$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df579112-558e-476a-abe9-c6dfbc24c2c2.roa File: df579112-558e-476a-abe9-c6dfbc24c2c2.roa (raw, json) Hash identifier: MWab2IPbTL2PQMRvryYqbAdHUxSwwWRQInwRkjLnbYg= Subject key identifier: EF:0E:88:CB:DC:CD:57:EB:42:C3:3D:D8:92:BA:3A:F2:31:53:62:19 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20B7CA1634456738C2FCC21A3C779C1C8EA8633D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df579112-558e-476a-abe9-c6dfbc24c2c2.roa Signing time: Mon 07 Jul 2025 15:10:19 +0000 ROA not before: Mon 07 Jul 2025 15:10:19 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b7:ca:16:34:45:67:38:c2:fc:c2:1a:3c:77:9c:1c:8e:a8:63:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:10:19 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=43a498ec5768a455af6e87d33078c1a9cf7c4fdcc092280b06375cf4e2c85aec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:0d:48:6c:0c:eb:b9:95:d1:2f:ab:3e:08: 2b:1d:88:29:85:83:4a:2b:c9:44:59:d1:4b:24:5e: 40:75:64:d7:9e:96:a9:1d:df:25:51:50:dc:6e:46: 98:53:cc:e7:7d:68:0b:a9:1c:40:3f:13:cf:ad:2f: 22:3f:cd:3c:82:68:5a:a5:ba:c7:67:3d:b5:85:dc: ce:34:09:aa:61:35:2d:0e:84:96:a4:be:3b:75:86: 21:64:ea:e1:9c:93:dc:65:75:d7:32:1f:22:be:f5: 8d:4b:57:ee:bf:05:6b:97:a6:50:0c:14:34:dc:1b: 7b:39:d8:76:4a:a7:27:62:63:ce:73:78:e0:81:6d: 1d:6b:26:16:18:ab:7a:27:01:2b:00:32:62:6f:22: ed:f7:e1:3a:35:98:a2:24:cc:5e:42:32:35:62:65: dc:8d:4f:c0:9c:dc:f2:45:fd:ec:bf:3e:42:4c:8b: 64:e5:ae:9a:5e:5d:c0:aa:b2:f8:c4:30:f8:fb:ac: b9:ad:d4:2d:77:c3:a9:11:d7:29:05:b5:00:5d:2c: 6a:4b:3c:a1:f6:3b:4e:9d:c5:4c:5e:d0:e5:1b:97: 3d:85:36:3e:82:17:88:4a:b5:5a:f3:fc:78:bf:11: 29:7b:cd:96:3a:a0:6b:a7:49:c1:1f:34:4c:03:89: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:88:CB:DC:CD:57:EB:42:C3:3D:D8:92:BA:3A:F2:31:53:62:19 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df579112-558e-476a-abe9-c6dfbc24c2c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:1000::/40 Signature Algorithm: sha256WithRSAEncryption b1:5d:12:41:d2:cc:0a:63:ed:bf:7b:20:b3:63:4c:5c:ba:69: dc:a8:17:ce:73:70:ff:63:b4:c5:17:f2:87:2f:9d:98:46:f4: e1:3c:46:cc:93:79:37:39:62:84:50:a8:1b:b1:f4:88:e6:e2: 74:b9:40:c5:10:7e:02:4a:ff:38:9f:30:69:cd:a2:8c:cb:cd: 90:0d:d3:6f:f6:26:c8:cb:54:e3:47:fd:7b:7d:2f:38:cb:59: 35:69:99:07:18:75:ff:e7:1a:fe:57:73:60:0a:1b:77:67:2e: 54:7f:48:25:6e:65:c5:fe:e7:33:47:7b:5f:66:94:1d:cb:82: 75:51:37:56:13:63:20:c9:90:81:38:1a:75:48:f5:f2:5b:d2: f9:32:bb:6e:bc:aa:c5:c0:42:d3:29:15:4f:ba:22:a2:b4:b3: 39:52:04:1e:4a:12:ba:29:14:93:4b:09:95:08:b8:de:46:de: 4f:7c:2b:e0:8b:73:a6:97:f2:e1:74:7b:65:64:e1:68:ae:dd: 8e:0d:7e:ec:77:9e:d7:45:43:9a:c1:b7:ce:07:0c:1a:fc:f0: e3:c0:bc:2e:cc:bd:c8:13:0e:57:79:91:fd:b9:b8:98:59:57: 87:70:2c:62:5e:1a:98:b5:e6:4a:0c:33:13:9a:b5:fc:32:08: cc:10:3f:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUILfKFjRFZzjC/MIaPHecHI6oYz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1MTAxOVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANDNhNDk4ZWM1NzY4YTQ1NWFmNmU4 N2QzMzA3OGMxYTljZjdjNGZkY2MwOTIyODBiMDYzNzVjZjRlMmM4NWFlYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHANSGwM67mV0S+rPggrHYgphYNK K8lEWdFLJF5AdWTXnpapHd8lUVDcbkaYU8znfWgLqRxAPxPPrS8iP808gmhapbrH Zz21hdzONAmqYTUtDoSWpL47dYYhZOrhnJPcZXXXMh8ivvWNS1fuvwVrl6ZQDBQ0 3Bt7Odh2SqcnYmPOc3jggW0dayYWGKt6JwErADJibyLt9+E6NZiiJMxeQjI1YmXc jU/AnNzyRf3svz5CTItk5a6aXl3AqrL4xDD4+6y5rdQtd8OpEdcpBbUAXSxqSzyh 9jtOncVMXtDlG5c9hTY+gheISrVa8/x4vxEpe82WOqBrp0nBHzRMA4kiKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO8OiMvczVfrQsM92JK6OvIxU2IZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmNTc5MTEyLTU1OGUtNDc2YS1hYmU5LWM2ZGZiYzI0YzJjMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauRAwDQYJKoZIhvcNAQELBQADggEBALFdEkHSzApj7b97ILNj TFy6adyoF85zcP9jtMUX8ocvnZhG9OE8RsyTeTc5YoRQqBux9Ijm4nS5QMUQfgJK /zifMGnNoozLzZAN02/2JsjLVONH/Xt9LzjLWTVpmQcYdf/nGv5Xc2AKG3dnLlR/ SCVuZcX+5zNHe19mlB3LgnVRN1YTYyDJkIE4GnVI9fJb0vkyu268qsXAQtMpFU+6 IqK0szlSBB5KEropFJNLCZUIuN5G3k98K+CLc6aX8uF0e2Vk4Wiu3Y4Nfux3ntdF Q5rBt84HDBr88OPAvC7MvcgTDld5kf25uJhZV4dwLGJeGpi15koMMxOatfwyCMwQ P3U= -----END CERTIFICATE-----Generated at Thu Jul 31 00:59:14 2025 by rpki-client