$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa File: c97fd121-51cc-4711-a755-0eefb435ec81.roa (raw, json) Hash identifier: F92LDzthUtJaLXaKHWixYfQ9tSrf5iU0U8zkrWMSUTI= Subject key identifier: 5A:25:16:39:C0:88:42:4A:77:05:F0:66:0E:90:D8:8E:88:BA:C5:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 110FB084B12311109EC20C5BE5A357A323AF76F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa Signing time: Sat 26 Jul 2025 00:01:58 +0000 ROA not before: Sat 26 Jul 2025 00:01:58 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0f:b0:84:b1:23:11:10:9e:c2:0c:5b:e5:a3:57:a3:23:af:76:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 26 00:01:58 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=dc294091967400a53803f93df067ea49c76ff9b26158c24876055f6fa501929d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:41:18:c5:f8:58:da:08:5d:bb:17:cc:ce:f5: 3f:ea:3a:21:40:e2:f0:64:f8:3b:ea:20:aa:8c:35: 35:98:e0:c9:61:74:f9:8d:ea:5e:6c:6f:c1:d5:87: 0a:f1:e1:fd:30:13:93:70:22:e6:d4:32:09:33:b9: a9:42:61:9c:25:d7:64:dc:83:d7:6c:90:53:30:b1: b2:12:13:e7:d9:cb:b1:47:bc:8b:2f:48:20:52:1b: 1a:52:f2:3f:ef:c8:9d:56:2c:63:c9:52:a5:e9:ce: 81:83:ce:75:6a:65:eb:80:e3:51:53:60:72:8a:e6: 16:be:de:53:7f:87:d8:0b:ef:24:a2:df:d6:fa:cc: 12:dd:72:a6:a8:89:a2:9f:88:55:43:ba:b5:f3:ef: 41:cd:47:9d:0b:73:a1:eb:c4:87:ab:0c:86:ef:c4: d5:df:ce:c4:21:09:2c:c9:28:ac:14:0c:6f:22:fc: 8d:23:76:d5:e5:8b:ab:3c:8e:25:9a:0e:39:9b:da: 24:3c:60:7e:1b:8d:cd:16:eb:7b:78:00:18:5e:bd: 31:8a:7f:82:0b:e1:7b:6c:e2:84:75:1a:1c:f6:46: ff:9f:20:87:0f:df:02:bc:1b:bd:0f:fc:30:d1:f8: c0:ad:80:71:fb:5e:2a:11:49:89:89:73:40:63:dc: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:16:39:C0:88:42:4A:77:05:F0:66:0E:90:D8:8E:88:BA:C5:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/40 Signature Algorithm: sha256WithRSAEncryption 27:1d:aa:29:f6:8d:bc:26:7f:57:b7:53:bd:32:7a:c0:e2:de: 30:16:e6:a4:0a:58:63:ca:93:34:1c:d3:cf:77:8a:ba:37:f8: c7:16:1f:d1:bf:fc:c4:7a:58:b8:af:ca:07:dd:eb:83:85:34: 2d:53:c0:54:22:28:f5:e3:b8:b7:80:59:9f:6a:39:3c:8b:10: a3:78:21:33:1c:0a:6a:ef:c4:b4:f6:54:32:04:a8:61:67:5f: 19:03:c3:57:20:d2:8d:ae:58:1f:0e:62:30:70:da:5f:e9:54: 83:22:02:08:c2:b2:1b:22:cf:32:d5:21:c7:99:d0:4a:0d:52: 33:b8:35:38:9a:0b:80:48:f0:1c:76:f9:5f:df:e6:50:0b:f5: 02:93:4f:2f:cb:27:54:5a:d6:9c:1b:3c:8a:9d:9c:72:ba:8b: 15:32:ce:0a:54:88:63:62:41:e9:35:b4:0b:6b:b3:91:63:cb: 3d:3d:6a:4e:79:b9:ab:e8:b2:d8:5c:a7:17:69:1e:17:18:bd: 2f:de:06:dd:11:d8:98:57:c4:e1:25:82:bb:ca:bc:0d:3e:69: 82:2d:51:e9:ee:81:aa:fb:87:5a:b1:dc:ac:81:32:ac:7c:c4: 9d:68:42:5a:cc:7b:3e:70:62:64:99:06:89:f0:1b:3b:e1:2d: 8c:f7:51:c2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEQ+whLEjERCewgxb5aNXoyOvdvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyNjAwMDE1OFoX DTI1MDgzMDIzNTk1OVowejFJMEcGA1UEBRNAZGMyOTQwOTE5Njc0MDBhNTM4MDNm OTNkZjA2N2VhNDljNzZmZjliMjYxNThjMjQ4NzYwNTVmNmZhNTAxOTI5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kEYxfhY2ghduxfMzvU/6johQOLw ZPg76iCqjDU1mODJYXT5jepebG/B1YcK8eH9MBOTcCLm1DIJM7mpQmGcJddk3IPX bJBTMLGyEhPn2cuxR7yLL0ggUhsaUvI/78idVixjyVKl6c6Bg851amXrgONRU2By iuYWvt5Tf4fYC+8kot/W+swS3XKmqImin4hVQ7q18+9BzUedC3Oh68SHqwyG78TV 387EIQksySisFAxvIvyNI3bV5YurPI4lmg45m9okPGB+G43NFut7eAAYXr0xin+C C+F7bOKEdRoc9kb/nyCHD98CvBu9D/ww0fjArYBx+14qEUmJiXNAY9wi0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFolFjnAiEJKdwXwZg6Q2I6IusUUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5N2ZkMTIxLTUxY2MtNDcxMS1hNzU1LTBlZWZiNDM1ZWM4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ggwDQYJKoZIhvcNAQELBQADggEBACcdqin2jbwmf1e3U70y esDi3jAW5qQKWGPKkzQc0893iro3+McWH9G//MR6WLivygfd64OFNC1TwFQiKPXj uLeAWZ9qOTyLEKN4ITMcCmrvxLT2VDIEqGFnXxkDw1cg0o2uWB8OYjBw2l/pVIMi AgjCshsizzLVIceZ0EoNUjO4NTiaC4BI8Bx2+V/f5lAL9QKTTy/LJ1Ra1pwbPIqd nHK6ixUyzgpUiGNiQek1tAtrs5Fjyz09ak55uavosthcpxdpHhcYvS/eBt0R2JhX xOElgrvKvA0+aYItUenugar7h1qx3KyBMqx8xJ1oQlrMez5wYmSZBonwGzvhLYz3 UcI= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:35 2025 by rpki-client