$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa File: 51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa (raw, json) Hash identifier: efQwbHHMYDDMHuy9cfq33vTyBrOymireS4DUU2iJAu8= Subject key identifier: 00:FD:9D:8B:66:C3:95:32:5C:8F:20:8F:00:07:2F:28:18:BF:88:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F44B14699A243074F295074968A3CEB2B4E4F4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa Signing time: Tue 29 Jul 2025 00:40:12 +0000 ROA not before: Tue 29 Jul 2025 00:40:12 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:44:b1:46:99:a2:43:07:4f:29:50:74:96:8a:3c:eb:2b:4e:4f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:40:12 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=c0b5bc996b7c82e0818396267960b57b25c96815126d48edaf4eaee9ff7b2ad7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:21:5d:93:1a:6d:11:7c:7c:61:b6:ff:45: db:d5:56:86:21:50:ac:60:5a:92:f4:cd:45:9e:58: d6:09:03:50:03:ca:a0:6b:8d:3f:cb:bb:94:c2:8d: 11:10:86:b5:6a:4f:3e:57:11:7b:2d:2f:e4:22:ef: 03:f2:4e:f8:46:4d:66:89:db:c6:cc:da:32:5a:cd: f7:c5:2f:ae:f1:54:49:22:c1:2c:8e:a4:10:98:7d: c1:ea:4a:fc:bf:13:5e:ec:f7:3d:59:45:98:99:9f: 61:95:6c:22:53:f4:19:3d:13:13:a3:08:6f:29:10: f5:71:fd:18:25:08:8d:8b:f8:c3:9b:87:c8:75:6e: 9c:ec:14:bc:6c:5e:83:95:20:f1:18:f0:b5:a9:13: be:98:81:95:83:0c:64:56:d2:21:f1:b9:b9:fa:bb: f5:85:d5:0f:e6:56:73:ac:db:bf:23:a5:25:3c:32: 9d:8b:cd:a9:ea:bb:c5:31:76:42:26:6b:48:a4:6a: ee:51:49:5b:3a:dd:52:f2:81:fd:48:53:41:a5:ae: 62:5f:5e:c3:cf:c6:5b:b8:83:eb:82:7e:48:c1:6c: 0b:63:90:01:b3:eb:df:9c:b8:0d:e5:9b:21:43:2c: 4a:1c:45:c8:9b:d3:0a:b3:e3:8a:77:58:a5:6d:34: 8a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:9D:8B:66:C3:95:32:5C:8F:20:8F:00:07:2F:28:18:BF:88:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 4a:22:d0:8e:79:4a:69:0e:43:57:a3:d1:75:fd:cf:57:72:54: 13:dd:8a:8d:59:57:db:4d:9c:42:8e:ee:75:5e:19:2d:56:69: 00:4b:98:90:5a:0d:eb:a8:47:6f:1b:f4:85:ad:b7:cb:ed:de: 78:cc:56:fd:8a:5b:ed:1f:97:54:eb:b0:e1:5e:7b:6c:5e:cf: 66:d9:a0:2f:dc:e9:bf:c1:64:02:b5:8e:7c:21:f5:dd:9b:9d: 18:3c:76:01:24:34:ed:e5:ed:0f:8a:53:d7:0b:2a:63:ee:c6: 62:45:7d:08:0b:06:c2:ea:80:2a:bd:b0:08:78:85:26:a5:30: 62:b6:f5:7a:72:d5:a1:12:41:8e:4f:c9:e0:0f:1f:86:35:72: 59:01:da:9f:c6:ed:51:82:ae:14:79:6c:1e:55:dd:81:5d:6d: 99:f8:00:96:61:74:cb:04:2c:2c:95:af:73:62:ff:54:58:c9: e8:4e:d0:c4:79:0f:78:4a:cd:ea:26:7c:be:97:0b:17:03:ca: f1:90:5b:d9:4f:09:ca:bf:40:ce:40:c7:24:d5:77:e4:a4:c8: df:ae:97:75:b8:a1:d8:cd:49:f2:75:6f:5f:8e:4c:29:30:96: 77:e2:99:23:e9:5c:b0:da:c2:93:3d:18:e2:12:df:dd:c6:b9: 55:0b:4e:fb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH0SxRpmiQwdPKVB0loo86ytOT04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDAxMloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAYzBiNWJjOTk2YjdjODJlMDgxODM5 NjI2Nzk2MGI1N2IyNWM5NjgxNTEyNmQ0OGVkYWY0ZWFlZTlmZjdiMmFkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIEhXZMabRF8fGG2/0Xb1VaGIVCs YFqS9M1FnljWCQNQA8qga40/y7uUwo0REIa1ak8+VxF7LS/kIu8D8k74Rk1midvG zNoyWs33xS+u8VRJIsEsjqQQmH3B6kr8vxNe7Pc9WUWYmZ9hlWwiU/QZPRMTowhv KRD1cf0YJQiNi/jDm4fIdW6c7BS8bF6DlSDxGPC1qRO+mIGVgwxkVtIh8bm5+rv1 hdUP5lZzrNu/I6UlPDKdi82p6rvFMXZCJmtIpGruUUlbOt1S8oH9SFNBpa5iX17D z8ZbuIPrgn5IwWwLY5ABs+vfnLgN5ZshQyxKHEXIm9MKs+OKd1ilbTSKuQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAD9nYtmw5UyXI8gjwAHLygYv4iHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxYTI0MTQzLThmMTktNGYyYy04MWEwLTQwNDZmZTBkMGY2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/2AwDQYJKoZIhvcNAQELBQADggEBAEoi0I55SmkOQ1ej0XX9 z1dyVBPdio1ZV9tNnEKO7nVeGS1WaQBLmJBaDeuoR28b9IWtt8vt3njMVv2KW+0f l1TrsOFee2xez2bZoC/c6b/BZAK1jnwh9d2bnRg8dgEkNO3l7Q+KU9cLKmPuxmJF fQgLBsLqgCq9sAh4hSalMGK29Xpy1aESQY5PyeAPH4Y1clkB2p/G7VGCrhR5bB5V 3YFdbZn4AJZhdMsELCyVr3Ni/1RYyehO0MR5D3hKzeomfL6XCxcDyvGQW9lPCcq/ QM5AxyTVd+SkyN+ul3W4odjNSfJ1b1+OTCkwlnfimSPpXLDawpM9GOIS393GuVUL Tvs= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:26 2025 by rpki-client