$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa File: 549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa (raw, json) Hash identifier: q8O10P8/fQFigDY/jkwzHtmVJ1aldiqvFE/8Kvqf/ko= Subject key identifier: A8:BB:2F:35:11:F0:33:B1:77:55:28:BD:35:A1:35:68:D8:FD:D2:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 677ABBF5E2809BC7C0C6396094D3A7D822F3EFEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa Signing time: Fri 25 Jul 2025 00:01:44 +0000 ROA not before: Fri 25 Jul 2025 00:01:44 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7a:bb:f5:e2:80:9b:c7:c0:c6:39:60:94:d3:a7:d8:22:f3:ef:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:01:44 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=de9897e8027259aff6eee62849e052187c1c3139af4c8a128510979203e2bcd1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:bb:2c:95:8e:66:f5:64:99:5e:0f:d4:f8: 11:11:8d:b0:10:aa:ff:b7:68:3c:a5:d8:9e:2b:2e: 67:30:ff:a9:51:a3:7e:bd:11:15:ff:7f:c7:85:7d: f8:a1:ca:6a:95:03:73:b4:c1:ae:f7:97:4e:dc:b9: 88:95:13:0b:63:3c:d3:a3:0c:e3:37:77:b2:76:7f: 4f:3d:b1:a1:9c:38:f1:e8:42:fb:de:51:e5:31:ed: 3e:2c:49:f4:5f:2d:57:9c:3b:a4:e6:c8:29:ce:e8: 0e:9d:03:55:74:a7:b9:56:37:8d:e0:b4:3b:ce:0e: 0a:d4:f3:0b:df:8b:d2:d4:c3:be:83:93:dc:aa:7c: 10:8b:7c:59:bf:d1:2a:48:ca:c2:78:b2:04:0c:5d: 39:97:e5:e0:12:28:cb:cc:d1:bb:23:10:58:93:81: 36:83:ee:cc:fa:1f:ae:9f:97:d8:48:d6:b7:08:ce: ab:d7:cc:70:72:54:c6:92:02:16:97:ae:9a:9d:77: 48:4a:d8:40:0e:2f:e0:73:ce:de:e7:42:ae:a0:ec: a9:71:0f:48:8e:b0:f7:b7:67:ee:6b:a6:fc:93:af: 78:45:00:6e:65:25:2c:39:c2:b7:87:db:e6:bf:3e: 9f:34:2c:3c:4f:13:17:f6:a4:b0:10:95:b5:ce:2d: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BB:2F:35:11:F0:33:B1:77:55:28:BD:35:A1:35:68:D8:FD:D2:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:e000::/40 Signature Algorithm: sha256WithRSAEncryption 6f:5b:05:73:6c:b9:4c:b0:8f:f9:88:cd:35:16:31:09:eb:96: 73:87:26:20:a6:5b:96:44:02:30:22:ff:0b:cd:60:d3:cf:4c: 4c:ac:cb:d7:18:18:af:8c:47:ca:9b:2f:96:fa:8b:68:76:f7: 13:ad:39:c3:f9:67:a2:c6:56:b2:0e:f2:4e:18:c6:c9:83:70: 80:6b:e6:b1:b4:f9:7b:51:c2:fa:75:bd:26:da:b5:b3:39:31: d4:ef:de:22:83:bb:f6:2c:48:63:99:6d:47:d3:b2:70:47:aa: c3:6a:e7:2d:5a:16:51:26:3e:37:4d:4f:3a:f9:3e:94:91:63: 87:67:27:c9:66:08:04:6e:e5:42:0b:e4:e0:14:39:5d:90:da: a3:ce:a2:89:cc:91:df:d2:16:a7:f1:d3:00:9a:c2:27:a7:b4: e5:da:33:5c:80:2f:6b:7a:b5:46:0c:96:9d:51:01:eb:18:4a: f2:d6:65:13:df:ed:ec:b8:52:90:fc:6b:7f:0f:7f:b4:23:e8: f2:ea:7b:be:d7:b5:93:98:b8:52:cc:a7:c6:2e:49:de:fc:a0: de:14:26:59:bd:bd:ac:80:db:2a:c6:ef:8f:50:a5:e4:52:24: 22:ac:b6:5a:4d:9f:11:60:e0:bd:d3:07:a2:9d:24:26:a0:90: 54:44:31:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ3q79eKAm8fAxjlglNOn2CLz7+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyNTAwMDE0NFoX DTI1MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZGU5ODk3ZTgwMjcyNTlhZmY2ZWVl NjI4NDllMDUyMTg3YzFjMzEzOWFmNGM4YTEyODUxMDk3OTIwM2UyYmNkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fC7LJWOZvVkmV4P1PgREY2wEKr/ t2g8pdieKy5nMP+pUaN+vREV/3/HhX34ocpqlQNztMGu95dO3LmIlRMLYzzTowzj N3eydn9PPbGhnDjx6EL73lHlMe0+LEn0Xy1XnDuk5sgpzugOnQNVdKe5VjeN4LQ7 zg4K1PML34vS1MO+g5PcqnwQi3xZv9EqSMrCeLIEDF05l+XgEijLzNG7IxBYk4E2 g+7M+h+un5fYSNa3CM6r18xwclTGkgIWl66anXdISthADi/gc87e50KuoOypcQ9I jrD3t2fua6b8k694RQBuZSUsOcK3h9vmvz6fNCw8TxMX9qSwEJW1zi3/hwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKi7LzUR8DOxd1UovTWhNWjY/dKvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0OWE1OTJiLWRmYmItNDdjZS04YzhhLWU3NmU0MWM0ZmYxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYOAwDQYJKoZIhvcNAQELBQADggEBAG9bBXNsuUywj/mIzTUW MQnrlnOHJiCmW5ZEAjAi/wvNYNPPTEysy9cYGK+MR8qbL5b6i2h29xOtOcP5Z6LG VrIO8k4YxsmDcIBr5rG0+XtRwvp1vSbatbM5MdTv3iKDu/YsSGOZbUfTsnBHqsNq 5y1aFlEmPjdNTzr5PpSRY4dnJ8lmCARu5UIL5OAUOV2Q2qPOoonMkd/SFqfx0wCa wientOXaM1yAL2t6tUYMlp1RAesYSvLWZRPf7ey4UpD8a38Pf7Qj6PLqe77XtZOY uFLMp8YuSd78oN4UJlm9vayA2yrG749QpeRSJCKstlpNnxFg4L3TB6KdJCagkFRE MVk= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:11 2025 by rpki-client