$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7620bdd3-e2c1-41e1-8aa0-78558b772155.roa File: 7620bdd3-e2c1-41e1-8aa0-78558b772155.roa (raw, json) Hash identifier: zEfLKAQpesgFUDqTPvnvqz30E/wHC2kWIJOzzfVGG0E= Subject key identifier: 57:C9:B7:B5:B9:78:BB:E0:BA:6A:98:2A:42:0D:16:E6:EC:09:94:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5400AA24EAEC57110CCFC2784EF6020DEEE5AF27 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7620bdd3-e2c1-41e1-8aa0-78558b772155.roa Signing time: Thu 26 Jun 2025 20:09:22 +0000 ROA not before: Thu 26 Jun 2025 20:09:22 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:00:aa:24:ea:ec:57:11:0c:cf:c2:78:4e:f6:02:0d:ee:e5:af:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:09:22 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=54cef6d2f1676f5bbda6b030f8d09fb8d7562079f16f9fd73466b86dbc1fcc7b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:e2:7e:5f:e5:ed:ee:a7:66:c9:3b:16:d6: df:42:41:67:b2:35:7a:c8:47:6a:4b:e6:3d:f8:9a: 99:ae:dc:9c:ac:ce:34:7b:b3:ba:10:ae:eb:75:65: 54:08:8b:10:51:a2:ce:c9:ad:16:85:6b:04:28:ff: 5b:83:61:15:60:69:ec:5b:e7:44:90:7d:ab:a8:93: 52:47:73:9f:31:4f:48:02:ed:3f:19:08:cf:b7:d8: 4e:93:be:6c:89:19:5f:84:9d:5d:e3:53:40:55:cd: 91:e7:bb:bb:97:fc:af:06:0c:4b:bb:b5:ad:86:71: 14:ea:fe:26:0d:b1:91:b6:7b:83:7f:3b:d1:c8:2c: 2f:6e:7c:34:e8:a0:48:ee:b0:a0:00:58:63:59:cc: 1c:9a:0e:4f:c0:a6:64:5e:b9:d0:fc:d7:4d:42:ba: c0:74:b0:74:c4:38:81:f9:ec:96:f4:a4:71:6e:66: a2:d7:9d:85:aa:2f:20:eb:27:da:f1:d0:1d:d9:f7: 70:63:63:96:0b:90:fc:b3:e5:9c:2c:ba:0d:09:41: 60:35:16:00:43:68:72:47:fa:a7:c0:a1:7b:6b:70: d6:65:73:a7:c0:17:b3:e2:f3:30:55:1b:3d:64:cb: 92:30:28:17:05:56:7b:46:a0:18:04:f2:c0:5c:5a: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C9:B7:B5:B9:78:BB:E0:BA:6A:98:2A:42:0D:16:E6:EC:09:94:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7620bdd3-e2c1-41e1-8aa0-78558b772155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c880::/46 Signature Algorithm: sha256WithRSAEncryption 36:75:97:ad:52:7d:1a:9d:a3:1e:ed:b2:db:e4:13:7e:a4:9e: 91:b9:ea:9e:3d:4a:ca:50:1e:5e:75:85:e7:ac:41:be:1d:58: 95:41:9e:b2:c5:3e:9b:a9:10:0a:9d:a5:71:70:24:cf:79:22: 6d:bb:ef:3d:6f:b3:53:a6:64:70:e9:75:87:16:8b:63:78:07: 80:10:eb:24:11:5b:f9:97:c4:ee:0f:84:d9:53:b3:65:27:31: e0:d4:79:c2:4f:43:d9:b1:10:62:1e:19:df:7b:ab:15:7c:0e: 41:a1:13:51:37:12:8c:38:ae:61:1d:74:1f:d1:23:d7:33:72: 00:7f:0d:33:f2:72:4a:be:3b:ed:f6:7d:9a:dc:fc:f1:f3:c6: 69:7f:36:ce:be:fc:90:fb:78:a0:1b:a6:b5:a9:46:25:ae:fe: 9c:93:d8:e4:99:90:2d:f3:96:54:a8:76:54:73:42:d6:7f:eb: 71:09:70:4a:db:14:3b:85:ff:c9:1e:8f:9a:1f:27:cd:51:94: c3:7a:ec:3b:59:7a:45:fd:af:11:e1:db:74:95:62:37:6f:02: 32:07:f1:b9:39:06:75:c8:05:c5:a2:ae:53:fb:de:22:ce:00: 2d:b9:ec:b5:aa:d5:48:91:68:4d:29:6d:61:26:e7:fe:5d:d7: 51:6e:73:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVACqJOrsVxEMz8J4TvYCDe7lrycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDkyMloX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNANTRjZWY2ZDJmMTY3NmY1YmJkYTZi MDMwZjhkMDlmYjhkNzU2MjA3OWYxNmY5ZmQ3MzQ2NmI4NmRiYzFmY2M3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e/ifl/l7e6nZsk7FtbfQkFnsjV6 yEdqS+Y9+JqZrtycrM40e7O6EK7rdWVUCIsQUaLOya0WhWsEKP9bg2EVYGnsW+dE kH2rqJNSR3OfMU9IAu0/GQjPt9hOk75siRlfhJ1d41NAVc2R57u7l/yvBgxLu7Wt hnEU6v4mDbGRtnuDfzvRyCwvbnw06KBI7rCgAFhjWcwcmg5PwKZkXrnQ/NdNQrrA dLB0xDiB+eyW9KRxbmai152Fqi8g6yfa8dAd2fdwY2OWC5D8s+WcLLoNCUFgNRYA Q2hyR/qnwKF7a3DWZXOnwBez4vMwVRs9ZMuSMCgXBVZ7RqAYBPLAXFrQ+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFfJt7W5eLvgumqYKkINFubsCZRrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2MjBiZGQzLWUyYzEtNDFlMS04YWEwLTc4NTU4Yjc3MjE1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88iAMA0GCSqGSIb3DQEBCwUAA4IBAQA2dZetUn0anaMe7bLb 5BN+pJ6RueqePUrKUB5edYXnrEG+HViVQZ6yxT6bqRAKnaVxcCTPeSJtu+89b7NT pmRw6XWHFotjeAeAEOskEVv5l8TuD4TZU7NlJzHg1HnCT0PZsRBiHhnfe6sVfA5B oRNRNxKMOK5hHXQf0SPXM3IAfw0z8nJKvjvt9n2a3Pzx88ZpfzbOvvyQ+3igG6a1 qUYlrv6ck9jkmZAt85ZUqHZUc0LWf+txCXBK2xQ7hf/JHo+aHyfNUZTDeuw7WXpF /a8R4dt0lWI3bwIyB/G5OQZ1yAXFoq5T+94izgAtuey1qtVIkWhNKW1hJuf+XddR bnO4 -----END CERTIFICATE-----Generated at Tue Jul 1 12:30:50 2025 by rpki-client