$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa File: 24cb31a9-0c7a-482c-879d-89bfe0260659.roa (raw, json) Hash identifier: 6i9R/CFr2W+T7IV4cYdFIBigqN634kM1l6Nthkaw0U4= Subject key identifier: 60:1E:90:67:1A:5A:81:60:76:1A:B2:7A:A3:5A:8A:68:E4:45:F8:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7565BE5E3AC553BFB803B5B78573FE46DE21A027 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa Signing time: Sat 02 Aug 2025 00:00:15 +0000 ROA not before: Sat 02 Aug 2025 00:00:15 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:65:be:5e:3a:c5:53:bf:b8:03:b5:b7:85:73:fe:46:de:21:a0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 2 00:00:15 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=3fe98226492647b53339a78eec4ade199376fc8908417df2c2cfa1e50d09fbfa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:6b:6f:65:36:b4:b2:ed:90:46:85:ac:16: fb:90:bf:26:12:9f:6f:f1:04:79:6d:f2:d0:f8:39: ff:f3:1c:92:75:1f:93:ba:b1:2b:00:cb:f8:00:0c: 97:af:b5:fc:b0:a1:d6:66:94:df:81:3c:e5:24:d4: 7e:9d:27:1c:be:09:6b:8a:b1:8c:6c:9e:69:c5:d6: 57:3b:ee:be:01:17:d0:1c:5e:f8:18:49:8f:cc:9f: 55:5e:68:d8:56:b0:75:2a:46:57:4c:51:10:43:01: 8b:fd:f8:26:37:e3:d9:6b:eb:d4:91:18:68:37:52: 6a:51:4c:84:8f:a7:d3:89:b8:b9:dd:d7:58:e8:10: 49:a2:89:de:99:4c:71:df:de:bf:93:e9:b5:0d:7f: ec:14:af:9a:80:0f:f9:d4:63:3c:e6:79:30:50:58: b2:2e:c3:3b:0e:dd:e2:e7:31:32:8d:56:6d:11:b0: 99:8a:01:79:c5:ea:82:8b:de:46:34:33:6a:4e:fb: 87:f5:c0:cd:f1:58:69:0f:6b:2d:7d:27:15:11:9c: 0a:23:a8:41:c5:d7:a8:78:85:d6:5d:8c:b1:47:13: d4:46:cf:55:82:97:ea:3a:1b:f8:7c:cb:91:44:c7: 28:eb:8c:2c:43:44:bf:23:24:69:df:3d:ce:d7:84: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1E:90:67:1A:5A:81:60:76:1A:B2:7A:A3:5A:8A:68:E4:45:F8:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:800::/40 Signature Algorithm: sha256WithRSAEncryption a4:eb:b6:4f:55:8e:90:25:33:39:28:91:60:b0:bd:ad:76:15: 96:5e:dc:fa:49:4e:45:39:92:94:e5:51:76:48:14:b7:91:0c: 07:10:52:ab:a4:d1:6b:6c:c5:67:a9:19:e6:08:d9:7c:0f:26: 7a:10:bd:98:4e:a3:eb:56:3b:3f:22:71:ee:b4:92:08:c3:c3: 69:43:f4:29:79:1f:b3:c7:be:1f:df:1d:7c:34:a5:64:94:b7: e9:e3:fa:53:91:53:ee:e2:44:00:82:d1:62:35:6b:b5:6b:27: cb:74:28:d3:cc:05:66:2e:a1:14:e3:2e:fc:45:fa:24:c6:9e: 48:d1:3b:d1:04:34:bd:cb:6b:df:3a:7c:6e:f9:be:0d:b5:52: 91:d2:c0:ad:74:43:4f:5e:70:3d:c0:3b:01:0c:6c:d7:f9:a4: 8a:cb:3a:0d:0d:f2:76:81:f8:dc:7a:24:ae:1c:55:29:15:e8: 38:d6:df:75:a1:2c:d7:58:e0:00:40:6a:84:a1:54:08:23:90: eb:70:ef:aa:e4:31:2c:3f:3f:4f:02:19:a9:7c:cd:24:84:e0: 79:b8:b2:bc:a6:44:ff:fc:9b:9e:43:40:92:8e:df:2f:e6:10: 21:9c:5b:2b:32:19:36:c2:b2:4b:b7:8a:c6:65:6b:fb:34:90: f3:3d:69:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdWW+XjrFU7+4A7W3hXP+Rt4hoCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMjAwMDAxNVoX DTI1MDkwNjIzNTk1OVowejFJMEcGA1UEBRNAM2ZlOTgyMjY0OTI2NDdiNTMzMzlh NzhlZWM0YWRlMTk5Mzc2ZmM4OTA4NDE3ZGYyYzJjZmExZTUwZDA5ZmJmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosdrb2U2tLLtkEaFrBb7kL8mEp9v 8QR5bfLQ+Dn/8xySdR+TurErAMv4AAyXr7X8sKHWZpTfgTzlJNR+nSccvglrirGM bJ5pxdZXO+6+ARfQHF74GEmPzJ9VXmjYVrB1KkZXTFEQQwGL/fgmN+PZa+vUkRho N1JqUUyEj6fTibi53ddY6BBJoonemUxx396/k+m1DX/sFK+agA/51GM85nkwUFiy LsM7Dt3i5zEyjVZtEbCZigF5xeqCi95GNDNqTvuH9cDN8VhpD2stfScVEZwKI6hB xdeoeIXWXYyxRxPURs9VgpfqOhv4fMuRRMco64wsQ0S/IyRp3z3O14Sn8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGAekGcaWoFgdhqyeqNaimjkRfiZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0Y2IzMWE5LTBjN2EtNDgyYy04NzlkLTg5YmZlMDI2MDY1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9QgwDQYJKoZIhvcNAQELBQADggEBAKTrtk9VjpAlMzkokWCw va12FZZe3PpJTkU5kpTlUXZIFLeRDAcQUquk0WtsxWepGeYI2XwPJnoQvZhOo+tW Oz8ice60kgjDw2lD9Cl5H7PHvh/fHXw0pWSUt+nj+lORU+7iRACC0WI1a7VrJ8t0 KNPMBWYuoRTjLvxF+iTGnkjRO9EENL3La986fG75vg21UpHSwK10Q09ecD3AOwEM bNf5pIrLOg0N8naB+Nx6JK4cVSkV6DjW33WhLNdY4ABAaoShVAgjkOtw76rkMSw/ P08CGal8zSSE4Hm4srymRP/8m55DQJKO3y/mECGcWysyGTbCsku3isZla/s0kPM9 aQM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:07 2025 by rpki-client