$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f63c109-3767-4ab1-9d83-4718a77c8903.roa File: 7f63c109-3767-4ab1-9d83-4718a77c8903.roa (raw, json) Hash identifier: fB06pq0ySBSlpcKtj/RQrrTws82WI9mspdfZzqiwqcU= Subject key identifier: 26:01:A6:D6:8D:E6:78:2F:FF:13:7A:E9:6B:A0:54:50:49:53:F7:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73DD4B5A4A3C37E9DBB49629440E9AB9548AA965 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f63c109-3767-4ab1-9d83-4718a77c8903.roa Signing time: Sat 23 Aug 2025 00:41:31 +0000 ROA not before: Sat 23 Aug 2025 00:41:31 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dd:4b:5a:4a:3c:37:e9:db:b4:96:29:44:0e:9a:b9:54:8a:a9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:41:31 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=45ed47c19c5791b47505835809347ba401cbba541f3cbea8e29a8c3864d1aeb9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:29:65:c1:b6:b2:66:e5:ec:66:e7:2f:c0: dd:a2:ee:76:36:0e:e1:d9:1e:16:f1:95:9a:d2:c6: de:bb:dc:d5:24:8a:ff:ba:d8:db:9e:10:45:1a:0b: 98:20:24:da:ca:4f:e8:ac:2d:48:86:69:32:46:2b: e4:f4:47:c2:48:4a:73:93:b4:8c:7a:4c:da:98:11: 93:2c:72:b1:6b:e1:4c:04:27:09:da:1c:4f:0b:6a: 12:31:ed:68:13:a6:f9:9f:ca:e8:eb:80:2d:d3:7c: 05:6e:5b:92:2f:0e:27:e9:51:f5:23:b5:72:e7:46: 7a:9c:bf:18:54:d5:66:15:25:24:a3:5e:9e:e2:e4: 8c:5f:85:9f:71:55:32:be:34:b5:0d:ee:35:9a:50: 98:cb:76:f7:40:ab:9c:19:9d:ea:95:45:32:e8:77: 82:b6:aa:ba:e1:54:fd:23:84:b7:63:67:f7:b6:9e: 7c:ec:81:a5:d7:33:9f:8f:2a:70:cb:c6:94:ca:f4: f6:57:63:36:85:d0:a7:df:c7:78:88:a7:ee:cd:85: fa:09:e8:2f:bb:fd:f4:34:8e:9f:42:17:67:bb:85: a5:dc:63:77:3b:2b:97:d3:0a:98:26:f2:e9:39:1f: eb:3e:0b:b0:d5:38:db:57:4b:3e:85:79:8a:ce:d2: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:A6:D6:8D:E6:78:2F:FF:13:7A:E9:6B:A0:54:50:49:53:F7:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f63c109-3767-4ab1-9d83-4718a77c8903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:9080::/48 Signature Algorithm: sha256WithRSAEncryption 38:b8:d7:5b:c6:38:b1:23:ba:67:25:cf:7f:04:7a:22:7f:71: fa:68:95:52:7f:1b:7f:1a:bc:7c:b6:a7:b2:d0:72:6d:d7:0d: 05:8c:8c:39:77:a8:79:2c:b6:03:14:4e:45:8c:d2:69:f8:9c: bb:44:26:d5:d4:61:c5:e4:96:1a:5d:d1:3a:7e:fc:e5:b4:0e: 55:3f:1e:b2:0f:a2:27:c5:ce:d0:43:f6:7f:fd:df:57:65:78: a5:11:2f:66:af:f9:b7:3f:34:2a:fa:d8:df:85:91:49:ac:46: dc:6c:7d:2a:50:8c:f1:ea:ff:c9:39:e1:b3:94:cf:25:c8:0c: 80:1b:b0:46:5f:88:e1:60:5a:ff:99:36:7c:1e:93:76:31:50: 76:e5:1e:be:be:c8:d2:63:de:88:3d:64:63:44:0f:f3:77:cd: 81:04:68:7c:dc:03:27:bf:14:0f:86:c2:ae:af:97:57:ee:e3: 24:ff:46:db:2a:69:69:3a:cf:33:25:55:6b:54:5b:a0:7c:1d: af:09:19:f0:37:a5:f6:f9:24:66:f7:c2:78:65:4d:1d:af:ab: c9:8c:5f:dc:55:5c:03:67:d2:2a:9e:a2:bb:ca:6d:e6:b5:b8: 86:6d:d7:ad:af:71:fb:74:7b:0a:fb:54:96:c4:43:e8:92:ee: b3:f5:22:51 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc91LWko8N+nbtJYpRA6auVSKqWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNDEzMVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNANDVlZDQ3YzE5YzU3OTFiNDc1MDU4 MzU4MDkzNDdiYTQwMWNiYmE1NDFmM2NiZWE4ZTI5YThjMzg2NGQxYWViOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11wpZcG2smbl7GbnL8Ddou52Ng7h 2R4W8ZWa0sbeu9zVJIr/utjbnhBFGguYICTayk/orC1IhmkyRivk9EfCSEpzk7SM ekzamBGTLHKxa+FMBCcJ2hxPC2oSMe1oE6b5n8ro64At03wFbluSLw4n6VH1I7Vy 50Z6nL8YVNVmFSUko16e4uSMX4WfcVUyvjS1De41mlCYy3b3QKucGZ3qlUUy6HeC tqq64VT9I4S3Y2f3tp587IGl1zOfjypwy8aUyvT2V2M2hdCn38d4iKfuzYX6Cegv u/30NI6fQhdnu4Wl3GN3OyuX0wqYJvLpOR/rPguw1TjbV0s+hXmKztLDeQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCYBptaN5ngv/xN66WugVFBJU/cLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmNjNjMTA5LTM3NjctNGFiMS05ZDgzLTQ3MThhNzdjODkwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYZCAMA0GCSqGSIb3DQEBCwUAA4IBAQA4uNdbxjixI7pnJc9/ BHoif3H6aJVSfxt/Grx8tqey0HJt1w0FjIw5d6h5LLYDFE5FjNJp+Jy7RCbV1GHF 5JYaXdE6fvzltA5VPx6yD6Inxc7QQ/Z//d9XZXilES9mr/m3PzQq+tjfhZFJrEbc bH0qUIzx6v/JOeGzlM8lyAyAG7BGX4jhYFr/mTZ8HpN2MVB25R6+vsjSY96IPWRj RA/zd82BBGh83AMnvxQPhsKur5dX7uMk/0bbKmlpOs8zJVVrVFugfB2vCRnwN6X2 +SRm98J4ZU0dr6vJjF/cVVwDZ9IqnqK7ym3mtbiGbdetr3H7dHsK+1SWxEPoku6z 9SJR -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:15 2025 by rpki-client