$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa File: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (raw, json) Hash identifier: b/i/s0AvV8fOlGqeT19SrGGpoOQM7iLVVlb9S5vqlO4= Subject key identifier: B7:2C:14:2F:8A:BF:82:C5:71:30:B6:8B:DF:48:7A:50:87:35:47:50 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 69B2D11550F57777B687C5B8AC1571010501CA3C Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa Signing time: Fri 01 Aug 2025 00:50:04 +0000 ROA not before: Fri 01 Aug 2025 00:50:04 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b2:d1:15:50:f5:77:77:b6:87:c5:b8:ac:15:71:01:05:01:ca:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 1 00:50:04 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=2042721c57e3239f2e6db40c8ed2a7c9b033c553f1acfc19e0240214db024b1f, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:70:69:39:1c:e5:01:73:11:43:51:6d:e5: a6:ab:fd:66:6d:3a:38:fb:8d:da:b6:c4:d8:c0:48: 93:66:f1:e4:62:86:30:32:6d:f6:87:70:3a:00:02: 6b:61:1e:c0:3d:32:bb:62:38:95:98:18:91:2e:d0: b2:4f:cf:5a:ba:35:22:91:ee:24:99:a5:a4:36:7e: fc:b8:09:3e:71:3d:a1:70:9a:4e:63:5e:6d:8b:3b: 01:e9:af:59:72:22:fc:db:2f:4a:f7:5e:24:96:8f: 20:67:cb:23:ca:50:96:ab:2b:ec:01:84:05:aa:81: 3b:e0:ff:ad:d1:7a:5b:b2:ea:81:37:df:21:26:d3: e2:f6:ee:2c:b1:a1:a8:76:ac:4f:15:74:6b:06:ca: 9a:18:23:1d:68:c4:75:e5:49:06:48:c6:6c:3a:94: 73:00:b0:0a:58:bd:d4:2f:19:b0:af:4e:b7:47:81: 0a:f1:cc:87:34:e8:3c:00:ce:8c:09:e2:5c:58:23: f4:bb:4c:67:da:72:f2:f8:43:f5:46:4a:4b:dd:4c: 06:d1:af:28:0c:9f:23:95:1d:ea:ce:8f:52:6a:55: ba:15:09:f0:51:ac:0d:cb:e1:1d:13:3e:1e:5e:70: 1b:9c:ff:49:b0:b9:bb:54:65:f9:43:74:4e:86:42: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:14:2F:8A:BF:82:C5:71:30:B6:8B:DF:48:7A:50:87:35:47:50 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 5e:b3:b0:0b:45:2c:7e:5d:71:24:af:ca:22:7b:e4:4e:ad:5a: 54:08:23:9a:72:e1:3d:2e:27:ab:51:d9:15:1d:57:d6:94:80: ee:22:c2:33:03:f1:68:2a:32:ff:aa:9e:c3:6b:03:4d:d0:68: ad:c6:cc:dc:75:ee:05:18:4b:4d:be:4d:11:4f:42:f5:29:79: 1e:6c:97:ac:dd:50:12:c8:98:ec:6b:4f:6b:cc:4f:82:fe:cc: 95:97:35:52:ad:5c:4f:d2:28:99:db:dc:78:80:fe:c2:22:63: 16:cf:95:8d:0d:c0:f2:85:ac:25:a6:3c:59:ef:1b:d7:f8:ff: 90:ab:0a:9a:5d:df:6a:eb:05:d6:dd:27:fd:d4:e2:f4:67:ea: c9:93:e8:56:ca:9f:75:87:4f:da:d7:48:5c:62:a4:1c:fb:8d: 62:9c:ed:34:c0:e3:c3:2d:bf:7c:60:81:69:a1:fb:f1:05:94: 8e:64:6b:06:9c:e3:fd:b1:3b:5a:54:27:3b:64:d0:30:e6:ad: 18:9a:37:3f:88:24:bb:23:9c:a8:bc:f5:38:6d:dc:49:9e:06: 51:15:9b:93:5a:75:9d:6b:00:e6:41:c6:a7:2e:c9:59:29:7f: e3:7c:57:c4:72:3d:54:3c:a6:15:9b:f9:58:44:52:28:b7:21: 2a:a4:0e:7d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUabLRFVD1d3e2h8W4rBVxAQUByjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDgwMTAwNTAwNFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAMjA0MjcyMWM1N2UzMjM5ZjJlNmRi NDBjOGVkMmE3YzliMDMzYzU1M2YxYWNmYzE5ZTAyNDAyMTRkYjAyNGIxZjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF9waTkc5QFzEUNRbeWmq/1mbTo4 +43atsTYwEiTZvHkYoYwMm32h3A6AAJrYR7APTK7YjiVmBiRLtCyT89aujUike4k maWkNn78uAk+cT2hcJpOY15tizsB6a9ZciL82y9K914klo8gZ8sjylCWqyvsAYQF qoE74P+t0XpbsuqBN98hJtPi9u4ssaGodqxPFXRrBsqaGCMdaMR15UkGSMZsOpRz ALAKWL3ULxmwr063R4EK8cyHNOg8AM6MCeJcWCP0u0xn2nLy+EP1RkpL3UwG0a8o DJ8jlR3qzo9SalW6FQnwUawNy+EdEz4eXnAbnP9JsLm7VGX5Q3ROhkKKvQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLcsFC+Kv4LFcTC2i99IelCHNUdQMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzBiMGMyZDE4LTJiNDItNGU1My05ZTZhLWQ2ZjdkNWRjMjMzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQBes7ALRSx+XXEkr8oi e+ROrVpUCCOacuE9LierUdkVHVfWlIDuIsIzA/FoKjL/qp7DawNN0Gitxszcde4F GEtNvk0RT0L1KXkebJes3VASyJjsa09rzE+C/syVlzVSrVxP0iiZ29x4gP7CImMW z5WNDcDyhawlpjxZ7xvX+P+QqwqaXd9q6wXW3Sf91OL0Z+rJk+hWyp91h0/a10hc YqQc+41inO00wOPDLb98YIFpofvxBZSOZGsGnOP9sTtaVCc7ZNAw5q0Ymjc/iCS7 I5yovPU4bdxJngZRFZuTWnWdawDmQcanLslZKX/jfFfEcj1UPKYVm/lYRFIotyEq pA59 -----END CERTIFICATE-----Generated at Mon Aug 4 14:46:15 2025 by rpki-client