$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71671b18-662e-4750-ba75-21e2b5919f34.roa File: 71671b18-662e-4750-ba75-21e2b5919f34.roa (raw, json) Hash identifier: MZsQ66JkDSMfSP+qVZ27jz+Cg08S2qTbOEL6W8I2QNo= Subject key identifier: 8A:F7:A2:20:A4:05:E5:70:89:A0:31:00:0F:4E:B4:10:74:D9:A7:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 07893AF631BCD624D8EB5FD1AA25F99A962BC553 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71671b18-662e-4750-ba75-21e2b5919f34.roa Signing time: Mon 07 Jul 2025 15:40:10 +0000 ROA not before: Mon 07 Jul 2025 15:40:10 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:89:3a:f6:31:bc:d6:24:d8:eb:5f:d1:aa:25:f9:9a:96:2b:c5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:40:10 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=44f0aec1c6ec9d7f5f3212c9ea21925de1dc91b1e768c37211eb80106c7170cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:fb:2e:31:62:77:77:db:2f:94:40:e2:b5: 9f:10:91:cd:9e:0f:32:03:76:5f:d1:d3:c6:87:a6: 9a:41:94:65:f2:dc:c2:9c:9e:7f:b1:8d:1a:88:e9: 7e:79:fc:2b:3f:fd:5d:ad:ae:dc:2c:95:dd:58:1a: af:36:02:c7:34:d4:a3:d3:af:27:2c:aa:53:99:e2: 85:00:19:13:6d:00:98:ad:79:99:46:60:90:37:46: 9d:32:e2:6c:38:72:99:8a:59:28:5e:73:62:13:64: 30:bc:4e:7f:cd:d0:42:d2:6a:80:22:6b:18:17:03: 7c:29:f7:aa:cf:30:70:e7:7b:60:0c:88:a8:2f:a8: 9b:14:66:32:d9:9b:b9:3d:ec:e6:93:c0:cc:7a:a4: a9:36:73:53:bd:a6:17:e6:a8:34:66:a0:70:5f:e6: 27:53:2b:2e:f1:06:55:e2:d6:f7:cf:ed:b3:99:3e: ad:f0:93:59:d6:dd:58:a6:e6:77:5d:91:64:41:63: 39:be:e8:b5:47:55:1d:fc:24:2a:46:20:ca:6d:d3: 84:a1:1c:5c:45:cf:61:30:07:2e:7f:46:1e:71:b6: 0a:6e:7d:da:22:0d:51:a2:66:69:1b:9f:f7:d4:70: cc:e9:80:79:cb:e0:df:a3:1d:65:72:84:8d:15:65: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:A2:20:A4:05:E5:70:89:A0:31:00:0F:4E:B4:10:74:D9:A7:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71671b18-662e-4750-ba75-21e2b5919f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b::/36 Signature Algorithm: sha256WithRSAEncryption c8:9a:d7:a4:46:6b:4e:35:49:ce:cc:22:ae:4b:74:47:c7:88: ed:e8:11:62:cf:ce:0a:95:a7:93:ab:09:46:d1:c5:d8:8e:83: e3:40:94:f2:b3:9b:97:0a:46:1c:c0:52:8a:35:8a:16:de:a8: 13:96:55:10:ee:7a:23:ee:c7:ce:ac:92:ec:5f:b3:0f:75:48: 9b:86:90:41:2f:91:5a:a6:2f:75:51:0c:93:78:5d:4e:07:40: d1:7d:4e:86:8a:ba:b9:0f:ec:47:e5:d3:d9:94:fb:d1:f6:1e: 4a:27:43:65:44:a3:d6:d5:d9:de:25:ff:e8:ac:0e:f3:49:ba: 91:ae:a4:86:6c:a3:a2:3b:eb:32:53:79:1e:fe:6c:3b:e8:51: 31:f3:be:d7:61:93:b1:7d:5a:42:5e:68:2e:d1:99:25:d1:ca: 21:a8:16:cf:de:42:62:36:36:03:e3:af:da:00:0c:c4:67:95: 6d:9d:4d:27:12:be:43:3e:11:f2:65:b6:f1:0d:c1:75:58:eb: 71:12:db:23:fe:56:1f:ad:84:c6:83:d6:67:e9:c0:e8:57:29: f9:d9:4c:a8:b3:26:f8:37:02:fa:e3:b4:d3:94:f8:03:a3:f2: 80:c2:24:67:d6:7a:76:80:3c:67:e0:25:8e:fe:38:a1:9e:0d: 6d:3f:3d:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUB4k69jG81iTY61/RqiX5mpYrxVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NDAxMFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANDRmMGFlYzFjNmVjOWQ3ZjVmMzIx MmM5ZWEyMTkyNWRlMWRjOTFiMWU3NjhjMzcyMTFlYjgwMTA2YzcxNzBjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJb7LjFid3fbL5RA4rWfEJHNng8y A3Zf0dPGh6aaQZRl8tzCnJ5/sY0aiOl+efwrP/1dra7cLJXdWBqvNgLHNNSj068n LKpTmeKFABkTbQCYrXmZRmCQN0adMuJsOHKZilkoXnNiE2QwvE5/zdBC0mqAImsY FwN8KfeqzzBw53tgDIioL6ibFGYy2Zu5Pezmk8DMeqSpNnNTvaYX5qg0ZqBwX+Yn Uysu8QZV4tb3z+2zmT6t8JNZ1t1YpuZ3XZFkQWM5vui1R1Ud/CQqRiDKbdOEoRxc Rc9hMAcuf0YecbYKbn3aIg1RomZpG5/31HDM6YB5y+Dfox1lcoSNFWV3CwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIr3oiCkBeVwiaAxAA9OtBB02acLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxNjcxYjE4LTY2MmUtNDc1MC1iYTc1LTIxZTJiNTkxOWYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGwAwDQYJKoZIhvcNAQELBQADggEBAMia16RGa041Sc7MIq5L dEfHiO3oEWLPzgqVp5OrCUbRxdiOg+NAlPKzm5cKRhzAUoo1ihbeqBOWVRDueiPu x86skuxfsw91SJuGkEEvkVqmL3VRDJN4XU4HQNF9ToaKurkP7Efl09mU+9H2Hkon Q2VEo9bV2d4l/+isDvNJupGupIZso6I76zJTeR7+bDvoUTHzvtdhk7F9WkJeaC7R mSXRyiGoFs/eQmI2NgPjr9oADMRnlW2dTScSvkM+EfJltvENwXVY63ES2yP+Vh+t hMaD1mfpwOhXKfnZTKizJvg3AvrjtNOU+AOj8oDCJGfWenaAPGfgJY7+OKGeDW0/ PSg= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:21 2025 by rpki-client