$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa File: f0035674-15ff-434e-b4d2-44fc6010a1aa.roa (raw, json) Hash identifier: sqWZJNbMFtQ467j8kVn93W937YdY91Gpk3srldSzWIA= Subject key identifier: 3C:69:55:BC:69:EA:6F:AC:05:74:28:0F:3C:1D:DE:D0:1F:9A:A6:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78DA89EAB80ED0BCDB6989F31455FC3C7D1A7BED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa Signing time: Fri 01 Aug 2025 00:00:51 +0000 ROA not before: Fri 01 Aug 2025 00:00:51 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:da:89:ea:b8:0e:d0:bc:db:69:89:f3:14:55:fc:3c:7d:1a:7b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:51 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=1735abe5325dcb8640c6093999c05da846360137f455663d7944adf653d308a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:69:23:20:4f:33:37:29:5f:dd:d9:5e:70: 64:77:d7:93:f2:f8:4c:c5:00:41:1f:1d:5f:ce:18: 10:41:a2:1a:c7:da:03:08:35:f7:14:c2:67:5c:48: 2d:16:5d:9e:fc:4a:92:42:3c:c0:ce:40:e7:08:07: e6:62:b6:d7:13:0d:a6:17:78:83:cf:cd:c6:1c:af: 22:bc:ca:34:83:e0:59:b9:e1:d1:49:4f:93:4f:bc: a4:65:e3:b6:c6:e9:aa:7c:c3:eb:6a:cd:70:51:91: 67:8c:4a:4e:ae:20:ed:6e:a0:8e:c3:19:4c:a4:06: 6f:4d:de:8d:16:e4:7e:72:09:d8:e3:13:bb:72:b0: e8:0c:07:17:7a:60:cb:57:a4:08:a2:e4:05:a2:d8: f6:73:bb:06:4e:8b:bc:9b:c6:04:cb:dd:0a:09:44: 88:d1:4f:0c:e0:54:a7:2e:de:ff:bc:dd:24:ba:46: 2d:fa:41:4f:4d:b8:43:e7:b1:bc:54:f6:2d:a3:eb: 86:a8:81:7c:40:80:2e:a0:41:ff:16:c5:57:3c:81: 7b:91:ba:22:cd:d3:a7:27:ea:6c:c5:2a:cb:af:77: 56:b3:74:3a:5f:12:1b:21:15:e2:8e:51:75:3b:ca: 04:bd:c1:69:1f:24:f9:4f:e6:7d:43:3b:c9:63:30: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:55:BC:69:EA:6F:AC:05:74:28:0F:3C:1D:DE:D0:1F:9A:A6:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:e000::/40 Signature Algorithm: sha256WithRSAEncryption af:bc:cb:c1:e8:31:43:09:d9:e3:60:1a:69:30:91:85:87:7f: 96:aa:49:39:d5:7e:00:0e:0c:24:50:36:ac:20:c4:ce:ff:a1: 66:5e:ae:65:ff:fd:b1:a5:93:0c:b0:01:18:b1:0f:7a:4f:85: 85:c5:27:d4:fd:ce:bf:ca:2e:71:eb:c3:24:65:2d:29:50:55: e8:fa:ae:45:b1:02:38:a5:8c:dc:bf:42:97:75:2b:d0:a1:5b: 0c:86:38:07:87:09:cc:4c:00:e1:4e:89:f3:ef:e1:d3:65:4c: b1:8d:78:00:fc:c2:c8:3f:c8:49:e9:14:37:cd:94:95:59:15: 2a:8d:b1:a2:ac:93:7b:65:ab:e2:de:cc:e3:cc:33:33:bf:1c: ea:91:12:ad:33:03:33:51:ef:00:83:07:01:19:f7:d4:5d:cc: 33:1c:75:89:87:44:6f:17:cd:88:46:06:46:88:92:d2:97:e6: 40:9e:5f:40:91:e4:1f:26:1d:6e:93:e8:ef:ec:fa:f4:df:69: 02:f5:7b:88:cc:18:3d:f9:b1:df:88:53:ed:50:e3:db:54:18: 27:54:8c:e2:fd:3d:df:0a:7e:64:52:20:8e:e9:38:1d:fd:50: 32:b6:5e:08:b6:b2:ca:82:6c:d4:6f:40:c1:e5:c8:a1:e7:af: 82:24:af:1a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeNqJ6rgO0LzbaYnzFFX8PH0ae+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMDA1MVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAMTczNWFiZTUzMjVkY2I4NjQwYzYw OTM5OTljMDVkYTg0NjM2MDEzN2Y0NTU2NjNkNzk0NGFkZjY1M2QzMDhhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9tpIyBPMzcpX93ZXnBkd9eT8vhM xQBBHx1fzhgQQaIax9oDCDX3FMJnXEgtFl2e/EqSQjzAzkDnCAfmYrbXEw2mF3iD z83GHK8ivMo0g+BZueHRSU+TT7ykZeO2xumqfMPras1wUZFnjEpOriDtbqCOwxlM pAZvTd6NFuR+cgnY4xO7crDoDAcXemDLV6QIouQFotj2c7sGTou8m8YEy90KCUSI 0U8M4FSnLt7/vN0kukYt+kFPTbhD57G8VPYto+uGqIF8QIAuoEH/FsVXPIF7kboi zdOnJ+psxSrLr3dWs3Q6XxIbIRXijlF1O8oEvcFpHyT5T+Z9QzvJYzBRzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDxpVbxp6m+sBXQoDzwd3tAfmqYlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwMDM1Njc0LTE1ZmYtNDM0ZS1iNGQyLTQ0ZmM2MDEwYTFhYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaOAwDQYJKoZIhvcNAQELBQADggEBAK+8y8HoMUMJ2eNgGmkw kYWHf5aqSTnVfgAODCRQNqwgxM7/oWZermX//bGlkwywARixD3pPhYXFJ9T9zr/K LnHrwyRlLSlQVej6rkWxAjiljNy/Qpd1K9ChWwyGOAeHCcxMAOFOifPv4dNlTLGN eAD8wsg/yEnpFDfNlJVZFSqNsaKsk3tlq+LezOPMMzO/HOqREq0zAzNR7wCDBwEZ 99RdzDMcdYmHRG8XzYhGBkaIktKX5kCeX0CR5B8mHW6T6O/s+vTfaQL1e4jMGD35 sd+IU+1Q49tUGCdUjOL9Pd8KfmRSII7pOB39UDK2Xgi2ssqCbNRvQMHlyKHnr4Ik rxo= -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:46 2025 by rpki-client