$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12737cd4-afad-411e-b802-52f561374c59.roa File: 12737cd4-afad-411e-b802-52f561374c59.roa (raw, json) Hash identifier: YaCPE8sbd6RqLKZg05BEHcb4fYSzu7Bx7Pzru5FmRCg= Subject key identifier: 24:DB:53:6B:F3:67:EC:C7:B5:13:3A:F0:E1:48:DC:37:8F:E7:90:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73439043685F046F50E00484127BD0A08A3CD541 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12737cd4-afad-411e-b802-52f561374c59.roa Signing time: Wed 23 Jul 2025 00:00:48 +0000 ROA not before: Wed 23 Jul 2025 00:00:48 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:43:90:43:68:5f:04:6f:50:e0:04:84:12:7b:d0:a0:8a:3c:d5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:00:48 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=b8479ee015d8ae85533283dd1a0fbf708d1b5cd9ca07f5ac80c5f2884fd00938, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:4c:e0:3a:19:4f:4b:5d:1c:dd:56:9c:68: 48:7d:e9:49:f2:32:68:df:8a:78:05:b7:13:4a:8f: 01:95:e3:5f:28:50:c2:05:02:e3:13:6b:6a:d0:97: a8:3e:41:c1:e4:f2:28:b3:c7:6d:3c:31:1e:61:bb: 0e:92:28:75:18:13:8b:c2:57:02:1d:89:32:5e:a2: 1a:a2:28:01:07:f5:ec:a2:87:6f:aa:84:a6:0d:6b: 93:28:86:f3:88:d6:65:9d:75:7f:68:df:0f:7f:ba: 2c:29:bb:3b:48:8d:fe:97:b6:a0:ee:d3:32:83:3e: da:e0:cf:19:3a:23:31:9a:13:26:3a:6a:b2:64:4c: e0:9c:a3:98:c5:76:39:81:4e:e1:cd:9e:59:3f:a7: 44:4e:e7:d8:73:6e:c3:86:9e:23:c6:11:da:68:61: 3f:0b:0e:db:52:1f:32:99:3a:6e:4c:47:5b:5f:51: c4:92:f0:12:0a:03:0f:f5:e2:90:17:8d:5a:3a:48: f6:40:4e:5a:9f:57:0a:d5:de:fe:4f:97:3b:dd:ab: a7:f4:18:bb:2f:e8:67:92:d4:1a:17:56:19:44:09: 5c:b9:5f:7c:72:62:b4:b3:7c:5c:5e:e6:eb:dd:fd: 3d:0a:8f:89:f7:56:01:35:2b:b6:76:90:52:55:74: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DB:53:6B:F3:67:EC:C7:B5:13:3A:F0:E1:48:DC:37:8F:E7:90:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12737cd4-afad-411e-b802-52f561374c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:9000::/40 Signature Algorithm: sha256WithRSAEncryption 08:31:4e:ab:8e:0d:c3:70:51:aa:e1:72:83:e9:a7:a5:4a:fd: ff:e8:30:9f:bd:68:3d:60:c7:f9:7f:f8:f6:7c:97:cb:18:82: 75:8c:a3:e4:03:bf:9d:09:c4:08:2f:19:28:fc:1b:ce:d1:c2: c9:36:4d:20:aa:25:b5:57:aa:a4:ef:28:24:73:3e:6d:28:25: 55:79:fb:62:96:f5:7c:da:4b:c1:20:cc:49:14:26:1e:e0:35: f0:0f:f7:ae:45:df:d4:78:54:3b:e1:7f:5c:d9:a2:4a:7d:49: b8:d8:a6:95:e4:6a:59:b5:23:72:fd:1a:ab:e9:f8:23:b0:23: fb:84:16:38:6f:11:e2:32:e1:e9:3d:cf:b2:7d:35:47:c8:59: 2d:ee:03:41:f4:16:88:75:db:7c:2f:6e:78:ed:2c:4d:c9:07: 6f:1c:91:25:06:6c:f1:eb:44:87:e5:f9:fc:40:d8:bd:6e:98: c9:0e:67:88:0c:57:85:4c:0b:3a:93:67:5c:56:6e:ca:01:9b: 11:0e:09:42:13:50:41:6b:b7:48:0e:4d:bd:c6:85:f2:bf:19: 70:04:4c:5e:d4:63:37:5c:8b:70:78:ba:c7:93:c1:76:6f:d5: 3d:a1:06:63:b7:a5:80:05:e7:cd:9c:cb:e1:ce:6f:fe:71:f0: 68:f4:03:a3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc0OQQ2hfBG9Q4ASEEnvQoIo81UEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDA0OFoX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAYjg0NzllZTAxNWQ4YWU4NTUzMzI4 M2RkMWEwZmJmNzA4ZDFiNWNkOWNhMDdmNWFjODBjNWYyODg0ZmQwMDkzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D1M4DoZT0tdHN1WnGhIfelJ8jJo 34p4BbcTSo8BleNfKFDCBQLjE2tq0JeoPkHB5PIos8dtPDEeYbsOkih1GBOLwlcC HYkyXqIaoigBB/XsoodvqoSmDWuTKIbziNZlnXV/aN8Pf7osKbs7SI3+l7ag7tMy gz7a4M8ZOiMxmhMmOmqyZEzgnKOYxXY5gU7hzZ5ZP6dETufYc27Dhp4jxhHaaGE/ Cw7bUh8ymTpuTEdbX1HEkvASCgMP9eKQF41aOkj2QE5an1cK1d7+T5c73aun9Bi7 L+hnktQaF1YZRAlcuV98cmK0s3xcXubr3f09Co+J91YBNSu2dpBSVXSAKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCTbU2vzZ+zHtRM68OFI3DeP55BJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyNzM3Y2Q0LWFmYWQtNDExZS1iODAyLTUyZjU2MTM3NGM1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9JAwDQYJKoZIhvcNAQELBQADggEBAAgxTquODcNwUarhcoPp p6VK/f/oMJ+9aD1gx/l/+PZ8l8sYgnWMo+QDv50JxAgvGSj8G87Rwsk2TSCqJbVX qqTvKCRzPm0oJVV5+2KW9XzaS8EgzEkUJh7gNfAP965F39R4VDvhf1zZokp9SbjY ppXkalm1I3L9Gqvp+COwI/uEFjhvEeIy4ek9z7J9NUfIWS3uA0H0Foh123wvbnjt LE3JB28ckSUGbPHrRIfl+fxA2L1umMkOZ4gMV4VMCzqTZ1xWbsoBmxEOCUITUEFr t0gOTb3GhfK/GXAETF7UYzdci3B4useTwXZv1T2hBmO3pYAF582cy+HOb/5x8Gj0 A6M= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:32 2025 by rpki-client