$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa File: daef484d-11aa-4bc3-89ae-50742593b34c.roa (raw, json) Hash identifier: DmN3sICcTMcws6owSPr5K6Mco8Gb9h05tjSlmNDnlSc= Subject key identifier: 7F:9B:35:A1:FD:8D:D7:45:64:6C:9F:F0:E3:55:D7:B5:51:20:57:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6667A6C7037F45B57CC39543AB2F1056E1FB05EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa Signing time: Sat 23 Aug 2025 00:30:57 +0000 ROA not before: Sat 23 Aug 2025 00:30:57 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:67:a6:c7:03:7f:45:b5:7c:c3:95:43:ab:2f:10:56:e1:fb:05:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:30:57 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=7dff20260513e1658f9408a42ed0012e617bcf06fe81fb3a2dde6b9f6721a46f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:7f:aa:92:d3:77:a4:4a:f1:19:60:b4:69: 02:f2:36:4e:51:ff:ea:08:01:8b:75:62:30:b2:d2: 0a:f7:a3:ae:27:3c:61:a3:57:7a:9e:55:37:5e:07: b8:ec:69:17:99:ee:3d:88:a9:09:b2:56:14:ab:bd: e6:1c:7e:6b:19:88:f2:de:16:cc:7f:27:8e:f1:a7: bc:a2:ca:53:bd:1c:3a:21:07:19:eb:5b:da:78:e0: 43:9e:98:78:37:0d:19:3d:8f:20:8f:9a:8f:0e:fd: bf:51:98:57:c3:5a:9f:9f:fb:3c:c9:ec:18:94:89: c9:00:90:15:92:2e:00:17:e6:83:71:58:87:de:1f: 35:a1:32:f8:c4:2f:c7:2d:6c:e3:b7:7e:fd:c0:9c: 70:7e:60:dc:53:0d:d4:20:9c:59:bb:6d:f8:c0:b3: dd:77:80:48:81:92:d1:bd:09:bc:84:d2:95:2f:65: c4:d2:9c:7c:b4:81:8f:4d:b0:91:7b:55:5b:e0:08: c4:63:11:13:ea:51:f2:88:56:10:39:e9:58:3e:46: 48:f8:16:a6:94:14:d1:d6:9f:e8:85:1b:d2:31:2c: a1:ce:89:6c:04:8d:75:c4:7a:40:bb:7f:35:15:52: 31:88:82:a9:b1:9c:80:f6:e7:a3:b3:ab:ca:ae:ab: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:35:A1:FD:8D:D7:45:64:6C:9F:F0:E3:55:D7:B5:51:20:57:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4800::/40 Signature Algorithm: sha256WithRSAEncryption a5:98:07:a8:e3:6a:30:2a:17:e0:ef:71:08:6a:2c:d5:63:cd: 8a:28:ee:e6:c2:17:45:a4:11:3e:34:c0:e5:6c:25:69:be:4a: 96:96:b9:01:6c:b6:88:52:c8:10:85:04:7c:ae:2f:80:ee:ab: e0:32:c1:c7:bc:a7:ae:ee:9c:f9:f2:ce:ba:5a:90:3c:9b:ec: b6:a9:c9:1c:a5:40:2f:1e:0e:37:33:c4:b1:2c:39:d9:59:66: a4:d0:4c:a5:6c:0d:f8:a2:ef:85:ad:0c:10:c9:c2:4c:f6:9e: 2b:d1:31:5b:08:9e:65:e7:40:bc:ad:df:eb:52:25:59:14:eb: c6:ba:d9:8e:29:a1:68:34:8c:82:aa:84:fe:76:a4:37:31:8e: 5b:cf:9a:bd:51:92:10:97:3e:35:ec:58:80:b6:11:63:bf:52: 47:d7:d1:ce:18:79:3d:2c:d5:11:c4:cb:5c:6b:d3:13:af:4c: 6e:cf:16:e9:22:fd:97:1a:24:30:c5:08:43:0c:ee:2f:8a:26: f7:62:f9:17:b3:00:f0:9b:6b:3e:07:8d:67:60:c4:49:d0:18: 37:41:a9:fb:7e:ea:7e:5e:6b:22:6a:a2:0c:ce:32:0f:03:2e: 7f:e1:1d:87:a4:ce:01:8f:b7:a7:5d:f5:6a:50:a1:e3:57:c2: 5f:dc:0f:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZmemxwN/RbV8w5VDqy8QVuH7BeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMzA1N1oX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAN2RmZjIwMjYwNTEzZTE2NThmOTQw OGE0MmVkMDAxMmU2MTdiY2YwNmZlODFmYjNhMmRkZTZiOWY2NzIxYTQ2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptt/qpLTd6RK8RlgtGkC8jZOUf/q CAGLdWIwstIK96OuJzxho1d6nlU3Xge47GkXme49iKkJslYUq73mHH5rGYjy3hbM fyeO8ae8ospTvRw6IQcZ61vaeOBDnph4Nw0ZPY8gj5qPDv2/UZhXw1qfn/s8yewY lInJAJAVki4AF+aDcViH3h81oTL4xC/HLWzjt379wJxwfmDcUw3UIJxZu234wLPd d4BIgZLRvQm8hNKVL2XE0px8tIGPTbCRe1Vb4AjEYxET6lHyiFYQOelYPkZI+Bam lBTR1p/ohRvSMSyhzolsBI11xHpAu381FVIxiIKpsZyA9uejs6vKrqtXkwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH+bNaH9jddFZGyf8ONV17VRIFdGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhZWY0ODRkLTExYWEtNGJjMy04OWFlLTUwNzQyNTkzYjM0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYUgwDQYJKoZIhvcNAQELBQADggEBAKWYB6jjajAqF+DvcQhq LNVjzYoo7ubCF0WkET40wOVsJWm+SpaWuQFstohSyBCFBHyuL4Duq+Aywce8p67u nPnyzrpakDyb7LapyRylQC8eDjczxLEsOdlZZqTQTKVsDfii74WtDBDJwkz2nivR MVsInmXnQLyt3+tSJVkU68a62Y4poWg0jIKqhP52pDcxjlvPmr1RkhCXPjXsWIC2 EWO/UkfX0c4YeT0s1RHEy1xr0xOvTG7PFuki/ZcaJDDFCEMM7i+KJvdi+RezAPCb az4HjWdgxEnQGDdBqft+6n5eayJqogzOMg8DLn/hHYekzgGPt6dd9WpQoeNXwl/c D38= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:29 2025 by rpki-client