$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa File: f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa (raw, json) Hash identifier: CHBk6Y9Q+vtl0j2PxXIEpvnvC3+tl6FI7PJ8UythulQ= Subject key identifier: 5C:38:6C:16:87:7E:09:DB:6A:58:57:BB:39:BD:03:4F:90:D6:12:C7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 118240308D5D8E767B2F89D793D12E4A6553BA18 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa Signing time: Mon 07 Jul 2025 15:50:24 +0000 ROA not before: Mon 07 Jul 2025 15:50:24 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:82:40:30:8d:5d:8e:76:7b:2f:89:d7:93:d1:2e:4a:65:53:ba:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:50:24 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=60a4d105426968090af40cf15b434cf5ec2da82f839a46da74ae655fe37b10a4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:9e:0a:dc:37:0e:74:b4:c1:8c:ab:0a:a2: 53:3d:86:3d:b8:24:90:39:4d:97:7a:93:03:e9:4b: 23:f1:df:df:01:bc:3e:c3:5d:84:43:55:88:c7:15: 3f:dd:5b:28:f6:38:fd:da:f1:11:28:4c:47:b3:e1: 45:6d:6f:6a:fe:46:4d:2e:bb:b8:4d:49:dd:4c:9d: f6:73:dc:3f:ae:d7:83:c4:30:e0:49:d6:06:b9:f1: 59:ec:27:f4:4a:49:f1:99:bb:d1:6e:4c:f2:b9:cd: 26:3c:2e:92:45:1e:17:9e:ee:ab:c5:f1:09:c3:61: f9:e2:17:f7:28:0b:5f:1f:3f:fc:a9:63:38:65:4d: 1a:ff:86:a6:0f:95:e2:08:95:0f:7e:63:a6:52:3e: 16:d9:d3:df:2b:5b:a0:7e:e8:78:48:2b:af:9a:62: b4:7c:ff:1c:b4:da:32:55:80:e5:cb:05:e4:0c:f3: a1:6f:73:cc:48:15:86:f9:bc:13:82:4e:dd:ff:70: df:86:55:75:26:c0:d9:bf:d0:a2:28:7d:85:21:37: 30:68:a4:2a:86:e9:1d:ba:f8:c4:a7:b5:1c:5d:ba: a4:25:72:52:70:dd:42:55:5e:8d:1a:25:ca:44:50: e5:52:8d:41:0a:ee:a8:f3:e8:e8:93:ae:35:4f:f2: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:6C:16:87:7E:09:DB:6A:58:57:BB:39:BD:03:4F:90:D6:12:C7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc::/32 Signature Algorithm: sha256WithRSAEncryption c4:dc:71:d0:40:75:7f:42:2a:ee:b8:5e:43:45:5e:cd:3a:66: 40:f2:38:91:e1:8d:50:14:f2:37:a4:6a:d3:52:83:7a:7a:b1: e4:f2:c4:be:98:35:13:bb:51:bc:d6:ff:ad:c5:85:d9:c5:5e: c1:46:1b:be:c7:27:04:88:f5:07:28:1a:67:e5:e9:33:83:bf: 6b:eb:4f:23:f8:b4:9f:d3:ac:92:c7:99:65:2b:82:b9:30:b9: cd:02:7e:a7:12:73:2c:d4:c3:7e:76:fb:1e:7c:70:5b:d6:b5: 3c:42:30:ad:8e:df:9c:0c:db:de:e3:7e:1c:1e:87:f1:51:1a: d2:d7:cc:4f:59:9e:e9:17:fe:15:52:df:52:4d:74:7f:45:fb: 58:68:dd:8c:bf:3f:a5:75:fc:67:e7:25:9e:6b:75:0b:44:72: bf:ee:56:78:42:ca:7d:93:4b:a9:55:45:9d:8b:13:98:35:0d: eb:92:85:b0:40:af:71:a2:30:31:6c:9a:b6:7d:6a:b6:01:28: ba:b8:1c:27:80:0f:b4:01:be:12:b6:5d:16:4e:a1:96:e9:4c: 24:40:ce:2e:08:5a:5c:78:de:ef:aa:c7:1e:88:d8:3a:72:f6: 08:b8:31:0c:79:70:ed:e8:0a:85:1b:f2:a5:e0:c0:a7:61:31: 27:4e:c5:53 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUEYJAMI1djnZ7L4nXk9EuSmVTuhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NTAyNFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANjBhNGQxMDU0MjY5NjgwOTBhZjQw Y2YxNWI0MzRjZjVlYzJkYTgyZjgzOWE0NmRhNzRhZTY1NWZlMzdiMTBhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfOeCtw3DnS0wYyrCqJTPYY9uCSQ OU2XepMD6Usj8d/fAbw+w12EQ1WIxxU/3Vso9jj92vERKExHs+FFbW9q/kZNLru4 TUndTJ32c9w/rteDxDDgSdYGufFZ7Cf0SknxmbvRbkzyuc0mPC6SRR4Xnu6rxfEJ w2H54hf3KAtfHz/8qWM4ZU0a/4amD5XiCJUPfmOmUj4W2dPfK1ugfuh4SCuvmmK0 fP8ctNoyVYDlywXkDPOhb3PMSBWG+bwTgk7d/3DfhlV1JsDZv9CiKH2FITcwaKQq hukduvjEp7UcXbqkJXJScN1CVV6NGiXKRFDlUo1BCu6o8+jok641T/KeOwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFw4bBaHfgnbalhXuzm9A0+Q1hLHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2ODEyOWFjLWIyOWQtNDJjYS04YTA3LTMxZTRmNDcwZTFlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba/DANBgkqhkiG9w0BAQsFAAOCAQEAxNxx0EB1f0Iq7rheQ0Ve zTpmQPI4keGNUBTyN6Rq01KDenqx5PLEvpg1E7tRvNb/rcWF2cVewUYbvscnBIj1 BygaZ+XpM4O/a+tPI/i0n9OskseZZSuCuTC5zQJ+pxJzLNTDfnb7HnxwW9a1PEIw rY7fnAzb3uN+HB6H8VEa0tfMT1me6Rf+FVLfUk10f0X7WGjdjL8/pXX8Z+clnmt1 C0Ryv+5WeELKfZNLqVVFnYsTmDUN65KFsECvcaIwMWyatn1qtgEourgcJ4APtAG+ ErZdFk6hlulMJEDOLghaXHje76rHHojYOnL2CLgxDHlw7egKhRvypeDAp2ExJ07F Uw== -----END CERTIFICATE-----Generated at Thu Jul 31 01:04:15 2025 by rpki-client