$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa File: 204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa (raw, json) Hash identifier: EmE8+r0/X5buHgdGKB1vt6dh6SGQ4YFwrRlPmCq4EaI= Subject key identifier: 78:E8:1D:7C:B5:1B:17:55:34:A3:6C:96:C3:C0:D8:5A:17:71:24:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FEE7237B860C48C479991090365D90FEEBECDB4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa Signing time: Thu 26 Jun 2025 20:09:21 +0000 ROA not before: Thu 26 Jun 2025 20:09:21 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ee:72:37:b8:60:c4:8c:47:99:91:09:03:65:d9:0f:ee:be:cd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:09:21 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=76af2a92c546d2d27c38feeffe70555d5d6b9d85eba86969b1968c1da3c4ee8b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:74:04:c7:48:c5:4f:2b:8d:9b:cc:d3:00: f4:29:2a:f7:d8:94:4b:56:ca:cb:3f:4a:0a:c8:86: 92:d0:ba:f9:07:12:0f:56:b8:c3:ff:a4:b2:bf:2b: de:d6:85:bb:35:b7:2f:ee:1b:ee:81:ec:b3:e1:31: 68:b5:26:04:d4:91:ab:ae:ab:30:27:9c:fb:ae:9f: 88:cd:f6:13:75:1a:56:94:62:57:e8:9d:fd:af:8b: 7a:79:b1:e2:09:69:62:ff:75:40:dc:56:63:0f:7e: 94:8c:77:de:c0:87:04:62:40:63:60:e6:43:d9:3a: 0e:68:05:cb:c2:61:7f:3d:97:69:33:a6:8d:2c:95: 01:8c:50:35:85:e0:e2:24:e8:f7:61:02:19:0a:58: 75:9b:7b:f8:58:a7:b1:bc:67:03:ad:32:c5:30:42: 86:c1:d0:58:97:f8:71:cf:c7:27:61:7b:67:83:a6: d8:fd:bc:2f:1b:3e:fd:c6:74:23:35:c5:17:b1:5f: 5f:50:c4:2e:48:89:8e:b5:d8:fa:e9:b0:9d:67:7a: 93:dc:84:50:3d:2f:e3:97:9a:fe:93:2f:9f:d6:a8: 60:97:2d:86:e8:35:ed:ec:b3:0c:7d:2e:e3:ac:df: 91:d1:67:d1:b8:1f:75:60:a9:3f:3c:da:32:0d:36: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:1D:7C:B5:1B:17:55:34:A3:6C:96:C3:C0:D8:5A:17:71:24:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c840::/46 Signature Algorithm: sha256WithRSAEncryption 74:7d:1e:ce:cd:9c:83:7d:fa:ae:9b:df:b5:8c:e3:43:fa:16: 84:97:22:c0:24:03:66:ab:62:97:d7:90:ab:77:59:4a:b7:75: dd:57:f6:7f:58:76:89:f5:a6:18:de:b4:e9:53:78:be:da:4b: 64:e3:97:7d:ec:6c:21:ad:f3:96:35:ad:6a:b1:cf:8f:96:29: 16:26:26:ad:7c:b8:51:cf:75:70:17:a0:d8:62:c4:83:21:60: 44:30:12:ab:a6:d8:1c:fa:27:ff:30:4d:9e:5c:ff:ba:70:a7: c1:af:9c:a7:22:8c:26:b2:ce:22:df:d9:11:36:a2:82:09:fe: 9e:2e:4b:0b:56:6d:68:dc:63:90:14:e6:1a:a9:5c:00:4f:f7: 22:73:eb:11:31:ac:43:53:2a:4f:d3:d1:9d:63:bc:c7:0a:3a: 3f:ef:d9:94:57:18:44:42:82:52:59:85:67:bd:fa:7b:b1:eb: a2:c3:f2:6e:d6:57:90:dc:e0:1f:c6:c0:27:d2:a2:21:fd:fe: 43:13:e8:5e:bc:b8:13:c0:71:16:30:4a:55:6e:40:59:90:8a: fc:d0:dd:70:88:3e:2a:cd:9c:57:fb:19:85:51:2f:e9:bb:d6: 13:f4:0a:a1:8a:21:4a:a8:34:98:d3:58:cd:fb:70:15:64:06: 77:37:53:d2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf+5yN7hgxIxHmZEJA2XZD+6+zbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDkyMVoX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNANzZhZjJhOTJjNTQ2ZDJkMjdjMzhm ZWVmZmU3MDU1NWQ1ZDZiOWQ4NWViYTg2OTY5YjE5NjhjMWRhM2M0ZWU4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU90BMdIxU8rjZvM0wD0KSr32JRL VsrLP0oKyIaS0Lr5BxIPVrjD/6Syvyve1oW7Nbcv7hvugeyz4TFotSYE1JGrrqsw J5z7rp+IzfYTdRpWlGJX6J39r4t6ebHiCWli/3VA3FZjD36UjHfewIcEYkBjYOZD 2ToOaAXLwmF/PZdpM6aNLJUBjFA1heDiJOj3YQIZClh1m3v4WKexvGcDrTLFMEKG wdBYl/hxz8cnYXtng6bY/bwvGz79xnQjNcUXsV9fUMQuSImOtdj66bCdZ3qT3IRQ PS/jl5r+ky+f1qhgly2G6DXt7LMMfS7jrN+R0WfRuB91YKk/PNoyDTaG0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHjoHXy1GxdVNKNslsPA2FoXcSSgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNGQ4M2MwLTNmOTQtNGNhOC1iMzZjLTJjZDNjYTkyN2NmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88hAMA0GCSqGSIb3DQEBCwUAA4IBAQB0fR7OzZyDffqum9+1 jOND+haElyLAJANmq2KX15Crd1lKt3XdV/Z/WHaJ9aYY3rTpU3i+2ktk45d97Gwh rfOWNa1qsc+PlikWJiatfLhRz3VwF6DYYsSDIWBEMBKrptgc+if/ME2eXP+6cKfB r5ynIowmss4i39kRNqKCCf6eLksLVm1o3GOQFOYaqVwAT/cic+sRMaxDUypP09Gd Y7zHCjo/79mUVxhEQoJSWYVnvfp7seuiw/Ju1leQ3OAfxsAn0qIh/f5DE+hevLgT wHEWMEpVbkBZkIr80N1wiD4qzZxX+xmFUS/pu9YT9AqhiiFKqDSY01jN+3AVZAZ3 N1PS -----END CERTIFICATE-----Generated at Sun Jun 29 07:41:48 2025 by rpki-client