$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9726f31f-1874-4ec8-b776-34f0f05646bb.roa File: 9726f31f-1874-4ec8-b776-34f0f05646bb.roa (raw, json) Hash identifier: x9JrSZQKCPJGUh3q0H3vDzLByfCpNYWlh1FqpwqX4JA= Subject key identifier: 28:AD:3B:F5:53:DB:F4:21:8D:A8:0E:F2:BB:2C:73:5E:37:01:47:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77493A536966D5F05C8C49B2B4D9002DE65E41F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9726f31f-1874-4ec8-b776-34f0f05646bb.roa Signing time: Wed 30 Jul 2025 17:38:29 +0000 ROA not before: Wed 30 Jul 2025 17:38:29 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:49:3a:53:69:66:d5:f0:5c:8c:49:b2:b4:d9:00:2d:e6:5e:41:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:29 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=2c4768dcea75352b37c045daf9496dfb194e6f9e0e9810c0cde3bb34f7176821, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:1a:86:31:64:d4:80:5c:e0:ff:11:e2:5f: b7:55:9d:75:cf:40:1c:5b:be:e1:87:42:9c:be:4b: 57:9d:93:b6:28:f5:5b:97:8d:59:5a:30:fd:07:27: 53:b9:28:f2:8d:36:8e:23:c5:6d:5e:e0:82:22:28: 6a:11:eb:9e:94:74:25:d8:34:2b:cf:72:00:48:fd: cf:52:f9:47:5c:d0:f3:07:52:8b:87:55:ca:ce:44: 9e:93:5a:b4:12:11:0f:cb:d4:91:ab:4f:2e:ae:8a: 3c:e3:53:d4:8a:67:ab:1b:d7:a6:d2:ca:a5:ac:c0: 1e:27:d1:fb:98:17:f8:3a:d6:75:36:c0:3a:20:e9: 70:32:b6:1a:c4:1c:d1:8f:0f:02:de:d5:3a:48:6e: 7f:16:68:58:92:1d:c1:36:c1:67:56:0b:55:6e:49: 75:f2:f8:71:53:b7:ed:53:71:aa:c6:90:80:f8:98: 2e:22:3c:e4:23:fe:7e:02:84:87:cb:10:25:75:ce: ac:8a:14:2d:cd:b5:89:ea:7b:a9:16:30:f6:6b:8c: 1b:5f:a8:ed:b3:fc:0f:20:64:7f:38:69:7c:d5:e2: d6:96:17:1e:a2:b7:66:eb:53:81:1f:09:6a:b3:34: c7:49:d9:98:fa:c4:61:7d:9a:66:4b:9a:27:04:1f: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AD:3B:F5:53:DB:F4:21:8D:A8:0E:F2:BB:2C:73:5E:37:01:47:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9726f31f-1874-4ec8-b776-34f0f05646bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4000::/40 Signature Algorithm: sha256WithRSAEncryption 14:76:40:ff:2c:a5:8e:3f:f3:3b:36:fe:9a:60:59:84:b6:ff: c8:58:59:a0:be:4f:ea:a1:02:a6:97:33:91:0d:c7:c7:3b:a2: e6:b5:dc:02:ae:a9:e1:b5:96:93:17:f7:22:6a:31:05:93:e7: 8c:99:d8:75:8b:d2:61:64:cb:0e:2a:ca:9b:16:c1:66:e2:4d: e8:82:a8:21:a3:ce:9e:fc:98:51:7c:d2:24:f3:74:35:d1:14: f2:65:5c:9b:bf:17:8f:cc:05:3d:15:cb:7a:d2:1f:88:fb:1b: 99:12:b1:8a:8e:c2:51:f0:f3:b7:13:b8:25:c7:a8:a9:f2:bb: db:14:7b:29:7c:65:8c:bb:93:34:f7:78:c8:e4:d4:16:e1:bf: 62:66:79:2f:e0:a7:9c:e5:31:72:af:d3:43:2d:48:8f:75:8f: db:46:4c:49:b9:13:0b:12:ff:80:8d:b0:26:bd:44:90:1e:dd: 6a:61:81:84:41:76:b0:33:c6:dc:5c:1a:a8:50:29:1f:60:f7: 67:b8:da:a1:b6:66:aa:67:d9:e5:bc:9e:52:f4:3e:f0:e1:44: 48:d5:f5:b9:81:0e:78:c5:8c:97:ae:06:45:c0:9c:e2:ad:4d: cc:5b:16:74:e9:82:bd:2d:68:cd:38:c9:68:ce:f6:5c:a9:25: 14:24:99:0b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd0k6U2lm1fBcjEmytNkALeZeQfEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3MzgyOVoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAMmM0NzY4ZGNlYTc1MzUyYjM3YzA0 NWRhZjk0OTZkZmIxOTRlNmY5ZTBlOTgxMGMwY2RlM2JiMzRmNzE3NjgyMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCwahjFk1IBc4P8R4l+3VZ11z0Ac W77hh0KcvktXnZO2KPVbl41ZWjD9BydTuSjyjTaOI8VtXuCCIihqEeuelHQl2DQr z3IASP3PUvlHXNDzB1KLh1XKzkSek1q0EhEPy9SRq08uroo841PUimerG9em0sql rMAeJ9H7mBf4OtZ1NsA6IOlwMrYaxBzRjw8C3tU6SG5/FmhYkh3BNsFnVgtVbkl1 8vhxU7ftU3GqxpCA+JguIjzkI/5+AoSHyxAldc6sihQtzbWJ6nupFjD2a4wbX6jt s/wPIGR/OGl81eLWlhceordm61OBHwlqszTHSdmY+sRhfZpmS5onBB8XcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCitO/VT2/QhjagO8rssc143AUffMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3MjZmMzFmLTE4NzQtNGVjOC1iNzc2LTM0ZjBmMDU2NDZiYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaUAwDQYJKoZIhvcNAQELBQADggEBABR2QP8spY4/8zs2/ppg WYS2/8hYWaC+T+qhAqaXM5ENx8c7oua13AKuqeG1lpMX9yJqMQWT54yZ2HWL0mFk yw4qypsWwWbiTeiCqCGjzp78mFF80iTzdDXRFPJlXJu/F4/MBT0Vy3rSH4j7G5kS sYqOwlHw87cTuCXHqKnyu9sUeyl8ZYy7kzT3eMjk1Bbhv2JmeS/gp5zlMXKv00Mt SI91j9tGTEm5EwsS/4CNsCa9RJAe3WphgYRBdrAzxtxcGqhQKR9g92e42qG2Zqpn 2eW8nlL0PvDhREjV9bmBDnjFjJeuBkXAnOKtTcxbFnTpgr0taM04yWjO9lypJRQk mQs= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:54 2025 by rpki-client