$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa File: 511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa (raw, json) Hash identifier: rVcajRdPPL/AY2VOhmdYl86afTm/uEuwtzxUuROCmcY= Subject key identifier: 83:77:9E:FE:6F:01:E4:64:55:8E:F1:2F:C0:D6:FE:20:76:1F:D4:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B8E2BB81DD573FE7C7EBAFBADF29BA9F86D8D83 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa Signing time: Mon 21 Jul 2025 15:20:05 +0000 ROA not before: Mon 21 Jul 2025 15:20:05 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8e:2b:b8:1d:d5:73:fe:7c:7e:ba:fb:ad:f2:9b:a9:f8:6d:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 15:20:05 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=81694ed16e6cc69611b31c55fc43eb9c8a31a89ec39c3d2f92a6460a503dcba4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:67:9d:92:e1:3a:f2:ad:a0:0e:21:f8:99: c7:d8:99:55:33:50:0c:1b:2f:52:32:08:ba:0f:18: b6:27:28:0a:4b:65:43:a8:e7:3f:4e:7d:fe:0a:0d: 3e:2f:e3:21:32:5f:61:2f:9b:45:d8:1b:3b:50:a5: 52:f8:a9:5b:9b:3e:51:d3:43:b8:d8:f3:c1:a0:db: a4:2e:c6:ab:49:4b:b9:e5:2f:d1:a7:d6:ab:a7:d6: 8c:c0:11:eb:41:c3:93:c3:b6:61:f1:e5:2b:1f:b3: 2b:07:b9:21:46:c4:ad:7c:6b:89:fe:33:61:90:9f: ea:24:89:d9:e0:c9:b9:ee:f4:00:5d:9c:0d:9b:51: 91:15:21:87:0b:a4:19:e6:72:f8:f7:8c:15:d0:5f: b4:b8:21:a6:c3:75:66:e7:4a:5a:93:ee:02:a3:10: ec:a8:b5:00:c1:77:84:6a:ff:9f:05:e3:d8:6f:2b: 75:f4:ce:9a:e9:8b:e9:0e:3d:b1:5f:83:24:dd:08: 1a:6a:a2:c0:90:96:f6:33:6e:c1:33:f7:23:2b:b6: 20:b4:7d:74:f4:60:4d:fe:f9:47:fb:04:78:3d:f5: 28:a6:71:c0:55:d7:ec:62:37:88:1d:99:11:e7:17: 7a:89:1c:9e:7d:10:0b:1a:f6:1a:cc:80:25:9c:96: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:9E:FE:6F:01:E4:64:55:8E:F1:2F:C0:D6:FE:20:76:1F:D4:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:f000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:e2:5e:84:c5:12:fb:2f:12:d7:5d:c7:6d:64:a9:f9:42:c3: 7e:7f:ea:9c:7c:11:df:d8:d9:a9:3a:4f:c7:c8:78:98:14:87: 2c:da:12:ea:51:74:46:69:c3:f4:eb:20:89:01:72:e2:3f:2d: 4d:b9:36:97:b8:f1:2e:c9:ad:07:aa:2a:53:33:20:80:8e:df: 13:16:c4:6c:75:c4:4c:32:19:e7:db:f3:0e:4a:35:9d:2a:35: ad:90:9b:0a:b6:b5:98:c0:8c:a3:2b:cf:7f:12:5b:d6:32:58: 0a:e3:9b:e4:a2:5b:92:15:73:95:b4:1f:46:c2:e4:1e:22:b6: 2e:0e:a1:53:0b:60:19:ab:8b:31:9b:79:05:05:16:8d:e8:ea: 21:f8:90:55:24:f9:f6:15:b5:44:cd:e6:61:dd:83:e2:ef:3c: 26:4d:bf:fa:e7:40:8b:7e:8f:12:96:cd:58:65:1d:4b:15:0e: ab:ad:92:4f:1f:0b:4e:20:1b:71:c2:e6:1e:43:98:48:7f:8e: dd:7c:45:d7:59:7c:fd:d6:b6:fa:46:3a:06:23:d8:ab:fa:d5: 07:bb:d2:10:09:81:db:27:88:b7:ee:84:58:ac:cb:aa:3a:f8: b7:ec:6d:6e:08:2a:76:c6:a8:88:fd:fa:26:7e:c6:30:49:39: 47:96:0a:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa44ruB3Vc/58frr7rfKbqfhtjYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMTE1MjAwNVoX DTI1MDgyNTIzNTk1OVowejFJMEcGA1UEBRNAODE2OTRlZDE2ZTZjYzY5NjExYjMx YzU1ZmM0M2ViOWM4YTMxYTg5ZWMzOWMzZDJmOTJhNjQ2MGE1MDNkY2JhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntnnZLhOvKtoA4h+JnH2JlVM1AM Gy9SMgi6Dxi2JygKS2VDqOc/Tn3+Cg0+L+MhMl9hL5tF2Bs7UKVS+Klbmz5R00O4 2PPBoNukLsarSUu55S/Rp9arp9aMwBHrQcOTw7Zh8eUrH7MrB7khRsStfGuJ/jNh kJ/qJInZ4Mm57vQAXZwNm1GRFSGHC6QZ5nL494wV0F+0uCGmw3Vm50pak+4CoxDs qLUAwXeEav+fBePYbyt19M6a6YvpDj2xX4Mk3QgaaqLAkJb2M27BM/cjK7YgtH10 9GBN/vlH+wR4PfUopnHAVdfsYjeIHZkR5xd6iRyefRALGvYazIAlnJbFvQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIN3nv5vAeRkVY7xL8DW/iB2H9RaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxMTgxNmY5LTIzYzMtNDFmYi05ZDUwLTJhMmY0ZDY2NmM3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauPAwDQYJKoZIhvcNAQELBQADggEBAGziXoTFEvsvEtddx21k qflCw35/6px8Ed/Y2ak6T8fIeJgUhyzaEupRdEZpw/TrIIkBcuI/LU25Npe48S7J rQeqKlMzIICO3xMWxGx1xEwyGefb8w5KNZ0qNa2Qmwq2tZjAjKMrz38SW9YyWArj m+SiW5IVc5W0H0bC5B4iti4OoVMLYBmrizGbeQUFFo3o6iH4kFUk+fYVtUTN5mHd g+LvPCZNv/rnQIt+jxKWzVhlHUsVDqutkk8fC04gG3HC5h5DmEh/jt18RddZfP3W tvpGOgYj2Kv61Qe70hAJgdsniLfuhFisy6o6+LfsbW4IKnbGqIj9+iZ+xjBJOUeW Cm0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:03:44 2025 by rpki-client