$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa File: 616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa (raw, json) Hash identifier: G0erNPegqLiRPvLvGJBMDvssmdSTzN3rOKHgxRONPw8= Subject key identifier: FB:27:A4:8D:78:55:D1:6D:3F:6E:E7:C1:CD:43:E9:D1:14:DB:69:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CE01BF2D3C3F9EDAA253D01F8AD065A1FEE814D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa Signing time: Tue 08 Jul 2025 00:00:08 +0000 ROA not before: Tue 08 Jul 2025 00:00:08 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e0:1b:f2:d3:c3:f9:ed:aa:25:3d:01:f8:ad:06:5a:1f:ee:81:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 8 00:00:08 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=a54b4a933c0efd88d99ebf32deb6870c9c69294fc452ecf9cf0752b5d4ef4eb4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:ed:0f:c3:09:e8:f3:f9:74:b9:48:1e:50: 98:3a:cf:4c:7c:c8:8c:62:d2:40:43:62:46:70:43: c9:67:c1:d5:39:47:da:d3:0b:9e:a3:3e:76:d7:a0: 01:39:3b:e9:52:3a:ab:7e:1c:52:16:ad:78:95:14: e4:99:aa:d3:9f:85:15:5d:37:15:64:99:77:fb:f3: 23:65:91:47:39:54:bf:37:47:4d:f9:b7:77:75:47: 62:44:d3:75:c0:bb:c3:45:d7:9d:b7:1c:9b:28:69: d4:13:cd:ef:a0:bc:f6:cc:9b:c2:61:43:fd:07:7e: 06:4f:84:69:94:f5:13:df:c8:21:fe:29:57:20:e5: 67:8e:bb:54:82:84:3b:d4:d3:f1:04:c8:b8:56:76: bf:b1:02:d9:d0:b3:6b:75:51:d8:03:4f:53:77:d7: b5:3e:9a:a7:fb:30:c5:04:48:7d:32:58:aa:18:a2: ed:b0:4a:88:cf:bd:f9:a3:12:92:8e:5b:fd:93:7a: bf:cf:c2:21:f7:36:8e:c0:8e:d5:1e:cc:6b:33:fa: 61:23:5d:b4:46:27:24:e7:81:10:84:5f:5f:08:2e: 0a:0b:8b:f2:80:18:bf:af:0d:19:3a:f0:f3:6e:fc: 36:62:2a:e5:eb:ce:26:7c:9c:ab:10:62:d0:7c:dd: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:27:A4:8D:78:55:D1:6D:3F:6E:E7:C1:CD:43:E9:D1:14:DB:69:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1::/32 Signature Algorithm: sha256WithRSAEncryption 76:1b:11:33:7b:0c:e5:61:bd:52:4f:1f:69:90:2f:73:74:86: 35:ca:28:a9:1d:4b:cd:20:69:89:98:56:27:74:0d:19:41:df: 8c:30:d7:81:54:e8:c1:a4:55:2c:6b:68:fd:da:7a:fb:01:63: c8:38:28:1a:88:37:41:ab:bf:ea:a9:a4:48:cd:a6:a7:05:e1: da:c0:33:41:68:08:1c:16:71:19:df:2d:61:0d:59:8c:a2:0b: d9:40:df:35:6e:d7:40:a7:aa:6d:94:e3:4e:a9:3b:db:34:f9: d6:20:70:33:97:8f:d0:e6:ab:f5:42:d5:1e:89:34:9c:5a:74: 04:59:54:72:36:6a:78:f3:17:50:3c:69:cb:c8:9f:80:1c:10: 72:6d:79:5f:b3:f9:be:fa:8f:e5:18:c6:82:dc:2e:02:7c:7c: e2:81:09:d9:b8:6a:c1:7a:ae:f9:d8:ab:9a:73:e5:9c:0f:8a: 6d:93:e1:57:a5:0c:18:0c:02:9c:fb:fb:7c:e2:ef:d2:63:3c: 80:f3:16:ca:38:dd:f1:82:83:31:44:58:91:a2:d9:40:f1:69: e7:ff:25:83:5f:62:a1:09:58:fd:92:87:f6:a5:bc:77:ba:b2: 60:dc:04:f9:7e:9c:18:ff:45:88:c7:70:7b:c3:1b:e8:32:ad: a1:bf:46:f9 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUHOAb8tPD+e2qJT0B+K0GWh/ugU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwODAwMDAwOFoX DTI1MDgxMjIzNTk1OVowejFJMEcGA1UEBRNAYTU0YjRhOTMzYzBlZmQ4OGQ5OWVi ZjMyZGViNjg3MGM5YzY5Mjk0ZmM0NTJlY2Y5Y2YwNzUyYjVkNGVmNGViNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjtD8MJ6PP5dLlIHlCYOs9MfMiM YtJAQ2JGcEPJZ8HVOUfa0wueoz5216ABOTvpUjqrfhxSFq14lRTkmarTn4UVXTcV ZJl3+/MjZZFHOVS/N0dN+bd3dUdiRNN1wLvDRdedtxybKGnUE83voLz2zJvCYUP9 B34GT4RplPUT38gh/ilXIOVnjrtUgoQ71NPxBMi4Vna/sQLZ0LNrdVHYA09Td9e1 Ppqn+zDFBEh9MliqGKLtsEqIz735oxKSjlv9k3q/z8Ih9zaOwI7VHsxrM/phI120 Rick54EQhF9fCC4KC4vygBi/rw0ZOvDzbvw2Yirl684mfJyrEGLQfN2CewIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPsnpI14VdFtP27nwc1D6dEU22nPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxNmRkYWUxLTJlMDctNDU1NS1hYjQ3LTFlZWFjMWQzYjNmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba8TANBgkqhkiG9w0BAQsFAAOCAQEAdhsRM3sM5WG9Uk8faZAv c3SGNcooqR1LzSBpiZhWJ3QNGUHfjDDXgVTowaRVLGto/dp6+wFjyDgoGog3Qau/ 6qmkSM2mpwXh2sAzQWgIHBZxGd8tYQ1ZjKIL2UDfNW7XQKeqbZTjTqk72zT51iBw M5eP0Oar9ULVHok0nFp0BFlUcjZqePMXUDxpy8ifgBwQcm15X7P5vvqP5RjGgtwu Anx84oEJ2bhqwXqu+dirmnPlnA+KbZPhV6UMGAwCnPv7fOLv0mM8gPMWyjjd8YKD MURYkaLZQPFp5/8lg19ioQlY/ZKH9qW8d7qyYNwE+X6cGP9FiMdwe8Mb6DKtob9G +Q== -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:38 2025 by rpki-client