$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa File: a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa (raw, json) Hash identifier: w+9bN90rUoJeoHcwzprn7Xqqt8jxI57BxTfbPmgo7dE= Subject key identifier: 06:54:CF:D9:5B:C4:D2:5D:2D:0F:24:28:9B:E9:89:0A:EA:3C:F2:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 360D2DFDDDCA95CE424EA5CF9334050697B64D3B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa Signing time: Tue 29 Jul 2025 00:50:23 +0000 ROA not before: Tue 29 Jul 2025 00:50:23 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0d:2d:fd:dd:ca:95:ce:42:4e:a5:cf:93:34:05:06:97:b6:4d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:50:23 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=2e32ad505020a6a3d375e08e777a59118b3800b90ba5a9eebc27b713711a4d76, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:05:4d:2c:2b:2b:e1:18:c1:dc:83:50:9b: 13:e7:90:3b:32:3e:d5:f2:0d:95:c3:4c:3c:95:3c: d6:1c:de:da:4b:20:d0:f6:42:ab:75:f1:a8:a1:c6: 3a:cb:33:2d:c7:42:9a:30:ba:c9:9a:6d:1d:5e:aa: 05:99:ee:17:47:6d:20:df:19:e2:4c:d7:16:9c:f0: 2e:8c:9c:44:d3:e2:6d:e2:5c:b4:51:f6:b8:bc:7c: f1:27:f1:83:7a:de:42:ae:80:cd:aa:c7:4a:97:e8: d7:c5:c3:71:14:7b:ae:b2:82:0a:0d:b4:3a:55:fe: 8e:e1:63:1f:36:40:84:8c:d1:9d:56:08:1d:5a:79: c4:6d:b1:dd:4b:aa:84:9c:e8:b5:33:6f:8d:77:6c: 4a:73:fd:82:af:ef:da:81:fa:0c:c4:c2:dc:0d:34: 57:60:8e:ee:3e:a7:47:69:64:93:62:d7:c6:49:91: 04:89:4a:c7:c3:fb:5c:cd:be:8b:dd:81:bb:67:01: 5e:b6:0b:f9:98:90:0e:13:3d:ac:44:d1:23:8e:92: c0:81:fb:04:dd:93:f1:22:fd:46:fa:f3:67:a8:f5: 1a:a3:29:35:db:e2:b0:f5:98:fc:73:6c:5a:ee:31: 1c:d8:d0:13:1f:df:5f:80:f2:fe:7b:0b:26:89:56: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:54:CF:D9:5B:C4:D2:5D:2D:0F:24:28:9B:E9:89:0A:EA:3C:F2:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:880::/48 Signature Algorithm: sha256WithRSAEncryption ab:d3:ae:f9:b2:84:a3:ec:e6:78:8d:06:56:1d:bb:c9:bd:59: e9:20:17:6b:ae:c4:77:9f:2e:4f:3b:29:c6:bd:df:9e:50:c1: a8:8f:f6:d9:bd:c3:23:0e:62:66:06:08:02:3a:44:54:1b:bd: da:f5:b6:c1:55:65:d2:84:3d:25:22:57:39:af:61:91:46:f1: 79:a3:8d:42:5b:f5:20:f8:d4:de:1c:af:1a:08:da:65:05:6f: 8e:36:ae:a9:b2:1e:01:7b:74:d4:2a:c7:95:fe:d1:36:04:a8: 18:a1:0f:9e:d7:93:93:31:81:1b:57:73:6c:9c:cb:5b:de:4e: c9:a3:fe:d7:9c:d2:ca:c5:95:2e:18:da:99:b7:bd:cb:57:50: fd:d1:27:5f:ad:02:61:e2:a7:4f:b6:93:a0:53:58:9b:1c:a4: b2:7a:93:70:71:f9:d7:4d:a7:ca:07:a9:5e:e5:8c:be:06:26: ec:f8:e0:3d:4a:74:8a:c3:5d:8c:0b:b0:35:71:c6:58:85:10: 7b:ac:7b:e6:a0:d4:d8:34:80:be:48:29:d7:27:21:52:9e:bb: b4:5d:7e:db:7e:09:26:ef:d4:53:88:3e:7f:7e:d1:41:9a:a5: b9:0b:a9:1b:ff:18:34:51:7e:10:ec:26:af:6d:34:f3:4e:d8: c8:1e:9c:2c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNg0t/d3Klc5CTqXPkzQFBpe2TTswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNTAyM1oX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMmUzMmFkNTA1MDIwYTZhM2QzNzVl MDhlNzc3YTU5MTE4YjM4MDBiOTBiYTVhOWVlYmMyN2I3MTM3MTFhNGQ3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRgFTSwrK+EYwdyDUJsT55A7Mj7V 8g2Vw0w8lTzWHN7aSyDQ9kKrdfGoocY6yzMtx0KaMLrJmm0dXqoFme4XR20g3xni TNcWnPAujJxE0+Jt4ly0Ufa4vHzxJ/GDet5CroDNqsdKl+jXxcNxFHuusoIKDbQ6 Vf6O4WMfNkCEjNGdVggdWnnEbbHdS6qEnOi1M2+Nd2xKc/2Cr+/agfoMxMLcDTRX YI7uPqdHaWSTYtfGSZEEiUrHw/tczb6L3YG7ZwFetgv5mJAOEz2sRNEjjpLAgfsE 3ZPxIv1G+vNnqPUaoyk12+Kw9Zj8c2xa7jEc2NATH99fgPL+ewsmiVYHuwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAZUz9lbxNJdLQ8kKJvpiQrqPPKVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2NzYyODhiLTQxNDgtNGY0ZS1iZmJlLTU3YTE4ZWI5YjI1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8giAMA0GCSqGSIb3DQEBCwUAA4IBAQCr0675soSj7OZ4jQZW HbvJvVnpIBdrrsR3ny5POynGvd+eUMGoj/bZvcMjDmJmBggCOkRUG73a9bbBVWXS hD0lIlc5r2GRRvF5o41CW/Ug+NTeHK8aCNplBW+ONq6psh4Be3TUKseV/tE2BKgY oQ+e15OTMYEbV3NsnMtb3k7Jo/7XnNLKxZUuGNqZt73LV1D90SdfrQJh4qdPtpOg U1ibHKSyepNwcfnXTafKB6le5Yy+Bibs+OA9SnSKw12MC7A1ccZYhRB7rHvmoNTY NIC+SCnXJyFSnru0XX7bfgkm79RTiD5/ftFBmqW5C6kb/xg0UX4Q7CavbTTzTtjI Hpws -----END CERTIFICATE-----Generated at Thu Jul 31 00:59:13 2025 by rpki-client