$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa File: a7ca9837-1d67-452f-8fea-80250f36d360.roa (raw, json) Hash identifier: kPeOVcXy1TCs8H7h2Ui5m1T1BV627HfdoHt439zNgQY= Subject key identifier: A6:F9:22:28:DE:64:2D:67:F7:76:40:05:B5:B2:31:CA:55:C4:60:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 667040706A7743AB0609D71FF0F1FBF1C0493E54 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa Signing time: Tue 10 Jun 2025 15:20:12 +0000 ROA not before: Tue 10 Jun 2025 15:20:12 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:70:40:70:6a:77:43:ab:06:09:d7:1f:f0:f1:fb:f1:c0:49:3e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:20:12 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=5c426be279f2840258c745e05f87835782503f1cd370afc09b37968af771130c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:1e:e4:6c:33:d9:6a:fb:a3:65:e8:68:7d: 4c:8e:bc:dd:6f:c1:88:76:e2:0c:d1:7c:f1:72:07: 13:7a:35:6a:5d:1c:d7:3f:02:cc:46:6a:ea:a0:33: 71:4c:f7:81:e9:b7:06:5b:db:99:d4:ac:04:8f:06: eb:15:56:0d:2b:47:4d:78:9a:2a:0d:6d:ce:4c:3f: b4:de:e9:86:52:6f:ed:f9:f9:3a:fc:c6:00:9c:b9: 1d:ed:23:e6:70:67:4a:6d:c5:f7:75:cf:68:3b:d4: 1c:87:f3:5b:6a:51:0c:5c:0a:da:e1:fb:b4:5f:71: b5:e6:c6:1f:30:42:8e:a9:9d:58:56:8b:47:e0:66: 7d:3a:64:b4:3f:62:82:c8:01:95:00:9d:82:df:29: 5f:7b:ab:1c:11:98:3f:51:58:db:74:27:d5:6b:cf: 72:ea:6b:c4:93:70:6e:22:76:6b:26:fe:a9:28:69: 11:76:ee:31:2c:a1:bd:7f:81:42:44:16:84:af:83: e4:d6:f5:96:91:86:4a:ec:63:c6:e4:37:18:ff:3f: ab:b7:d6:33:2b:a0:4a:b2:ac:88:ff:ff:81:d2:dd: cf:f9:7d:30:5b:11:57:f1:37:e0:1b:ac:98:d3:f6: 3a:9c:93:d3:a0:c2:ef:f2:2b:22:40:33:bc:d1:80: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F9:22:28:DE:64:2D:67:F7:76:40:05:B5:B2:31:CA:55:C4:60:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 92:83:bc:05:65:39:b3:58:bf:c5:b0:07:9c:41:ff:6b:de:13: 4b:7d:24:6e:ad:66:27:c6:64:b4:2f:63:67:8a:60:e4:d5:5d: 9b:18:2e:e2:60:bc:1d:ce:a0:81:e7:5c:cc:09:d9:75:f2:66: 04:8e:dd:40:4d:0c:e0:ed:eb:49:0b:5b:08:3a:10:b4:6c:2e: 90:b6:40:97:26:89:1b:9f:e5:9c:c5:21:47:8d:84:99:56:ab: a7:42:14:3f:07:b5:07:86:34:dc:8b:18:97:a9:80:9a:b5:d0: 89:26:2c:ec:e0:4c:03:6c:0b:94:dd:aa:68:1f:51:86:05:c0: 52:38:41:fb:cb:26:6d:21:3a:23:cc:d1:21:56:37:cd:f8:fb: fd:9a:d4:06:4a:fc:7f:89:23:c0:e4:6b:e4:06:0b:e0:95:9d: fa:95:c9:98:bf:c6:2e:48:a6:15:0a:cf:e4:d4:26:90:62:24: e6:14:f4:5b:c0:50:61:aa:85:5c:a4:63:20:8c:6d:d0:11:f1: 19:2a:7c:bb:a6:13:74:92:32:52:f5:8a:b3:26:d7:46:7c:98: 35:e2:8a:3c:0c:6c:68:fa:41:54:20:78:9c:48:d7:21:fd:da: 35:bb:04:44:32:72:d6:f0:b9:bc:86:46:25:4b:bd:21:55:9a: 82:59:c2:ee -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZnBAcGp3Q6sGCdcf8PH78cBJPlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MjAxMloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANWM0MjZiZTI3OWYyODQwMjU4Yzc0 NWUwNWY4NzgzNTc4MjUwM2YxY2QzNzBhZmMwOWIzNzk2OGFmNzcxMTMwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V4e5Gwz2Wr7o2XoaH1Mjrzdb8GI duIM0XzxcgcTejVqXRzXPwLMRmrqoDNxTPeB6bcGW9uZ1KwEjwbrFVYNK0dNeJoq DW3OTD+03umGUm/t+fk6/MYAnLkd7SPmcGdKbcX3dc9oO9Qch/NbalEMXAra4fu0 X3G15sYfMEKOqZ1YVotH4GZ9OmS0P2KCyAGVAJ2C3ylfe6scEZg/UVjbdCfVa89y 6mvEk3BuInZrJv6pKGkRdu4xLKG9f4FCRBaEr4Pk1vWWkYZK7GPG5DcY/z+rt9Yz K6BKsqyI//+B0t3P+X0wWxFX8TfgG6yY0/Y6nJPToMLv8isiQDO80YCB/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKb5IijeZC1n93ZABbWyMcpVxGCLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3Y2E5ODM3LTFkNjctNDUyZi04ZmVhLTgwMjUwZjM2ZDM2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+BAwDQYJKoZIhvcNAQELBQADggEBAJKDvAVlObNYv8WwB5xB /2veE0t9JG6tZifGZLQvY2eKYOTVXZsYLuJgvB3OoIHnXMwJ2XXyZgSO3UBNDODt 60kLWwg6ELRsLpC2QJcmiRuf5ZzFIUeNhJlWq6dCFD8HtQeGNNyLGJepgJq10Ikm LOzgTANsC5TdqmgfUYYFwFI4QfvLJm0hOiPM0SFWN834+/2a1AZK/H+JI8Dka+QG C+CVnfqVyZi/xi5IphUKz+TUJpBiJOYU9FvAUGGqhVykYyCMbdAR8RkqfLumE3SS MlL1irMm10Z8mDXiijwMbGj6QVQgeJxI1yH92jW7BEQyctbwubyGRiVLvSFVmoJZ wu4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:18 2025 by rpki-client