$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa File: b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json) Hash identifier: GjGWclPVpwH0j4gT3bigtS/pLhBRiVTUZWjG6LswHQ0= Subject key identifier: 15:06:FE:42:3F:54:51:0A:91:51:C5:51:61:11:5E:EF:8D:F1:FA:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5127D86532A901872A4C02A35B8E2C2B8263D7AF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa Signing time: Wed 30 Jul 2025 00:02:13 +0000 ROA not before: Wed 30 Jul 2025 00:02:13 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:27:d8:65:32:a9:01:87:2a:4c:02:a3:5b:8e:2c:2b:82:63:d7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:02:13 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=1d13b36d6e52620b9ed96a54c248af1476dfcc1cbd1d3df785eabfc58f257033, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:4f:d1:3f:06:75:b8:e4:4f:f5:5f:e8:52: 39:09:a9:bb:8b:cc:bd:2c:32:a4:e7:62:0d:1c:16: a7:a2:30:3e:e9:d9:97:42:14:a3:00:3a:d2:25:ab: c7:cd:f2:a4:57:7c:90:e7:82:48:41:c9:e6:ab:60: e5:b9:9e:28:93:e5:cf:1b:0c:13:f4:8e:e5:ca:d6: e6:58:b8:c6:18:0e:b9:47:a8:ab:b8:6c:df:51:ca: 95:b2:bb:2a:6d:cc:5a:a7:a3:77:d2:88:bc:b1:b9: b5:b1:99:1e:b6:d2:b5:d4:72:4e:9c:f8:9d:50:80: 62:35:af:dc:95:6d:23:3f:49:7b:72:f3:f4:d0:07: 56:b8:89:29:06:f1:54:7f:af:a1:64:fe:ae:12:85: 47:f5:de:c3:e8:e6:08:cd:1f:85:f5:4f:1b:80:a1: 77:6f:bb:83:5e:77:ea:90:9e:52:a9:b9:98:ac:43: fa:05:7f:71:8f:da:e2:ac:19:ea:16:32:a2:0c:d6: bf:b6:99:10:93:74:25:b1:ff:67:b6:0b:83:b7:e0: 41:4a:93:45:db:23:b1:6a:a7:82:b5:cf:bf:6e:b3: 31:8d:8b:5d:79:ad:58:20:78:da:8f:a4:31:f9:92: 80:44:5f:b6:3c:ef:36:15:1a:df:8d:b9:16:67:3e: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:FE:42:3F:54:51:0A:91:51:C5:51:61:11:5E:EF:8D:F1:FA:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2000::/40 Signature Algorithm: sha256WithRSAEncryption a4:e0:91:91:7b:1b:02:a1:24:e5:c6:a0:98:5b:a0:8e:7d:91: 7d:a0:53:80:65:22:cd:19:a6:07:a5:d9:f7:57:52:75:69:f0: c4:e4:69:e0:66:7b:6b:ac:75:3e:a8:d3:c5:dd:52:92:1c:78: a2:4d:07:e6:75:9c:fc:d7:9b:35:39:c8:3e:2a:c2:3b:4a:94: 15:3e:e9:f0:a7:10:be:60:6d:52:c6:18:38:4b:b6:9d:48:9b: 59:94:e5:6d:89:11:fa:a5:be:6b:44:a0:5f:d6:04:92:45:50: 00:08:83:9e:e3:cc:ac:b9:63:af:46:89:48:a4:17:2f:12:5d: 1d:8d:1d:e8:77:89:93:0a:4d:a5:d0:02:00:a7:f0:f8:a8:fa: 0d:a2:83:fe:b8:a8:b1:bb:ff:a5:72:34:4c:af:15:d2:56:e0: fd:1c:ca:56:56:e3:92:f8:5d:5f:c0:fc:d0:2a:88:88:a7:52: 1f:fe:47:54:ea:45:84:29:c7:ed:ff:95:02:7e:54:e4:83:b5: 20:ad:c3:17:f1:7c:c0:4a:de:6d:70:7d:c5:c7:a6:07:d4:33: 7d:72:41:75:31:47:33:ac:8a:28:0b:03:99:bd:1e:c1:37:71: 44:e0:f8:a8:af:58:0a:8f:53:3b:09:8a:2b:3b:5d:22:38:a1: 36:43:aa:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUSfYZTKpAYcqTAKjW44sK4Jj168wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMDIxM1oX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAMWQxM2IzNmQ2ZTUyNjIwYjllZDk2 YTU0YzI0OGFmMTQ3NmRmY2MxY2JkMWQzZGY3ODVlYWJmYzU4ZjI1NzAzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xZP0T8GdbjkT/Vf6FI5Cam7i8y9 LDKk52INHBanojA+6dmXQhSjADrSJavHzfKkV3yQ54JIQcnmq2DluZ4ok+XPGwwT 9I7lytbmWLjGGA65R6iruGzfUcqVsrsqbcxap6N30oi8sbm1sZkettK11HJOnPid UIBiNa/clW0jP0l7cvP00AdWuIkpBvFUf6+hZP6uEoVH9d7D6OYIzR+F9U8bgKF3 b7uDXnfqkJ5SqbmYrEP6BX9xj9rirBnqFjKiDNa/tpkQk3Qlsf9ntguDt+BBSpNF 2yOxaqeCtc+/brMxjYtdea1YIHjaj6Qx+ZKARF+2PO82FRrfjbkWZz4tpwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBUG/kI/VFEKkVHFUWERXu+N8foUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NjhlMTEyLTJjNjgtNGRjNS1iMjlmLThjNjRjNGUwOWMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaACAwDQYJKoZIhvcNAQELBQADggEBAKTgkZF7GwKhJOXGoJhb oI59kX2gU4BlIs0Zpgel2fdXUnVp8MTkaeBme2usdT6o08XdUpIceKJNB+Z1nPzX mzU5yD4qwjtKlBU+6fCnEL5gbVLGGDhLtp1Im1mU5W2JEfqlvmtEoF/WBJJFUAAI g57jzKy5Y69GiUikFy8SXR2NHeh3iZMKTaXQAgCn8Pio+g2ig/64qLG7/6VyNEyv FdJW4P0cylZW45L4XV/A/NAqiIinUh/+R1TqRYQpx+3/lQJ+VOSDtSCtwxfxfMBK 3m1wfcXHpgfUM31yQXUxRzOsiigLA5m9HsE3cUTg+KivWAqPUzsJiis7XSI4oTZD qjE= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:25 2025 by rpki-client