$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa File: 8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa (raw, json) Hash identifier: P4PUmaeh5c/FbDiTU83aRM6aVc4Okeuoz2Qpo/fz4cI= Subject key identifier: 32:61:9A:44:85:EE:E7:A3:20:48:6D:BD:68:AD:C8:D2:B6:1B:F9:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 49116CFAB44507F8F8CBA9E190A2146FD01F4715 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa Signing time: Mon 28 Jul 2025 15:11:17 +0000 ROA not before: Mon 28 Jul 2025 15:11:17 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:11:6c:fa:b4:45:07:f8:f8:cb:a9:e1:90:a2:14:6f:d0:1f:47:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:11:17 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=bab4acf96de82861012c7c25a2126542adc6e25ba67c889d1c62c80740e9056a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:14:34:05:0b:f3:2d:50:49:7a:5c:a6:e6: 62:4d:ee:4b:b2:62:7a:49:ae:02:43:49:82:3b:e6: f4:20:15:e7:6a:09:ed:fc:6d:9b:a6:00:b0:2b:71: 67:24:a5:fb:06:9d:72:82:53:14:69:71:2e:3e:0f: e2:b2:3d:0f:34:a1:05:7f:e7:ca:3f:77:be:5a:21: 38:87:23:b8:1c:5d:b1:b8:c4:23:5c:3a:5e:03:94: c2:0e:d0:bd:bc:80:20:b6:eb:7d:b7:b9:73:f7:5b: 92:03:c6:84:af:cc:25:24:07:21:c8:c7:0b:22:9a: 22:20:32:e7:38:32:13:99:67:8a:c2:35:fe:e8:a4: df:c4:a7:a8:e3:e1:d5:44:43:bc:49:14:e2:f2:ba: e9:ee:99:0d:75:d8:11:4d:9e:71:f2:29:7f:0b:e1: 2f:f4:8f:e9:3f:1a:f8:9f:df:fc:51:95:2e:df:bd: 5c:d5:3d:86:85:da:8f:ac:6e:d6:58:5c:ba:88:83: 25:0b:33:b1:73:84:d5:7e:52:66:96:36:75:b2:81: 21:73:06:ae:fd:a0:f8:8a:5c:46:db:8e:76:7e:45: 32:ff:5c:d4:71:b5:69:0e:75:a9:aa:17:2a:91:a2: d9:2f:2d:79:b7:cb:3f:63:4a:aa:03:55:ac:3e:e8: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:9A:44:85:EE:E7:A3:20:48:6D:BD:68:AD:C8:D2:B6:1B:F9:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 4c:89:9e:df:34:78:37:39:02:0a:b0:a3:7b:bc:61:2d:9a:61: ca:f5:49:24:d2:89:9c:e6:eb:8c:1a:2c:14:c0:d1:b4:9e:60: cd:4a:d1:7d:e8:6f:dd:14:d5:3d:16:c1:e3:0a:25:bc:37:bb: 18:d3:9b:4c:5d:8e:31:ef:c0:0f:27:81:fa:b3:67:05:a0:df: 14:73:b4:6c:d9:18:41:6d:74:35:9c:85:94:4a:6a:94:96:72: 67:28:98:38:34:51:75:9d:52:7e:c8:62:11:06:df:55:86:96: f8:03:9b:34:6d:aa:21:11:51:75:64:41:f4:fc:e1:78:97:33: 8d:98:34:46:48:0e:47:a1:8f:45:88:35:ff:fd:31:68:31:9d: f8:dd:68:d7:d8:48:43:23:d1:6b:0d:a4:57:1f:3c:0f:f4:34: 4c:45:aa:f0:13:a8:4f:a0:14:37:88:37:c5:49:c9:8a:47:99: f8:d3:07:f3:6a:82:c7:cd:67:cf:61:25:9c:89:f8:37:8a:a7: be:12:02:03:01:d9:13:fe:a3:c3:df:a4:db:bc:c5:ef:33:c3: 22:f5:44:f4:80:e8:22:e5:fc:e3:95:9c:4f:35:b3:1b:2c:e0: 8c:cb:ba:70:99:85:94:d5:f1:b8:7e:fc:a6:75:97:a5:a8:b2: 48:57:cd:51 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSRFs+rRFB/j4y6nhkKIUb9AfRxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MTExN1oX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAYmFiNGFjZjk2ZGU4Mjg2MTAxMmM3 YzI1YTIxMjY1NDJhZGM2ZTI1YmE2N2M4ODlkMWM2MmM4MDc0MGU5MDU2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK4UNAUL8y1QSXpcpuZiTe5LsmJ6 Sa4CQ0mCO+b0IBXnagnt/G2bpgCwK3FnJKX7Bp1yglMUaXEuPg/isj0PNKEFf+fK P3e+WiE4hyO4HF2xuMQjXDpeA5TCDtC9vIAgtut9t7lz91uSA8aEr8wlJAchyMcL IpoiIDLnODITmWeKwjX+6KTfxKeo4+HVREO8SRTi8rrp7pkNddgRTZ5x8il/C+Ev 9I/pPxr4n9/8UZUu371c1T2GhdqPrG7WWFy6iIMlCzOxc4TVflJmljZ1soEhcwau /aD4ilxG2452fkUy/1zUcbVpDnWpqhcqkaLZLy15t8s/Y0qqA1WsPuizFQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDJhmkSF7uejIEhtvWityNK2G/kHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiY2VjY2E0LTI2NDMtNDQwNi1iYmY0LWU1ZTlmNjM3ODZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7DAMA0GCSqGSIb3DQEBCwUAA4IBAQBMiZ7fNHg3OQIKsKN7 vGEtmmHK9Ukk0omc5uuMGiwUwNG0nmDNStF96G/dFNU9FsHjCiW8N7sY05tMXY4x 78APJ4H6s2cFoN8Uc7Rs2RhBbXQ1nIWUSmqUlnJnKJg4NFF1nVJ+yGIRBt9Vhpb4 A5s0baohEVF1ZEH0/OF4lzONmDRGSA5HoY9FiDX//TFoMZ343WjX2EhDI9FrDaRX HzwP9DRMRarwE6hPoBQ3iDfFScmKR5n40wfzaoLHzWfPYSWcifg3iqe+EgIDAdkT /qPD36TbvMXvM8Mi9UT0gOgi5fzjlZxPNbMbLOCMy7pwmYWU1fG4fvymdZelqLJI V81R -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:09 2025 by rpki-client