$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa File: 77745ad7-44b5-44a8-9e13-4096720b7c90.roa (raw, json) Hash identifier: fWkVkvuQ3+togJALJebs1DeZBN9TBnB+OmyhAN9u5D0= Subject key identifier: 18:AC:06:3D:7E:0B:65:0C:B3:A7:5E:76:FB:F3:72:34:EC:19:D7:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 59F4A7C7C55910C521856F99CD20DD7FD2AFED78 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa Signing time: Tue 29 Jul 2025 00:21:29 +0000 ROA not before: Tue 29 Jul 2025 00:21:29 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f4:a7:c7:c5:59:10:c5:21:85:6f:99:cd:20:dd:7f:d2:af:ed:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:21:29 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=e4c5ba40ad876a8a3fc416c4c0c5d50c1119548d992deef33dc6b40da8da7e82, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:ad:61:b0:2f:ca:7f:a2:aa:7e:df:35:65: b6:7b:ee:05:9a:b3:5c:57:b7:c8:4d:ab:08:19:32: e3:39:5a:eb:29:cb:94:4f:85:b3:a4:7e:33:82:06: 9f:2e:49:df:e9:6a:17:f5:10:3d:a3:c8:6f:2b:01: c0:48:4f:9d:cd:85:0c:2b:7b:eb:5e:7a:15:4e:69: c4:ba:0e:b2:6d:30:f1:0c:0b:d4:33:a8:52:52:6b: 19:f7:5f:42:73:dc:b0:74:0f:bc:a6:2c:2c:9f:e5: 03:45:10:ca:99:67:ed:4c:f6:22:26:3a:0e:19:52: 21:a5:46:dd:c1:41:54:f5:bc:01:3b:43:fb:41:41: 8f:6e:ca:8e:3d:d9:aa:07:de:13:54:cb:f1:57:d0: 5e:16:cc:bb:e5:d2:ef:45:f4:5e:93:06:84:0d:fe: e7:9d:dd:e1:b1:1c:92:1e:88:00:f8:64:d4:c1:a6: 56:79:e5:04:9f:bd:f4:f9:dd:7f:79:31:c6:47:00: f1:97:72:92:97:04:80:ff:2a:1b:0b:5b:e4:76:db: 05:8d:0c:ae:3f:88:53:8e:13:c8:2a:42:53:d1:eb: 0f:40:cd:f4:2c:e1:f6:97:22:d2:38:ae:2a:41:a4: 23:20:94:ad:48:26:0f:14:9f:db:58:94:cf:ad:fa: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:06:3D:7E:0B:65:0C:B3:A7:5E:76:FB:F3:72:34:EC:19:D7:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9080::/48 Signature Algorithm: sha256WithRSAEncryption 1c:21:31:ad:70:26:b6:b7:c6:c5:be:a5:fc:7c:ba:b3:e1:4f: 3d:e8:10:ec:d8:66:03:09:45:19:29:4c:e7:ed:b2:db:d6:6b: 8f:ab:93:7d:17:67:3c:a0:8a:b9:d5:70:cc:c9:7b:63:ce:74: 08:c0:8f:89:6b:5e:a3:f0:fc:c4:e7:ab:19:e9:d1:07:4b:d3: b1:82:2c:8a:dc:73:06:31:ff:05:f9:c9:ec:bc:29:1b:46:e6: 12:70:e4:05:58:c7:90:c2:10:96:02:f0:0b:6e:07:55:93:d0: a8:39:40:cc:19:f9:34:22:4a:6b:ba:4c:be:c9:75:ab:22:24: 8b:86:5f:f6:dc:04:54:63:42:67:64:44:14:d7:c9:be:84:de: 01:2b:71:54:3c:db:f8:26:a8:20:62:c5:6c:07:4f:1c:01:51: 48:aa:a4:36:2a:86:ce:3f:ad:cb:99:50:6a:88:1a:d3:ea:f3: 19:6c:ed:93:12:58:65:c6:13:66:41:45:50:60:a5:21:a4:2a: d8:44:a3:c2:bb:51:e9:77:83:ec:15:a3:4c:73:38:72:78:29: ea:4f:03:fe:30:65:2e:42:cf:6a:a9:37:6b:f0:53:7b:44:27: 2c:ff:a4:a9:38:33:ef:58:a8:d1:63:f7:ca:0f:65:52:ab:b2: ef:23:04:8d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWfSnx8VZEMUhhW+ZzSDdf9Kv7XgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMjEyOVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZTRjNWJhNDBhZDg3NmE4YTNmYzQx NmM0YzBjNWQ1MGMxMTE5NTQ4ZDk5MmRlZWYzM2RjNmI0MGRhOGRhN2U4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60qtYbAvyn+iqn7fNWW2e+4FmrNc V7fITasIGTLjOVrrKcuUT4WzpH4zggafLknf6WoX9RA9o8hvKwHASE+dzYUMK3vr XnoVTmnEug6ybTDxDAvUM6hSUmsZ919Cc9ywdA+8piwsn+UDRRDKmWftTPYiJjoO GVIhpUbdwUFU9bwBO0P7QUGPbsqOPdmqB94TVMvxV9BeFsy75dLvRfRekwaEDf7n nd3hsRySHogA+GTUwaZWeeUEn730+d1/eTHGRwDxl3KSlwSA/yobC1vkdtsFjQyu P4hTjhPIKkJT0esPQM30LOH2lyLSOK4qQaQjIJStSCYPFJ/bWJTPrfox+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBisBj1+C2UMs6dedvvzcjTsGdfXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NzQ1YWQ3LTQ0YjUtNDRhOC05ZTEzLTQwOTY3MjBiN2M5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5CAMA0GCSqGSIb3DQEBCwUAA4IBAQAcITGtcCa2t8bFvqX8 fLqz4U896BDs2GYDCUUZKUzn7bLb1muPq5N9F2c8oIq51XDMyXtjznQIwI+Ja16j 8PzE56sZ6dEHS9OxgiyK3HMGMf8F+cnsvCkbRuYScOQFWMeQwhCWAvALbgdVk9Co OUDMGfk0Ikpruky+yXWrIiSLhl/23ARUY0JnZEQU18m+hN4BK3FUPNv4JqggYsVs B08cAVFIqqQ2KobOP63LmVBqiBrT6vMZbO2TElhlxhNmQUVQYKUhpCrYRKPCu1Hp d4PsFaNMczhyeCnqTwP+MGUuQs9qqTdr8FN7RCcs/6SpODPvWKjRY/fKD2VSq7Lv IwSN -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:21 2025 by rpki-client