$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa File: e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa (raw, json) Hash identifier: +d1v+Wjjq05CvZff8KzYqS9ImvgfljjqDUr2PA1pYSo= Subject key identifier: 70:FD:16:FB:46:FF:B9:79:F6:6E:A4:B7:A1:D3:D5:2E:2F:32:84:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 59C5FC2B2B742E4B647E5C175259C2661AB099DB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa Signing time: Mon 28 Jul 2025 15:11:06 +0000 ROA not before: Mon 28 Jul 2025 15:11:06 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c5:fc:2b:2b:74:2e:4b:64:7e:5c:17:52:59:c2:66:1a:b0:99:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 15:11:06 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=1927a45138c4a6d486634af10f27b427976bc8eb15c764ba7dd978ed91f77a1f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:eb:0d:68:7b:27:66:c8:5c:9c:e3:d7:db: 07:e3:a6:f0:5d:87:40:1f:f1:a1:35:bf:bc:9f:e9: 25:37:f2:6c:a1:44:05:bc:b4:b2:05:65:86:f9:b0: 1b:8f:2a:c0:4c:93:ba:d8:8f:40:f6:c0:86:36:d6: 48:d5:51:c5:26:4b:ad:92:66:bb:5f:8b:a7:94:c7: 73:eb:6b:48:da:b7:07:7d:22:4c:04:82:0f:b5:e7: e1:35:9b:37:b5:66:be:34:5b:1f:12:20:ee:58:7a: 4e:56:05:db:a7:ab:4b:0a:cc:f5:cd:04:be:25:a9: ed:14:88:6c:ee:86:f4:df:e6:23:90:91:45:31:21: db:15:7b:fc:b9:88:95:ff:67:4e:44:7c:53:c3:68: 59:83:81:d2:c6:7f:5a:f9:de:55:c5:79:73:04:e6: d1:db:0b:9a:eb:0a:61:28:c3:78:5f:3d:57:10:a2: e5:da:de:67:b9:e6:c7:6a:24:e3:98:e9:79:8c:2d: 36:8d:ec:33:ef:57:e8:6a:df:dd:6a:39:1e:f9:bd: 82:30:6d:c9:fd:d7:05:02:00:db:35:5e:dc:cd:be: 82:2e:7b:03:41:f7:f0:71:aa:81:13:23:a4:ed:39: 57:6b:6d:5b:00:24:e7:c4:70:a7:bb:08:88:bc:ce: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:16:FB:46:FF:B9:79:F6:6E:A4:B7:A1:D3:D5:2E:2F:32:84:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:91:56:b3:74:19:b6:9d:2e:f7:d5:43:9f:69:61:2d:1d:0d: b7:4e:e4:0d:9e:da:84:c3:47:7f:0a:e9:f4:ae:69:5a:e0:4d: 25:40:3d:f4:d8:2b:67:57:75:c8:59:cf:e2:e8:1d:fb:04:04: 2b:65:9f:7e:94:cb:61:83:05:d7:88:95:99:78:c1:fd:18:db: a9:79:72:f0:39:47:41:b1:fe:b3:33:78:5d:9d:f0:66:16:43: b0:e4:72:8f:58:94:81:b9:0d:1f:b2:6b:d1:33:ec:3f:dc:60: d2:49:16:ff:a1:3c:c8:7e:bf:2d:f5:f3:e4:13:da:b3:fa:9f: 68:8b:d3:94:0a:26:31:90:97:8f:67:20:0c:f5:18:d9:91:7c: 45:a6:01:a4:3d:91:a8:d8:78:d3:d1:ba:3c:ce:9d:2e:a4:20: f6:e2:1a:c7:9b:64:17:06:6e:2e:ae:e1:55:b7:38:dd:c6:88: c8:aa:eb:22:7b:66:05:11:91:6d:c0:19:bb:69:ce:37:80:d1: 1e:15:da:a8:fa:d8:60:e5:d6:70:97:31:21:c1:49:08:42:25: 2f:95:03:6d:50:9f:76:32:17:f1:d8:b3:19:15:04:fc:81:d9: c9:07:50:ce:6e:a0:0c:b8:07:e8:b8:98:1d:4f:0f:18:b2:df: 56:de:55:6f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWcX8Kyt0LktkflwXUlnCZhqwmdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyODE1MTEwNloX DTI1MDkwMTIzNTk1OVowejFJMEcGA1UEBRNAMTkyN2E0NTEzOGM0YTZkNDg2NjM0 YWYxMGYyN2I0Mjc5NzZiYzhlYjE1Yzc2NGJhN2RkOTc4ZWQ5MWY3N2ExZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7/rDWh7J2bIXJzj19sH46bwXYdA H/GhNb+8n+klN/JsoUQFvLSyBWWG+bAbjyrATJO62I9A9sCGNtZI1VHFJkutkma7 X4unlMdz62tI2rcHfSJMBIIPtefhNZs3tWa+NFsfEiDuWHpOVgXbp6tLCsz1zQS+ JantFIhs7ob03+YjkJFFMSHbFXv8uYiV/2dORHxTw2hZg4HSxn9a+d5VxXlzBObR 2wua6wphKMN4Xz1XEKLl2t5nuebHaiTjmOl5jC02jewz71foat/dajke+b2CMG3J /dcFAgDbNV7czb6CLnsDQffwcaqBEyOk7TlXa21bACTnxHCnuwiIvM7ufwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHD9FvtG/7l59m6kt6HT1S4vMoTvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZGVkNWM0LWYyZDYtNGRjNC1iMDFjLTU5MDkyNzA3MmUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYDAMA0GCSqGSIb3DQEBCwUAA4IBAQBLkVazdBm2nS731UOf aWEtHQ23TuQNntqEw0d/Cun0rmla4E0lQD302CtnV3XIWc/i6B37BAQrZZ9+lMth gwXXiJWZeMH9GNupeXLwOUdBsf6zM3hdnfBmFkOw5HKPWJSBuQ0fsmvRM+w/3GDS SRb/oTzIfr8t9fPkE9qz+p9oi9OUCiYxkJePZyAM9RjZkXxFpgGkPZGo2HjT0bo8 zp0upCD24hrHm2QXBm4uruFVtzjdxojIqusie2YFEZFtwBm7ac43gNEeFdqo+thg 5dZwlzEhwUkIQiUvlQNtUJ92Mhfx2LMZFQT8gdnJB1DObqAMuAfouJgdTw8Yst9W 3lVv -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:49 2025 by rpki-client