$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa File: 909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa (raw, json) Hash identifier: xOKqKwAPhXeQUYf43BljJCZO37c41hsMcZHJBRL4NI4= Subject key identifier: CF:D2:C1:41:FF:E3:54:7B:96:39:21:01:88:F7:26:21:F6:48:DF:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C15CF2EE4580993F237A95E1CB0F0931E8521AB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa Signing time: Tue 29 Jul 2025 00:41:44 +0000 ROA not before: Tue 29 Jul 2025 00:41:44 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:15:cf:2e:e4:58:09:93:f2:37:a9:5e:1c:b0:f0:93:1e:85:21:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:41:44 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=41033fe8b4d4402491d2d71db4850708d2db91e73098c21124999a79df18bf92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:a9:a5:fc:36:84:2c:aa:94:c6:0b:68:1f: ef:3d:75:36:ca:5c:a9:8d:71:1a:9a:81:4b:da:e2: ec:26:d8:12:ae:e3:2c:64:be:fc:cc:1e:32:18:c7: 2a:00:b4:de:ff:12:6c:97:9c:b3:32:21:26:12:6b: a7:bc:d1:81:b3:90:38:77:62:75:7c:81:70:7a:52: 9c:53:38:e6:59:e3:d7:6f:88:23:b3:bd:88:05:2c: ff:67:75:aa:53:28:9e:6a:04:2f:85:3f:7f:01:f4: 1f:96:98:ef:37:3f:8e:1a:8a:22:05:75:b7:03:fa: d7:b9:66:2a:a7:3c:04:1d:6a:d1:8e:2b:d7:8c:4a: 85:b8:8f:a0:57:3f:ca:d4:71:29:e4:c3:d4:13:64: d6:ab:22:46:66:39:5f:7e:a5:29:53:b6:fe:6d:fd: 7a:68:c1:c5:c5:75:19:8b:3b:8d:e4:f0:ce:f1:ea: 27:d1:0b:26:f2:14:57:d8:66:70:c5:fb:1f:8b:78: 2e:a7:c8:07:0b:d1:2a:2a:56:fd:26:26:85:0e:53: ae:28:0c:62:2d:d6:f1:68:ce:b8:7c:01:a3:7e:6a: a5:71:2b:b6:85:cd:6b:cf:78:e1:d7:84:03:26:2d: 42:65:d4:40:f3:05:dd:0a:75:f4:b8:29:c5:cd:07: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:C1:41:FF:E3:54:7B:96:39:21:01:88:F7:26:21:F6:48:DF:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/909bb5d0-1a4f-4343-bc4a-c23a6a885c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:90c0::/48 Signature Algorithm: sha256WithRSAEncryption a0:63:97:46:cc:79:c2:a1:40:a0:72:bb:33:62:49:0e:ee:91: 00:d3:3e:42:e1:5a:67:78:3c:be:d3:98:21:0d:89:d5:b2:8b: 5a:d7:21:0f:ad:fc:af:62:bd:db:22:18:19:9d:b8:ac:fd:25: 7b:e1:bf:fd:3a:c0:c3:a7:a5:31:97:b6:ee:b4:8c:66:28:9d: 29:e1:c1:a0:a5:f3:19:ef:f3:87:08:05:20:e9:c2:91:ce:14: 24:88:b2:57:0b:78:20:1a:93:dd:82:da:c6:50:4c:1a:e0:84: 3c:c0:56:58:a6:00:cb:ee:e1:68:35:a8:14:6a:f2:59:8f:77: cd:a3:07:8b:7c:12:6a:8d:b1:be:f8:90:f6:de:af:7e:cd:d7: ac:f0:5b:24:15:46:74:7b:be:12:0e:66:a8:48:9b:81:52:40: a6:99:95:86:0b:58:a7:3e:c7:bc:44:5e:91:48:97:e9:0c:3e: 54:4f:db:ba:11:e5:a9:48:b2:93:63:48:3c:3e:3f:27:53:8a: d9:a9:2f:34:b9:07:b7:2d:9f:38:2f:da:17:0b:0e:83:b5:8b: 3e:07:ae:77:12:e2:8a:78:89:9f:c3:be:3b:d8:0a:13:c1:35: 1f:60:5b:0e:bf:5e:a3:07:4d:b8:9d:fd:e7:e2:24:de:86:e9: f9:e0:47:e7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTBXPLuRYCZPyN6leHLDwkx6FIaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDE0NFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANDEwMzNmZThiNGQ0NDAyNDkxZDJk NzFkYjQ4NTA3MDhkMmRiOTFlNzMwOThjMjExMjQ5OTlhNzlkZjE4YmY5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSppfw2hCyqlMYLaB/vPXU2ylyp jXEamoFL2uLsJtgSruMsZL78zB4yGMcqALTe/xJsl5yzMiEmEmunvNGBs5A4d2J1 fIFwelKcUzjmWePXb4gjs72IBSz/Z3WqUyieagQvhT9/AfQflpjvNz+OGooiBXW3 A/rXuWYqpzwEHWrRjivXjEqFuI+gVz/K1HEp5MPUE2TWqyJGZjlffqUpU7b+bf16 aMHFxXUZizuN5PDO8eon0Qsm8hRX2GZwxfsfi3gup8gHC9EqKlb9JiaFDlOuKAxi LdbxaM64fAGjfmqlcSu2hc1rz3jh14QDJi1CZdRA8wXdCnX0uCnFzQc1pwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM/SwUH/41R7ljkhAYj3JiH2SN+rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwOWJiNWQwLTFhNGYtNDM0My1iYzRhLWMyM2E2YTg4NWMxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8pDAMA0GCSqGSIb3DQEBCwUAA4IBAQCgY5dGzHnCoUCgcrsz YkkO7pEA0z5C4VpneDy+05ghDYnVsota1yEPrfyvYr3bIhgZnbis/SV74b/9OsDD p6Uxl7butIxmKJ0p4cGgpfMZ7/OHCAUg6cKRzhQkiLJXC3ggGpPdgtrGUEwa4IQ8 wFZYpgDL7uFoNagUavJZj3fNoweLfBJqjbG++JD23q9+zdes8FskFUZ0e74SDmao SJuBUkCmmZWGC1inPse8RF6RSJfpDD5UT9u6EeWpSLKTY0g8Pj8nU4rZqS80uQe3 LZ84L9oXCw6DtYs+B653EuKKeImfw7472AoTwTUfYFsOv16jB024nf3n4iTehun5 4Efn -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:49 2025 by rpki-client