$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa File: 561b2653-251b-4a06-91e6-d8a55b1ccb18.roa (raw, json) Hash identifier: wNpjI+I0h7xiRRyAB6x800MSo380sMMoaxKNfVUskP4= Subject key identifier: 25:59:23:D2:40:21:4E:E8:1C:D6:71:CE:23:04:23:A4:5E:14:AE:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05D7E2E6DEE11C883D552EC3EB07F3B1ED0A0330 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa Signing time: Fri 01 Aug 2025 00:00:59 +0000 ROA not before: Fri 01 Aug 2025 00:00:59 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d7:e2:e6:de:e1:1c:88:3d:55:2e:c3:eb:07:f3:b1:ed:0a:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:59 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=4f7ea9c4ffd45352e17e08de5014ba29d5efc5ba9370c5af74dd2f2dbd1e1150, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:8c:fe:8e:23:a4:7d:43:4a:81:13:d8:f4: 02:40:83:47:5f:54:68:67:4b:74:05:0e:6f:81:47: 6a:57:1d:ce:17:1c:39:fd:19:a8:5a:6d:43:20:4d: 4e:1f:be:1e:14:23:67:14:c0:eb:46:07:72:72:1a: 8c:e9:fc:f2:81:27:f6:45:03:38:09:60:e5:a7:4c: 3c:c8:f3:e3:3a:5b:39:61:36:0a:18:89:ef:25:07: c8:5d:9e:39:e5:e6:60:e7:c0:40:f7:03:4c:74:92: 11:db:94:98:22:4c:10:03:8a:43:71:5b:95:50:2c: 6a:57:e0:40:fe:29:0c:76:69:bf:da:2d:5c:72:05: 59:de:b3:bf:21:7f:8d:6c:fb:35:60:22:1f:ef:ed: 2a:c4:48:60:84:c4:6f:d4:12:fe:32:d4:ba:dc:a0: 22:13:08:55:83:1f:28:26:ba:71:96:d2:51:2f:2d: c5:9f:54:2a:90:cf:d4:02:e7:9d:5c:e6:74:0b:ba: 0c:72:bd:75:7e:70:28:57:88:a7:5a:4d:2c:4d:69: df:64:4d:a5:d7:5f:d8:d5:95:21:10:9b:20:d3:2c: 45:66:02:0f:65:bd:e3:8a:ec:aa:c1:56:d5:94:6e: fd:17:0e:e0:c4:10:d2:07:e0:ff:df:c9:13:55:7c: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:59:23:D2:40:21:4E:E8:1C:D6:71:CE:23:04:23:A4:5E:14:AE:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:8800::/40 Signature Algorithm: sha256WithRSAEncryption b3:82:60:2f:92:cd:8e:6e:ae:86:50:87:d6:9a:ce:e8:58:43: 6d:41:dc:aa:cf:48:90:6a:25:78:fc:93:ea:37:ff:23:04:74: 7d:7b:06:12:7d:ce:7a:b8:fb:58:88:68:c5:26:a2:ad:6d:9e: a6:82:74:e7:2e:a2:57:27:0f:57:e0:e3:f0:48:3f:7e:01:34: cb:b9:eb:f3:c7:a8:54:98:c2:d9:b9:74:2d:c2:f7:e7:8e:46: f8:81:4d:04:1d:69:a9:4d:0b:13:e7:49:91:17:87:77:bd:d4: 80:2d:f7:5b:51:9e:14:16:df:e3:ee:ba:a7:97:99:9c:81:b2: 34:b8:1b:b8:86:8c:71:2b:60:17:9b:71:ee:a2:5e:3e:73:a2: b5:db:15:20:22:af:44:d9:8b:37:cc:d1:e5:66:ae:dc:00:ae: 98:ca:2e:51:7e:d0:28:d4:7f:70:7a:42:7e:48:08:0c:1e:b8: 23:3f:38:e5:79:0f:61:6a:19:0a:c0:48:07:3a:4b:80:8e:3b: 98:23:7e:05:91:f9:28:af:32:a4:0c:ac:60:d5:d4:02:19:b7: a9:03:10:16:60:4c:b8:45:06:7b:3a:83:58:e1:ec:d9:85:ed: 07:b8:9d:86:c3:49:09:13:31:d3:e8:b5:b4:d7:73:f9:36:fb: be:e8:42:10 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBdfi5t7hHIg9VS7D6wfzse0KAzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMDA1OVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANGY3ZWE5YzRmZmQ0NTM1MmUxN2Uw OGRlNTAxNGJhMjlkNWVmYzViYTkzNzBjNWFmNzRkZDJmMmRiZDFlMTE1MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQaM/o4jpH1DSoET2PQCQINHX1Ro Z0t0BQ5vgUdqVx3OFxw5/RmoWm1DIE1OH74eFCNnFMDrRgdychqM6fzygSf2RQM4 CWDlp0w8yPPjOls5YTYKGInvJQfIXZ455eZg58BA9wNMdJIR25SYIkwQA4pDcVuV UCxqV+BA/ikMdmm/2i1ccgVZ3rO/IX+NbPs1YCIf7+0qxEhghMRv1BL+MtS63KAi EwhVgx8oJrpxltJRLy3Fn1QqkM/UAuedXOZ0C7oMcr11fnAoV4inWk0sTWnfZE2l 11/Y1ZUhEJsg0yxFZgIPZb3jiuyqwVbVlG79Fw7gxBDSB+D/38kTVXxY6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCVZI9JAIU7oHNZxziMEI6ReFK5pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MWIyNjUzLTI1MWItNGEwNi05MWU2LWQ4YTU1YjFjY2IxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMogwDQYJKoZIhvcNAQELBQADggEBALOCYC+SzY5uroZQh9aa zuhYQ21B3KrPSJBqJXj8k+o3/yMEdH17BhJ9znq4+1iIaMUmoq1tnqaCdOcuolcn D1fg4/BIP34BNMu56/PHqFSYwtm5dC3C9+eORviBTQQdaalNCxPnSZEXh3e91IAt 91tRnhQW3+PuuqeXmZyBsjS4G7iGjHErYBebce6iXj5zorXbFSAir0TZizfM0eVm rtwArpjKLlF+0CjUf3B6Qn5ICAweuCM/OOV5D2FqGQrASAc6S4COO5gjfgWR+Siv MqQMrGDV1AIZt6kDEBZgTLhFBns6g1jh7NmF7Qe4nYbDSQkTMdPotbTXc/k2+77o QhA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:21 2025 by rpki-client