$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa File: 79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa (raw, json) Hash identifier: s3qbGh3NLC9omsKVYJq6ro9v8fvLBG1KGGFY6dTEjz8= Subject key identifier: 16:72:B5:C7:4E:0B:FA:99:90:EB:80:3E:E8:69:4D:A8:17:87:AE:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0688BA0C0016B5A2C5C0A1C12F9835694C98CB78 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa Signing time: Thu 26 Jun 2025 20:07:29 +0000 ROA not before: Thu 26 Jun 2025 20:07:29 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:88:ba:0c:00:16:b5:a2:c5:c0:a1:c1:2f:98:35:69:4c:98:cb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:07:29 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=2084010bd6b330e5170afe72893f4cbf01b9366d7a308ae816f763a6f5861c9a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:48:89:7c:1f:9c:37:3e:a3:f2:8c:e2:06: e2:6b:ef:a7:e8:63:0f:34:68:23:88:cc:18:c0:b3: d4:96:02:67:7c:56:c5:99:6d:60:e6:e9:fb:78:42: 5e:cd:7d:d1:95:16:ff:00:9d:37:af:7b:97:1e:d8: 60:52:e8:55:d0:df:85:27:aa:7b:ad:f4:b8:93:19: 24:63:40:9e:fc:80:85:11:64:07:72:12:b2:f6:70: 01:26:45:1d:98:3e:9c:42:8a:48:97:77:13:df:29: d1:8c:59:46:c1:91:2b:0d:83:16:4f:2e:03:3e:36: fb:92:dc:f6:ed:99:ac:47:be:5f:25:73:72:a8:c6: 40:b1:d4:e4:ae:b2:57:18:b0:6d:32:6a:7b:c3:10: 96:d0:29:a3:aa:82:5e:23:6c:09:b9:0c:4b:eb:43: 6e:ad:4b:66:03:70:a7:74:8a:b4:b3:81:a5:ef:7f: 47:ed:a1:86:82:d3:be:be:82:a9:6a:fc:c4:28:ca: ad:20:56:01:f8:9a:bb:f9:e7:83:84:f1:0f:7c:9c: 47:34:ed:52:da:6f:8b:6f:fc:3c:cd:86:0e:e5:45: 5e:a4:09:04:bf:54:f7:31:d1:d4:c7:56:b1:5e:5c: 0a:2c:1e:76:63:ca:02:17:5c:c2:3a:b4:e7:5c:bd: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:72:B5:C7:4E:0B:FA:99:90:EB:80:3E:E8:69:4D:A8:17:87:AE:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:880::/46 Signature Algorithm: sha256WithRSAEncryption 0d:28:b0:34:b0:20:8f:4d:38:35:46:e7:1f:8d:a0:01:0c:82: bf:7f:8f:95:89:69:c8:11:88:1a:ca:94:7d:0d:5c:62:b6:1f: 9c:dc:b8:fd:0d:29:f7:cc:f0:fb:a7:7a:b7:c0:c5:1d:9c:b2: f4:b9:5a:04:27:c3:df:76:a2:6c:f6:18:50:04:f0:d3:7f:45: 05:99:24:ea:66:45:9a:64:2c:a1:06:d9:ee:d2:38:9f:4e:a7: 12:e2:4e:8d:b3:6e:55:f9:13:ec:8f:f1:14:fe:4f:f6:33:56: ea:33:b7:f8:ce:c5:4b:fb:9d:65:44:0c:3b:f0:5f:61:45:63: c3:2f:57:9b:0a:d3:56:7b:84:b6:2d:d2:0b:63:ae:c2:19:fa: cc:76:de:7f:cf:96:31:01:02:08:0d:38:87:68:69:cd:00:c5: 18:0e:4a:91:bb:c6:40:eb:09:83:a0:5a:b1:7e:c0:c2:a3:25: 3b:be:c6:96:99:39:26:ac:7a:aa:a5:b5:90:f0:4d:4f:ce:5e: 61:17:e0:8a:6f:23:87:4d:0f:89:7e:d0:e8:14:56:74:c5:c0: 7d:b6:16:51:f8:97:3b:11:48:67:d9:d7:06:6b:65:1c:b9:65: 44:8b:a7:25:f6:32:e8:95:1b:c4:eb:07:08:c8:6a:c9:b1:ad: e8:58:c8:99 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBoi6DAAWtaLFwKHBL5g1aUyYy3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDcyOVoX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNAMjA4NDAxMGJkNmIzMzBlNTE3MGFm ZTcyODkzZjRjYmYwMWI5MzY2ZDdhMzA4YWU4MTZmNzYzYTZmNTg2MWM5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1lIiXwfnDc+o/KM4gbia++n6GMP NGgjiMwYwLPUlgJnfFbFmW1g5un7eEJezX3RlRb/AJ03r3uXHthgUuhV0N+FJ6p7 rfS4kxkkY0Ce/ICFEWQHchKy9nABJkUdmD6cQopIl3cT3ynRjFlGwZErDYMWTy4D Pjb7ktz27ZmsR75fJXNyqMZAsdTkrrJXGLBtMmp7wxCW0CmjqoJeI2wJuQxL60Nu rUtmA3CndIq0s4Gl739H7aGGgtO+voKpavzEKMqtIFYB+Jq7+eeDhPEPfJxHNO1S 2m+Lb/w8zYYO5UVepAkEv1T3MdHUx1axXlwKLB52Y8oCF1zCOrTnXL2eSQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBZytcdOC/qZkOuAPuhpTagXh67oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5ZGZiMmZiLTFmOWYtNDBhMi05YTc2LTg1NGQ3MzhmMjhmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8wiAMA0GCSqGSIb3DQEBCwUAA4IBAQANKLA0sCCPTTg1Rucf jaABDIK/f4+ViWnIEYgaypR9DVxith+c3Lj9DSn3zPD7p3q3wMUdnLL0uVoEJ8Pf dqJs9hhQBPDTf0UFmSTqZkWaZCyhBtnu0jifTqcS4k6Ns25V+RPsj/EU/k/2M1bq M7f4zsVL+51lRAw78F9hRWPDL1ebCtNWe4S2LdILY67CGfrMdt5/z5YxAQIIDTiH aGnNAMUYDkqRu8ZA6wmDoFqxfsDCoyU7vsaWmTkmrHqqpbWQ8E1Pzl5hF+CKbyOH TQ+JftDoFFZ0xcB9thZR+Jc7EUhn2dcGa2UcuWVEi6cl9jLolRvE6wcIyGrJsa3o WMiZ -----END CERTIFICATE-----Generated at Sun Jun 29 05:02:39 2025 by rpki-client