$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c0a164-da93-428a-bae0-35d34ec93555.roa File: 61c0a164-da93-428a-bae0-35d34ec93555.roa (raw, json) Hash identifier: fRB3SruBXYn1dHIODVRqT5g4fvklBgDwtZNeLxnOjTw= Subject key identifier: B6:2B:DF:92:4F:7D:79:E9:12:89:31:9A:CC:1B:B9:38:E8:BE:32:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2130D2CB1B4B897558722806486F5D8DB0829C21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c0a164-da93-428a-bae0-35d34ec93555.roa Signing time: Mon 07 Jul 2025 15:41:48 +0000 ROA not before: Mon 07 Jul 2025 15:41:48 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:30:d2:cb:1b:4b:89:75:58:72:28:06:48:6f:5d:8d:b0:82:9c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:41:48 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=ca6b90c2f84dd4b16f4fc4988ad871e81bf7237d9f87f67adaee00f8afafb495, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:d0:0c:3b:d1:2b:6b:7a:a0:63:83:1d:d4: 74:6e:32:90:63:0c:98:09:24:d2:5b:bd:03:22:5b: 48:64:3e:10:29:92:fa:67:bb:7d:1c:b0:66:a5:bc: 23:82:4d:31:02:b1:39:f8:dc:8a:ae:b9:e5:d3:46: c5:c5:2a:fa:74:62:32:fc:51:da:38:e9:51:92:aa: ea:77:db:1c:55:f6:af:35:cb:ef:e7:b2:29:02:dc: c1:34:57:bc:32:1b:4b:a2:aa:8c:46:87:ac:d1:ae: f0:43:b3:c6:61:ac:bc:ef:dd:1e:92:fb:75:83:94: 81:79:e5:e1:43:cb:73:82:51:8c:0d:7a:fd:7c:b9: a8:ae:43:4a:c6:a6:16:33:9e:fc:18:17:b5:2a:31: bc:f7:97:88:37:ac:44:b8:8d:66:66:fa:f5:39:06: 77:4d:db:6e:18:f7:b5:f4:89:31:45:ce:8f:0e:84: 67:e6:81:08:24:f5:14:1a:b8:6f:34:ef:2f:b0:91: 22:fb:0a:12:35:87:f4:2e:b0:f6:b6:ca:20:94:5f: 47:ef:b6:57:a1:e6:42:c2:34:a7:25:ae:26:24:d6: 7e:b3:39:3f:e9:b3:c4:5d:fe:79:2f:5e:ba:16:67: f3:50:e5:fc:12:f0:21:e8:5f:75:cc:09:fc:6b:1f: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2B:DF:92:4F:7D:79:E9:12:89:31:9A:CC:1B:B9:38:E8:BE:32:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c0a164-da93-428a-bae0-35d34ec93555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:400::/38 Signature Algorithm: sha256WithRSAEncryption 7b:45:e8:46:d3:ba:b0:48:14:d7:d0:e4:30:9b:cc:7d:9f:93: b6:39:91:7e:fb:68:4f:b3:d4:12:44:45:d7:13:3f:33:05:42: 32:df:41:e6:48:7d:a6:2e:00:70:5a:59:0f:c2:42:5a:36:d9: 41:50:19:0f:bc:a3:3f:97:49:a0:cb:ab:0a:1d:84:33:af:76: d1:46:a4:3c:7e:2e:60:33:25:2e:09:22:14:42:7c:64:eb:6d: 15:5f:4c:1e:ee:d9:9b:be:d6:06:40:99:84:e2:26:40:be:f8: 51:17:ee:cb:30:9b:fa:7e:e3:36:ed:df:14:41:26:ef:0b:a5: c6:83:79:90:e1:c8:a0:1a:d8:e6:82:68:eb:0b:61:41:0b:c9: 8d:40:0d:69:20:35:5c:d1:e1:1d:e3:a8:58:e2:2e:ef:26:22: 00:0f:b4:d2:64:d5:c7:e6:0e:6e:e2:cd:0c:86:55:39:da:3c: 37:bc:5e:36:99:18:ed:7e:f6:cf:ed:d4:0e:2f:dd:11:97:a2: 11:3f:15:77:c5:cf:31:85:75:c3:4f:b3:75:9e:61:b4:d7:63: 8a:d5:1c:e8:b8:82:2f:9e:63:6b:de:ed:40:4e:fb:a9:c1:e3: 01:cb:77:e1:07:bd:0b:12:69:b5:88:b7:c8:e0:5d:91:b4:d3: 53:18:c9:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUITDSyxtLiXVYcigGSG9djbCCnCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NDE0OFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAY2E2YjkwYzJmODRkZDRiMTZmNGZj NDk4OGFkODcxZTgxYmY3MjM3ZDlmODdmNjdhZGFlZTAwZjhhZmFmYjQ5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqfQDDvRK2t6oGODHdR0bjKQYwyY CSTSW70DIltIZD4QKZL6Z7t9HLBmpbwjgk0xArE5+NyKrrnl00bFxSr6dGIy/FHa OOlRkqrqd9scVfavNcvv57IpAtzBNFe8MhtLoqqMRoes0a7wQ7PGYay8790ekvt1 g5SBeeXhQ8tzglGMDXr9fLmorkNKxqYWM578GBe1KjG895eIN6xEuI1mZvr1OQZ3 TdtuGPe19IkxRc6PDoRn5oEIJPUUGrhvNO8vsJEi+woSNYf0LrD2tsoglF9H77ZX oeZCwjSnJa4mJNZ+szk/6bPEXf55L166FmfzUOX8EvAh6F91zAn8ax9SvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLYr35JPfXnpEokxmswbuTjovjL+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYzBhMTY0LWRhOTMtNDI4YS1iYWUwLTM1ZDM0ZWM5MzU1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgQwDQYJKoZIhvcNAQELBQADggEBAHtF6EbTurBIFNfQ5DCb zH2fk7Y5kX77aE+z1BJERdcTPzMFQjLfQeZIfaYuAHBaWQ/CQlo22UFQGQ+8oz+X SaDLqwodhDOvdtFGpDx+LmAzJS4JIhRCfGTrbRVfTB7u2Zu+1gZAmYTiJkC++FEX 7sswm/p+4zbt3xRBJu8LpcaDeZDhyKAa2OaCaOsLYUELyY1ADWkgNVzR4R3jqFji Lu8mIgAPtNJk1cfmDm7izQyGVTnaPDe8XjaZGO1+9s/t1A4v3RGXohE/FXfFzzGF dcNPs3WeYbTXY4rVHOi4gi+eY2ve7UBO+6nB4wHLd+EHvQsSabWIt8jgXZG001MY yWg= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:50 2025 by rpki-client