$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa File: cdf78925-b4b0-4234-91cb-647243232823.roa (raw, json) Hash identifier: O15/K0a657GmywALXedEN06mbVeej5fan/7gL1NrCdw= Subject key identifier: 6E:4A:2A:AE:37:08:E9:C9:6A:8E:8F:D3:CE:8F:46:CD:45:D3:27:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26DD37E4DF4A6F927E15DA89AD0EC38B75A8E5F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa Signing time: Tue 29 Jul 2025 00:41:40 +0000 ROA not before: Tue 29 Jul 2025 00:41:40 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:dd:37:e4:df:4a:6f:92:7e:15:da:89:ad:0e:c3:8b:75:a8:e5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:41:40 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=2a95a530ffb0a6e8bf448ffb66a144df50aa3d45c7dc3866fc7fd9fd4aa94dc5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:15:9c:dd:de:31:6b:d8:7a:65:7a:0b:6b: 4e:d4:e0:90:d5:90:c2:e1:aa:50:89:50:8d:2d:5a: 6e:3d:40:ee:79:2c:34:d2:c9:d0:8e:29:93:54:ce: 84:ed:5b:89:a1:58:be:a4:26:79:3c:43:25:f5:f5: f9:d3:bf:e4:67:dc:e4:d2:75:0f:f1:5e:96:f7:98: b0:3f:c0:9d:b0:65:c0:a2:e4:1e:c1:09:d4:00:f1: 2f:c0:13:46:20:0c:d1:97:3e:6a:2e:02:c9:9a:e8: e0:2b:9b:0a:b7:69:99:1a:9c:57:4b:57:2b:e7:96: e7:81:36:3d:8d:7d:45:3d:15:b1:b1:47:4e:f8:de: c8:94:fc:76:06:50:ed:f3:f4:6b:ac:6a:1f:99:01: 41:52:4b:2c:af:1b:5b:38:39:70:0a:74:36:99:22: 5c:ab:de:a8:8c:b3:1c:7b:f0:f9:e6:90:0c:f4:5c: 53:fc:e9:33:18:a1:da:68:20:c3:9c:7c:dc:f3:67: 33:18:b4:b6:0f:82:26:42:5b:93:81:ae:e4:80:f6: 6a:aa:2d:bc:d3:a9:92:c7:b1:d8:93:bc:fb:5b:07: 16:45:f5:65:7d:27:1a:43:57:45:dc:0e:65:37:33: 0a:ca:29:c0:46:d5:64:0d:46:08:ab:18:65:c4:2e: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4A:2A:AE:37:08:E9:C9:6A:8E:8F:D3:CE:8F:46:CD:45:D3:27:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6000::/40 Signature Algorithm: sha256WithRSAEncryption 39:90:89:6f:e4:d0:70:75:dd:38:66:bd:30:51:b3:cb:49:de: 76:32:a8:49:3c:a6:59:01:6b:2b:f9:8e:e7:e8:78:23:d8:29: 22:41:1e:1e:21:f2:73:33:3a:0a:d6:d2:d1:fb:ce:2c:e8:e1: 07:c3:7f:1c:a9:f7:d3:96:d5:e1:10:1a:85:ea:b6:7d:89:40: d5:c4:a0:fa:eb:19:c7:e8:3d:8f:b5:e2:e4:f2:1b:15:4c:d9: 27:e4:ae:5b:e6:2a:88:65:bb:5e:b3:73:4e:24:f3:70:67:86: ec:91:e7:9f:20:12:87:fc:c8:a1:c4:96:e4:87:d4:06:b1:91: db:fc:c5:f4:c2:47:94:18:44:c4:0e:c5:7f:68:93:4b:07:32: 8d:50:9d:7c:5f:e5:ce:c2:5f:d6:db:70:99:5f:45:dc:43:8c: 77:68:ea:8b:53:d0:8f:17:dd:f5:74:61:2b:95:cd:e7:5e:33: c2:b3:d5:10:f4:9e:34:29:7a:ef:de:f1:6f:dd:7f:c4:da:8b: 52:02:1a:5d:18:ad:c0:ca:b9:1d:9b:fa:e7:44:5e:de:4b:77: 4a:e1:51:34:31:7f:b4:eb:fe:ab:b7:ef:9d:c6:e7:8d:89:4b: 85:e6:cc:19:9b:ff:df:97:d9:cb:f0:56:c3:86:e3:ac:8b:70: 42:a2:6c:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJt035N9Kb5J+FdqJrQ7Di3Wo5fUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNDE0MFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMmE5NWE1MzBmZmIwYTZlOGJmNDQ4 ZmZiNjZhMTQ0ZGY1MGFhM2Q0NWM3ZGMzODY2ZmM3ZmQ5ZmQ0YWE5NGRjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP8VnN3eMWvYemV6C2tO1OCQ1ZDC 4apQiVCNLVpuPUDueSw00snQjimTVM6E7VuJoVi+pCZ5PEMl9fX507/kZ9zk0nUP 8V6W95iwP8CdsGXAouQewQnUAPEvwBNGIAzRlz5qLgLJmujgK5sKt2mZGpxXS1cr 55bngTY9jX1FPRWxsUdO+N7IlPx2BlDt8/RrrGofmQFBUkssrxtbODlwCnQ2mSJc q96ojLMce/D55pAM9FxT/OkzGKHaaCDDnHzc82czGLS2D4ImQluTga7kgPZqqi28 06mSx7HYk7z7WwcWRfVlfScaQ1dF3A5lNzMKyinARtVkDUYIqxhlxC4jFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG5KKq43COnJao6P086PRs1F0yfGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NkZjc4OTI1LWI0YjAtNDIzNC05MWNiLTY0NzI0MzIzMjgyMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYWAwDQYJKoZIhvcNAQELBQADggEBADmQiW/k0HB13ThmvTBR s8tJ3nYyqEk8plkBayv5jufoeCPYKSJBHh4h8nMzOgrW0tH7zizo4QfDfxyp99OW 1eEQGoXqtn2JQNXEoPrrGcfoPY+14uTyGxVM2SfkrlvmKohlu16zc04k83BnhuyR 558gEof8yKHEluSH1Aaxkdv8xfTCR5QYRMQOxX9ok0sHMo1QnXxf5c7CX9bbcJlf RdxDjHdo6otT0I8X3fV0YSuVzedeM8Kz1RD0njQpeu/e8W/df8Tai1ICGl0YrcDK uR2b+udEXt5Ld0rhUTQxf7Tr/qu3753G542JS4XmzBmb/9+X2cvwVsOG46yLcEKi bLE= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:48 2025 by rpki-client