$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa File: 830000fc-9d46-461c-8155-e409ef5fadcc.roa (raw, json) Hash identifier: +UXV3iK/7ZXBuhwvg2D/chMwhQ08GzPcvwse0h9ymRY= Subject key identifier: C7:36:9E:9E:2C:AE:C0:A2:A6:A7:FE:11:2B:EA:57:5B:E0:D9:2F:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1BD783BC5310732A225D573E54950016CE145DC8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa Signing time: Mon 28 Jul 2025 15:01:14 +0000 ROA not before: Mon 28 Jul 2025 15:01:14 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d7:83:bc:53:10:73:2a:22:5d:57:3e:54:95:00:16:ce:14:5d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:01:14 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=f03cdae71ac469fffed1470f35e60846c74107455323ede1748de32ba2e7c624, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:83:70:ff:fe:9a:fb:b5:32:ef:c0:45:e5: ab:e0:65:db:65:31:43:5c:70:f5:e4:a5:53:5c:0d: dd:9b:7e:78:9f:d8:f6:19:cd:f8:2c:97:9f:ee:59: 1e:58:53:05:f9:d1:de:1e:3f:a2:22:99:16:a3:63: 0f:22:8a:50:58:10:c3:4e:36:09:48:8c:9a:a0:9d: a7:07:1d:ff:aa:20:0b:12:92:02:ba:6c:57:f0:32: 61:03:40:c0:27:fe:a6:80:dd:1c:13:6f:93:27:b6: 34:56:60:d2:30:bd:b5:55:21:ec:30:9b:f5:0b:e1: 3d:ad:b7:1f:1a:7f:e8:37:da:86:67:a6:c7:55:3e: 50:05:02:01:7f:ca:8e:f2:14:e7:21:34:41:74:2e: c0:ae:8b:32:c8:7a:04:66:80:70:98:da:17:6d:18: 00:05:c6:6a:33:f4:ca:67:56:53:0b:79:86:ac:1b: 86:cd:c8:41:fc:64:a4:ce:1d:62:e2:16:f2:ff:53: 0e:eb:9d:1f:49:ce:64:26:e2:c7:92:b9:c7:59:1d: e1:72:9b:40:54:08:74:ce:f1:93:6b:6f:29:60:84: 7c:2a:59:0f:4e:eb:7b:a6:fe:91:ee:a9:ea:ef:0b: 6f:16:c7:23:4b:65:f4:3c:63:f8:33:97:8a:1e:34: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:36:9E:9E:2C:AE:C0:A2:A6:A7:FE:11:2B:EA:57:5B:E0:D9:2F:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f080::/48 Signature Algorithm: sha256WithRSAEncryption 7c:31:d4:52:3c:c3:2f:97:92:94:31:ba:51:5e:d4:eb:7e:1e: ed:cb:17:6e:e0:9d:f7:71:50:50:53:f0:41:d3:8b:6e:30:fc: da:b4:53:7d:f0:9e:7c:59:49:05:b3:f3:9d:2a:22:07:37:24: b0:e0:8d:18:c7:55:f5:06:da:55:65:80:c3:d1:d6:52:1e:9c: dc:b9:df:ea:6d:c9:6b:c5:50:ca:ca:2b:05:15:dd:51:1b:1a: 78:d9:a4:f8:0d:da:4f:9e:d5:d8:7e:a4:85:3d:fc:3c:5a:7a: 95:b3:07:6a:86:81:9d:02:81:2c:51:66:67:81:ff:f1:fc:2a: 9f:9b:7b:c3:c3:26:8d:bd:b0:1d:ff:98:93:05:d2:c1:89:74: 21:4d:5d:b1:13:ec:ab:27:d6:af:c1:30:fd:8b:ee:cb:f5:34: 1a:fd:9f:92:50:5a:0d:2e:a7:a9:41:bf:3e:1c:ce:99:3d:de: ea:bf:d8:0e:4d:80:9f:95:63:38:c8:01:5d:93:12:a1:c5:7b: 60:1e:23:7d:31:f2:64:25:9a:2d:0b:58:b1:46:bd:01:0e:67: ad:f4:e4:8e:dc:03:f7:6f:aa:e6:cc:a2:d9:b8:b9:78:04:41: 5c:ec:46:75:40:fc:84:23:ed:06:d4:cd:9f:f4:41:58:5a:f3: 87:e9:fa:60 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUG9eDvFMQcyoiXVc+VJUAFs4UXcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MDExNFoX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAZjAzY2RhZTcxYWM0NjlmZmZlZDE0 NzBmMzVlNjA4NDZjNzQxMDc0NTUzMjNlZGUxNzQ4ZGUzMmJhMmU3YzYyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxuDcP/+mvu1Mu/AReWr4GXbZTFD XHD15KVTXA3dm354n9j2Gc34LJef7lkeWFMF+dHeHj+iIpkWo2MPIopQWBDDTjYJ SIyaoJ2nBx3/qiALEpICumxX8DJhA0DAJ/6mgN0cE2+TJ7Y0VmDSML21VSHsMJv1 C+E9rbcfGn/oN9qGZ6bHVT5QBQIBf8qO8hTnITRBdC7ArosyyHoEZoBwmNoXbRgA BcZqM/TKZ1ZTC3mGrBuGzchB/GSkzh1i4hby/1MO650fSc5kJuLHkrnHWR3hcptA VAh0zvGTa28pYIR8KlkPTut7pv6R7qnq7wtvFscjS2X0PGP4M5eKHjQC9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMc2np4srsCipqf+ESvqV1vg2S9PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMDAwMGZjLTlkNDYtNDYxYy04MTU1LWU0MDllZjVmYWRjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfCAMA0GCSqGSIb3DQEBCwUAA4IBAQB8MdRSPMMvl5KUMbpR XtTrfh7tyxdu4J33cVBQU/BB04tuMPzatFN98J58WUkFs/OdKiIHNySw4I0Yx1X1 BtpVZYDD0dZSHpzcud/qbclrxVDKyisFFd1RGxp42aT4DdpPntXYfqSFPfw8WnqV swdqhoGdAoEsUWZngf/x/Cqfm3vDwyaNvbAd/5iTBdLBiXQhTV2xE+yrJ9avwTD9 i+7L9TQa/Z+SUFoNLqepQb8+HM6ZPd7qv9gOTYCflWM4yAFdkxKhxXtgHiN9MfJk JZotC1ixRr0BDmet9OSO3AP3b6rmzKLZuLl4BEFc7EZ1QPyEI+0G1M2f9EFYWvOH 6fpg -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:11 2025 by rpki-client