$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa File: 1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa (raw, json) Hash identifier: OCRxVB3bWX+TlQ7mjq8oNLrh3IfcM1Q2WG4nUP5K/JU= Subject key identifier: 22:D1:49:3D:8B:77:5F:7D:60:B4:82:82:EE:4D:0E:F5:48:83:BA:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62E5942EC9E7128F1046B849B50AF0D494E366AE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa Signing time: Tue 22 Jul 2025 00:00:28 +0000 ROA not before: Tue 22 Jul 2025 00:00:28 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e5:94:2e:c9:e7:12:8f:10:46:b8:49:b5:0a:f0:d4:94:e3:66:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 22 00:00:28 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=234210c2920ad810d72e62cccc5cb294f88166acc1fb4a045162de86522007c4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:38:d5:20:94:9e:d9:17:59:60:94:ca:63: 7b:59:cc:37:15:e7:40:e8:a3:94:ee:a7:9d:e3:05: 6c:48:1a:ef:0b:02:67:06:81:6e:dc:d4:e9:2e:68: a3:60:bb:40:10:8d:bb:23:98:ac:fb:db:23:f3:9a: af:d1:3f:38:d5:5f:cb:4a:15:0a:c6:f4:04:74:f2: 45:7f:ba:76:b8:77:56:57:16:c8:cb:5c:18:02:bb: ed:9b:e3:80:84:fd:70:54:57:fd:20:aa:e3:31:96: ec:ca:7f:bd:20:38:af:e0:a2:5f:a6:c5:ad:4a:cb: 38:e3:2a:4e:33:19:b8:c9:71:e9:a8:81:46:7f:d8: d4:25:2f:be:5c:81:77:5e:37:00:97:b9:60:b5:09: 3f:6e:a4:f2:0f:eb:e6:2f:33:6c:d0:5c:d3:15:86: c4:55:34:38:8d:11:4c:e1:d8:11:ca:95:00:8c:03: 4c:62:08:27:e9:53:e4:31:2f:cc:85:6d:dc:b3:48: 0b:99:6e:5c:51:7b:c9:36:f2:08:8e:22:b1:ef:08: 53:c2:09:ec:0d:c3:bf:a0:d8:11:43:0b:2e:cf:c7: 21:5a:ab:21:c9:ac:3b:34:a6:f2:c1:ba:77:b4:4c: cd:a1:a7:1e:17:82:ef:0b:0f:80:fd:f6:a8:1e:a1: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D1:49:3D:8B:77:5F:7D:60:B4:82:82:EE:4D:0E:F5:48:83:BA:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:7000::/40 Signature Algorithm: sha256WithRSAEncryption b8:a5:5a:30:83:32:19:75:fc:28:44:10:2b:6f:86:d6:ec:cd: b4:69:b7:3a:56:87:80:02:bf:c6:20:2a:77:02:a7:57:e0:c2: b5:92:09:25:e5:af:d9:8e:db:ba:7a:d5:89:c8:a9:ac:59:ea: 80:73:a4:da:23:5c:5a:81:2c:d5:ab:fa:95:9c:d8:ae:0c:c7: 0c:a9:97:0c:80:c8:de:29:13:65:2b:ff:7d:a6:74:5c:cf:df: 5f:78:86:c8:e5:2a:20:a0:31:8c:04:f7:2c:7e:b2:da:b0:f5: 34:d3:f9:4d:9d:23:c4:3a:53:43:ed:2b:a3:34:6f:5f:d6:ea: e6:46:20:fa:f4:59:f6:78:44:58:34:aa:b3:cc:07:ca:66:34: 65:e2:3e:50:cb:b8:8e:30:a4:f5:50:84:b1:02:37:7d:12:9c: f3:d6:79:e4:81:7d:d9:73:e8:4b:dc:19:43:a3:bc:3a:9b:4a: 64:49:ab:91:32:d2:0d:95:f2:6a:d9:ae:75:3a:f3:9b:2b:81: ec:d1:1d:e5:a5:98:1b:72:e7:c8:7d:c4:58:6c:ab:86:25:cc: b0:43:91:9e:26:e1:bc:06:16:de:89:4b:94:67:4e:60:07:a8: 3a:9c:b8:2d:54:f2:27:96:7f:7b:41:6a:b5:1a:ea:05:ec:9f: 77:5d:e6:cd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYuWULsnnEo8QRrhJtQrw1JTjZq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMjAwMDAyOFoX DTI1MDgyNjIzNTk1OVowejFJMEcGA1UEBRNAMjM0MjEwYzI5MjBhZDgxMGQ3MmU2 MmNjY2M1Y2IyOTRmODgxNjZhY2MxZmI0YTA0NTE2MmRlODY1MjIwMDdjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUE41SCUntkXWWCUymN7Wcw3FedA 6KOU7qed4wVsSBrvCwJnBoFu3NTpLmijYLtAEI27I5is+9sj85qv0T841V/LShUK xvQEdPJFf7p2uHdWVxbIy1wYArvtm+OAhP1wVFf9IKrjMZbsyn+9IDiv4KJfpsWt Sss44ypOMxm4yXHpqIFGf9jUJS++XIF3XjcAl7lgtQk/bqTyD+vmLzNs0FzTFYbE VTQ4jRFM4dgRypUAjANMYggn6VPkMS/MhW3cs0gLmW5cUXvJNvIIjiKx7whTwgns DcO/oNgRQwsuz8chWqshyaw7NKbywbp3tEzNoaceF4LvCw+A/faoHqEtAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCLRST2Ld199YLSCgu5NDvVIg7pAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFkMDc1YWQ4LTY5ZDItNGY2Ny1iMWU4LWYyNjliMWJkZGE3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9XAwDQYJKoZIhvcNAQELBQADggEBALilWjCDMhl1/ChEECtv htbszbRptzpWh4ACv8YgKncCp1fgwrWSCSXlr9mO27p61YnIqaxZ6oBzpNojXFqB LNWr+pWc2K4MxwyplwyAyN4pE2Ur/32mdFzP3194hsjlKiCgMYwE9yx+stqw9TTT +U2dI8Q6U0PtK6M0b1/W6uZGIPr0WfZ4RFg0qrPMB8pmNGXiPlDLuI4wpPVQhLEC N30SnPPWeeSBfdlz6EvcGUOjvDqbSmRJq5Ey0g2V8mrZrnU685srgezRHeWlmBty 58h9xFhsq4YlzLBDkZ4m4bwGFt6JS5RnTmAHqDqcuC1U8ieWf3tBarUa6gXsn3dd 5s0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:21:09 2025 by rpki-client