$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa File: bd97fd1c-8072-482f-8e33-e42256920554.roa (raw, json) Hash identifier: RWzPSXBvj8+ub49+5ZOkefVLsF2GfQUz1BXF4cQ541Q= Subject key identifier: 6D:DA:BF:0D:8B:C0:B4:1E:13:7A:8B:97:28:56:B7:99:58:28:6A:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69CD458AE1E781C55B7A15E3C98F9CD139A74395 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa Signing time: Fri 01 Aug 2025 00:21:22 +0000 ROA not before: Fri 01 Aug 2025 00:21:22 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cd:45:8a:e1:e7:81:c5:5b:7a:15:e3:c9:8f:9c:d1:39:a7:43:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:22 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=97684f210c7a1c08be969c2f383b63420f2185c38ef6872d76095221b23cb81e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:0a:6e:6b:1f:85:00:86:4e:c6:3e:5c:d5: d8:db:85:59:ec:2a:da:5c:30:ef:38:b1:31:2e:ae: 44:42:ae:e0:dd:f8:86:fa:67:8d:66:22:c2:80:58: fb:98:12:7b:ff:37:ee:5d:87:5a:03:a0:2b:02:74: 51:93:4f:d1:ff:47:15:db:41:1f:3f:93:18:f6:cb: 99:ea:4f:8c:ca:ad:7e:a3:7e:3f:2d:a7:58:3c:9a: c5:3e:7a:f0:94:73:e4:48:0b:c0:7f:e7:d7:75:d3: 3d:ef:70:a7:fd:d7:cd:3a:76:a5:4e:37:81:6b:ae: 55:1b:9c:ba:95:5d:d4:c0:8e:2b:6a:a3:8d:ef:b8: a8:b1:35:ba:c3:6e:ca:9c:30:a9:8d:0c:16:87:94: 96:cf:2b:4c:ab:4f:ab:15:5e:4d:28:5f:d8:86:77: cd:5a:25:e5:fe:92:b8:f9:06:57:7e:57:db:bb:44: d0:9e:86:81:67:d5:48:9b:b3:54:7b:93:ed:20:21: 17:3e:e3:03:58:67:43:ae:ad:b9:0a:f2:fe:12:25: e3:dd:dd:e5:85:c0:01:1b:6e:5a:7e:30:3b:7c:97: c3:ce:80:11:e3:18:51:bf:a2:fd:33:5f:ef:ea:ae: ab:4c:0a:ba:67:2a:61:b4:02:06:1c:c8:48:2c:2b: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:BF:0D:8B:C0:B4:1E:13:7A:8B:97:28:56:B7:99:58:28:6A:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:2000::/40 Signature Algorithm: sha256WithRSAEncryption 81:b0:6f:0f:5b:f5:20:04:bf:e0:f1:51:a6:33:e1:02:bc:b6: 15:a5:fa:cf:9f:04:6d:8f:cf:f9:73:e4:b7:7e:a1:cd:f3:6a: ae:a2:05:32:13:c2:9f:b1:df:c2:b1:91:ad:00:c5:ef:53:98: 8a:ac:e5:5e:0f:b5:96:6b:61:6c:5b:c0:89:92:64:00:0c:4c: 6c:0e:67:8c:ce:0b:75:d8:1c:85:11:bf:1d:e6:ea:db:62:a3: 8f:dd:db:93:66:73:64:8a:c9:69:23:09:84:30:32:2c:0b:5d: f3:c8:19:15:ff:a9:80:3f:09:24:f3:01:1e:88:bf:7a:3d:85: 57:8b:b0:a8:a6:64:34:b8:76:5a:36:b6:aa:8d:6b:b9:be:8b: 40:c1:48:6f:f2:e1:b6:ed:df:8e:2e:45:39:86:da:c4:a8:e1: 72:d5:de:47:11:e7:21:e0:f0:ad:99:06:70:55:9d:38:ee:a0: e7:77:41:8e:81:9b:0c:d2:16:39:eb:b1:51:b3:e1:48:d5:89: 99:5d:d5:0e:43:60:57:68:2f:f9:05:de:60:c3:07:12:b1:1e: 40:11:75:b8:78:47:1f:ba:20:90:6c:c9:fa:ce:85:d6:52:c9: 14:52:d7:f3:e9:3f:f1:51:c2:e6:c4:e8:2b:17:d8:78:2d:a4: ad:ef:81:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUac1FiuHngcVbehXjyY+c0TmnQ5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjEyMloX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAOTc2ODRmMjEwYzdhMWMwOGJlOTY5 YzJmMzgzYjYzNDIwZjIxODVjMzhlZjY4NzJkNzYwOTUyMjFiMjNjYjgxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5sKbmsfhQCGTsY+XNXY24VZ7Cra XDDvOLExLq5EQq7g3fiG+meNZiLCgFj7mBJ7/zfuXYdaA6ArAnRRk0/R/0cV20Ef P5MY9suZ6k+Myq1+o34/LadYPJrFPnrwlHPkSAvAf+fXddM973Cn/dfNOnalTjeB a65VG5y6lV3UwI4raqON77iosTW6w27KnDCpjQwWh5SWzytMq0+rFV5NKF/YhnfN WiXl/pK4+QZXflfbu0TQnoaBZ9VIm7NUe5PtICEXPuMDWGdDrq25CvL+EiXj3d3l hcABG25afjA7fJfDzoAR4xhRv6L9M1/v6q6rTAq6ZyphtAIGHMhILCv0/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG3avw2LwLQeE3qLlyhWt5lYKGrhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JkOTdmZDFjLTgwNzItNDgyZi04ZTMzLWU0MjI1NjkyMDU1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacCAwDQYJKoZIhvcNAQELBQADggEBAIGwbw9b9SAEv+DxUaYz 4QK8thWl+s+fBG2Pz/lz5Ld+oc3zaq6iBTITwp+x38Kxka0Axe9TmIqs5V4PtZZr YWxbwImSZAAMTGwOZ4zOC3XYHIURvx3m6ttio4/d25Nmc2SKyWkjCYQwMiwLXfPI GRX/qYA/CSTzAR6Iv3o9hVeLsKimZDS4dlo2tqqNa7m+i0DBSG/y4bbt344uRTmG 2sSo4XLV3kcR5yHg8K2ZBnBVnTjuoOd3QY6BmwzSFjnrsVGz4UjViZld1Q5DYFdo L/kF3mDDBxKxHkARdbh4Rx+6IJBsyfrOhdZSyRRS1/PpP/FRwubE6CsX2HgtpK3v gQc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:55 2025 by rpki-client