$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa File: a9812ae5-6cb6-43be-82bc-429f2e7be616.roa (raw, json) Hash identifier: o6jvOvjhPjaB2NkMsywpnMcvEQEMSD6cYxQkLjnBpXs= Subject key identifier: 5F:2C:06:51:39:DC:31:80:06:32:DE:F5:B9:D2:B5:31:F3:F7:AE:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 710EACC4A497215C5F61BD8BA8814AADC850F918 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa Signing time: Mon 07 Jul 2025 15:50:03 +0000 ROA not before: Mon 07 Jul 2025 15:50:03 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0e:ac:c4:a4:97:21:5c:5f:61:bd:8b:a8:81:4a:ad:c8:50:f9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:50:03 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=7cd20e60918eea22dcb8acc47e9cfdbd67dd464a21ed082973fff9240a27d4a4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:58:3a:4e:b7:9b:c8:df:e1:51:cd:80:df: 94:63:9e:f6:31:9e:d3:ec:e3:19:6f:1b:34:f5:b2: 8e:97:56:7d:49:83:6c:26:23:c6:82:19:ea:47:2e: a3:d0:f8:28:61:bd:93:08:d4:d2:e8:fb:b3:65:11: 1b:e3:37:55:a7:7a:eb:15:b7:55:d3:79:19:0a:58: 36:b9:04:2c:70:27:d7:e6:f5:84:c5:26:b4:2d:76: 85:bf:b0:95:d7:d6:c5:b6:ce:31:8d:e1:bf:3e:c8: 64:78:ac:d0:5d:8e:1b:8d:04:91:5f:e8:f7:0c:c4: 52:98:d4:c2:ea:09:5b:f0:54:3a:54:4d:c1:70:19: 97:4b:84:15:f2:b8:b6:47:a2:d2:e9:d9:43:5c:60: 4e:4f:d4:46:42:3a:6a:f0:ce:13:c8:a5:bd:06:d0: 30:fc:d9:e5:5d:9e:3b:62:09:70:18:e9:03:a1:b1: 87:90:3c:3b:f1:4d:48:43:b4:8c:c0:c1:43:f7:32: 34:f7:7f:fa:53:aa:5c:25:23:73:07:34:c8:d1:1c: c8:59:dd:56:67:47:b8:e2:e5:ca:2c:8e:10:00:73: 4a:5e:d4:fb:b4:32:eb:3e:e1:52:8b:f9:74:b3:95: 13:2f:99:05:82:7f:86:60:11:6f:ac:f1:73:6d:5d: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:06:51:39:DC:31:80:06:32:DE:F5:B9:D2:B5:31:F3:F7:AE:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:c00::/38 Signature Algorithm: sha256WithRSAEncryption 28:d2:18:ca:f0:6f:55:ba:8e:a6:93:23:32:f7:f9:a4:e5:94: 27:07:0a:40:27:5f:64:74:17:a5:1c:65:ca:10:62:15:a1:5b: 28:bd:4f:8a:c7:48:75:be:06:dd:95:f5:23:7b:f9:51:b8:e8: 3d:65:88:36:22:0f:f8:1d:02:e1:e2:9f:7e:71:05:29:00:ec: 57:38:0f:1d:8f:ad:63:89:90:c6:8f:53:9e:36:3f:88:76:71: 0d:fa:e8:75:15:35:60:e4:04:ef:05:9c:6e:fc:b8:fa:99:23: 7c:6e:8c:36:ab:d9:d4:b2:2b:f5:6b:b2:d2:63:e9:68:96:c1: 86:ea:32:6b:97:51:dd:c9:a4:8d:c2:fb:30:b9:28:fd:a5:a4: f4:bf:bf:15:69:2b:ab:10:bc:0e:4a:d7:8f:25:4a:cd:2a:31: 3e:89:1c:b8:35:33:01:46:04:07:72:a8:d8:cd:8c:1c:b4:d1: 77:b1:24:aa:58:c9:d2:13:c4:6c:cc:a6:3d:7a:b5:20:f5:21: 00:26:cf:64:ce:3f:61:8a:4a:ea:a3:b2:f1:a8:6d:0f:b8:17: 2c:b0:63:0b:fc:c7:97:cc:49:98:9a:24:18:3d:7f:80:2d:b1: fa:d2:69:cb:a9:8c:23:59:09:f1:5d:28:11:a9:dd:09:85:d1: bd:fa:e0:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcQ6sxKSXIVxfYb2LqIFKrchQ+RgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NTAwM1oX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAN2NkMjBlNjA5MThlZWEyMmRjYjhh Y2M0N2U5Y2ZkYmQ2N2RkNDY0YTIxZWQwODI5NzNmZmY5MjQwYTI3ZDRhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV5YOk63m8jf4VHNgN+UY572MZ7T 7OMZbxs09bKOl1Z9SYNsJiPGghnqRy6j0PgoYb2TCNTS6PuzZREb4zdVp3rrFbdV 03kZClg2uQQscCfX5vWExSa0LXaFv7CV19bFts4xjeG/PshkeKzQXY4bjQSRX+j3 DMRSmNTC6glb8FQ6VE3BcBmXS4QV8ri2R6LS6dlDXGBOT9RGQjpq8M4TyKW9BtAw /NnlXZ47YglwGOkDobGHkDw78U1IQ7SMwMFD9zI093/6U6pcJSNzBzTI0RzIWd1W Z0e44uXKLI4QAHNKXtT7tDLrPuFSi/l0s5UTL5kFgn+GYBFvrPFzbV2PZwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF8sBlE53DGABjLe9bnStTHz965TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ODEyYWU1LTZjYjYtNDNiZS04MmJjLTQyOWYyZTdiZTYxNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQwwDQYJKoZIhvcNAQELBQADggEBACjSGMrwb1W6jqaTIzL3 +aTllCcHCkAnX2R0F6UcZcoQYhWhWyi9T4rHSHW+Bt2V9SN7+VG46D1liDYiD/gd AuHin35xBSkA7Fc4Dx2PrWOJkMaPU542P4h2cQ366HUVNWDkBO8FnG78uPqZI3xu jDar2dSyK/VrstJj6WiWwYbqMmuXUd3JpI3C+zC5KP2lpPS/vxVpK6sQvA5K148l Ss0qMT6JHLg1MwFGBAdyqNjNjBy00XexJKpYydITxGzMpj16tSD1IQAmz2TOP2GK SuqjsvGobQ+4FyywYwv8x5fMSZiaJBg9f4AtsfrSacupjCNZCfFdKBGp3QmF0b36 4PU= -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:09 2025 by rpki-client