$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c03ea245-c111-48cc-a8e5-84e8292b3452.roa File: c03ea245-c111-48cc-a8e5-84e8292b3452.roa (raw, json) Hash identifier: unLNCi3G7e1RpLfhInka1v2n1Vj/FVLD/lT2z7l4hno= Subject key identifier: 74:27:6A:C9:7C:DE:DE:39:98:DD:D0:BA:8C:70:40:D6:B3:C1:64:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47A2A260FE012F6F8E0CC1B1C4938F8DAE8A09CF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c03ea245-c111-48cc-a8e5-84e8292b3452.roa Signing time: Mon 07 Jul 2025 15:21:40 +0000 ROA not before: Mon 07 Jul 2025 15:21:40 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a2:a2:60:fe:01:2f:6f:8e:0c:c1:b1:c4:93:8f:8d:ae:8a:09:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:21:40 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=eae6eeddcdb953ae21d71246ad4abfd2fe9c5918383e57ffe910a7911e006515, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:36:24:61:bc:e9:a4:18:53:cb:76:0a:aa: fa:e1:fb:99:47:79:17:14:cb:f8:7d:26:ea:6b:2d: 77:51:93:f4:25:83:2b:ea:72:5d:b3:c6:90:7d:7b: 1c:0b:04:ca:2f:7f:e4:38:ca:fc:36:7e:51:bc:cc: 97:a3:40:2f:d5:9e:b4:45:7a:89:aa:11:61:8f:74: 15:11:32:b0:c9:65:c1:05:3b:23:de:16:a8:6d:01: ea:29:83:69:a0:f2:19:60:8d:59:62:58:bb:49:2d: 0f:d9:b9:50:26:df:64:12:fc:f0:b3:62:a9:c2:e5: 5a:26:2e:d1:1a:c9:27:1d:f3:cf:c0:98:a5:51:a4: 1c:60:4c:d7:3f:50:cd:94:e2:b9:32:d3:13:cb:bc: a2:cf:c1:8c:27:38:74:72:8c:18:6e:d8:68:99:3f: 33:62:bc:27:9d:01:06:e8:ec:93:37:d8:1d:2b:cc: 3c:47:01:0f:80:f9:b2:cd:4c:20:d3:a1:f8:74:b2: a9:9f:e7:c8:d3:87:97:1c:2e:d4:a2:bb:6a:ef:34: 42:02:b6:5d:4f:65:53:17:1b:6a:07:8c:db:df:c5: 5f:97:d3:a0:f2:72:73:2f:26:48:52:26:5b:38:0b: 66:25:de:6e:23:4d:f2:b8:d3:c0:8f:3d:b2:4d:bc: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:6A:C9:7C:DE:DE:39:98:DD:D0:BA:8C:70:40:D6:B3:C1:64:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c03ea245-c111-48cc-a8e5-84e8292b3452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:c800::/40 Signature Algorithm: sha256WithRSAEncryption 9a:c7:92:57:15:cf:df:9f:ed:ed:bd:aa:21:c7:64:07:14:31: a5:ff:8a:56:a1:b9:33:ed:10:38:98:5f:95:11:9a:51:77:ee: ac:73:06:c5:dd:dd:91:94:7f:ad:5a:dd:41:88:b1:55:e5:fa: 6f:41:5c:b3:8c:75:52:6b:cd:7e:0a:79:29:02:fd:24:5b:4c: 8d:2f:a9:15:62:9e:f0:85:00:59:61:13:60:3a:3f:e3:de:96: 21:4c:ef:f0:df:0b:67:82:69:68:4e:c0:f6:5c:f6:1b:5c:ed: cf:eb:f0:4e:6a:c8:73:56:a3:f7:5c:87:99:2b:d7:fc:d5:a9: ba:30:a0:fc:e4:0f:c1:8d:c7:f7:fd:1f:e6:db:0e:49:4e:25: 07:f7:33:ff:6b:f0:60:80:e2:fb:a4:2f:f5:4d:46:c0:1a:bb: 64:8c:0d:bc:50:57:25:dd:a1:c8:3d:c4:b0:5d:b1:d5:f5:f6: 81:7d:9e:5c:a2:cb:02:ee:47:fb:b4:97:70:37:e9:79:63:38: ff:57:cf:94:15:3f:67:25:8e:99:08:56:2d:c7:51:0c:83:8e: f0:64:5e:57:4b:5c:13:be:9b:23:b2:c9:d2:06:10:2f:18:d5: 4e:60:b6:45:6e:32:b3:98:db:93:30:45:75:7a:a8:53:15:c6: 98:26:02:55 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR6KiYP4BL2+ODMGxxJOPja6KCc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MjE0MFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZWFlNmVlZGRjZGI5NTNhZTIxZDcx MjQ2YWQ0YWJmZDJmZTljNTkxODM4M2U1N2ZmZTkxMGE3OTExZTAwNjUxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvko2JGG86aQYU8t2Cqr64fuZR3kX FMv4fSbqay13UZP0JYMr6nJds8aQfXscCwTKL3/kOMr8Nn5RvMyXo0Av1Z60RXqJ qhFhj3QVETKwyWXBBTsj3haobQHqKYNpoPIZYI1ZYli7SS0P2blQJt9kEvzws2Kp wuVaJi7RGsknHfPPwJilUaQcYEzXP1DNlOK5MtMTy7yiz8GMJzh0cowYbthomT8z YrwnnQEG6OyTN9gdK8w8RwEPgPmyzUwg06H4dLKpn+fI04eXHC7Uortq7zRCArZd T2VTFxtqB4zb38Vfl9Og8nJzLyZIUiZbOAtmJd5uI03yuNPAjz2yTbxNawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHQnasl83t45mN3QuoxwQNazwWQUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwM2VhMjQ1LWMxMTEtNDhjYy1hOGU1LTg0ZTgyOTJiMzQ1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9cgwDQYJKoZIhvcNAQELBQADggEBAJrHklcVz9+f7e29qiHH ZAcUMaX/ilahuTPtEDiYX5URmlF37qxzBsXd3ZGUf61a3UGIsVXl+m9BXLOMdVJr zX4KeSkC/SRbTI0vqRVinvCFAFlhE2A6P+PeliFM7/DfC2eCaWhOwPZc9htc7c/r 8E5qyHNWo/dch5kr1/zVqbowoPzkD8GNx/f9H+bbDklOJQf3M/9r8GCA4vukL/VN RsAau2SMDbxQVyXdocg9xLBdsdX19oF9nlyiywLuR/u0l3A36XljOP9Xz5QVP2cl jpkIVi3HUQyDjvBkXldLXBO+myOyydIGEC8Y1U5gtkVuMrOY25MwRXV6qFMVxpgm AlU= -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:12 2025 by rpki-client