$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f7f81d5-9939-43d6-b333-dd2d090500da.roa File: 9f7f81d5-9939-43d6-b333-dd2d090500da.roa (raw, json) Hash identifier: roqc3volR+hmMHvMeOaFRc8HrGrItf7sMxTPx60jEjA= Subject key identifier: 09:6D:5A:E5:A4:9D:E4:50:4F:8B:4D:F8:BC:4E:66:00:69:A2:DA:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DE54395966DA5C502F2C61BB1B0F17444B30D12 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f7f81d5-9939-43d6-b333-dd2d090500da.roa Signing time: Mon 07 Jul 2025 15:11:35 +0000 ROA not before: Mon 07 Jul 2025 15:11:35 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e5:43:95:96:6d:a5:c5:02:f2:c6:1b:b1:b0:f1:74:44:b3:0d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:11:35 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=8ea71449e99bd0433c75e6d7cd474f8cb7a8a68b63244568521a23f7196e63a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:42:2e:2a:87:37:fe:05:92:5e:83:2f:75:9f: 3e:52:0f:76:df:ee:9c:a2:cd:db:81:b8:54:44:7f: ba:40:9b:ba:9e:2a:92:a1:ea:f6:5d:c6:2e:0e:c1: 71:0e:6c:74:fc:12:ed:4c:de:7e:f5:13:55:70:14: 0d:16:11:ea:e6:88:87:80:fe:6e:72:d6:8d:33:b5: 62:68:e5:68:02:dd:1d:1e:90:2f:70:46:36:6b:11: 73:38:34:f1:db:f4:5b:4e:39:e5:d7:30:81:a8:3c: 0d:53:25:e9:20:8f:9a:28:ef:93:07:ff:bd:ae:88: 4e:73:ef:46:0d:32:a7:9e:59:19:9d:0b:ef:4d:f7: 1e:59:16:65:9f:19:1a:a6:c8:56:cc:49:df:77:ee: a5:ca:5b:ec:bb:56:09:e6:05:d8:9c:59:32:2d:fe: 99:f4:54:0b:b9:1e:33:fc:22:a8:e9:c7:11:85:73: 99:05:44:2c:4a:0e:73:27:77:a0:86:82:47:ae:6f: 14:18:ea:6c:08:66:1a:24:ad:ea:ae:3d:16:9c:5b: 35:48:19:1a:8d:4b:a2:31:68:08:b1:7d:bc:1a:99: fc:77:c2:a3:58:46:b8:8d:51:f9:ad:0b:9a:14:70: c6:76:e3:0c:a5:e8:ac:76:85:2d:04:d8:5d:c3:58: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:5A:E5:A4:9D:E4:50:4F:8B:4D:F8:BC:4E:66:00:69:A2:DA:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f7f81d5-9939-43d6-b333-dd2d090500da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:8800::/40 Signature Algorithm: sha256WithRSAEncryption 18:d0:8d:07:ae:05:2e:be:61:00:91:b4:63:5e:c3:19:0f:61: bd:87:4f:e0:9c:08:13:20:2a:54:8a:a4:07:2b:81:4b:58:08: c3:f7:1a:2f:79:93:e4:d7:ff:2b:4e:d6:bf:04:c7:0f:fd:57: a2:1e:d7:e6:e8:c3:fc:21:48:06:54:7d:1d:ef:cd:d3:a3:a9: 2b:83:ea:4d:68:0b:98:24:4e:0f:02:41:e5:95:2f:f2:f8:b5: ac:4a:24:06:85:c3:86:48:3b:32:27:f6:45:87:df:0b:41:be: d6:96:cd:bd:8d:06:f3:3b:bc:39:bd:43:9b:6d:b1:be:9c:60: bb:ff:05:f1:45:2f:39:ff:05:2a:36:36:d6:6f:b0:c7:f9:6d: 43:41:50:3c:7d:61:61:89:c9:26:e4:5c:a9:4c:5a:a1:6b:e0: 8f:5b:3f:ec:13:8f:25:0d:e4:ab:00:d1:68:ed:11:29:17:de: b4:c8:1c:68:90:df:51:63:58:43:72:bf:fa:cc:9a:4d:7c:1b: d9:e1:1d:4b:00:1a:84:f5:ae:20:4f:11:f4:07:9d:86:97:69: f5:18:c5:74:bc:70:c2:4b:2a:60:95:23:11:d5:d4:1d:ee:a1: 60:7d:c9:60:0d:41:b3:8d:08:7d:ef:f7:99:8f:96:aa:cc:a2: b9:90:34:b3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfeVDlZZtpcUC8sYbsbDxdESzDRIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MTEzNVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAOGVhNzE0NDllOTliZDA0MzNjNzVl NmQ3Y2Q0NzRmOGNiN2E4YTY4YjYzMjQ0NTY4NTIxYTIzZjcxOTZlNjNhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EIuKoc3/gWSXoMvdZ8+Ug923+6c os3bgbhURH+6QJu6niqSoer2XcYuDsFxDmx0/BLtTN5+9RNVcBQNFhHq5oiHgP5u ctaNM7ViaOVoAt0dHpAvcEY2axFzODTx2/RbTjnl1zCBqDwNUyXpII+aKO+TB/+9 rohOc+9GDTKnnlkZnQvvTfceWRZlnxkapshWzEnfd+6lylvsu1YJ5gXYnFkyLf6Z 9FQLuR4z/CKo6ccRhXOZBUQsSg5zJ3eghoJHrm8UGOpsCGYaJK3qrj0WnFs1SBka jUuiMWgIsX28Gpn8d8KjWEa4jVH5rQuaFHDGduMMpeisdoUtBNhdw1joFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAltWuWkneRQT4tN+LxOZgBpotowMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmN2Y4MWQ1LTk5MzktNDNkNi1iMzMzLWRkMmQwOTA1MDBkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacIgwDQYJKoZIhvcNAQELBQADggEBABjQjQeuBS6+YQCRtGNe wxkPYb2HT+CcCBMgKlSKpAcrgUtYCMP3Gi95k+TX/ytO1r8Exw/9V6Ie1+bow/wh SAZUfR3vzdOjqSuD6k1oC5gkTg8CQeWVL/L4taxKJAaFw4ZIOzIn9kWH3wtBvtaW zb2NBvM7vDm9Q5ttsb6cYLv/BfFFLzn/BSo2NtZvsMf5bUNBUDx9YWGJySbkXKlM WqFr4I9bP+wTjyUN5KsA0WjtESkX3rTIHGiQ31FjWENyv/rMmk18G9nhHUsAGoT1 riBPEfQHnYaXafUYxXS8cMJLKmCVIxHV1B3uoWB9yWANQbONCH3v95mPlqrMormQ NLM= -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:41 2025 by rpki-client