$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa File: db727801-736f-41c5-bf1a-e19ab3b36eff.roa (raw, json) Hash identifier: 1QCxIXmMHTumqR8lLpMCvcKbUvXbotMBmVYfjwMZvOw= Subject key identifier: AD:71:CD:8D:4F:61:56:1A:02:60:F6:4B:9B:AA:D1:A5:C8:46:DD:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 112A0D3C5666C8C8E1811340AE2ECBBE1C09E257 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa Signing time: Tue 29 Jul 2025 00:01:28 +0000 ROA not before: Tue 29 Jul 2025 00:01:28 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2a:0d:3c:56:66:c8:c8:e1:81:13:40:ae:2e:cb:be:1c:09:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:01:28 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=9ccbd436432a1d166fe5e564b755b75c3347e61798401bd8c3b273627b6647cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:e9:8b:e4:58:33:05:90:3f:cc:32:cd:90: 50:9e:6e:47:22:ef:64:9a:14:47:b3:01:f9:88:6d: 02:96:9e:ad:6d:61:a9:f6:d5:dd:8d:a3:74:8f:0c: 61:e2:e6:fd:7e:3e:0b:3a:89:06:3d:d8:3d:9e:d4: 11:fc:11:6c:cf:7f:63:8e:83:b6:a2:92:b7:78:57: f0:a0:92:f6:5a:50:b6:00:4c:d2:f2:79:e3:f9:de: 93:0a:79:5e:b7:84:60:0d:8b:93:56:d0:5a:8f:72: 9e:06:d1:d9:32:8e:98:6b:1d:09:c7:62:d0:41:b9: aa:f7:2e:43:c5:ef:57:12:ff:74:e0:da:3b:58:bb: 31:d4:96:d9:a2:e6:65:be:52:00:7d:f9:6b:2e:3f: 99:e3:c8:b8:62:f8:a4:6c:0a:08:ab:cd:9d:3a:4b: ed:d3:54:89:c9:bb:91:07:9e:f7:72:9e:8c:83:c0: d5:62:fb:7d:d0:a8:44:5b:f2:c8:25:f3:fe:00:36: 83:2c:90:b4:28:71:08:84:2a:70:2b:e6:53:23:41: 44:42:52:0a:a0:34:33:7b:d4:29:e7:da:aa:53:cb: 8a:88:07:9f:6c:4c:5c:1b:86:e8:a5:8d:85:d3:14: 72:bf:af:67:c3:a8:69:f6:e7:80:62:b7:7d:df:13: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:71:CD:8D:4F:61:56:1A:02:60:F6:4B:9B:AA:D1:A5:C8:46:DD:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8880::/48 Signature Algorithm: sha256WithRSAEncryption 5c:b6:36:62:c6:af:c7:49:8d:58:e9:7d:80:7b:93:ba:bc:3c: 73:4f:6e:bc:6a:e8:a5:bc:0d:4e:e9:df:c7:83:63:9f:64:77: c6:8b:99:22:78:11:00:37:67:7b:fe:fc:a7:05:50:25:ba:06: 81:35:30:c7:35:22:27:5f:9a:63:bc:09:06:68:15:cc:75:59: 18:06:06:92:d9:e8:53:92:d0:9c:1a:f7:18:c0:c9:ec:c5:2e: a9:51:c8:2f:a0:fd:47:41:cf:a5:b5:29:57:26:ca:8a:e2:67: 66:e4:ce:a8:c6:e0:73:38:15:b2:1f:28:da:b7:d2:18:07:8a: e1:d3:cd:64:0e:0a:11:c3:c1:5d:90:45:6c:f1:4d:64:50:84: f8:c5:ed:6a:15:15:b0:a6:01:b6:1b:2d:9a:bf:07:2c:19:71: df:f2:3a:a6:c5:0c:94:aa:de:94:04:21:7a:3b:4a:cd:fe:90: 5f:42:aa:f6:04:77:94:93:c8:67:f8:1e:c4:93:d8:0b:e5:ab: 63:51:d6:90:81:11:c1:41:0d:50:dd:cd:ea:18:a8:05:20:3c: ad:14:26:b3:c2:2b:94:07:67:37:e9:8b:c1:ea:9e:75:19:7f: 71:28:ca:fa:e6:cf:7f:f6:56:da:c8:02:67:d0:94:c5:54:e8: 7b:e0:42:93 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUESoNPFZmyMjhgRNAri7LvhwJ4lcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMDEyOFoX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAOWNjYmQ0MzY0MzJhMWQxNjZmZTVl NTY0Yjc1NWI3NWMzMzQ3ZTYxNzk4NDAxYmQ4YzNiMjczNjI3YjY2NDdjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyizpi+RYMwWQP8wyzZBQnm5HIu9k mhRHswH5iG0Clp6tbWGp9tXdjaN0jwxh4ub9fj4LOokGPdg9ntQR/BFsz39jjoO2 opK3eFfwoJL2WlC2AEzS8nnj+d6TCnlet4RgDYuTVtBaj3KeBtHZMo6Yax0Jx2LQ Qbmq9y5Dxe9XEv904No7WLsx1JbZouZlvlIAfflrLj+Z48i4YvikbAoIq82dOkvt 01SJybuRB573cp6Mg8DVYvt90KhEW/LIJfP+ADaDLJC0KHEIhCpwK+ZTI0FEQlIK oDQze9Qp59qqU8uKiAefbExcG4bopY2F0xRyv69nw6hp9ueAYrd93xO4uQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK1xzY1PYVYaAmD2S5uq0aXIRt2WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiNzI3ODAxLTczNmYtNDFjNS1iZjFhLWUxOWFiM2IzNmVmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oiAMA0GCSqGSIb3DQEBCwUAA4IBAQBctjZixq/HSY1Y6X2A e5O6vDxzT268auilvA1O6d/Hg2OfZHfGi5kieBEAN2d7/vynBVAlugaBNTDHNSIn X5pjvAkGaBXMdVkYBgaS2ehTktCcGvcYwMnsxS6pUcgvoP1HQc+ltSlXJsqK4mdm 5M6oxuBzOBWyHyjat9IYB4rh081kDgoRw8FdkEVs8U1kUIT4xe1qFRWwpgG2Gy2a vwcsGXHf8jqmxQyUqt6UBCF6O0rN/pBfQqr2BHeUk8hn+B7Ek9gL5atjUdaQgRHB QQ1Q3c3qGKgFIDytFCazwiuUB2c36YvB6p51GX9xKMr65s9/9lbayAJn0JTFVOh7 4EKT -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:22 2025 by rpki-client