$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa File: 69a3a15e-217b-47dc-aafb-8e9dde29170d.roa (raw, json) Hash identifier: QSwzvfmZZPXzRirFvSAGd66rexUTarrEdj4aiSAkS1U= Subject key identifier: 0C:11:93:8B:0A:20:78:99:8B:67:F7:24:5F:E1:9C:F5:81:DE:D7:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A4C56217730D80BA322558B6D3FD0C294A2318D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa Signing time: Tue 22 Jul 2025 00:00:33 +0000 ROA not before: Tue 22 Jul 2025 00:00:33 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4c:56:21:77:30:d8:0b:a3:22:55:8b:6d:3f:d0:c2:94:a2:31:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 22 00:00:33 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=30efa7dbdc3b416dd3bf6e4925b1c40a0691b7fadedaeec598554aa27f72b9f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:74:d9:cb:24:90:75:1d:cc:91:4b:7f:83: 76:ce:5f:65:d5:8a:f6:23:48:f8:ec:41:16:b4:27: 64:ce:b7:e5:1e:b2:07:dc:3c:d4:6f:d7:c0:67:be: d0:4d:25:be:12:aa:06:c7:13:82:92:ba:c7:a8:ff: 3a:fa:8e:f0:d9:96:c5:a6:b0:00:eb:dc:18:d4:4d: c1:3b:54:65:e4:2c:9e:d5:07:60:30:35:d1:de:0f: e8:30:8f:69:26:25:ce:df:6b:19:0e:b4:0b:5c:27: f7:8b:ec:2c:f0:ab:11:bb:2e:3d:23:8f:33:64:1e: a8:29:bc:d9:58:04:3b:e7:70:0a:c6:04:85:a7:ed: af:7a:54:5c:6e:e0:27:02:f1:0e:a2:8f:01:a4:45: 3f:47:90:24:55:d6:5a:e8:d4:91:70:04:23:8d:a0: 99:a4:b6:6b:b2:16:db:73:93:5f:73:0c:58:ba:2a: 5b:64:01:b2:f7:63:da:4e:d1:11:70:f4:d7:1c:06: fd:e1:24:c2:0a:9f:cc:40:a6:cf:4a:bc:ea:2b:6d: 04:da:81:9e:32:2b:8f:d8:4c:a0:56:78:2b:36:ab: c1:fc:e5:e9:af:84:e1:23:85:52:8b:89:77:fc:0a: 35:2c:68:cd:b5:77:b7:63:9d:c8:19:25:dd:bd:ed: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:11:93:8B:0A:20:78:99:8B:67:F7:24:5F:E1:9C:F5:81:DE:D7:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:8000::/40 Signature Algorithm: sha256WithRSAEncryption 6a:b6:03:82:5a:4e:04:7e:d4:42:b6:e3:5b:0b:02:ad:ba:3a: 12:ea:1b:d9:1a:e3:0b:17:22:ba:11:61:09:81:5c:65:b4:40: 6f:29:55:d0:b3:f7:23:32:f9:9f:53:eb:f6:b3:c9:ef:49:5b: 8e:d4:83:b7:7a:df:6d:60:f6:e8:5f:44:ef:60:a7:73:97:b1: 36:72:27:b4:1e:2c:f7:26:4c:bf:a1:6b:8a:06:a4:6c:07:5d: 6a:a2:48:43:bd:e8:e6:eb:1c:95:fc:49:86:75:90:98:30:bf: 10:b4:40:d0:7a:5c:b8:43:24:c2:e8:a2:68:c1:93:7f:22:ad: af:8b:65:e1:47:87:dc:7f:75:5a:cc:9f:50:80:b9:88:9f:27: 99:15:f1:fc:56:a3:0e:9c:31:78:d3:6d:58:fc:08:10:1b:28: 54:0e:c3:8d:77:ca:aa:e9:5e:8b:ee:0b:71:69:0d:d7:ee:d8: c3:82:50:90:e9:ee:9c:c6:06:26:d2:64:9f:0c:1c:fe:6a:d8: 88:14:3c:ab:95:d9:38:c3:c7:c0:ae:ff:fa:ca:2a:ab:a9:d8: c3:db:0e:d4:d7:4a:be:62:8f:2e:3c:d8:ac:45:53:64:22:80: b7:a0:86:be:a4:b5:82:af:82:c0:a2:76:02:0c:74:f3:73:a4: 95:88:e4:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUakxWIXcw2AujIlWLbT/QwpSiMY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMjAwMDAzM1oX DTI1MDgyNjIzNTk1OVowejFJMEcGA1UEBRNAMzBlZmE3ZGJkYzNiNDE2ZGQzYmY2 ZTQ5MjViMWM0MGEwNjkxYjdmYWRlZGFlZWM1OTg1NTRhYTI3ZjcyYjlmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6502cskkHUdzJFLf4N2zl9l1Yr2 I0j47EEWtCdkzrflHrIH3DzUb9fAZ77QTSW+EqoGxxOCkrrHqP86+o7w2ZbFprAA 69wY1E3BO1Rl5Cye1QdgMDXR3g/oMI9pJiXO32sZDrQLXCf3i+ws8KsRuy49I48z ZB6oKbzZWAQ753AKxgSFp+2velRcbuAnAvEOoo8BpEU/R5AkVdZa6NSRcAQjjaCZ pLZrshbbc5NfcwxYuipbZAGy92PaTtERcPTXHAb94STCCp/MQKbPSrzqK20E2oGe MiuP2EygVngrNqvB/OXpr4ThI4VSi4l3/Ao1LGjNtXe3Y53IGSXdve3TeQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAwRk4sKIHiZi2f3JF/hnPWB3teSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5YTNhMTVlLTIxN2ItNDdkYy1hYWZiLThlOWRkZTI5MTcwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9YAwDQYJKoZIhvcNAQELBQADggEBAGq2A4JaTgR+1EK241sL Aq26OhLqG9ka4wsXIroRYQmBXGW0QG8pVdCz9yMy+Z9T6/azye9JW47Ug7d6321g 9uhfRO9gp3OXsTZyJ7QeLPcmTL+ha4oGpGwHXWqiSEO96ObrHJX8SYZ1kJgwvxC0 QNB6XLhDJMLoomjBk38ira+LZeFHh9x/dVrMn1CAuYifJ5kV8fxWow6cMXjTbVj8 CBAbKFQOw413yqrpXovuC3FpDdfu2MOCUJDp7pzGBibSZJ8MHP5q2IgUPKuV2TjD x8Cu//rKKqup2MPbDtTXSr5ijy482KxFU2QigLeghr6ktYKvgsCidgIMdPNzpJWI 5Os= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:15 2025 by rpki-client