$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db5682b0-dca6-45be-b164-56698b11cc97.roa File: db5682b0-dca6-45be-b164-56698b11cc97.roa (raw, json) Hash identifier: sPbZsiV1EWchVRzpTLtu/fimVOp9DnA5+T7oX/fnMNM= Subject key identifier: AB:EB:10:B7:23:9B:B3:45:3E:7E:CC:F9:E4:4C:6D:3E:C7:3F:82:3B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 620D469F2CDEF5121D9179A5FAC673BCB6186885 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db5682b0-dca6-45be-b164-56698b11cc97.roa Signing time: Tue 29 Jul 2025 00:30:11 +0000 ROA not before: Tue 29 Jul 2025 00:30:11 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0d:46:9f:2c:de:f5:12:1d:91:79:a5:fa:c6:73:bc:b6:18:68:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:30:11 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=e22f9382f1387fc618fb0d082c7f2cf6fb6adab6b044ec29b0e02389c7430bf8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:10:b6:a3:d4:6f:fb:bf:8f:57:a0:f2:a4: 9a:0b:2c:38:3a:ac:ec:e9:c3:9e:fc:9a:2c:74:8d: c3:90:bd:65:f0:05:2f:05:af:1a:d8:a6:79:87:c4: b6:46:1a:fe:61:07:26:4a:43:b6:65:e8:f1:2a:96: 2a:1b:ae:2f:95:56:e0:6c:03:83:a6:6a:39:7b:15: fd:75:8b:98:40:ba:ee:a8:68:7a:1d:39:52:f0:02: aa:42:b0:f5:64:51:11:98:97:d0:27:81:66:3e:d2: 6b:df:11:0c:00:c3:eb:4d:68:d4:bd:9d:57:e3:47: 0c:c0:08:86:a2:57:2f:02:b0:c2:d2:f2:8e:58:3e: dc:af:e0:9f:49:38:ba:9c:9b:f6:8e:a1:b5:9f:01: 7f:80:e1:c5:c8:3e:03:a9:03:3d:9f:4e:ab:61:71: e1:90:49:e5:f3:4b:62:9f:0d:1a:c2:27:b9:5d:84: 91:07:5a:0a:1e:cd:76:80:31:7a:1c:93:04:42:94: b0:d7:81:96:b6:2e:ee:87:fb:fa:7a:a5:9e:d2:28: 4b:95:55:ea:17:0a:c1:48:b7:57:23:4f:ea:e5:ac: 2d:28:4a:74:e7:37:c1:a5:57:e9:38:34:36:96:02: 74:48:a6:2a:44:95:f1:65:03:af:83:1c:d2:12:97: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:10:B7:23:9B:B3:45:3E:7E:CC:F9:E4:4C:6D:3E:C7:3F:82:3B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db5682b0-dca6-45be-b164-56698b11cc97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:10c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:df:17:29:78:e4:21:8c:e5:e0:3a:84:cd:8b:4c:18:29:67: a3:e5:2e:4c:de:7a:48:f6:fc:46:21:07:59:cf:7a:82:8e:4c: 02:75:52:58:c6:81:98:c5:26:9f:40:91:95:6d:46:fe:0c:13: e5:95:4f:cb:c3:53:55:34:17:ca:c9:39:37:43:2d:86:a6:7b: dc:4b:05:fd:9d:35:d8:58:97:61:e1:3e:d0:d3:ef:10:4d:03: 3b:38:42:89:c8:41:ed:10:2d:e5:86:ba:fa:60:37:67:ed:92: 91:f7:0b:6b:e4:fb:72:72:5d:cf:67:94:8b:0a:81:54:1c:68: 3e:ca:19:b3:c6:c6:92:98:17:8f:d6:3e:16:cc:96:8a:bf:ea: cd:ec:ff:6c:0a:6d:7b:fd:12:a1:c0:f0:23:8e:21:21:b8:05: ce:9b:83:30:2d:b2:96:fe:ba:8e:ff:6b:11:db:8f:27:67:2d: 78:9e:cc:1e:3f:b0:25:7c:cb:75:64:65:ba:75:5e:15:32:15: d0:94:9b:d8:6c:40:68:8e:b7:54:bb:98:29:29:41:5f:87:2d: 9b:0a:bc:a7:09:05:62:57:80:f4:fc:34:e4:1b:f8:17:c2:01: cf:9e:ea:6f:b6:5d:30:80:2c:14:e2:6a:c5:14:55:76:0f:14: 59:c1:cb:97 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYg1Gnyze9RIdkXml+sZzvLYYaIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMzAxMVoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAZTIyZjkzODJmMTM4N2ZjNjE4ZmIw ZDA4MmM3ZjJjZjZmYjZhZGFiNmIwNDRlYzI5YjBlMDIzODljNzQzMGJmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudcQtqPUb/u/j1eg8qSaCyw4Oqzs 6cOe/JosdI3DkL1l8AUvBa8a2KZ5h8S2Rhr+YQcmSkO2ZejxKpYqG64vlVbgbAOD pmo5exX9dYuYQLruqGh6HTlS8AKqQrD1ZFERmJfQJ4FmPtJr3xEMAMPrTWjUvZ1X 40cMwAiGolcvArDC0vKOWD7cr+CfSTi6nJv2jqG1nwF/gOHFyD4DqQM9n06rYXHh kEnl80tinw0awie5XYSRB1oKHs12gDF6HJMEQpSw14GWti7uh/v6eqWe0ihLlVXq FwrBSLdXI0/q5awtKEp05zfBpVfpODQ2lgJ0SKYqRJXxZQOvgxzSEpf2TwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKvrELcjm7NFPn7M+eRMbT7HP4I7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiNTY4MmIwLWRjYTYtNDViZS1iMTY0LTU2Njk4YjExY2M5Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hDAMA0GCSqGSIb3DQEBCwUAA4IBAQCl3xcpeOQhjOXgOoTN i0wYKWej5S5M3npI9vxGIQdZz3qCjkwCdVJYxoGYxSafQJGVbUb+DBPllU/Lw1NV NBfKyTk3Qy2GpnvcSwX9nTXYWJdh4T7Q0+8QTQM7OEKJyEHtEC3lhrr6YDdn7ZKR 9wtr5Ptycl3PZ5SLCoFUHGg+yhmzxsaSmBeP1j4WzJaKv+rN7P9sCm17/RKhwPAj jiEhuAXOm4MwLbKW/rqO/2sR248nZy14nsweP7AlfMt1ZGW6dV4VMhXQlJvYbEBo jrdUu5gpKUFfhy2bCrynCQViV4D0/DTkG/gXwgHPnupvtl0wgCwU4mrFFFV2DxRZ wcuX -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:10 2025 by rpki-client