$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa File: b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa (raw, json) Hash identifier: wiBAJv04lhit6dnmFx+OEE9YFJ08yFXD+nXq72w9plA= Subject key identifier: 55:92:D1:90:D5:B8:77:1A:56:81:69:42:03:9B:BF:EB:AB:37:FE:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E9EB527347D0C111C588011635144ED7AB66C40 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa Signing time: Tue 29 Jul 2025 00:40:19 +0000 ROA not before: Tue 29 Jul 2025 00:40:19 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9e:b5:27:34:7d:0c:11:1c:58:80:11:63:51:44:ed:7a:b6:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:40:19 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=6fcb915f24eb14ffd48505d177a066307c9199cd2364a1d073a5ad80254577f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:69:f3:1d:38:fc:55:b3:d3:57:41:85:83: 8e:29:99:c7:7a:75:cc:45:0d:62:ed:fd:54:72:bf: db:65:2c:39:d7:4d:c8:06:1a:67:22:97:98:27:f6: 97:84:c7:36:f9:9b:32:33:32:2c:0d:7c:fe:50:a3: 0d:52:e0:06:c7:b3:6e:40:62:36:20:a5:26:9a:3b: 33:9d:62:7d:d4:5b:9a:e7:0b:1b:ef:64:47:60:27: 8e:22:8e:91:f9:bd:37:ef:a2:e1:cf:2e:68:48:32: 51:89:f4:4d:62:9f:d5:e9:d2:7c:68:45:3e:1d:16: 0a:83:98:85:1e:32:56:2a:28:c4:a0:4e:cc:2a:43: 9d:b8:a8:b7:7d:6b:bc:95:27:cf:5c:f9:56:44:95: 9c:4b:a6:12:d1:57:6b:35:4f:74:ab:90:35:4a:80: ed:86:83:5f:ef:cf:83:a5:07:b0:54:8e:e8:64:43: d4:5a:9e:f5:b2:e5:97:18:7a:86:32:18:c2:92:c7: 87:42:74:b9:ad:18:fb:38:48:b1:be:3e:30:44:40: 62:52:9f:a2:ad:47:81:c6:6e:63:25:e4:b0:78:ce: f1:e5:5c:2d:5c:95:b3:d6:36:2b:99:d9:14:e2:e2: 0b:a7:26:ad:17:b7:06:dc:a2:e1:82:a6:65:2e:c5: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:92:D1:90:D5:B8:77:1A:56:81:69:42:03:9B:BF:EB:AB:37:FE:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:0a:e2:06:be:c2:3f:b5:25:42:a2:88:9b:11:4b:1d:15:38: 4d:1f:96:a2:12:f2:57:cf:ea:89:d9:56:17:50:3b:2c:96:cc: ca:7e:c0:c7:56:02:41:3d:e3:45:99:ad:c1:24:e6:78:7a:29: 50:ed:ba:f3:5c:c5:31:d5:1b:6c:56:92:49:97:b2:d2:36:04: 22:11:a3:db:a6:a9:28:fa:11:59:69:fd:de:78:74:8c:e4:39: 22:19:a3:88:ac:4e:5c:d4:2a:e7:05:7a:cb:d6:c2:d6:8d:0c: b4:a2:75:d8:3c:ce:27:39:d8:78:dd:0d:38:e6:78:a1:81:50: 64:f7:2f:f6:97:72:5a:04:93:a6:63:e6:11:ff:93:ba:29:08: be:41:2d:d7:fa:65:5e:a2:0e:9e:20:4e:9f:27:0c:d3:5d:ad: 47:f0:f0:5a:9f:f2:61:8c:b8:9b:54:09:21:c0:c6:2a:1c:a1: 18:82:40:35:83:71:fb:36:4e:b1:38:7f:3a:23:aa:af:9b:51: ec:a9:be:68:46:5f:03:0c:18:b8:f4:29:30:e1:94:cd:b6:76: 9e:99:f6:97:ce:35:96:06:cc:b7:e5:8d:75:a5:1c:23:ff:d9: 1b:37:6e:2b:17:3c:fe:7f:e0:18:52:6f:b1:1b:c5:11:64:66: 9b:e1:d6:26 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULp61JzR9DBEcWIARY1FE7Xq2bEAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDAxOVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNANmZjYjkxNWYyNGViMTRmZmQ0ODUw NWQxNzdhMDY2MzA3YzkxOTljZDIzNjRhMWQwNzNhNWFkODAyNTQ1NzdmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodlp8x04/FWz01dBhYOOKZnHenXM RQ1i7f1Ucr/bZSw5103IBhpnIpeYJ/aXhMc2+ZsyMzIsDXz+UKMNUuAGx7NuQGI2 IKUmmjsznWJ91Fua5wsb72RHYCeOIo6R+b0376Lhzy5oSDJRifRNYp/V6dJ8aEU+ HRYKg5iFHjJWKijEoE7MKkOduKi3fWu8lSfPXPlWRJWcS6YS0VdrNU90q5A1SoDt hoNf78+DpQewVI7oZEPUWp71suWXGHqGMhjCkseHQnS5rRj7OEixvj4wREBiUp+i rUeBxm5jJeSweM7x5VwtXJWz1jYrmdkU4uILpyatF7cG3KLhgqZlLsVNXwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFWS0ZDVuHcaVoFpQgObv+urN/6ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwYTJlZDA3LWFmZGUtNDM0MS1iMzRmLTQ0YmZiZGZlZjA5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8DAMA0GCSqGSIb3DQEBCwUAA4IBAQCYCuIGvsI/tSVCooib EUsdFThNH5aiEvJXz+qJ2VYXUDsslszKfsDHVgJBPeNFma3BJOZ4eilQ7brzXMUx 1RtsVpJJl7LSNgQiEaPbpqko+hFZaf3eeHSM5DkiGaOIrE5c1CrnBXrL1sLWjQy0 onXYPM4nOdh43Q045nihgVBk9y/2l3JaBJOmY+YR/5O6KQi+QS3X+mVeog6eIE6f JwzTXa1H8PBan/JhjLibVAkhwMYqHKEYgkA1g3H7Nk6xOH86I6qvm1Hsqb5oRl8D DBi49Ckw4ZTNtnaemfaXzjWWBsy35Y11pRwj/9kbN24rFzz+f+AYUm+xG8URZGab 4dYm -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:52 2025 by rpki-client