$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa File: 07945819-d82c-427a-b71b-535d57170872.roa (raw, json) Hash identifier: Ndugf1koyfHFU2tDTs/Vm+3EBHyKpMCog28+gNkC1Eo= Subject key identifier: 74:48:1D:C1:B2:5B:07:48:E4:5A:E1:F0:99:8F:E0:A6:0B:D0:BE:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 49891CFDAB8E9D8855EAF6C77E1D630DAF2FDEB6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa Signing time: Wed 30 Jul 2025 17:38:37 +0000 ROA not before: Wed 30 Jul 2025 17:38:37 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:89:1c:fd:ab:8e:9d:88:55:ea:f6:c7:7e:1d:63:0d:af:2f:de:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:37 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=41de35bbe922773d6bb50494fce8c77482756967fc47ce85e9db943bd06ee5d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:13:9e:6a:f5:75:6d:33:56:47:fa:64:96: a0:58:0f:19:04:ff:05:94:c8:b5:17:03:b5:2d:b0: 64:25:50:ba:1d:0f:fd:67:97:a2:d4:bd:00:4b:43: f6:e7:00:4f:86:a5:b7:ac:36:b5:20:91:09:2b:ad: 5e:c1:e2:e4:dc:32:c6:a4:21:86:b4:0b:84:33:ce: 69:8b:05:40:e4:35:94:e1:d3:2f:6c:62:28:7a:a5: a1:23:4f:df:b7:c8:fe:05:1f:af:bc:25:b6:ed:dd: 7e:99:bb:91:a6:9f:ef:6e:f9:a4:0d:97:f6:12:21: 6a:4b:24:87:44:56:f9:ce:0e:af:67:97:32:cf:1f: 9c:da:3c:99:39:cb:ae:92:c5:30:87:70:a6:9e:57: 1e:36:0c:03:5a:5f:3d:37:54:3c:8a:92:3c:c9:5d: 09:7d:40:88:72:0f:cf:f2:be:02:db:98:75:b2:55: 9d:a4:d0:06:20:1b:b4:b7:2e:20:7c:9a:36:3b:dd: 58:4c:a9:f1:47:88:ac:36:2c:bc:1a:a5:2e:b3:81: 5f:d2:b7:9b:a2:59:df:3f:86:9b:fb:ab:9e:2b:78: bc:45:b6:a8:2f:49:fa:fe:55:2a:43:fd:74:08:b0: 1c:f2:0b:cf:47:b5:d6:b1:1c:c4:f9:2e:a2:29:a7: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:48:1D:C1:B2:5B:07:48:E4:5A:E1:F0:99:8F:E0:A6:0B:D0:BE:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption 19:e0:0d:1f:34:2b:b1:a3:f9:dd:db:cd:de:55:9b:db:40:f9: 0b:24:05:27:c1:66:7b:3b:88:a3:b8:77:db:70:f9:96:22:05: f2:f8:a2:8a:2e:19:5c:9d:5a:ad:a6:4d:45:73:0f:f4:ee:21: c1:a6:f9:c0:21:55:e5:88:b0:a0:32:d6:81:93:74:66:5f:b8: a1:57:f2:c2:d9:4f:4f:45:ea:e6:33:89:c1:b8:7e:51:40:14: 88:53:ae:62:37:ee:ae:10:5e:7e:fd:02:6a:9b:99:a2:36:3b: 4d:fb:4a:73:5a:bc:54:0b:ff:3e:1c:95:af:96:e6:c8:f8:36: 89:ce:0a:4a:2a:42:25:cd:12:e2:db:9f:64:44:31:93:4f:fe: a9:58:3e:fa:1b:73:91:09:6e:c0:02:db:4b:9a:6e:a2:24:b2: 66:3a:8b:96:ea:57:0a:c0:15:66:7b:cf:e0:99:38:ba:6b:f0: fb:31:a0:58:64:07:97:60:1c:28:a2:54:fe:ef:b3:df:c0:a4: b9:69:a4:fc:4d:25:f3:34:87:14:37:9e:47:6b:6e:33:18:8a: d2:d9:2d:78:0b:cb:4c:18:91:04:f5:54:2c:21:3a:d0:e8:ae: f3:1f:52:df:7e:3b:42:cd:d7:c0:5a:8c:b1:77:5c:83:07:39: 5c:fc:75:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSYkc/auOnYhV6vbHfh1jDa8v3rYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3MzgzN1oX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANDFkZTM1YmJlOTIyNzczZDZiYjUw NDk0ZmNlOGM3NzQ4Mjc1Njk2N2ZjNDdjZTg1ZTlkYjk0M2JkMDZlZTVkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcYTnmr1dW0zVkf6ZJagWA8ZBP8F lMi1FwO1LbBkJVC6HQ/9Z5ei1L0AS0P25wBPhqW3rDa1IJEJK61eweLk3DLGpCGG tAuEM85piwVA5DWU4dMvbGIoeqWhI0/ft8j+BR+vvCW27d1+mbuRpp/vbvmkDZf2 EiFqSySHRFb5zg6vZ5cyzx+c2jyZOcuuksUwh3CmnlceNgwDWl89N1Q8ipI8yV0J fUCIcg/P8r4C25h1slWdpNAGIBu0ty4gfJo2O91YTKnxR4isNiy8GqUus4Ff0reb olnfP4ab+6ueK3i8RbaoL0n6/lUqQ/10CLAc8gvPR7XWsRzE+S6iKads9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHRIHcGyWwdI5Frh8JmP4KYL0L5YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3OTQ1ODE5LWQ4MmMtNDI3YS1iNzFiLTUzNWQ1NzE3MDg3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBABngDR80K7Gj+d3bzd5V m9tA+QskBSfBZns7iKO4d9tw+ZYiBfL4ooouGVydWq2mTUVzD/TuIcGm+cAhVeWI sKAy1oGTdGZfuKFX8sLZT09F6uYzicG4flFAFIhTrmI37q4QXn79AmqbmaI2O037 SnNavFQL/z4cla+W5sj4NonOCkoqQiXNEuLbn2REMZNP/qlYPvobc5EJbsAC20ua bqIksmY6i5bqVwrAFWZ7z+CZOLpr8PsxoFhkB5dgHCiiVP7vs9/ApLlppPxNJfM0 hxQ3nkdrbjMYitLZLXgLy0wYkQT1VCwhOtDorvMfUt9+O0LN18BajLF3XIMHOVz8 dZU= -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:56 2025 by rpki-client