$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa File: 8b68ae6b-07d9-4faf-96d3-0ed316306385.roa (raw, json) Hash identifier: YX+rjryVAe1mQ2SNmHOAwgSP8TMDR4LheGtFFWTNQeE= Subject key identifier: 1D:70:2C:EA:CC:2D:C4:5B:04:3D:A4:FA:FC:80:C8:BB:CB:9F:B0:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A967C3A8A4802E59062EF69125E91ADA404AEFB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa Signing time: Tue 29 Jul 2025 00:00:15 +0000 ROA not before: Tue 29 Jul 2025 00:00:15 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:96:7c:3a:8a:48:02:e5:90:62:ef:69:12:5e:91:ad:a4:04:ae:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:00:15 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=d0af7509176edb2fad6081de344a515a27615ee87211a862d8e4cc2212b567a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:4b:20:e2:77:de:de:91:44:1e:17:e8:4a: 1c:29:4c:aa:f6:d5:f2:67:a8:bc:6c:72:e7:79:7f: 8e:5c:54:0b:fd:84:e3:85:06:93:04:71:54:30:37: d8:59:50:e0:8b:72:dd:5f:51:a6:63:59:c9:d2:d3: 48:6f:05:27:ae:27:84:d4:8b:7c:0d:2c:38:0c:50: 81:b4:04:09:de:9c:e6:be:d1:5b:de:ea:4c:0b:c5: 63:4e:9f:5b:3c:da:bb:07:7e:e4:b1:ef:6c:2e:bd: 34:39:39:26:f4:8a:aa:7e:27:c6:60:c1:e0:00:65: 55:b9:2e:c7:cb:db:e3:bd:f7:cf:b3:dd:5c:93:3c: 3e:8b:20:39:b6:ef:f4:df:dd:bc:37:aa:c5:ad:41: ce:a6:75:a1:58:94:37:1c:07:68:a5:2c:e1:0a:b8: 36:a2:fe:f5:09:a0:6d:4d:a0:9b:c0:d6:eb:9a:9d: e1:ae:e7:83:db:63:77:96:f2:29:f6:62:cc:01:30: 48:e0:ad:49:fb:80:14:c2:5b:a0:e2:8a:2e:68:9b: 52:32:96:de:06:70:d6:18:df:6c:b3:3c:39:43:4a: 07:cd:ed:ab:f1:c9:24:c9:ca:aa:19:12:47:4e:a1: 77:b4:63:82:8a:21:df:7b:e3:f3:4e:a4:72:3a:35: 92:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:2C:EA:CC:2D:C4:5B:04:3D:A4:FA:FC:80:C8:BB:CB:9F:B0:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 84:c0:50:c3:bb:2d:85:1a:9c:27:9f:4f:b1:c9:93:a0:7a:28: 73:68:23:a6:ee:4c:e2:6a:b1:4f:cb:56:95:34:7d:38:71:95: 8e:9e:ec:5b:dc:17:b9:81:d2:79:c4:85:22:be:14:7e:b5:ed: 52:51:cd:b7:88:99:93:cb:a1:2d:59:04:08:f8:10:6d:ce:38: 91:68:3e:05:83:fa:00:67:52:a7:a3:50:cd:df:d2:2f:2f:11: 10:64:98:4e:3b:af:00:02:0a:cf:0e:28:9f:a5:b0:b3:e4:71: 98:05:a7:44:1f:29:41:8f:f0:72:98:f3:92:48:fe:29:6b:b3: 12:d9:fd:f8:52:ec:c3:a4:fb:5c:a2:f1:1c:d1:18:8e:ac:78: 3d:3c:8a:63:05:49:25:8e:8a:48:a0:96:04:40:fe:05:82:09: ed:e0:83:e0:52:f6:83:72:25:3b:53:7f:b3:81:02:df:a8:1a: 8c:e3:04:bf:09:a9:b2:05:b0:5c:52:24:5b:19:13:c4:c9:d8: 5a:18:dc:36:6e:20:73:78:7c:7e:35:c1:5e:9f:58:d9:81:ad: cd:58:d5:d4:98:8a:f9:7b:99:fe:97:92:b4:4d:d3:91:cd:11: 0a:36:ff:d5:18:a8:c2:cf:14:f6:f4:9e:35:7f:d0:69:77:f0: 51:a5:2a:64 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUapZ8OopIAuWQYu9pEl6RraQErvswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMDAxNVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZDBhZjc1MDkxNzZlZGIyZmFkNjA4 MWRlMzQ0YTUxNWEyNzYxNWVlODcyMTFhODYyZDhlNGNjMjIxMmI1NjdhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XFLIOJ33t6RRB4X6EocKUyq9tXy Z6i8bHLneX+OXFQL/YTjhQaTBHFUMDfYWVDgi3LdX1GmY1nJ0tNIbwUnrieE1It8 DSw4DFCBtAQJ3pzmvtFb3upMC8VjTp9bPNq7B37kse9sLr00OTkm9IqqfifGYMHg AGVVuS7Hy9vjvffPs91ckzw+iyA5tu/03928N6rFrUHOpnWhWJQ3HAdopSzhCrg2 ov71CaBtTaCbwNbrmp3hrueD22N3lvIp9mLMATBI4K1J+4AUwlug4oouaJtSMpbe BnDWGN9sszw5Q0oHze2r8ckkycqqGRJHTqF3tGOCiiHfe+PzTqRyOjWSQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB1wLOrMLcRbBD2k+vyAyLvLn7CUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiNjhhZTZiLTA3ZDktNGZhZi05NmQzLTBlZDMxNjMwNjM4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXDAMA0GCSqGSIb3DQEBCwUAA4IBAQCEwFDDuy2FGpwnn0+x yZOgeihzaCOm7kziarFPy1aVNH04cZWOnuxb3Be5gdJ5xIUivhR+te1SUc23iJmT y6EtWQQI+BBtzjiRaD4Fg/oAZ1Kno1DN39IvLxEQZJhOO68AAgrPDiifpbCz5HGY BadEHylBj/BymPOSSP4pa7MS2f34UuzDpPtcovEc0RiOrHg9PIpjBUkljopIoJYE QP4Fggnt4IPgUvaDciU7U3+zgQLfqBqM4wS/CamyBbBcUiRbGRPEydhaGNw2biBz eHx+NcFen1jZga3NWNXUmIr5e5n+l5K0TdORzREKNv/VGKjCzxT29J41f9Bpd/BR pSpk -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:51 2025 by rpki-client