$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa File: 77b66450-4698-44c5-9f99-8e8f76945e37.roa (raw, json) Hash identifier: sH++qMs5BjWvKKQVPDY+2IRB9taB0/s/2l4ylpBMHgM= Subject key identifier: 22:44:F3:49:44:BF:20:B5:F8:F8:DF:10:EC:DA:8A:35:06:F7:02:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BF0294EA6E75040775A390285BC814864CE050F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa Signing time: Wed 30 Jul 2025 17:38:42 +0000 ROA not before: Wed 30 Jul 2025 17:38:42 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f0:29:4e:a6:e7:50:40:77:5a:39:02:85:bc:81:48:64:ce:05:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:42 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=eeeb3accfda33c53858a59cd0c9ce6e9ddd3c04ac83fd2ee555afcb30d8d3271, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:b7:fd:d1:4c:83:95:95:7b:ee:06:55:9a: bf:dd:63:6d:83:e2:38:63:fa:10:f4:a4:89:4c:9e: 3d:ed:82:8a:f5:1c:63:ec:6d:2b:18:c5:d8:7b:76: d0:43:71:4d:65:eb:b7:6f:96:b2:bb:5f:44:84:37: 68:ca:97:3a:f9:a5:a3:f3:85:d4:76:84:77:54:06: a1:52:23:32:a4:7a:47:be:cd:49:f6:c7:01:15:5a: 96:d0:43:33:00:3f:5a:10:81:0b:8c:06:e1:c9:e9: 44:39:91:dd:f4:1e:eb:ba:66:fb:00:97:0b:7f:84: e7:1c:5d:0a:c8:3f:ae:40:72:11:85:f8:e4:83:e6: 93:a7:42:04:e2:b7:24:3c:82:4f:a2:84:ed:a3:80: 77:e0:f2:db:17:61:d3:e5:7c:a7:11:5e:e7:5f:42: f8:be:1e:c7:24:51:a3:ed:3b:8b:7b:39:92:f7:6b: ea:84:5c:b0:0d:e1:8e:cd:58:80:08:46:1b:ae:20: 12:2c:60:28:aa:93:d3:87:c5:e8:ce:8d:a7:2a:2a: ed:0a:bd:db:3a:23:a2:61:2b:dd:5a:29:5a:b2:8f: 52:7a:14:7d:60:97:c2:4d:22:b9:1d:f8:95:a6:ee: 76:e4:0f:b9:4b:24:74:62:1b:ac:bf:bd:a6:84:e2: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:44:F3:49:44:BF:20:B5:F8:F8:DF:10:EC:DA:8A:35:06:F7:02:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:1000::/40 Signature Algorithm: sha256WithRSAEncryption bc:b9:14:a7:a5:f8:46:15:b0:c8:89:a1:f9:7a:9b:65:52:69: ae:43:3c:ef:cc:59:6e:99:34:23:8c:97:21:4a:32:e9:16:a3: 08:bf:a3:ac:1a:05:05:68:79:37:54:3d:60:40:a1:61:37:53: 93:1f:e6:c5:46:51:7d:57:6e:85:bf:97:a3:51:9c:f4:65:49: 66:6c:4a:ed:31:95:26:4a:90:6f:e1:2f:ad:11:92:cb:8e:35: 94:20:fc:9c:b1:2b:67:d1:26:48:38:f1:6c:c4:e7:8e:63:fb: 12:21:b2:76:81:43:91:61:91:2e:8c:5b:60:a1:7f:7d:8e:b7: 5a:d0:2d:bb:6c:45:bc:7b:c0:fc:ce:f2:79:04:2a:ff:cf:4d: 3e:12:01:d8:0b:51:a4:01:22:14:44:e9:9c:64:3f:5b:a7:c0: df:2a:36:20:db:ea:4e:e3:22:a9:9b:7d:6e:27:ff:fc:5a:64: b1:b8:a8:c7:da:a1:2a:63:cc:83:df:37:29:72:65:5e:c0:09: 48:50:84:e1:51:6a:c3:37:27:7c:88:78:f3:43:ed:58:36:65: c7:86:9f:8c:a7:2b:34:f2:d7:3b:20:4a:83:84:ea:ad:02:37: 7c:f4:1a:b8:ac:78:99:79:42:d0:3a:9a:19:45:2b:16:1e:b9: b4:bc:55:e7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC/ApTqbnUEB3WjkChbyBSGTOBQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3Mzg0MloX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAZWVlYjNhY2NmZGEzM2M1Mzg1OGE1 OWNkMGM5Y2U2ZTlkZGQzYzA0YWM4M2ZkMmVlNTU1YWZjYjMwZDhkMzI3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzna3/dFMg5WVe+4GVZq/3WNtg+I4 Y/oQ9KSJTJ497YKK9Rxj7G0rGMXYe3bQQ3FNZeu3b5ayu19EhDdoypc6+aWj84XU doR3VAahUiMypHpHvs1J9scBFVqW0EMzAD9aEIELjAbhyelEOZHd9B7rumb7AJcL f4TnHF0KyD+uQHIRhfjkg+aTp0IE4rckPIJPooTto4B34PLbF2HT5XynEV7nX0L4 vh7HJFGj7TuLezmS92vqhFywDeGOzViACEYbriASLGAoqpPTh8Xozo2nKirtCr3b OiOiYSvdWilaso9SehR9YJfCTSK5HfiVpu525A+5SyR0Yhusv72mhOLzDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCJE80lEvyC1+PjfEOzaijUG9wIXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YjY2NDUwLTQ2OTgtNDRjNS05Zjk5LThlOGY3Njk0NWUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+xAwDQYJKoZIhvcNAQELBQADggEBALy5FKel+EYVsMiJofl6 m2VSaa5DPO/MWW6ZNCOMlyFKMukWowi/o6waBQVoeTdUPWBAoWE3U5Mf5sVGUX1X boW/l6NRnPRlSWZsSu0xlSZKkG/hL60RksuONZQg/JyxK2fRJkg48WzE545j+xIh snaBQ5FhkS6MW2Chf32Ot1rQLbtsRbx7wPzO8nkEKv/PTT4SAdgLUaQBIhRE6Zxk P1unwN8qNiDb6k7jIqmbfW4n//xaZLG4qMfaoSpjzIPfNylyZV7ACUhQhOFRasM3 J3yIePND7Vg2ZceGn4ynKzTy1zsgSoOE6q0CN3z0GriseJl5QtA6mhlFKxYeubS8 Vec= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:32 2025 by rpki-client