$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa File: c7310f55-3b12-4798-80ca-47e95f2e091c.roa (raw, json) Hash identifier: Y/Sw7WPlk7QuG15//0U6+LGLSx57S3VIBdmjq5otgyU= Subject key identifier: C3:D3:FD:F2:20:3D:D9:6B:6A:9D:52:0A:E8:76:9E:8E:9C:51:DE:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 56627A4A14F526DC22C79D3F721DE7F2CD4063A8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa Signing time: Wed 30 Jul 2025 17:38:41 +0000 ROA not before: Wed 30 Jul 2025 17:38:41 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:62:7a:4a:14:f5:26:dc:22:c7:9d:3f:72:1d:e7:f2:cd:40:63:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:38:41 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=6718c82b15a2bdfad178f4f14bcc058f4550546a6127124c0d41fc6a4356d9b6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:56:02:c8:37:4e:62:ba:3b:8e:05:fa:a5: 60:ba:5b:60:2d:c6:84:3f:23:b8:a3:63:61:5e:b0: 21:10:a9:c6:f7:00:a6:1b:bd:60:a6:b4:26:28:eb: d6:19:f1:fc:c0:6d:03:95:9b:ec:f9:a3:55:5c:fd: d2:7d:5d:fb:1b:7e:f8:38:a9:1c:7f:83:2e:8e:f3: 2e:3f:7c:f4:86:6c:1b:d7:e1:cc:67:d9:9c:bc:42: e0:b9:97:55:e8:95:7a:b4:9b:2b:2a:4a:ce:cf:de: f4:57:0b:82:6c:18:9c:ce:2f:35:21:e7:0d:6b:ba: 29:d5:a1:ce:4f:cb:a0:e8:86:52:31:16:f9:d3:5e: ab:cc:dd:0f:84:93:e0:5f:f0:ad:a9:2b:8c:80:81: 48:04:eb:e7:24:c9:ab:06:d7:09:85:c3:58:4e:2f: 88:bb:be:1e:51:03:1d:c0:e9:1b:20:01:33:4a:ab: b7:fa:f1:af:cc:02:b8:d4:df:25:32:6c:3d:b4:b4: 51:a6:7b:71:70:8a:2e:d8:8b:09:62:95:9c:1b:d6: dd:f6:e5:ed:52:4e:79:e9:d8:a1:28:3e:7a:c9:d9: 30:90:02:b6:a5:09:0a:bf:b1:ea:62:68:8a:60:a3: b2:6c:a6:57:b8:99:81:39:c4:f1:f2:6c:fa:9d:48: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:FD:F2:20:3D:D9:6B:6A:9D:52:0A:E8:76:9E:8E:9C:51:DE:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e000::/40 Signature Algorithm: sha256WithRSAEncryption 4a:48:d4:3e:21:1c:49:a6:6a:35:7d:f4:47:72:46:28:1c:0f: 11:82:d6:bd:c0:b7:1a:40:84:70:9f:82:46:93:40:67:42:06: 23:66:0b:29:cd:ca:ee:88:a8:49:85:68:e7:7f:5f:3f:9f:63: be:ab:dc:7d:36:98:32:8e:a3:dd:13:62:09:4f:2b:86:43:bc: 6c:9d:f4:f9:7a:33:90:05:41:c5:fe:8f:e6:17:60:85:b3:eb: e7:cb:ae:42:9e:6a:6c:a2:f6:b1:14:cf:ba:54:cc:08:84:8a: d6:06:5e:3c:36:f1:6a:d6:e4:53:d7:7b:92:b6:07:97:48:96: 2f:36:1b:3b:54:7e:8a:37:50:5f:94:20:22:ca:5f:1d:9d:d9: 60:92:bb:9d:c5:fe:d8:71:f5:f4:bd:b9:a5:cd:c2:d4:60:79: fc:32:3f:56:fe:01:b0:f4:92:da:fd:24:91:70:74:84:41:30: b6:99:2b:c8:76:ac:8e:7a:d7:26:16:04:4a:32:ed:b7:d7:0c: 64:6e:c6:30:af:6d:db:fe:6f:9c:1f:9b:b4:85:55:d1:dd:f1: 18:44:6e:87:2d:7e:f0:91:44:dc:5c:94:7f:32:2e:88:2b:37: 3c:22:19:dd:c0:b2:19:4d:ad:1a:f3:85:47:9d:fc:9c:2b:71: 1a:f7:4a:26 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVmJ6ShT1Jtwix50/ch3n8s1AY6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3Mzg0MVoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANjcxOGM4MmIxNWEyYmRmYWQxNzhm NGYxNGJjYzA1OGY0NTUwNTQ2YTYxMjcxMjRjMGQ0MWZjNmE0MzU2ZDliNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPRWAsg3TmK6O44F+qVgultgLcaE PyO4o2NhXrAhEKnG9wCmG71gprQmKOvWGfH8wG0DlZvs+aNVXP3SfV37G374OKkc f4MujvMuP3z0hmwb1+HMZ9mcvELguZdV6JV6tJsrKkrOz970VwuCbBiczi81IecN a7op1aHOT8ug6IZSMRb5016rzN0PhJPgX/CtqSuMgIFIBOvnJMmrBtcJhcNYTi+I u74eUQMdwOkbIAEzSqu3+vGvzAK41N8lMmw9tLRRpntxcIou2IsJYpWcG9bd9uXt Uk556dihKD56ydkwkAK2pQkKv7HqYmiKYKOybKZXuJmBOcTx8mz6nUhznwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMPT/fIgPdlrap1SCuh2no6cUd5+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3MzEwZjU1LTNiMTItNDc5OC04MGNhLTQ3ZTk1ZjJlMDkxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaeAwDQYJKoZIhvcNAQELBQADggEBAEpI1D4hHEmmajV99Edy RigcDxGC1r3AtxpAhHCfgkaTQGdCBiNmCynNyu6IqEmFaOd/Xz+fY76r3H02mDKO o90TYglPK4ZDvGyd9Pl6M5AFQcX+j+YXYIWz6+fLrkKeamyi9rEUz7pUzAiEitYG Xjw28WrW5FPXe5K2B5dIli82GztUfoo3UF+UICLKXx2d2WCSu53F/thx9fS9uaXN wtRgefwyP1b+AbD0ktr9JJFwdIRBMLaZK8h2rI561yYWBEoy7bfXDGRuxjCvbdv+ b5wfm7SFVdHd8RhEboctfvCRRNxclH8yLogrNzwiGd3AshlNrRrzhUed/JwrcRr3 SiY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:40 2025 by rpki-client