$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa File: b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa (raw, json) Hash identifier: yZXiTMWKMWfT2CDg8LGiInggLweCUh6XvxV+VqcHM0w= Subject key identifier: 61:55:EA:89:28:3F:CA:D9:92:19:1E:AB:72:28:22:6C:39:2E:9B:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4ED9E796E945DDB6C8CE3028E7033E612D41D548 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa Signing time: Tue 29 Jul 2025 00:01:01 +0000 ROA not before: Tue 29 Jul 2025 00:01:01 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:e7:96:e9:45:dd:b6:c8:ce:30:28:e7:03:3e:61:2d:41:d5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:01:01 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=e0b3095661532c7ffcd6e2373cc12d8c505cbf29f7ba63970f221bfd3359b271, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:60:17:dc:5a:9f:a7:eb:65:c8:31:cd:3c:35: 45:49:f3:b8:54:48:9e:42:d7:5a:26:88:60:12:e9: eb:65:ca:2d:c1:c4:4e:0d:3c:75:98:3a:c1:a5:73: 24:21:3e:10:c9:5d:7d:6a:8b:fc:f1:c5:57:24:76: 05:fb:e0:af:72:de:1e:98:71:4c:03:b0:7f:51:70: 2d:b0:a8:a3:01:9c:56:b9:7e:d5:12:fa:51:83:aa: f4:92:97:6f:c8:f0:c0:eb:59:d7:ae:0b:c0:2b:7e: 6e:e9:0e:47:f5:55:a1:d3:d0:23:76:7a:86:a2:9b: 46:b5:80:6a:c4:bf:e4:86:6a:8d:a5:82:b2:af:8e: a1:6e:f5:a3:9b:32:da:a1:f1:de:8b:61:77:65:59: 2f:35:78:c0:23:37:ac:2c:9b:03:8c:ab:4d:9a:93: f9:44:54:67:0c:bc:ae:6c:87:ba:16:1d:06:ce:f8: f1:f7:ef:76:58:cc:b9:3b:d0:dc:af:4c:00:b1:17: 66:1a:09:d2:9a:ee:45:6a:a4:c1:6b:c0:2a:59:76: dc:0e:55:25:45:0f:57:5c:a0:e1:17:f9:b1:46:4e: a4:45:a4:9e:fa:d3:e2:ce:8f:4a:49:39:16:fc:04: ca:10:cd:24:8c:44:e5:5e:52:36:3c:55:61:ec:1a: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:EA:89:28:3F:CA:D9:92:19:1E:AB:72:28:22:6C:39:2E:9B:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:a4:ac:ff:35:ab:c6:fa:52:9c:f2:8e:71:1e:ab:da:da:f6: fd:18:5c:4e:45:88:8c:b2:07:0f:93:ec:12:b7:c9:06:a1:d0: 14:48:80:1d:57:1e:44:a1:cd:84:f8:a9:74:e6:0c:0b:e4:07: 31:eb:a5:20:dc:de:ba:66:a5:1c:3a:8b:74:eb:10:43:83:45: ad:70:f0:69:9c:20:1e:73:41:2e:ad:86:42:8e:2d:a4:7a:32: 5c:3d:04:b9:7f:88:8d:87:1a:f9:61:45:d8:3e:33:71:d7:16: 1f:7c:a5:71:bb:8f:14:02:a4:62:90:a4:ea:e3:cb:4a:18:98: 13:ad:1a:5a:15:01:f1:97:b2:8e:e6:57:55:6b:79:62:1e:ca: 31:c1:1b:ab:31:9c:c2:24:f0:f3:b5:7e:5a:eb:d0:dd:8d:95: ce:6d:8a:f2:67:6c:48:4c:52:cf:22:1a:f8:8c:8c:e6:44:90: b6:bb:c2:0f:c2:96:a7:42:d9:d8:4b:95:02:14:c0:87:12:9d: bc:3d:2d:ea:6a:6c:4e:9e:eb:63:a0:ec:20:cb:da:0e:51:67: 1a:e5:a7:ad:12:4b:ef:32:ec:06:9d:8e:8a:2c:45:54:4a:34: 9d:4b:79:8a:a7:67:4f:d0:c3:09:19:a5:a1:b4:d5:7e:f5:ea: d8:75:03:cc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTtnnlulF3bbIzjAo5wM+YS1B1UgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMDEwMVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZTBiMzA5NTY2MTUzMmM3ZmZjZDZl MjM3M2NjMTJkOGM1MDVjYmYyOWY3YmE2Mzk3MGYyMjFiZmQzMzU5YjI3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GAX3Fqfp+tlyDHNPDVFSfO4VEie QtdaJohgEunrZcotwcRODTx1mDrBpXMkIT4QyV19aov88cVXJHYF++Cvct4emHFM A7B/UXAtsKijAZxWuX7VEvpRg6r0kpdvyPDA61nXrgvAK35u6Q5H9VWh09AjdnqG optGtYBqxL/khmqNpYKyr46hbvWjmzLaofHei2F3ZVkvNXjAIzesLJsDjKtNmpP5 RFRnDLyubIe6Fh0Gzvjx9+92WMy5O9Dcr0wAsRdmGgnSmu5FaqTBa8AqWXbcDlUl RQ9XXKDhF/mxRk6kRaSe+tPizo9KSTkW/ATKEM0kjETlXlI2PFVh7BoHxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGFV6okoP8rZkhkeq3IoImw5LpsmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3OTI3MjIwLTY1ZjYtNDY3Mi05YmM5LWFjZjhjZmU4YWRmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPDAMA0GCSqGSIb3DQEBCwUAA4IBAQAbpKz/NavG+lKc8o5x Hqva2vb9GFxORYiMsgcPk+wSt8kGodAUSIAdVx5Eoc2E+Kl05gwL5Acx66Ug3N66 ZqUcOot06xBDg0WtcPBpnCAec0EurYZCji2kejJcPQS5f4iNhxr5YUXYPjNx1xYf fKVxu48UAqRikKTq48tKGJgTrRpaFQHxl7KO5ldVa3liHsoxwRurMZzCJPDztX5a 69DdjZXObYryZ2xITFLPIhr4jIzmRJC2u8IPwpanQtnYS5UCFMCHEp28PS3qamxO nutjoOwgy9oOUWca5aetEkvvMuwGnY6KLEVUSjSdS3mKp2dP0MMJGaWhtNV+9erY dQPM -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:36 2025 by rpki-client