$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1d2e49b-19af-4fac-9021-489155cff427.roa File: a1d2e49b-19af-4fac-9021-489155cff427.roa (raw, json) Hash identifier: tm/2GWgvXok27DCriIMlXyT2/m1QIGA5LLDmZF3ulG0= Subject key identifier: DC:56:EB:05:E3:96:AA:C7:38:B8:0E:D8:D2:66:D4:BA:D4:0F:A2:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69B2F3ED1A43D38021806135F9415C6FDFB28FDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1d2e49b-19af-4fac-9021-489155cff427.roa Signing time: Tue 29 Jul 2025 00:30:42 +0000 ROA not before: Tue 29 Jul 2025 00:30:42 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b2:f3:ed:1a:43:d3:80:21:80:61:35:f9:41:5c:6f:df:b2:8f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:30:42 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=679a5a76ab4a1e0a0e89faa24e1b00f75baca740093a7d9a6690679a4dc50668, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:2e:19:91:98:fc:75:62:47:a9:5a:91:f9: 47:16:c6:ea:6b:11:22:35:84:c0:b6:82:6b:ba:3d: 11:57:ec:8a:52:84:38:1b:8d:e8:9c:d5:20:da:00: 1e:8d:db:dc:75:28:a9:fe:89:fc:08:27:02:55:3a: 33:a5:de:c4:73:6f:7d:c6:a0:90:be:e3:25:53:4a: ea:9c:e4:89:08:03:28:b6:a0:83:cb:a1:14:89:97: 78:39:ec:c3:c3:c3:b4:94:1c:a3:73:a0:be:19:52: 80:7e:be:e5:8a:6e:03:53:83:38:7c:78:bb:18:80: 0a:e0:8f:e0:85:d5:85:7b:38:97:11:01:7d:e2:fa: e5:90:48:43:30:82:48:1b:88:db:f3:9d:97:b5:f3: 3e:96:7c:99:ee:e3:35:18:2e:b9:98:ca:ff:58:de: e0:15:42:c1:f9:11:ce:a9:a1:95:f2:fd:66:86:bf: 2a:e5:1a:d9:fb:3f:73:6d:a7:d2:4a:44:15:6e:0e: f8:20:9f:5e:dc:53:49:3c:22:8a:7f:5c:8f:8b:82: a2:81:e9:11:fa:17:a2:c5:18:12:60:4b:e5:9a:0a: ab:03:36:e2:77:59:7b:ab:a2:6f:a2:f5:72:25:11: 54:7a:c8:45:d0:19:c9:93:f8:b7:93:d5:8e:98:fb: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:EB:05:E3:96:AA:C7:38:B8:0E:D8:D2:66:D4:BA:D4:0F:A2:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1d2e49b-19af-4fac-9021-489155cff427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4880::/48 Signature Algorithm: sha256WithRSAEncryption 55:b0:ee:f5:4d:eb:8a:a5:69:84:a4:e7:04:e9:c5:62:52:0b: 87:e2:7c:37:3f:72:4b:08:08:dd:ff:01:8a:96:e1:19:3e:de: c4:d3:d0:c8:1d:d4:a0:3c:a7:ff:98:a9:a1:8e:2a:d4:30:44: 89:42:89:d0:0a:34:02:d1:fc:09:e5:23:b4:d8:c0:43:42:03: 9b:8c:09:ed:68:f3:8b:13:1e:a7:53:66:b3:92:de:4c:8a:da: 3e:06:19:4c:fa:d4:ce:53:fd:46:f5:d7:89:fa:77:26:be:45: a2:15:67:0b:5d:e1:be:b8:aa:fc:3c:47:95:4d:f4:8a:8a:1b: 74:c2:68:a4:db:3c:24:57:d2:a7:fe:74:53:a2:e6:4e:a9:0d: ce:e9:c7:37:eb:68:cf:3d:07:00:bf:44:75:e7:55:eb:80:ca: d4:89:ac:e4:26:4e:06:38:87:4e:d7:35:04:36:93:08:03:6b: 9e:d4:58:27:87:6b:76:29:58:60:d2:b2:df:d8:e6:9e:fb:89: 71:70:fd:f5:67:27:82:02:5a:8e:f1:69:99:8f:1d:cf:31:27: 0d:8f:10:10:9d:72:7a:6f:56:54:e6:d0:e8:d6:1b:11:c7:49: 13:d0:c0:f1:e1:0c:b7:c4:81:71:58:f9:11:fa:c9:4d:cd:1d: fc:74:37:39 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUabLz7RpD04AhgGE1+UFcb9+yj9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMzA0MloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANjc5YTVhNzZhYjRhMWUwYTBlODlm YWEyNGUxYjAwZjc1YmFjYTc0MDA5M2E3ZDlhNjY5MDY3OWE0ZGM1MDY2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy28uGZGY/HViR6lakflHFsbqaxEi NYTAtoJruj0RV+yKUoQ4G43onNUg2gAejdvcdSip/on8CCcCVTozpd7Ec299xqCQ vuMlU0rqnOSJCAMotqCDy6EUiZd4OezDw8O0lByjc6C+GVKAfr7lim4DU4M4fHi7 GIAK4I/ghdWFeziXEQF94vrlkEhDMIJIG4jb852XtfM+lnyZ7uM1GC65mMr/WN7g FULB+RHOqaGV8v1mhr8q5RrZ+z9zbafSSkQVbg74IJ9e3FNJPCKKf1yPi4KigekR +heixRgSYEvlmgqrAzbid1l7q6JvovVyJRFUeshF0BnJk/i3k9WOmPupywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNxW6wXjlqrHOLgO2NJm1LrUD6KoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExZDJlNDliLTE5YWYtNGZhYy05MDIxLTQ4OTE1NWNmZjQyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0iAMA0GCSqGSIb3DQEBCwUAA4IBAQBVsO71TeuKpWmEpOcE 6cViUguH4nw3P3JLCAjd/wGKluEZPt7E09DIHdSgPKf/mKmhjirUMESJQonQCjQC 0fwJ5SO02MBDQgObjAntaPOLEx6nU2azkt5Mito+BhlM+tTOU/1G9deJ+ncmvkWi FWcLXeG+uKr8PEeVTfSKiht0wmik2zwkV9Kn/nRTouZOqQ3O6cc362jPPQcAv0R1 51XrgMrUiazkJk4GOIdO1zUENpMIA2ue1Fgnh2t2KVhg0rLf2Oae+4lxcP31ZyeC AlqO8WmZjx3PMScNjxAQnXJ6b1ZU5tDo1hsRx0kT0MDx4Qy3xIFxWPkR+slNzR38 dDc5 -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:10 2025 by rpki-client