$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa File: 5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa (raw, json) Hash identifier: swdFTlTagcFI79upXKjnrI0Ea+1JPsTc5QUBeDGAdSs= Subject key identifier: 4F:D3:9F:AB:82:24:13:BE:C6:05:8D:90:72:1F:EA:A2:43:AE:04:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A39331DA2A734BBCF782FED73103D0BB599869C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa Signing time: Mon 21 Jul 2025 15:00:54 +0000 ROA not before: Mon 21 Jul 2025 15:00:54 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:28c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:39:33:1d:a2:a7:34:bb:cf:78:2f:ed:73:10:3d:0b:b5:99:86:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 15:00:54 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=70bc52c4f983e240091ccb69e4e86214594268cc2a4e029bc262b509b30c520c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2b:b2:87:ed:26:ef:75:8b:19:14:9a:9f:16: 9e:6f:41:8d:0f:21:48:a5:cb:32:97:e8:64:cd:24: c8:66:39:f4:6a:51:8a:ba:9d:43:04:73:22:9d:c9: fc:84:b5:c3:3d:24:7e:e7:a7:36:c2:4d:3c:9f:ef: 83:3b:68:bc:cc:09:89:68:91:9e:cc:18:4f:ff:e1: b7:74:7a:41:ac:15:25:1b:e0:f8:94:47:37:56:f3: 68:93:52:4d:8c:f4:c6:87:6f:5f:13:e9:52:f9:5d: 35:8f:26:af:19:b1:30:4b:2e:0a:18:d3:99:f4:9d: dd:8f:78:5c:cc:28:83:03:89:53:a8:9c:ac:ba:ea: be:08:cb:78:26:a0:b3:63:c1:32:2d:8d:3b:ab:2c: 5e:ac:1a:06:2d:be:dc:60:b3:d4:0d:b8:e9:e1:4b: 55:8d:3c:5b:5d:2d:34:e3:81:ea:59:b4:d4:90:13: da:a8:45:e5:8e:63:d0:cb:cc:f6:99:31:0e:1d:db: e6:5b:87:ce:3e:10:49:df:e6:19:5c:54:1c:83:17: 30:4b:81:6e:fd:76:be:56:9c:78:f3:fd:d1:b6:a3: 0c:4d:db:79:b1:38:86:21:31:72:79:05:06:76:e9: c2:ed:7b:cb:a9:56:d1:dc:77:1d:71:b3:43:ec:14: fb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D3:9F:AB:82:24:13:BE:C6:05:8D:90:72:1F:EA:A2:43:AE:04:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:28c0::/46 Signature Algorithm: sha256WithRSAEncryption 6c:2b:68:72:cb:c8:e3:2a:da:d1:47:2f:8e:05:36:09:e9:87: eb:d3:58:cd:6d:6f:e2:8c:da:ba:ee:37:3f:36:ce:64:77:fe: e1:9f:7a:25:f2:a9:23:85:64:c6:a2:77:a3:a1:db:e7:1c:4d: 06:79:67:d1:ab:c4:66:9b:41:5b:21:9e:1d:f3:5b:7e:c7:06: e7:5a:91:21:c9:71:db:9f:da:57:9a:67:63:b7:69:e1:7e:ed: 4e:3c:cf:75:98:e7:4a:f6:ab:6b:8f:e2:9b:5f:70:75:3b:12: 1c:f0:31:0e:47:55:9c:31:46:25:25:8c:84:92:93:48:6a:5a: d2:11:2a:6d:94:67:f9:47:67:7d:64:a3:1e:9a:81:bd:e6:64: 1f:f1:70:60:8e:8f:6f:0d:0b:bf:e0:81:8e:5c:15:b6:c7:c7: 85:ba:cc:f4:2e:e6:4a:2c:cf:f5:3f:0c:bc:c1:f4:49:d3:24: 07:f4:f0:70:68:5d:99:7c:67:56:d1:a7:e0:c4:54:d0:06:96: 70:3e:5b:55:ff:21:8a:1e:50:77:89:b7:eb:f8:a6:23:84:e8: 12:7d:c4:9d:c6:ec:05:66:e9:77:51:ce:bf:58:29:82:a9:96: 29:a5:39:01:b4:ae:34:91:6a:bc:f6:dc:9f:14:06:0c:59:82: d5:3b:d5:ca -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUejkzHaKnNLvPeC/tcxA9C7WZhpwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMTE1MDA1NFoX DTI1MDgyNTIzNTk1OVowejFJMEcGA1UEBRNANzBiYzUyYzRmOTgzZTI0MDA5MWNj YjY5ZTRlODYyMTQ1OTQyNjhjYzJhNGUwMjliYzI2MmI1MDliMzBjNTIwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yuyh+0m73WLGRSanxaeb0GNDyFI pcsyl+hkzSTIZjn0alGKup1DBHMincn8hLXDPSR+56c2wk08n++DO2i8zAmJaJGe zBhP/+G3dHpBrBUlG+D4lEc3VvNok1JNjPTGh29fE+lS+V01jyavGbEwSy4KGNOZ 9J3dj3hczCiDA4lTqJysuuq+CMt4JqCzY8EyLY07qyxerBoGLb7cYLPUDbjp4UtV jTxbXS0044HqWbTUkBPaqEXljmPQy8z2mTEOHdvmW4fOPhBJ3+YZXFQcgxcwS4Fu /Xa+Vpx48/3RtqMMTdt5sTiGITFyeQUGdunC7XvLqVbR3HcdcbND7BT7jQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE/Tn6uCJBO+xgWNkHIf6qJDrgQAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVlN2FkMGIwLTk3ZjQtNDEwMi1iOWIzLTc5ODQwZTMzNDRkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yjAMA0GCSqGSIb3DQEBCwUAA4IBAQBsK2hyy8jjKtrRRy+O BTYJ6Yfr01jNbW/ijNq67jc/Ns5kd/7hn3ol8qkjhWTGonejodvnHE0GeWfRq8Rm m0FbIZ4d81t+xwbnWpEhyXHbn9pXmmdjt2nhfu1OPM91mOdK9qtrj+KbX3B1OxIc 8DEOR1WcMUYlJYyEkpNIalrSESptlGf5R2d9ZKMemoG95mQf8XBgjo9vDQu/4IGO XBW2x8eFusz0LuZKLM/1Pwy8wfRJ0yQH9PBwaF2ZfGdW0afgxFTQBpZwPltV/yGK HlB3ibfr+KYjhOgSfcSdxuwFZul3Uc6/WCmCqZYppTkBtK40kWq89tyfFAYMWYLV O9XK -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:00 2025 by rpki-client