$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa File: e0ae0175-f350-4493-ae35-4deb479e034e.roa (raw, json) Hash identifier: AW2FfZT02Wke88fXdKAwjJ6HM6XENy33of4Qf9VHV08= Subject key identifier: BC:E4:49:67:E0:3E:A0:D1:F8:18:F2:2C:6E:46:6F:BD:F8:BE:6A:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A78A8EA489F9B02F1CD8B86E6B61CFFE8EF0D11 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa Signing time: Wed 16 Jul 2025 00:00:04 +0000 ROA not before: Wed 16 Jul 2025 00:00:04 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:78:a8:ea:48:9f:9b:02:f1:cd:8b:86:e6:b6:1c:ff:e8:ef:0d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:04 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=81eef9189d1da80a5621cfcf607ede5dfa7852fe05ad62d887c7569da3c010b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:3d:9c:83:46:3c:6d:20:18:68:68:0f:09: 38:35:13:3b:e9:55:e0:08:74:5b:a2:6d:a3:91:7d: 1c:e3:0f:38:ef:7f:1d:7a:0b:a6:58:7f:b5:dd:1d: 3c:3b:df:0a:e0:f5:9c:9b:0d:45:9a:2d:63:12:0c: 68:f1:e8:e4:c1:df:0f:ec:42:c5:43:2d:a8:b7:e0: 29:d3:03:1e:2d:cd:e9:ba:10:47:76:65:0e:00:44: 49:40:e4:3c:18:e6:0f:58:31:52:6c:d0:d4:ff:3e: c8:ba:6c:4a:55:4e:11:16:0b:09:08:bf:a4:7c:1e: 91:df:01:61:f1:68:c1:e1:d6:90:2f:7a:49:0b:7b: f1:5c:3a:2b:d6:55:4f:73:31:be:a0:5b:c8:02:bd: 73:45:bf:cb:26:e8:7b:6c:3b:29:62:0d:49:dc:c0: 2c:40:bb:61:cd:87:37:77:b3:02:7e:6e:eb:9f:0d: 5c:72:53:7f:1a:75:0e:f8:e4:0b:c7:9f:ff:12:bd: 0e:9b:33:07:74:a8:33:9b:1b:59:dd:44:25:9f:c7: 37:e6:76:3f:4d:1f:78:c8:23:a3:86:01:75:5e:d4: 74:2e:0c:a5:2a:5e:72:bb:6a:6a:40:11:c0:1c:7a: ab:5a:7e:da:22:e6:3c:ca:78:02:fa:13:83:1e:88: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E4:49:67:E0:3E:A0:D1:F8:18:F2:2C:6E:46:6F:BD:F8:BE:6A:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24:8000::/36 Signature Algorithm: sha256WithRSAEncryption 53:3b:2b:81:bb:e7:09:e4:2c:1d:20:36:ab:8c:50:25:77:6b: 09:b5:17:d2:21:1d:17:a3:0e:e9:de:85:8a:98:c1:ee:22:de: 33:7b:a5:39:1c:a7:b7:0e:64:f8:fc:09:20:e7:f7:4a:93:39: 5a:c7:63:f9:e1:e8:c9:4c:7d:ce:97:b7:ba:20:80:f0:76:b8: ce:c1:97:c8:bf:05:f8:8f:19:49:6d:86:ce:ed:a9:a0:c5:43: d2:16:bf:28:79:8f:f3:f6:09:6f:39:c1:34:c0:ac:1a:ca:ad: 93:8f:4b:17:59:5b:25:9f:e4:bc:83:03:60:e6:57:29:cb:78: 7d:26:ac:39:05:23:0b:0f:c0:b8:5a:eb:6c:76:91:6f:62:1c: 6b:46:c8:fe:44:0c:95:a5:8d:d5:d2:7d:4c:99:8c:2b:2c:a7: 31:29:c8:22:40:19:58:a5:6c:d1:30:bc:f3:bb:15:85:9e:33: b2:c8:2f:60:73:4b:7c:d3:57:e1:48:a0:ec:24:83:ac:ef:ba: 51:23:f4:3e:46:68:0a:53:8f:db:ea:f9:bf:7d:85:57:31:f7: 0d:e1:bc:73:08:0e:a0:7f:0b:e6:ac:6b:67:18:06:b0:35:f3: 6d:92:e0:c0:ed:6c:d1:3f:e5:8d:bc:07:1e:18:c7:78:23:fd: eb:f4:9e:39 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOnio6kifmwLxzYuG5rYc/+jvDREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxNjAwMDAwNFoX DTI1MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAODFlZWY5MTg5ZDFkYTgwYTU2MjFj ZmNmNjA3ZWRlNWRmYTc4NTJmZTA1YWQ2MmQ4ODdjNzU2OWRhM2MwMTBiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3M9nINGPG0gGGhoDwk4NRM76VXg CHRbom2jkX0c4w84738degumWH+13R08O98K4PWcmw1Fmi1jEgxo8ejkwd8P7ELF Qy2ot+Ap0wMeLc3puhBHdmUOAERJQOQ8GOYPWDFSbNDU/z7IumxKVU4RFgsJCL+k fB6R3wFh8WjB4daQL3pJC3vxXDor1lVPczG+oFvIAr1zRb/LJuh7bDspYg1J3MAs QLthzYc3d7MCfm7rnw1cclN/GnUO+OQLx5//Er0OmzMHdKgzmxtZ3UQln8c35nY/ TR94yCOjhgF1XtR0LgylKl5yu2pqQBHAHHqrWn7aIuY8yngC+hODHohGpQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLzkSWfgPqDR+BjyLG5Gb734vmrBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwYWUwMTc1LWYzNTAtNDQ5My1hZTM1LTRkZWI0NzllMDM0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJIAwDQYJKoZIhvcNAQELBQADggEBAFM7K4G75wnkLB0gNquM UCV3awm1F9IhHRejDunehYqYwe4i3jN7pTkcp7cOZPj8CSDn90qTOVrHY/nh6MlM fc6Xt7oggPB2uM7Bl8i/BfiPGUlths7tqaDFQ9IWvyh5j/P2CW85wTTArBrKrZOP SxdZWyWf5LyDA2DmVynLeH0mrDkFIwsPwLha62x2kW9iHGtGyP5EDJWljdXSfUyZ jCsspzEpyCJAGVilbNEwvPO7FYWeM7LIL2BzS3zTV+FIoOwkg6zvulEj9D5GaApT j9vq+b99hVcx9w3hvHMIDqB/C+asa2cYBrA1822S4MDtbNE/5Y28Bx4Yx3gj/ev0 njk= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:48 2025 by rpki-client