$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/680b28c0-fd78-49c9-9355-94724e964ebe.roa File: 680b28c0-fd78-49c9-9355-94724e964ebe.roa (raw, json) Hash identifier: nEbvS3UeHBnD4z4tp00QX5Jo6S0BAQC6xTDTXnMVmUQ= Subject key identifier: F8:8C:C9:69:98:31:9A:8F:10:1A:5E:64:06:0A:56:87:3F:74:17:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51E59F3CDF61F50A4DB37A025F0F8D8A149501D2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/680b28c0-fd78-49c9-9355-94724e964ebe.roa Signing time: Tue 29 Jul 2025 00:30:22 +0000 ROA not before: Tue 29 Jul 2025 00:30:22 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e5:9f:3c:df:61:f5:0a:4d:b3:7a:02:5f:0f:8d:8a:14:95:01:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:30:22 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=f6984f5d83fca498bd38ed598af75ae60ce012ca34cc55ec82ff4460260e37cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:d6:bc:9e:59:cc:ee:cd:0b:56:eb:2a:ab: 46:55:07:55:df:cd:48:45:4c:c5:5a:c8:bb:82:f4: 2d:2c:00:f3:2c:03:a1:8f:d4:ba:71:5a:89:3e:9b: 94:24:fc:00:5c:93:42:88:c2:6c:ab:8e:3c:a2:ee: b8:15:08:21:95:e5:fa:9c:0f:df:58:79:90:c8:49: 36:96:01:a3:97:fa:d1:79:48:ad:88:4e:17:85:e7: 79:cd:4b:1c:c2:e0:2f:e4:f6:b9:3a:97:ac:3f:35: 6f:c1:45:27:ca:e0:34:b7:6b:f5:2c:d5:c7:14:0f: f0:b6:9d:e6:f7:64:ec:95:be:09:6c:a3:d0:fb:b4: 8f:55:c6:f5:41:6c:a6:90:fe:93:71:ec:90:45:97: 80:52:b5:ae:ea:78:2b:f1:31:a6:f7:66:6a:e5:c8: 9a:c2:ec:67:f9:05:3a:52:c1:7e:de:e2:68:de:2e: 8e:5e:03:d0:c4:f3:1d:96:a6:62:84:ec:9c:bc:7b: 3f:53:92:a9:6f:1d:fb:e6:9e:1a:ec:ec:38:01:e2: 83:95:db:54:c0:aa:01:38:2c:d4:79:e3:35:6e:b7: 0d:8c:80:47:c6:a2:cb:b9:56:9b:f6:cb:52:f0:52: e9:56:cb:f2:30:9a:4d:cd:22:81:46:cc:c8:6a:82: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:C9:69:98:31:9A:8F:10:1A:5E:64:06:0A:56:87:3F:74:17:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/680b28c0-fd78-49c9-9355-94724e964ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c040::/48 Signature Algorithm: sha256WithRSAEncryption b8:b1:2c:f5:9f:d4:1a:fa:98:77:6f:46:9d:bd:cf:2e:28:1e: 1c:30:4a:56:7d:9f:fc:cb:df:e8:12:e9:bd:bf:7f:f2:05:ae: 77:77:09:d7:d2:5b:4e:21:b2:4d:52:56:a8:5a:d5:9c:05:0d: 96:17:a8:8b:f6:0f:c3:63:1e:2e:41:40:41:ed:11:54:45:9d: 23:39:14:84:e1:47:c4:93:7e:ac:b5:f9:d9:bc:6e:d5:ed:a3: d0:42:30:dc:49:e1:7d:76:1b:f3:65:29:27:3a:33:11:d0:63: c0:2a:79:25:bb:fc:bd:21:43:e4:2d:14:3b:9a:93:b9:87:66: 93:13:cb:82:f3:2c:25:74:fb:c3:39:64:ab:a8:a3:53:a3:04: 80:70:cd:75:1f:01:1a:39:68:a4:7e:db:eb:5f:e0:4f:ae:d4: de:35:3b:3e:3a:85:a6:ab:f3:4b:db:36:45:1d:99:b3:6b:0f: 8d:84:12:b5:05:08:9d:11:48:eb:45:9b:22:90:ef:af:a5:a3: a8:42:97:43:dc:6c:50:a9:07:8e:90:19:fc:13:67:f1:75:6e: 8d:18:8e:5a:fa:dd:ed:93:2b:f1:10:ae:dc:a6:2c:7e:fd:58: 46:be:9b:1b:68:ce:98:0c:af:71:d0:b7:15:45:27:f2:d8:45: ac:fe:0a:bc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUeWfPN9h9QpNs3oCXw+NihSVAdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMzAyMloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZjY5ODRmNWQ4M2ZjYTQ5OGJkMzhl ZDU5OGFmNzVhZTYwY2UwMTJjYTM0Y2M1NWVjODJmZjQ0NjAyNjBlMzdjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtprWvJ5ZzO7NC1brKqtGVQdV381I RUzFWsi7gvQtLADzLAOhj9S6cVqJPpuUJPwAXJNCiMJsq448ou64FQghleX6nA/f WHmQyEk2lgGjl/rReUitiE4Xhed5zUscwuAv5Pa5OpesPzVvwUUnyuA0t2v1LNXH FA/wtp3m92Tslb4JbKPQ+7SPVcb1QWymkP6TceyQRZeAUrWu6ngr8TGm92Zq5cia wuxn+QU6UsF+3uJo3i6OXgPQxPMdlqZihOycvHs/U5Kpbx375p4a7Ow4AeKDldtU wKoBOCzUeeM1brcNjIBHxqLLuVab9stS8FLpVsvyMJpNzSKBRszIaoJovwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPiMyWmYMZqPEBpeZAYKVoc/dBf6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4MGIyOGMwLWZkNzgtNDljOS05MzU1LTk0NzI0ZTk2NGViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYcBAMA0GCSqGSIb3DQEBCwUAA4IBAQC4sSz1n9Qa+ph3b0ad vc8uKB4cMEpWfZ/8y9/oEum9v3/yBa53dwnX0ltOIbJNUlaoWtWcBQ2WF6iL9g/D Yx4uQUBB7RFURZ0jORSE4UfEk36stfnZvG7V7aPQQjDcSeF9dhvzZSknOjMR0GPA Knklu/y9IUPkLRQ7mpO5h2aTE8uC8ywldPvDOWSrqKNTowSAcM11HwEaOWikftvr X+BPrtTeNTs+OoWmq/NL2zZFHZmzaw+NhBK1BQidEUjrRZsikO+vpaOoQpdD3GxQ qQeOkBn8E2fxdW6NGI5a+t3tkyvxEK7cpix+/VhGvpsbaM6YDK9x0LcVRSfy2EWs /gq8 -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:13 2025 by rpki-client