$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa File: 6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa (raw, json) Hash identifier: 1DE/PR9wdCMayMxvOv9OXLiBA1PRbqbbcednsqFO/pU= Subject key identifier: A1:42:81:6F:A8:2E:72:24:2F:6C:7C:4A:E2:52:4A:FB:06:C2:68:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DC24891E1B6BFA63B52FB0BFA7A01E6CE0EB963 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa Signing time: Tue 29 Jul 2025 00:01:19 +0000 ROA not before: Tue 29 Jul 2025 00:01:19 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c2:48:91:e1:b6:bf:a6:3b:52:fb:0b:fa:7a:01:e6:ce:0e:b9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:01:19 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=da70ce1ccaa3f9283ee537177531b0f371fca9d2c1516b1ae4114dbcfca76e88, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:26:9a:a2:92:aa:3b:e3:30:02:85:b7:64: e1:5c:32:74:72:d6:e9:a6:ed:e7:50:40:e3:18:21: d4:f3:ff:7b:25:d8:be:c1:11:b2:2a:51:b3:3e:80: 1f:8b:73:ae:85:01:7e:4c:37:73:c5:30:e1:e8:69: d7:c9:d0:0e:d3:8e:d9:28:91:98:22:3d:35:30:a2: 98:08:51:80:0b:fb:4a:7d:37:49:87:5b:07:f8:6a: 58:c3:e6:f9:84:38:a8:36:74:c6:ab:76:67:67:35: ef:e1:c3:a3:34:29:c5:86:5b:9c:bd:14:5f:28:9f: eb:5b:d2:a6:40:49:02:58:be:28:f1:91:52:44:69: 79:4e:0d:9d:97:60:bf:b3:a9:6e:f3:98:82:cb:b2: ef:81:8e:a6:e4:10:35:c3:3a:60:e0:ff:fa:56:b8: ce:85:6b:8c:b6:60:56:b0:38:f0:ac:ac:f1:65:32: ae:77:f8:c8:7a:18:da:80:a8:8e:e6:80:67:9b:df: 89:33:71:7d:42:52:1d:bb:cc:73:68:37:1e:bd:59: 49:17:ed:d0:6d:9e:e1:d3:d0:16:92:93:cd:8a:00: 27:c4:7d:b6:2f:4a:f6:d8:dd:a0:d4:a0:d9:df:25: 3f:ed:2f:99:4c:6b:30:f4:8f:ed:27:23:24:b3:f8: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:42:81:6F:A8:2E:72:24:2F:6C:7C:4A:E2:52:4A:FB:06:C2:68:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:840::/48 Signature Algorithm: sha256WithRSAEncryption 19:8f:2d:1d:92:a9:d3:e5:c5:2b:44:f2:43:57:f2:04:ad:62: 54:4e:fb:4d:c9:61:d0:36:c1:c4:0e:82:a4:70:51:9b:aa:2f: 1c:dc:84:be:e3:35:63:7c:65:14:54:f0:22:fd:0a:58:ff:a7: 22:62:58:01:d4:58:d3:e1:47:dc:66:23:85:76:b5:3a:60:43: 84:b8:cd:a0:24:c6:8f:52:69:4c:d4:d9:01:e2:27:be:30:36: c1:bc:d1:ca:c0:22:dd:4a:19:a1:56:fe:10:33:e7:54:05:ee: 9b:b6:ff:00:16:c9:56:fb:26:4a:0a:21:d0:8e:c4:e4:dc:47: a6:3b:09:c9:b9:9b:f2:81:62:27:a8:26:41:16:7c:bb:f3:5d: ef:cb:44:2e:de:47:e7:60:04:68:a4:8e:70:2e:2c:ac:61:0d: dd:91:39:7c:38:cc:a5:09:82:c3:9d:37:c9:32:68:1a:9f:d4: b5:0b:1d:94:0f:ce:dc:2f:45:8e:d8:85:5c:95:05:f6:9c:16: 8a:f9:09:a1:40:5b:03:91:0b:27:8f:e7:52:68:ea:28:95:c6: bd:9e:86:70:e6:af:ee:b5:6e:aa:4a:89:f3:ff:7d:16:b0:0b: b0:7d:3f:5d:89:0f:08:fb:5c:b5:e5:8d:80:f2:a6:93:72:2c: 14:00:f2:9c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXcJIkeG2v6Y7UvsL+noB5s4OuWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMDExOVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZGE3MGNlMWNjYWEzZjkyODNlZTUz NzE3NzUzMWIwZjM3MWZjYTlkMmMxNTE2YjFhZTQxMTRkYmNmY2E3NmU4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhUmmqKSqjvjMAKFt2ThXDJ0ctbp pu3nUEDjGCHU8/97Jdi+wRGyKlGzPoAfi3OuhQF+TDdzxTDh6GnXydAO047ZKJGY Ij01MKKYCFGAC/tKfTdJh1sH+GpYw+b5hDioNnTGq3ZnZzXv4cOjNCnFhlucvRRf KJ/rW9KmQEkCWL4o8ZFSRGl5Tg2dl2C/s6lu85iCy7LvgY6m5BA1wzpg4P/6VrjO hWuMtmBWsDjwrKzxZTKud/jIehjagKiO5oBnm9+JM3F9QlIdu8xzaDcevVlJF+3Q bZ7h09AWkpPNigAnxH22L0r22N2g1KDZ3yU/7S+ZTGsw9I/tJyMks/hlpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKFCgW+oLnIkL2x8SuJSSvsGwmhyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2NTVlZTEwLTZjMzItNGFiMy05ZTFiLWU3NjcyNzdkMWUxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ghAMA0GCSqGSIb3DQEBCwUAA4IBAQAZjy0dkqnT5cUrRPJD V/IErWJUTvtNyWHQNsHEDoKkcFGbqi8c3IS+4zVjfGUUVPAi/QpY/6ciYlgB1FjT 4UfcZiOFdrU6YEOEuM2gJMaPUmlM1NkB4ie+MDbBvNHKwCLdShmhVv4QM+dUBe6b tv8AFslW+yZKCiHQjsTk3EemOwnJuZvygWInqCZBFny7813vy0Qu3kfnYARopI5w LiysYQ3dkTl8OMylCYLDnTfJMmgan9S1Cx2UD87cL0WO2IVclQX2nBaK+QmhQFsD kQsnj+dSaOoolca9noZw5q/utW6qSonz/30WsAuwfT9diQ8I+1y15Y2A8qaTciwU APKc -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:12 2025 by rpki-client