$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa File: dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa (raw, json) Hash identifier: 22P9hoj6NjyCS4hAomARS6lxNdzutujLDgtFtEBB848= Subject key identifier: 7F:2D:2D:B8:F6:7E:2D:1E:05:47:A0:9A:16:E3:44:D6:9C:F6:A0:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19AB027E1B225107E8E9E0C4F3FEB3BDD264E558 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa Signing time: Tue 29 Jul 2025 00:11:26 +0000 ROA not before: Tue 29 Jul 2025 00:11:26 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:02:7e:1b:22:51:07:e8:e9:e0:c4:f3:fe:b3:bd:d2:64:e5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 29 00:11:26 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=238ab9090b972dce5b8e1a9f96604e69fc2c82b69377f6abba94cdc33e2f58c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:1e:4d:73:97:9f:57:3d:6a:fe:3e:75:57: 13:7b:4a:0f:09:f6:fd:4b:72:06:1a:3e:9e:2a:8b: f2:52:6b:e5:19:87:b7:a1:d5:50:32:09:91:e9:94: 98:d1:5e:8f:be:93:f4:71:a2:52:72:75:39:79:76: b5:bc:98:a8:9b:32:9f:0b:3d:3d:fe:b0:1b:ee:77: fc:d0:c8:ca:59:3d:4d:cb:ec:72:91:44:a7:8b:4e: d3:b9:f1:de:ba:b0:6a:72:12:32:8c:0a:71:56:5b: db:cb:ea:69:20:ff:ac:51:28:6f:d8:fb:6d:56:59: e9:88:6f:db:b4:bf:e1:b5:b5:e8:e4:b1:f6:a2:12: 08:c7:a7:d3:e3:fa:f3:24:b4:92:82:b2:f9:f5:68: 7e:1f:8f:e3:bc:8e:2c:6d:bd:a4:dc:23:3e:2b:fa: 4e:4e:6b:9c:6e:78:a1:bc:f1:1d:8e:ea:39:95:c6: c0:69:dc:1a:1a:95:54:18:66:c3:2c:47:d5:c4:fc: 61:7e:59:bd:c3:1b:41:f9:9e:ba:a7:8d:42:6c:b9: 35:83:59:c4:af:9f:6f:f4:49:fa:9a:d4:ad:38:e1: 8c:09:bc:4b:44:d4:16:5b:13:ee:14:97:6c:9d:c2: a5:14:a3:b6:60:1b:36:b4:39:62:a6:8c:18:aa:0a: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:2D:B8:F6:7E:2D:1E:05:47:A0:9A:16:E3:44:D6:9C:F6:A0:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2080::/48 Signature Algorithm: sha256WithRSAEncryption be:9f:bd:15:1a:f9:83:37:04:9a:dc:ad:b2:bf:cd:da:35:38: df:77:6a:6d:c3:9b:9b:28:db:ae:4e:39:8d:42:8c:47:19:52: aa:8c:0f:73:bf:74:46:43:ed:53:30:91:bc:86:84:6e:14:4e: 49:83:61:80:5d:02:49:5b:1f:cc:2b:cb:90:e5:f3:0e:eb:7b: d7:69:36:a9:61:dc:b6:a0:26:a2:c8:09:8d:93:9c:44:f6:e8: 2a:32:4e:03:30:af:a2:b5:c2:58:97:fa:f5:4e:80:08:f2:93: ac:86:b2:01:11:9e:85:89:c8:80:e3:59:e4:71:ec:a1:62:93: 4a:65:9e:ad:8f:a8:b1:af:33:c9:23:11:13:5b:ee:9e:b5:b0: 86:ac:41:9e:17:e5:72:01:d6:92:ae:01:e7:aa:2a:6b:8c:11: d3:4c:8b:1e:97:56:c0:47:fb:8f:49:78:a3:f1:1e:0a:17:6e: a6:8b:2d:84:6f:63:72:e8:6b:94:87:b6:d8:35:e6:8c:c5:dc: 35:3b:dc:39:f1:15:93:e9:e0:5e:fa:31:48:6f:9d:46:43:41: 4e:3b:09:9b:23:08:98:bf:5b:68:75:a5:37:ad:86:b0:5e:14: d7:ed:e0:32:19:a8:b8:ad:4a:b5:e8:29:25:6c:c0:01:89:bf: 69:7f:74:fd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGasCfhsiUQfo6eDE8/6zvdJk5VgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwMTEyNloX DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMjM4YWI5MDkwYjk3MmRjZTViOGUx YTlmOTY2MDRlNjlmYzJjODJiNjkzNzdmNmFiYmE5NGNkYzMzZTJmNThjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nkeTXOXn1c9av4+dVcTe0oPCfb9 S3IGGj6eKovyUmvlGYe3odVQMgmR6ZSY0V6PvpP0caJScnU5eXa1vJiomzKfCz09 /rAb7nf80MjKWT1Ny+xykUSni07TufHeurBqchIyjApxVlvby+ppIP+sUShv2Ptt VlnpiG/btL/htbXo5LH2ohIIx6fT4/rzJLSSgrL59Wh+H4/jvI4sbb2k3CM+K/pO TmucbnihvPEdjuo5lcbAadwaGpVUGGbDLEfVxPxhflm9wxtB+Z66p41CbLk1g1nE r59v9En6mtStOOGMCbxLRNQWWxPuFJdsncKlFKO2YBs2tDlipowYqgqPNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH8tLbj2fi0eBUegmhbjRNac9qCoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYWYyMTJhLTQzMDAtNGNmNi04Y2RhLWVlMmQ0NzRhYTVhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8iCAMA0GCSqGSIb3DQEBCwUAA4IBAQC+n70VGvmDNwSa3K2y v83aNTjfd2ptw5ubKNuuTjmNQoxHGVKqjA9zv3RGQ+1TMJG8hoRuFE5Jg2GAXQJJ Wx/MK8uQ5fMO63vXaTapYdy2oCaiyAmNk5xE9ugqMk4DMK+itcJYl/r1ToAI8pOs hrIBEZ6FiciA41nkceyhYpNKZZ6tj6ixrzPJIxETW+6etbCGrEGeF+VyAdaSrgHn qiprjBHTTIsel1bAR/uPSXij8R4KF26miy2Eb2Ny6GuUh7bYNeaMxdw1O9w58RWT 6eBe+jFIb51GQ0FOOwmbIwiYv1todaU3rYawXhTX7eAyGai4rUq16CklbMABib9p f3T9 -----END CERTIFICATE-----Generated at Thu Jul 31 01:00:39 2025 by rpki-client