$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa File: 5d757d26-e156-4b10-9ff8-2391de94a136.roa (raw, json) Hash identifier: wAuWO3kLuH2V9RYJmJpt4qXoyD8rKMU7UOX3GXIsqEs= Subject key identifier: 67:A2:EB:FD:32:55:06:39:FD:FA:8F:4F:1C:10:0E:E3:BB:AE:6C:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45E62DF465FF7024DB0CC02512D3264A0EAA082E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa Signing time: Mon 07 Jul 2025 15:41:05 +0000 ROA not before: Mon 07 Jul 2025 15:41:05 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e6:2d:f4:65:ff:70:24:db:0c:c0:25:12:d3:26:4a:0e:aa:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:41:05 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=20f6c7de27d3160e36db50931d2b04c8e4da6ace3342f25571f5337571cfadf0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:fb:60:e3:e1:e8:cf:09:e8:25:b6:51:bc: 75:d7:fd:b1:57:93:f3:f8:05:2b:6c:89:4e:bc:fe: 5c:21:47:c9:07:59:da:61:f0:75:04:60:0b:65:b2: 4a:7c:f6:76:a5:a9:e3:fe:55:bd:54:45:7c:c7:ba: d3:54:a6:18:30:fd:6a:3a:7e:e9:f3:23:dd:88:3a: f8:fc:d7:d3:db:c5:20:1c:24:1a:e4:87:47:c9:b5: 13:a1:a8:87:96:60:be:21:d7:3f:db:88:ed:6d:31: b8:83:4b:c5:f5:d3:63:d8:e1:59:3a:2b:8f:df:5e: 37:4a:e8:23:dd:30:0a:56:1d:62:7e:20:b5:1d:eb: 72:df:77:4e:e3:df:0e:1f:45:ee:00:18:fc:a6:6e: 6c:74:27:2c:82:7c:57:cf:c2:e0:28:d5:90:94:1e: bf:51:16:b7:6e:f2:1e:3f:d2:d4:8f:56:2a:40:50: b7:48:3a:d9:b4:e4:fc:65:48:19:5c:94:4b:d0:1a: 95:95:1f:68:6f:f8:a2:6d:39:8c:c3:df:2b:40:8f: 5c:91:7d:20:b8:19:ac:b7:51:91:56:63:ca:c1:f0: 74:a3:cc:a0:54:17:82:78:87:b5:fb:fd:f7:a0:06: f6:f6:90:eb:a1:ee:d8:5b:3d:7d:04:d1:79:7b:e4: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A2:EB:FD:32:55:06:39:FD:FA:8F:4F:1C:10:0E:E3:BB:AE:6C:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12::/36 Signature Algorithm: sha256WithRSAEncryption 1c:5a:75:8a:d3:2a:89:31:d8:8e:0a:1d:43:60:23:7e:c7:6d: 33:5c:25:ea:6a:b8:fb:17:3c:12:64:0c:6b:2f:43:b4:32:ba: 27:98:b5:b8:a2:c8:4c:48:71:4a:64:d0:a2:a8:57:e2:d4:49: 02:e0:19:8c:d1:fe:7c:59:53:a1:db:ed:f7:b5:fe:35:e6:c6: 86:33:e4:53:1e:af:57:66:9c:4d:fe:b0:81:ec:3d:2b:13:4b: af:1f:56:37:51:fe:04:e8:87:3a:b1:62:e9:64:b1:58:1c:56: 23:6f:a2:b3:b1:dc:b6:71:5d:3d:ec:ed:47:bc:0e:a2:5d:ed: 82:95:fc:d5:b0:55:b6:ce:99:f1:e2:5d:fa:f2:fb:52:45:e3: 1c:bb:bd:31:09:f1:dc:af:ec:b5:06:46:34:11:88:40:b1:b6: 33:bd:f7:b0:0b:a7:76:f4:92:e0:c7:c6:c7:b8:4e:81:83:2b: 58:27:90:b1:9e:a0:5e:b3:6a:08:ba:ca:3b:64:fd:94:7a:29: 83:b3:ed:f8:b0:92:2b:b4:ca:63:3c:2c:d3:7b:e5:d1:4f:99: a1:12:f9:6f:bd:4c:4b:9f:4f:3c:43:25:37:48:32:be:7b:38: 1f:d7:02:01:80:09:3e:85:7f:8b:01:4b:c6:d0:9a:d1:1e:f0: d7:84:1a:1f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUReYt9GX/cCTbDMAlEtMmSg6qCC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NDEwNVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMjBmNmM3ZGUyN2QzMTYwZTM2ZGI1 MDkzMWQyYjA0YzhlNGRhNmFjZTMzNDJmMjU1NzFmNTMzNzU3MWNmYWRmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz837YOPh6M8J6CW2Ubx11/2xV5Pz +AUrbIlOvP5cIUfJB1naYfB1BGALZbJKfPZ2panj/lW9VEV8x7rTVKYYMP1qOn7p 8yPdiDr4/NfT28UgHCQa5IdHybUToaiHlmC+Idc/24jtbTG4g0vF9dNj2OFZOiuP 3143Sugj3TAKVh1ifiC1Hety33dO498OH0XuABj8pm5sdCcsgnxXz8LgKNWQlB6/ URa3bvIeP9LUj1YqQFC3SDrZtOT8ZUgZXJRL0BqVlR9ob/iibTmMw98rQI9ckX0g uBmst1GRVmPKwfB0o8ygVBeCeIe1+/33oAb29pDroe7YWz19BNF5e+Qt5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGei6/0yVQY5/fqPTxwQDuO7rmzgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkNzU3ZDI2LWUxNTYtNGIxMC05ZmY4LTIzOTFkZTk0YTEzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEgAwDQYJKoZIhvcNAQELBQADggEBABxadYrTKokx2I4KHUNg I37HbTNcJepquPsXPBJkDGsvQ7QyuieYtbiiyExIcUpk0KKoV+LUSQLgGYzR/nxZ U6Hb7fe1/jXmxoYz5FMer1dmnE3+sIHsPSsTS68fVjdR/gTohzqxYulksVgcViNv orOx3LZxXT3s7Ue8DqJd7YKV/NWwVbbOmfHiXfry+1JF4xy7vTEJ8dyv7LUGRjQR iECxtjO997ALp3b0kuDHxse4ToGDK1gnkLGeoF6zagi6yjtk/ZR6KYOz7fiwkiu0 ymM8LNN75dFPmaES+W+9TEufTzxDJTdIMr57OB/XAgGACT6Ff4sBS8bQmtEe8NeE Gh8= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:19 2025 by rpki-client