$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa File: 9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa (raw, json) Hash identifier: 418FKrZh969Rqvv48MKT7HafjRd2WKVKTDI29rbsgw0= Subject key identifier: 64:3E:73:6C:20:AD:86:C0:C7:AE:E0:94:BC:63:83:82:43:4D:2B:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 642469881E0672B1E8263FEBBB9F7547CE1AB4CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa Signing time: Mon 07 Jul 2025 15:30:56 +0000 ROA not before: Mon 07 Jul 2025 15:30:56 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:24:69:88:1e:06:72:b1:e8:26:3f:eb:bb:9f:75:47:ce:1a:b4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:30:56 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=454fed41d4c867e6cbbb6bf7ccf954859a70c479c5abaf14b3dfd54ca91ec119, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:13:7b:19:15:2a:84:26:87:51:f8:3c:7e: f3:23:eb:1d:81:cf:02:26:65:90:3d:c8:e1:b0:c0: b5:dc:35:c7:18:81:96:d7:38:bc:da:59:1c:84:a2: e4:0e:29:44:fc:91:10:f3:ca:83:f3:9c:c4:0a:25: 79:c7:7d:40:52:1c:f5:a1:d7:90:bb:f2:84:71:46: 4d:de:8a:35:62:c7:53:ca:6e:a0:80:ba:1e:7d:82: aa:f9:13:f5:9e:c4:7b:7f:0b:c6:f6:18:e5:64:75: 1e:94:e7:ee:73:7c:ff:eb:37:74:52:47:be:16:2d: 24:e5:68:aa:1d:8d:11:4b:35:75:e8:2a:0c:d9:19: da:83:d8:b3:a8:36:a9:e4:50:35:c2:34:0c:db:d5: 98:fc:ed:95:e7:69:b9:51:3b:1d:4e:39:17:74:df: b5:86:05:bc:e9:b7:74:07:c3:99:25:e0:19:8d:05: 63:d4:2d:76:f1:16:bd:c7:5a:fb:06:7c:a6:ba:51: 59:cd:f6:be:4f:0a:b1:6c:47:33:c1:8c:b8:34:a4: 73:f7:34:94:14:a6:06:0c:50:ea:7c:b3:fd:45:8e: 37:2a:92:a8:aa:6e:39:e0:8f:df:e2:ca:e4:34:1c: b7:48:4b:93:0d:e0:62:f0:4e:de:a7:89:25:ac:be: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3E:73:6C:20:AD:86:C0:C7:AE:E0:94:BC:63:83:82:43:4D:2B:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:7000::/40 Signature Algorithm: sha256WithRSAEncryption 1f:f2:cf:45:7c:3b:33:6d:99:16:0c:7e:81:92:68:34:01:0d: 24:71:2b:52:e8:42:88:59:87:26:6d:d0:48:ac:75:94:55:4d: 5e:ba:92:60:88:50:72:75:c4:05:3c:4c:6d:98:82:40:2e:4a: 95:44:a0:45:99:21:43:83:86:f7:e3:06:08:44:c8:4a:e8:6a: 03:b3:35:44:dd:e6:c3:ab:92:8b:45:09:cf:01:9a:1f:d6:ef: 76:67:d0:e9:7e:c4:02:90:3a:41:18:fc:21:3a:90:59:e4:07: b7:b3:84:fd:cf:07:cd:ad:48:ef:07:fc:e5:56:61:bb:51:34: 5e:26:75:22:6a:a1:dd:fe:c0:af:3c:a1:a2:b9:eb:b5:f8:73: 1c:bb:02:1a:83:ca:f3:6c:0c:d1:15:9b:87:6f:b8:66:71:b1: 20:cc:82:49:8a:c3:28:b1:b4:6c:b0:65:64:3f:60:97:19:76: f6:e6:6e:18:94:2d:91:6f:93:73:a3:96:1b:06:5e:70:f0:05: 8d:27:3d:1e:10:ee:85:76:5b:5b:d6:31:3d:49:f7:78:09:2a: 20:d3:98:4c:59:8f:fc:e6:f1:2d:cb:94:bf:b8:b4:13:34:4a: 4c:78:4b:e4:9d:32:09:a7:4d:05:0f:df:57:76:26:ab:a5:5e: 7c:41:1a:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZCRpiB4GcrHoJj/ru591R84atMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MzA1NloX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANDU0ZmVkNDFkNGM4NjdlNmNiYmI2 YmY3Y2NmOTU0ODU5YTcwYzQ3OWM1YWJhZjE0YjNkZmQ1NGNhOTFlYzExOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwioTexkVKoQmh1H4PH7zI+sdgc8C JmWQPcjhsMC13DXHGIGW1zi82lkchKLkDilE/JEQ88qD85zECiV5x31AUhz1odeQ u/KEcUZN3oo1YsdTym6ggLoefYKq+RP1nsR7fwvG9hjlZHUelOfuc3z/6zd0Uke+ Fi0k5WiqHY0RSzV16CoM2Rnag9izqDap5FA1wjQM29WY/O2V52m5UTsdTjkXdN+1 hgW86bd0B8OZJeAZjQVj1C128Ra9x1r7BnymulFZzfa+TwqxbEczwYy4NKRz9zSU FKYGDFDqfLP9RY43KpKoqm454I/f4srkNBy3SEuTDeBi8E7ep4klrL5JcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGQ+c2wgrYbAx67glLxjg4JDTSvRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxODliZmJmLTM3NjMtNGExYy1iNGQ3LWZiOWU1Njk2MTkyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMnAwDQYJKoZIhvcNAQELBQADggEBAB/yz0V8OzNtmRYMfoGS aDQBDSRxK1LoQohZhyZt0EisdZRVTV66kmCIUHJ1xAU8TG2YgkAuSpVEoEWZIUOD hvfjBghEyEroagOzNUTd5sOrkotFCc8Bmh/W73Zn0Ol+xAKQOkEY/CE6kFnkB7ez hP3PB82tSO8H/OVWYbtRNF4mdSJqod3+wK88oaK567X4cxy7AhqDyvNsDNEVm4dv uGZxsSDMgkmKwyixtGywZWQ/YJcZdvbmbhiULZFvk3OjlhsGXnDwBY0nPR4Q7oV2 W1vWMT1J93gJKiDTmExZj/zm8S3LlL+4tBM0Skx4S+SdMgmnTQUP31d2JqulXnxB Gig= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:50 2025 by rpki-client