$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa File: 00af7dea-19a3-4a5b-bdf6-57556cec9653.roa (raw, json) Hash identifier: rmei4g97BlsiuIqP91rTBXgJmBR95utJJ0YjIUaC0ek= Subject key identifier: 37:82:A9:E3:08:AA:44:BE:06:8D:68:1C:74:BF:50:37:EE:2E:ED:AA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62A9713A873AB823E7E848558C511B24F3E97BA1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa Signing time: Wed 23 Jul 2025 00:00:11 +0000 ROA not before: Wed 23 Jul 2025 00:00:11 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dabb::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a9:71:3a:87:3a:b8:23:e7:e8:48:55:8c:51:1b:24:f3:e9:7b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:00:11 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=25f012d9c3976fbef861dd8eb1f35dd7ccc916b46fd9854d7632213543fe9e77, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:de:15:9d:92:c1:6c:e6:4f:f7:4f:bc:7d: db:1f:27:fc:54:61:3e:f9:57:fd:78:29:90:31:16: 31:c7:b1:46:32:14:a9:6c:0a:92:20:0d:a7:d2:ac: 2f:d2:da:35:5a:23:4f:f6:83:4c:62:12:94:c4:06: fc:42:67:78:4d:75:80:4e:b3:c6:d1:60:8b:2f:99: d2:ee:9f:2d:9c:d3:e1:c0:b1:d8:a2:4c:b6:b0:9a: 7e:9b:d7:b5:e3:7b:98:51:d7:23:e9:45:ed:dd:45: 2c:28:d2:c5:a6:cd:18:8f:ef:e6:16:9d:eb:f8:b2: 32:fa:94:a4:24:a5:b1:2d:2e:96:1c:19:ca:82:9a: db:94:02:56:dc:6a:5f:e1:73:a2:2a:ff:50:39:ee: 78:df:74:47:b6:6d:3e:67:41:02:f2:6e:c2:a9:17: 86:10:19:32:a5:1d:f2:29:7a:82:2f:7e:ec:4e:5a: 71:0e:f7:4c:f3:90:4d:22:79:f0:aa:fd:bf:27:32: 43:b2:a7:35:b9:7f:24:6f:8c:fb:9e:bd:35:a0:b0: ee:0b:13:f4:7b:3a:69:e4:3a:e2:47:33:6e:a8:8a: d8:99:a9:ba:19:eb:86:3b:dc:56:44:ad:99:17:64: 67:5d:86:29:f0:f2:f0:60:13:39:1c:ed:8a:42:e2: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:A9:E3:08:AA:44:BE:06:8D:68:1C:74:BF:50:37:EE:2E:ED:AA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dabb::/32 Signature Algorithm: sha256WithRSAEncryption 01:73:af:5c:19:37:96:eb:51:2d:da:8e:69:b4:f8:89:bb:ef: 9d:a2:c7:32:02:82:cf:e3:75:d2:b3:7f:9d:9d:40:ad:e3:0f: 79:34:19:b1:dd:45:eb:99:39:26:2f:05:ed:4e:f0:cc:1e:4f: ba:7e:67:54:07:89:85:2f:4a:7d:01:08:22:70:ad:09:6a:af: 9c:3c:51:16:e4:93:0e:b8:9b:3a:c8:fb:59:5f:e9:e0:bc:7b: 99:ed:cd:76:d7:45:22:ad:c3:3b:7f:14:bf:9d:b8:2c:8f:1f: f5:17:eb:33:70:a2:a9:2d:62:08:f1:45:97:ac:38:87:d5:d5: 88:cd:57:c7:5e:94:23:15:62:fd:a9:ff:54:09:9e:64:e4:51: ad:90:a0:03:d7:9d:56:b4:27:85:64:7a:3e:56:6e:0c:3e:5b: e1:a3:1a:b8:d8:78:6e:0e:1a:f6:21:d9:76:15:cc:01:b4:98: ff:c8:fc:d1:8a:1f:21:71:47:4e:ac:8f:e7:dc:bd:f0:93:37: b5:91:e9:3d:c9:15:e5:55:2a:02:06:cc:fa:b5:c0:8c:30:7d: b5:e2:34:07:25:9d:1b:dc:2c:d3:db:f8:53:23:f9:5e:d0:8e: 7c:c6:38:9c:35:24:9b:7c:49:90:a9:77:58:28:1a:8e:bf:b7: b7:cb:23:0e -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUYqlxOoc6uCPn6EhVjFEbJPPpe6EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDAxMVoX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAMjVmMDEyZDljMzk3NmZiZWY4NjFk ZDhlYjFmMzVkZDdjY2M5MTZiNDZmZDk4NTRkNzYzMjIxMzU0M2ZlOWU3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKXeFZ2SwWzmT/dPvH3bHyf8VGE+ +Vf9eCmQMRYxx7FGMhSpbAqSIA2n0qwv0to1WiNP9oNMYhKUxAb8Qmd4TXWATrPG 0WCLL5nS7p8tnNPhwLHYoky2sJp+m9e143uYUdcj6UXt3UUsKNLFps0Yj+/mFp3r +LIy+pSkJKWxLS6WHBnKgprblAJW3Gpf4XOiKv9QOe5433RHtm0+Z0EC8m7CqReG EBkypR3yKXqCL37sTlpxDvdM85BNInnwqv2/JzJDsqc1uX8kb4z7nr01oLDuCxP0 ezpp5DriRzNuqIrYmam6GeuGO9xWRK2ZF2RnXYYp8PLwYBM5HO2KQuJv1wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFDeCqeMIqkS+Bo1oHHS/UDfuLu2qMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwYWY3ZGVhLTE5YTMtNGE1Yi1iZGY2LTU3NTU2Y2VjOTY1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbauzANBgkqhkiG9w0BAQsFAAOCAQEAAXOvXBk3lutRLdqOabT4 ibvvnaLHMgKCz+N10rN/nZ1AreMPeTQZsd1F65k5Ji8F7U7wzB5Pun5nVAeJhS9K fQEIInCtCWqvnDxRFuSTDribOsj7WV/p4Lx7me3NdtdFIq3DO38Uv524LI8f9Rfr M3CiqS1iCPFFl6w4h9XViM1Xx16UIxVi/an/VAmeZORRrZCgA9edVrQnhWR6PlZu DD5b4aMauNh4bg4a9iHZdhXMAbSY/8j80YofIXFHTqyP59y98JM3tZHpPckV5VUq AgbM+rXAjDB9teI0ByWdG9ws09v4UyP5XtCOfMY4nDUkm3xJkKl3WCgajr+3t8sj Dg== -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:07 2025 by rpki-client