$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa File: 783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa (raw, json) Hash identifier: a7ImChbQfKQZO1iK3r7lr6rLjtjuRm9R4W/rZ5QM8zQ= Subject key identifier: 6D:D9:D4:9D:D7:7A:6A:E9:7E:DC:CD:BA:27:77:E5:38:94:0B:48:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40E500F7E877FF64B5492491221B28EE4AE0A6C0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa Signing time: Sat 28 Jun 2025 00:00:11 +0000 ROA not before: Sat 28 Jun 2025 00:00:11 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e5:00:f7:e8:77:ff:64:b5:49:24:91:22:1b:28:ee:4a:e0:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 28 00:00:11 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=eff8bf28694e7ef47bf7356ee2f19fc2a765e2fd5be6fc5eaf1f95d4fbb856f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:75:f0:4b:69:c1:d0:f1:81:7d:27:9e:2d: b5:13:88:38:38:c8:a9:41:a5:25:a1:50:10:15:47: c0:a6:e5:bc:ee:3e:7c:76:d4:04:cd:87:21:84:03: 1b:dc:7b:f5:dc:bf:dd:fd:9f:31:28:80:64:6f:15: a1:15:df:0b:da:ce:0b:5f:fb:f0:bb:32:ed:a8:82: 0e:57:6a:30:d4:49:b2:0b:53:50:32:0f:d9:02:23: 11:41:73:03:75:ab:1c:be:70:2b:bc:58:f3:c3:f2: 24:ba:c6:9a:02:7e:00:b1:be:ae:4e:39:79:da:14: 49:15:c7:45:48:a4:5b:19:ea:9c:aa:c7:08:fe:16: 17:1c:99:6c:ac:58:c6:c7:1a:0c:48:52:de:43:a3: f6:e7:8f:9c:d1:b0:0f:ab:cb:4f:24:98:a3:30:7d: 24:e9:81:38:16:a4:38:43:bd:b3:5a:6d:24:ed:c9: c5:7c:fe:e1:91:ac:17:02:02:dc:8c:22:14:aa:e4: cd:d9:74:45:0a:8f:44:96:0f:1a:7d:28:b1:af:5d: 06:6f:58:c6:ad:89:e3:76:ea:25:6d:80:fe:61:ec: 65:e1:78:66:86:cf:b4:49:c6:66:e6:30:71:52:90: 9d:e7:64:ff:c2:b2:24:69:af:b7:a6:10:46:8b:6f: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:D4:9D:D7:7A:6A:E9:7E:DC:CD:BA:27:77:E5:38:94:0B:48:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:9000::/40 Signature Algorithm: sha256WithRSAEncryption ad:67:27:89:6a:f9:a9:f4:a3:97:e6:0c:73:11:3d:e4:80:8d: 73:49:d0:e2:f9:17:7e:3a:b0:7e:08:b7:71:29:47:67:c2:9c: 2e:62:af:2f:a8:f7:94:d0:53:53:59:d9:22:2a:8e:e5:24:62: 2a:0e:ac:28:c6:fc:21:d5:66:c7:ee:64:c0:df:7b:fb:91:ab: f5:27:f0:6a:fe:6d:57:0a:b8:df:ea:7e:c8:bd:45:c6:cc:a7: 19:70:7d:77:70:f4:16:bc:8b:e9:00:f2:86:e2:3f:35:cd:8b: 63:ba:f8:55:c8:82:31:91:c9:ad:f5:cf:ee:88:6b:4b:66:32: 7d:60:5b:9d:b9:58:01:4f:25:60:b6:75:28:0e:72:78:06:b2: 56:1b:6f:2c:46:6d:b1:52:2a:0d:21:1c:89:cf:b5:cd:85:6d: a3:e1:92:6c:5a:72:03:b8:03:25:ed:6c:dc:33:74:47:1e:97: 40:35:18:e8:59:5e:1d:7a:44:a0:06:82:ab:80:35:98:dd:2a: f2:d8:39:2b:ce:12:6a:a5:07:84:ff:1a:00:b1:4e:7e:75:02: cc:5e:d5:21:78:46:59:d8:45:81:e2:3b:3b:68:64:1c:5e:89: 72:31:9a:df:ea:8e:08:9b:28:bb:df:05:e9:01:3d:c3:b9:8d: 49:0a:bd:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQOUA9+h3/2S1SSSRIhso7krgpsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyODAwMDAxMVoX DTI1MDgwMjIzNTk1OVowejFJMEcGA1UEBRNAZWZmOGJmMjg2OTRlN2VmNDdiZjcz NTZlZTJmMTlmYzJhNzY1ZTJmZDViZTZmYzVlYWYxZjk1ZDRmYmI4NTZmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps518EtpwdDxgX0nni21E4g4OMip QaUloVAQFUfApuW87j58dtQEzYchhAMb3Hv13L/d/Z8xKIBkbxWhFd8L2s4LX/vw uzLtqIIOV2ow1EmyC1NQMg/ZAiMRQXMDdascvnArvFjzw/IkusaaAn4Asb6uTjl5 2hRJFcdFSKRbGeqcqscI/hYXHJlsrFjGxxoMSFLeQ6P254+c0bAPq8tPJJijMH0k 6YE4FqQ4Q72zWm0k7cnFfP7hkawXAgLcjCIUquTN2XRFCo9Elg8afSixr10Gb1jG rYnjduolbYD+Yexl4Xhmhs+0ScZm5jBxUpCd52T/wrIkaa+3phBGi28BTQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG3Z1J3XemrpftzNuid35TiUC0iGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4M2I5NmY0LTgxYWQtNGQxZC1hMGU2LTY0N2EwZmYzOTQ0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauZAwDQYJKoZIhvcNAQELBQADggEBAK1nJ4lq+an0o5fmDHMR PeSAjXNJ0OL5F346sH4It3EpR2fCnC5iry+o95TQU1NZ2SIqjuUkYioOrCjG/CHV ZsfuZMDfe/uRq/Un8Gr+bVcKuN/qfsi9RcbMpxlwfXdw9Ba8i+kA8obiPzXNi2O6 +FXIgjGRya31z+6Ia0tmMn1gW525WAFPJWC2dSgOcngGslYbbyxGbbFSKg0hHInP tc2FbaPhkmxacgO4AyXtbNwzdEcel0A1GOhZXh16RKAGgquANZjdKvLYOSvOEmql B4T/GgCxTn51Asxe1SF4RlnYRYHiOztoZBxeiXIxmt/qjgibKLvfBekBPcO5jUkK vTo= -----END CERTIFICATE-----Generated at Sun Jun 29 04:45:13 2025 by rpki-client