$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa File: 9a9d41bd-0bed-4bc0-8365-34453f074020.roa (raw, json) Hash identifier: 7S8HDghopB3SzN8+N3UtY4ExQQMvLRlsR6q5S2ln3cE= Subject key identifier: 34:52:D1:91:F9:AE:0C:43:1E:DC:E3:16:A3:7E:F7:7B:AA:8C:4B:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 757341ED7698DE2F38FD10E86A71CEF0FCD68127 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa Signing time: Fri 01 Aug 2025 00:20:10 +0000 ROA not before: Fri 01 Aug 2025 00:20:10 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:73:41:ed:76:98:de:2f:38:fd:10:e8:6a:71:ce:f0:fc:d6:81:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:10 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=cb7c01e796434383501dace726e27b3d79154a191d6850fa197eb47ca75fec38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ac:bb:f1:65:cc:d6:d1:da:7a:c1:6a:45:e0: a8:8b:ba:a5:8b:59:24:3b:d4:ce:04:7f:ed:3c:fc: 12:b3:12:e7:5c:46:55:8f:db:aa:9b:ff:55:3e:38: 62:d4:e4:5c:77:73:7e:18:32:4b:04:d7:05:07:98: b0:87:fc:2a:88:c8:d1:ad:4b:9d:cb:aa:66:8d:27: 91:50:60:e1:59:ec:4c:3e:2c:2e:29:99:ea:48:c4: 9a:3d:74:4e:f1:fa:bb:49:6f:4b:9f:a2:13:70:90: b5:c9:27:96:e5:c7:fd:3b:4d:cc:ca:13:e7:72:7e: 04:56:96:ee:8f:bc:6d:12:a7:a2:84:8a:c7:b2:b5: cb:24:fd:90:35:59:90:6f:1c:18:09:be:b5:19:59: 1b:58:63:ee:5d:42:3e:37:f9:51:ca:80:f8:d5:14: ea:0d:28:f4:e7:65:1e:47:f1:91:49:46:c5:85:e1: f6:00:8e:32:20:0e:f9:49:e3:d8:5a:dd:a7:f7:6f: 6f:f4:87:b5:32:16:54:c3:6c:00:01:7f:99:71:b7: f1:c3:58:e7:c5:83:e4:6e:9d:d3:33:c6:1d:02:2e: f2:be:8a:31:51:dc:02:af:3f:70:f9:db:d3:26:8d: a0:82:93:60:d2:f4:48:bb:da:76:2e:d6:86:06:73: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:52:D1:91:F9:AE:0C:43:1E:DC:E3:16:A3:7E:F7:7B:AA:8C:4B:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:e000::/40 Signature Algorithm: sha256WithRSAEncryption 24:50:f3:07:aa:4f:4d:2a:05:2d:ae:23:50:90:44:a6:e6:73: 55:64:6d:d2:7e:e7:69:cb:88:c8:e2:f5:7c:82:0a:f4:43:76: bb:24:e8:5d:07:56:c5:c9:a5:0e:2f:fd:11:8b:cc:56:63:3d: 33:86:52:aa:64:4c:49:09:85:d4:b2:9b:ff:a8:3b:ba:9e:df: be:94:04:fd:97:80:3d:3e:fe:5f:f2:1d:5f:30:75:1f:f4:77: 55:d3:44:b1:61:da:7d:3d:ad:95:c7:6f:01:13:42:93:d0:a3: bb:ed:9b:3f:8f:89:6b:ef:76:36:57:df:81:6a:bd:7f:5b:e6: 18:73:3a:9b:d1:b5:b5:c9:42:48:fb:6d:15:d4:4e:9b:40:fb: 8a:ab:6d:80:02:6b:82:30:ae:f6:ef:3a:0c:c2:b2:f7:24:45: df:dd:e5:96:3e:06:7d:08:4d:97:e8:75:e5:f7:99:84:31:fb: e3:b6:69:9c:3b:fb:8f:1e:82:31:cd:84:88:2f:eb:2f:f6:61: db:aa:61:0d:ba:df:d3:df:64:af:77:03:bb:6c:0d:6c:3f:d5: 6f:e7:72:11:31:f7:db:36:9f:11:34:16:62:b2:8e:0a:6b:d7: 24:3d:9a:9c:f6:dc:e0:72:2a:e1:5a:a7:22:0c:17:d0:6f:66: 35:fb:b6:8f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdXNB7XaY3i84/RDoanHO8PzWgScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjAxMFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAY2I3YzAxZTc5NjQzNDM4MzUwMWRh Y2U3MjZlMjdiM2Q3OTE1NGExOTFkNjg1MGZhMTk3ZWI0N2NhNzVmZWMzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26y78WXM1tHaesFqReCoi7qli1kk O9TOBH/tPPwSsxLnXEZVj9uqm/9VPjhi1ORcd3N+GDJLBNcFB5iwh/wqiMjRrUud y6pmjSeRUGDhWexMPiwuKZnqSMSaPXRO8fq7SW9Ln6ITcJC1ySeW5cf9O03MyhPn cn4EVpbuj7xtEqeihIrHsrXLJP2QNVmQbxwYCb61GVkbWGPuXUI+N/lRyoD41RTq DSj052UeR/GRSUbFheH2AI4yIA75SePYWt2n929v9Ie1MhZUw2wAAX+Zcbfxw1jn xYPkbp3TM8YdAi7yvooxUdwCrz9w+dvTJo2ggpNg0vRIu9p2LtaGBnMy5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDRS0ZH5rgxDHtzjFqN+93uqjEtiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhOWQ0MWJkLTBiZWQtNGJjMC04MzY1LTM0NDUzZjA3NDAyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/uAwDQYJKoZIhvcNAQELBQADggEBACRQ8weqT00qBS2uI1CQ RKbmc1VkbdJ+52nLiMji9XyCCvRDdrsk6F0HVsXJpQ4v/RGLzFZjPTOGUqpkTEkJ hdSym/+oO7qe376UBP2XgD0+/l/yHV8wdR/0d1XTRLFh2n09rZXHbwETQpPQo7vt mz+PiWvvdjZX34FqvX9b5hhzOpvRtbXJQkj7bRXUTptA+4qrbYACa4IwrvbvOgzC svckRd/d5ZY+Bn0ITZfodeX3mYQx++O2aZw7+48egjHNhIgv6y/2YduqYQ2639Pf ZK93A7tsDWw/1W/nchEx99s2nxE0FmKyjgpr1yQ9mpz23OByKuFapyIMF9BvZjX7 to8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:15 2025 by rpki-client