$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0679156-9bf3-4d29-9c5b-ab734c671388.roa File: f0679156-9bf3-4d29-9c5b-ab734c671388.roa (raw, json) Hash identifier: asUEaXZmXE7nq/jErtRC6M5VsbbNX8fibRV2cs2Fnlw= Subject key identifier: 4E:4F:09:CE:C3:CD:56:DB:FE:50:F5:23:FD:7E:87:B4:A9:08:D3:6C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 676FB67709A8A197E881284676D0A66D449516F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0679156-9bf3-4d29-9c5b-ab734c671388.roa Signing time: Fri 25 Jul 2025 00:00:05 +0000 ROA not before: Fri 25 Jul 2025 00:00:05 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6f:b6:77:09:a8:a1:97:e8:81:28:46:76:d0:a6:6d:44:95:16:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:05 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=0e137dad5164dd63699027d1c8e679edb29dcb9545acc22cf7eba0a7e4b23236, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:0d:33:ea:6c:1a:b6:e1:29:e1:96:ed:62: 54:e4:e6:ff:36:d7:ac:c5:87:9b:62:8d:cf:7a:e5: 86:58:5b:64:6a:34:ab:de:bf:87:31:21:5d:85:03: ab:ca:15:f0:9d:21:d6:5d:ef:0f:c2:a4:c8:85:52: 0c:9d:3f:65:3a:d7:3f:62:e2:47:de:a7:7c:7a:b0: 0e:07:a0:49:94:28:88:c7:4a:e0:2d:0b:37:8b:a4: 34:46:e4:45:c6:21:25:95:cb:86:5f:d0:69:09:2d: 56:0d:ca:ff:c7:0f:8e:50:e3:73:9c:ad:e7:7d:75: 8a:b5:f5:1b:c1:cf:d1:07:0b:fb:17:16:92:27:8f: 66:7c:04:77:0d:6f:3c:30:0a:9f:5d:f9:ca:ff:95: 54:81:d8:45:b2:61:cc:db:9f:58:fd:b4:e0:0c:b5: 0a:33:d8:ac:e6:05:a7:73:a8:c2:62:6b:b3:d4:41: dd:6c:e8:a2:af:49:1f:9f:16:87:0f:8c:65:63:96: 16:52:74:e8:a8:ba:7c:b3:c7:6d:42:14:cc:4e:42: b4:5a:5a:01:0c:31:d1:9b:c1:9a:04:3d:54:86:93: ee:8d:9d:29:02:03:62:cd:2b:ff:40:f3:fc:7e:4e: 38:74:fd:80:a0:dd:9e:e2:f4:6c:42:80:8b:55:45: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:09:CE:C3:CD:56:DB:FE:50:F5:23:FD:7E:87:B4:A9:08:D3:6C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0679156-9bf3-4d29-9c5b-ab734c671388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:8000::/40 Signature Algorithm: sha256WithRSAEncryption 13:c5:cc:48:14:2e:db:dd:02:98:e4:83:58:74:81:50:e9:e4: f2:74:7e:ba:eb:bb:6c:67:d3:fa:cc:9c:c4:d9:da:79:fd:f6: 13:65:7b:0d:9b:41:e8:e2:28:e5:74:6f:14:1a:e9:0a:ec:b2: b9:14:45:f6:b0:39:7a:ee:12:ed:e8:18:2e:be:2f:e7:b7:9d: 9f:e7:be:0f:b7:ff:5f:1b:b3:e8:a9:a6:31:a8:f8:58:84:b3: 4c:c1:a8:f1:f5:5c:c7:7e:59:3b:a8:87:a2:98:ad:72:82:b0: f8:c6:45:08:bc:c0:9c:1e:ef:dd:fd:cf:e9:27:da:13:2c:5c: 5a:eb:00:8e:5b:84:e9:af:5c:81:ae:d4:8c:5d:b3:ff:f9:55: 2c:df:17:e9:26:63:f9:08:f1:f1:a0:53:ff:4d:ad:3f:10:8c: f7:99:7c:ce:dd:85:ce:b3:8b:c8:59:7a:fe:7d:0c:91:e9:36: 28:28:82:ea:09:23:46:0f:c5:87:2d:94:35:6c:e3:8e:15:99: 75:32:bb:96:32:c3:31:0c:b1:fc:44:2c:c2:cc:ae:aa:11:5b: 7a:09:52:1c:4c:2e:9d:19:4e:1b:08:b0:b5:f5:ff:7f:f2:d3: e3:35:4c:2e:39:30:a4:9f:18:90:1c:08:bd:ac:e9:8c:db:ac: 27:7b:f1:2f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ2+2dwmooZfogShGdtCmbUSVFvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyNTAwMDAwNVoX DTI1MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMGUxMzdkYWQ1MTY0ZGQ2MzY5OTAy N2QxYzhlNjc5ZWRiMjlkY2I5NTQ1YWNjMjJjZjdlYmEwYTdlNGIyMzIzNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCoNM+psGrbhKeGW7WJU5Ob/Ntes xYebYo3PeuWGWFtkajSr3r+HMSFdhQOryhXwnSHWXe8PwqTIhVIMnT9lOtc/YuJH 3qd8erAOB6BJlCiIx0rgLQs3i6Q0RuRFxiEllcuGX9BpCS1WDcr/xw+OUONznK3n fXWKtfUbwc/RBwv7FxaSJ49mfAR3DW88MAqfXfnK/5VUgdhFsmHM259Y/bTgDLUK M9is5gWnc6jCYmuz1EHdbOiir0kfnxaHD4xlY5YWUnToqLp8s8dtQhTMTkK0WloB DDHRm8GaBD1UhpPujZ0pAgNizSv/QPP8fk44dP2AoN2e4vRsQoCLVUXvrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE5PCc7DzVbb/lD1I/1+h7SpCNNsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwNjc5MTU2LTliZjMtNGQyOS05YzViLWFiNzM0YzY3MTM4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYIAwDQYJKoZIhvcNAQELBQADggEBABPFzEgULtvdApjkg1h0 gVDp5PJ0frrru2xn0/rMnMTZ2nn99hNlew2bQejiKOV0bxQa6QrssrkURfawOXru Eu3oGC6+L+e3nZ/nvg+3/18bs+ippjGo+FiEs0zBqPH1XMd+WTuoh6KYrXKCsPjG RQi8wJwe7939z+kn2hMsXFrrAI5bhOmvXIGu1Ixds//5VSzfF+kmY/kI8fGgU/9N rT8QjPeZfM7dhc6zi8hZev59DJHpNigoguoJI0YPxYctlDVs444VmXUyu5YywzEM sfxELMLMrqoRW3oJUhxMLp0ZThsIsLX1/3/y0+M1TC45MKSfGJAcCL2s6YzbrCd7 8S8= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:24 2025 by rpki-client