$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa File: 880212bb-51a8-4111-9ffb-f1fce2a3315f.roa (raw, json) Hash identifier: cZmqSXz3t6ncrZQQkDQXrwFN37TOU0OGr567dckhXAE= Subject key identifier: 7A:F9:F1:EB:4C:55:29:00:56:C9:46:92:64:ED:DC:DB:85:22:FB:32 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FB8E119F93F385200C1D9B196E7E379F016082F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa Signing time: Mon 07 Jul 2025 15:20:08 +0000 ROA not before: Mon 07 Jul 2025 15:20:08 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b8:e1:19:f9:3f:38:52:00:c1:d9:b1:96:e7:e3:79:f0:16:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:20:08 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=f4bb6c5857b40c21318339cee68dae44a547dbe65102264b8cde0b7a93c9284e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:62:be:ef:c6:e3:97:ad:b6:d2:17:64:6e: 5a:28:56:f8:79:74:5d:bc:24:11:44:89:6f:21:44: 56:0c:a0:d2:ee:49:c3:ab:30:cd:02:84:a1:ea:44: 68:13:52:c2:f8:a0:05:42:32:17:3d:53:69:ae:3f: f6:59:e8:ab:cb:7d:55:f1:5d:86:fd:1c:77:ab:b1: e4:87:64:fa:04:5a:28:1a:25:f1:cb:87:e6:e9:4c: a1:0a:8a:4a:68:ca:6d:ef:5c:07:51:9f:18:3a:59: b1:c1:4a:53:fa:e2:9a:6f:9d:a7:17:9c:32:45:8a: 82:19:77:ca:62:1b:8f:ad:53:db:93:f7:67:29:4e: f8:12:30:7b:97:b0:93:00:78:9b:ae:4d:39:cf:bc: a1:26:2c:42:30:0a:31:f1:56:2f:91:1e:f3:88:85: 43:b3:b6:0e:49:4d:09:96:04:1f:0a:e9:40:df:a2: 84:85:1f:b4:64:2a:13:4d:48:39:6b:21:c4:2a:24: 4c:b7:d1:f8:07:45:79:e9:c9:3b:4e:c7:0f:49:ef: b1:95:d3:55:84:26:f9:2b:f2:ca:8f:f4:e1:11:b4: 59:c6:4b:10:7a:2f:88:f4:a8:e1:38:de:68:27:cb: 52:80:72:a6:52:dd:8f:da:eb:2e:5e:ff:7f:41:08: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:F1:EB:4C:55:29:00:56:C9:46:92:64:ED:DC:DB:85:22:FB:32 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/880212bb-51a8-4111-9ffb-f1fce2a3315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:7000::/40 Signature Algorithm: sha256WithRSAEncryption be:40:be:e7:3f:55:24:7f:f1:e5:b0:a0:30:ea:5e:6c:d2:f8: b8:80:a9:7f:c9:f4:84:d8:19:c0:81:04:2b:a1:dc:d6:37:5c: 1c:94:72:86:c5:2e:77:b2:55:f9:ad:1c:04:52:08:c0:69:25: ea:ec:3e:84:34:7d:03:64:06:d0:dc:1a:82:47:cb:d4:3a:a2: 1e:93:95:78:3c:25:86:18:82:eb:fd:00:33:4d:b7:ce:3c:17: 34:28:bb:92:1b:10:2f:ce:f2:30:e1:7f:dc:17:a8:c5:3f:f5: df:17:d3:11:61:14:6c:da:8c:24:fe:07:6c:70:e6:cd:b9:a6: 06:90:c0:5a:a8:e8:eb:ba:08:3f:f7:64:15:a5:d3:6e:44:e8: ed:18:c5:6f:9e:34:bd:66:d5:0b:b4:af:ef:f4:80:2e:88:b4: 29:8d:2e:0e:0b:19:34:25:99:e0:7a:8c:5c:a8:6d:ab:d9:87: c3:7d:dc:11:3b:38:83:f4:9a:bf:8b:e0:c0:bc:85:df:78:0b: 01:cd:e7:f9:ff:b6:69:a8:d6:4f:7f:38:e7:8e:2e:0f:2e:d9: 18:7e:0b:f5:7f:a6:77:8d:c0:a6:ec:8a:f6:64:19:f7:b5:27: 72:8a:eb:ff:d1:06:0f:00:3c:ef:a9:be:d3:c9:33:86:77:dc: 60:2b:fc:c7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf7jhGfk/OFIAwdmxlufjefAWCC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MjAwOFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZjRiYjZjNTg1N2I0MGMyMTMxODMz OWNlZTY4ZGFlNDRhNTQ3ZGJlNjUxMDIyNjRiOGNkZTBiN2E5M2M5Mjg0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uFivu/G45etttIXZG5aKFb4eXRd vCQRRIlvIURWDKDS7knDqzDNAoSh6kRoE1LC+KAFQjIXPVNprj/2Weiry31V8V2G /Rx3q7Hkh2T6BFooGiXxy4fm6UyhCopKaMpt71wHUZ8YOlmxwUpT+uKab52nF5wy RYqCGXfKYhuPrVPbk/dnKU74EjB7l7CTAHibrk05z7yhJixCMAox8VYvkR7ziIVD s7YOSU0JlgQfCulA36KEhR+0ZCoTTUg5ayHEKiRMt9H4B0V56ck7TscPSe+xldNV hCb5K/LKj/ThEbRZxksQei+I9KjhON5oJ8tSgHKmUt2P2usuXv9/QQjvUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHr58etMVSkAVslGkmTt3NuFIvsyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MDIxMmJiLTUxYTgtNDExMS05ZmZiLWYxZmNlMmEzMzE1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacHAwDQYJKoZIhvcNAQELBQADggEBAL5Avuc/VSR/8eWwoDDq XmzS+LiAqX/J9ITYGcCBBCuh3NY3XByUcobFLneyVfmtHARSCMBpJersPoQ0fQNk BtDcGoJHy9Q6oh6TlXg8JYYYguv9ADNNt848FzQou5IbEC/O8jDhf9wXqMU/9d8X 0xFhFGzajCT+B2xw5s25pgaQwFqo6Ou6CD/3ZBWl025E6O0YxW+eNL1m1Qu0r+/0 gC6ItCmNLg4LGTQlmeB6jFyobavZh8N93BE7OIP0mr+L4MC8hd94CwHN5/n/tmmo 1k9/OOeOLg8u2Rh+C/V/pneNwKbsivZkGfe1J3KK6//RBg8APO+pvtPJM4Z33GAr /Mc= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:39 2025 by rpki-client