$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa File: 524bbb59-fe5b-477a-80a0-854f6932264e.roa (raw, json) Hash identifier: gN+TSf0MBBgDy7IzdZp+v4kyg1gyZsNDCtDTNdxYn00= Subject key identifier: 53:D5:1F:81:FC:FE:9D:68:3C:25:45:9A:31:B2:F7:0A:26:94:72:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58A75FC65A6751928FEDC3C3CBF8E08BF976F6EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa Signing time: Wed 30 Jul 2025 00:00:24 +0000 ROA not before: Wed 30 Jul 2025 00:00:24 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a7:5f:c6:5a:67:51:92:8f:ed:c3:c3:cb:f8:e0:8b:f9:76:f6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:00:24 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=218b7d91bac2a4d847fa3216e8ea099ae6ffa0b68c864c14a096a2f7dd60e14c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:e1:4a:c5:d2:93:c1:8d:f3:bc:7b:ae:43: cd:9a:00:66:59:20:4b:a6:4b:7a:d3:1c:e8:21:21: 18:f5:6a:b5:98:e5:96:20:e8:05:e7:34:f0:74:0e: 04:b1:b2:7b:c8:58:55:ef:92:a4:09:ce:9e:dd:f1: ce:fe:5e:e4:38:59:36:b5:33:fe:39:60:8c:53:30: 1d:1a:2b:e5:a9:ea:f3:54:e1:8f:88:b7:d5:26:06: 6c:c7:d4:61:b8:7a:26:fb:5c:7e:9e:1d:b2:8d:e1: 57:eb:08:af:c8:32:a9:08:62:29:41:70:44:58:f1: c9:1a:7d:89:06:72:80:f4:85:9a:e6:96:46:b0:36: b9:57:3a:72:8e:16:d9:35:29:52:f5:8a:65:95:ef: 16:8f:d9:d3:32:ec:15:81:5a:ae:ff:54:8c:38:0e: 64:42:ee:d1:6b:c6:f9:05:91:31:59:f9:8e:ca:9f: 47:f2:fc:20:92:7d:77:76:66:58:13:92:41:d4:1f: 69:24:94:92:fa:85:b4:19:aa:cb:63:2e:db:7d:d9: ec:81:2a:52:b9:c8:32:71:33:d4:20:fb:79:0e:f6: 56:e7:c2:30:b2:c3:00:3e:6d:fe:03:57:b1:ae:8d: 90:2a:94:6e:a7:b0:da:11:67:f7:60:90:11:40:dd: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:1F:81:FC:FE:9D:68:3C:25:45:9A:31:B2:F7:0A:26:94:72:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c060::/48 Signature Algorithm: sha256WithRSAEncryption 47:10:9a:a2:b1:9f:29:a9:a7:2b:57:fe:07:02:9e:71:fd:4b: c1:aa:ff:5b:ad:3b:fb:21:0c:51:82:e6:43:b9:f9:43:8e:4f: 95:ae:ad:bb:fe:b8:4e:d5:cb:28:20:41:75:53:dd:7a:b3:67: f9:4e:2c:4a:f5:42:1e:97:2d:69:38:61:a3:34:91:27:e2:f0: 0e:8a:ef:9f:26:1f:c7:b5:a7:31:e5:4a:dd:5f:e4:ee:3b:5d: b1:7b:87:fa:3a:66:1c:65:9d:f6:15:fc:b5:94:7e:01:ad:4f: 4d:ee:13:be:cc:2c:cf:05:d0:d3:72:af:74:2e:7e:78:0c:dd: a4:df:56:20:ee:f5:59:09:d5:cb:39:9b:c2:f2:b7:a6:bd:57: 6e:c2:30:0a:2f:ff:cc:10:4f:0e:9e:de:69:54:7d:26:23:bd: 1c:3b:ae:02:32:85:ec:ff:e0:42:82:e5:4c:73:97:e3:b9:fe: 14:36:ae:de:2d:ce:e8:d9:15:4c:d4:86:3e:e4:b7:3d:19:f7: de:a2:1a:90:dc:db:62:65:64:fc:53:90:cc:d2:45:ad:a8:3f: 7a:dc:34:1f:c3:18:81:63:8a:71:8b:ac:62:b5:eb:5b:6b:91: db:4c:9c:20:1a:cd:3e:f8:ab:4c:a3:b5:c2:cd:85:b5:b5:c4: 02:94:c8:8f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWKdfxlpnUZKP7cPDy/jgi/l29u4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMDAyNFoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAMjE4YjdkOTFiYWMyYTRkODQ3ZmEz MjE2ZThlYTA5OWFlNmZmYTBiNjhjODY0YzE0YTA5NmEyZjdkZDYwZTE0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYDhSsXSk8GN87x7rkPNmgBmWSBL pkt60xzoISEY9Wq1mOWWIOgF5zTwdA4EsbJ7yFhV75KkCc6e3fHO/l7kOFk2tTP+ OWCMUzAdGivlqerzVOGPiLfVJgZsx9RhuHom+1x+nh2yjeFX6wivyDKpCGIpQXBE WPHJGn2JBnKA9IWa5pZGsDa5VzpyjhbZNSlS9Yplle8Wj9nTMuwVgVqu/1SMOA5k Qu7Ra8b5BZExWfmOyp9H8vwgkn13dmZYE5JB1B9pJJSS+oW0GarLYy7bfdnsgSpS ucgycTPUIPt5DvZW58IwssMAPm3+A1exro2QKpRup7DaEWf3YJARQN0drwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFPVH4H8/p1oPCVFmjGy9womlHL/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNGJiYjU5LWZlNWItNDc3YS04MGEwLTg1NGY2OTMyMjY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8BgMA0GCSqGSIb3DQEBCwUAA4IBAQBHEJqisZ8pqacrV/4H Ap5x/UvBqv9brTv7IQxRguZDuflDjk+Vrq27/rhO1csoIEF1U916s2f5TixK9UIe ly1pOGGjNJEn4vAOiu+fJh/Htacx5UrdX+TuO12xe4f6OmYcZZ32Ffy1lH4BrU9N 7hO+zCzPBdDTcq90Ln54DN2k31Yg7vVZCdXLOZvC8remvVduwjAKL//MEE8Ont5p VH0mI70cO64CMoXs/+BCguVMc5fjuf4UNq7eLc7o2RVM1IY+5Lc9GffeohqQ3Nti ZWT8U5DM0kWtqD963DQfwxiBY4pxi6xitetba5HbTJwgGs0++KtMo7XCzYW1tcQC lMiP -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:18 2025 by rpki-client