97:B6:78:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D2DDC1DA6AEE3AA09024B47821881523B89BB63 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa Signing time: Mon 07 Jul 2025 15:41:55 +0000 ROA not before: Mon 07 Jul 2025 15:41:55 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2d:dc:1d:a6:ae:e3:aa:09:02:4b:47:82:18:81:52:3b:89:bb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:41:55 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=3842ea641c5186492bf140f2cb4b562a064d12792ae40731dcdb44128378225f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:bd:01:cf:30:c7:fd:5b:bf:12:b1:aa:09: a6:21:4b:3a:17:4a:df:37:4c:80:dc:c0:a1:b6:cd: 94:6e:90:a6:a2:f7:62:ce:28:c2:58:02:10:14:77: 13:a3:3f:43:3d:7b:6f:db:7e:00:08:5a:0a:6c:a9: 02:96:86:a5:1b:87:d9:49:8e:65:06:17:ee:45:e2: 22:31:d1:c5:a8:12:47:3e:5d:4e:25:80:b2:9b:cd: 19:b8:d8:a6:62:b4:30:2a:d5:24:cf:d4:99:4d:86: ee:ba:62:69:26:0c:59:4b:1a:d1:3b:bb:f2:be:b7: 4c:00:98:62:82:d6:7f:da:44:fd:ac:5a:65:70:bb: 67:47:fa:23:68:9a:b1:cb:63:e7:66:ac:b9:a9:b8: 9e:d2:4f:69:00:b9:1f:aa:6a:f1:70:dd:41:fd:34: 36:4b:52:00:ba:5e:e2:e4:93:43:fe:19:a4:9c:34: 63:17:07:1b:ea:8a:42:08:da:72:3b:1c:41:a2:8c: 76:d0:ce:6a:89:1c:f8:6e:43:ea:d9:34:7d:cb:f4: ce:73:65:ad:ee:58:6a:28:0f:c5:2c:ba:2c:69:7e: 11:51:67:f6:f8:49:f4:e8:04:a5:b7:fb:92:16:35: 0d:9c:3f:be:4c:d3:d6:c0:ee:37:5f:38:c5:f0:2b: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D6:3B:0F:29:AB:05:4E:4A:97:F5:19:F0:8C:65:20:97:B6:78:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16:400::/38 Signature Algorithm: sha256WithRSAEncryption b0:f4:7a:16:9f:fc:0c:49:b3:f2:53:fd:e0:86:08:f3:ef:df: 9d:fc:b3:86:bf:6d:17:67:25:71:0c:aa:4c:33:16:61:cb:bb: 50:e3:23:6a:c3:02:21:88:c2:fc:b6:a9:5d:66:35:a6:a9:48: 56:e3:10:c6:aa:8d:b1:1b:e7:a8:c4:27:fb:31:7b:61:35:c5: c8:e3:b3:9b:69:28:32:2a:4e:60:7b:1e:24:c7:90:45:89:82: 13:cb:83:a3:c3:b9:7c:cb:97:4f:e1:cc:1c:90:40:6c:d9:0a: 26:e1:af:d8:e3:72:24:93:c2:a6:88:b5:c0:49:bb:93:54:e0: 29:95:ea:b0:a0:37:27:06:4c:33:35:57:b5:ee:7a:95:9d:b9: 39:b1:1b:df:a1:46:d4:88:04:86:42:eb:01:bb:66:43:47:8a: 40:b9:12:85:2a:aa:17:2c:65:52:ee:7b:63:ca:78:38:e4:d7: 3b:13:c4:94:cd:87:39:8a:b1:40:b7:cf:65:25:cc:8f:9f:7e: 3c:b7:ab:8b:22:67:89:73:bb:2d:2b:03:6d:39:04:2a:30:9a: 35:1e:f5:bf:e3:2b:fe:b1:c8:03:de:b6:71:7e:92:17:80:bc: 0b:6c:4e:ca:fa:69:72:e7:7f:b1:7d:dc:2d:b5:8e:fb:de:6f: d3:40:50:8e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHS3cHaau46oJAktHghiBUjuJu2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NDE1NVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMzg0MmVhNjQxYzUxODY0OTJiZjE0 MGYyY2I0YjU2MmEwNjRkMTI3OTJhZTQwNzMxZGNkYjQ0MTI4Mzc4MjI1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO29Ac8wx/1bvxKxqgmmIUs6F0rf N0yA3MChts2UbpCmovdizijCWAIQFHcToz9DPXtv234ACFoKbKkCloalG4fZSY5l BhfuReIiMdHFqBJHPl1OJYCym80ZuNimYrQwKtUkz9SZTYbuumJpJgxZSxrRO7vy vrdMAJhigtZ/2kT9rFplcLtnR/ojaJqxy2PnZqy5qbie0k9pALkfqmrxcN1B/TQ2 S1IAul7i5JND/hmknDRjFwcb6opCCNpyOxxBoox20M5qiRz4bkPq2TR9y/TOc2Wt 7lhqKA/FLLosaX4RUWf2+En06ASlt/uSFjUNnD++TNPWwO43XzjF8CsCCQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD/WOw8pqwVOSpf1GfCMZSCXtnggMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmOTRkNGJlLTI4NjQtNDVjNS1hMTZlLTYzODQ2ODRhODA2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgQwDQYJKoZIhvcNAQELBQADggEBALD0ehaf/AxJs/JT/eCG CPPv3538s4a/bRdnJXEMqkwzFmHLu1DjI2rDAiGIwvy2qV1mNaapSFbjEMaqjbEb 56jEJ/sxe2E1xcjjs5tpKDIqTmB7HiTHkEWJghPLg6PDuXzLl0/hzByQQGzZCibh r9jjciSTwqaItcBJu5NU4CmV6rCgNycGTDM1V7XuepWduTmxG9+hRtSIBIZC6wG7 ZkNHikC5EoUqqhcsZVLue2PKeDjk1zsTxJTNhzmKsUC3z2UlzI+ffjy3q4siZ4lz uy0rA205BCowmjUe9b/jK/6xyAPetnF+kheAvAtsTsr6aXLnf7F93C21jvveb9NA UI4= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:32 2025 by rpki-client