$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa File: a018f2e9-f03d-4656-89f3-616151515896.roa (raw, json) Hash identifier: T4sOFhXgqrXDWxKqyiBpIBU3yuS34RxEWx56f+KoghE= Subject key identifier: F7:50:3C:F7:37:0F:6F:C8:2B:58:0B:36:88:95:8B:92:8F:7F:FF:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 123B91D60ABAACC3F4FFEB79B107B79E3B90AD6F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa Signing time: Fri 19 Sep 2025 00:00:38 +0000 ROA not before: Fri 19 Sep 2025 00:00:38 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 126.191.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3b:91:d6:0a:ba:ac:c3:f4:ff:eb:79:b1:07:b7:9e:3b:90:ad:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:00:38 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=2e0f2b974c3f4b275b9ca64de45f31edce004b3073a9151df039a1f352ae42f5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:f3:f0:30:28:b1:7e:e7:fa:ed:a1:29:a5: de:65:72:5c:f0:38:18:29:0e:96:18:8f:3f:e5:47: a2:a7:30:9b:fb:a2:1b:30:b2:ac:55:af:da:7e:d9: 78:c8:c3:51:fc:aa:da:db:1d:6a:15:48:ad:10:ab: ef:d4:3f:54:b0:67:5d:1e:2b:db:be:9d:c5:95:41: ba:f5:04:55:aa:37:4e:9b:7c:9e:47:29:27:84:1d: 5f:00:65:f7:dd:1c:84:14:49:3b:81:00:4c:5d:00: b3:74:26:62:b6:b5:85:45:8b:bb:ff:42:3b:32:c0: a0:fd:e8:64:dc:9f:36:18:59:a6:0e:e7:4e:a5:bd: 19:2b:82:26:ca:58:50:ee:81:fd:05:a9:a7:c5:6b: 11:a4:1e:d6:80:db:71:c4:56:28:2d:17:3a:4d:01: 02:8f:bb:f7:68:c5:8d:60:55:fc:6a:ab:ad:cf:ab: 97:6d:41:89:e5:06:d9:b7:3d:8f:d9:48:10:8a:32: 6c:41:99:e6:5d:d8:24:58:e6:54:42:c2:95:92:10: cc:d6:62:e5:7e:a9:0a:42:e9:6a:83:2e:59:cd:2c: 28:88:17:22:1c:24:73:2e:50:96:0d:8b:57:f0:d2: 68:92:c7:ac:27:19:1b:8a:21:f4:02:fa:74:47:db: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:50:3C:F7:37:0F:6F:C8:2B:58:0B:36:88:95:8B:92:8F:7F:FF:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.191.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:9e:02:89:97:12:07:23:67:ec:4c:e5:dd:58:f6:cf:59:48: 5c:12:16:d7:64:f6:7c:c7:fb:5b:3a:dd:14:48:bf:a4:a7:89: dd:cc:c9:3f:c8:90:3c:b0:26:4c:45:f8:54:17:8e:4b:fa:8c: 23:f4:81:4b:ae:bc:1a:4d:d4:13:62:ad:97:2e:c2:00:ff:d5: bd:8f:48:bd:32:89:95:72:b8:66:28:f1:25:13:b2:d2:ed:52: cc:3b:54:f5:93:db:b6:20:94:87:dd:3b:f0:6d:ae:1a:88:ff: ea:a7:35:96:b0:28:d4:0c:9f:ff:13:1d:18:84:3b:20:1e:27: 0c:7b:fb:95:8e:67:6d:a4:a0:58:59:0a:2c:eb:60:3f:ff:43: e8:63:ec:55:49:9b:d2:3a:fa:29:ad:a3:65:5e:d8:5c:64:cf: 63:db:a8:c0:e7:2e:88:c2:3f:0b:18:d7:ee:3a:dc:d4:46:7f: 9c:ac:80:1d:eb:54:c5:3c:8d:19:7f:41:fb:c9:b4:84:78:c5: 05:23:5c:fa:ec:c0:b4:56:bc:55:68:16:95:12:5f:23:17:2b: 09:aa:8a:a2:80:fa:ac:6f:1d:4d:8b:36:e8:7e:b3:8d:5b:05: d0:24:6a:2f:52:5c:b9:be:06:7d:b8:c8:19:94:2f:98:3a:72: a0:f9:c6:47 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUEjuR1gq6rMP0/+t5sQe3njuQrW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMDAzOFoX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAMmUwZjJiOTc0YzNmNGIyNzViOWNh NjRkZTQ1ZjMxZWRjZTAwNGIzMDczYTkxNTFkZjAzOWExZjM1MmFlNDJmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJjz8DAosX7n+u2hKaXeZXJc8DgY KQ6WGI8/5UeipzCb+6IbMLKsVa/aftl4yMNR/Kra2x1qFUitEKvv1D9UsGddHivb vp3FlUG69QRVqjdOm3yeRyknhB1fAGX33RyEFEk7gQBMXQCzdCZitrWFRYu7/0I7 MsCg/ehk3J82GFmmDudOpb0ZK4ImylhQ7oH9BamnxWsRpB7WgNtxxFYoLRc6TQEC j7v3aMWNYFX8aqutz6uXbUGJ5QbZtz2P2UgQijJsQZnmXdgkWOZUQsKVkhDM1mLl fqkKQulqgy5ZzSwoiBciHCRzLlCWDYtX8NJoksesJxkbiiH0Avp0R9ulRwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFPdQPPc3D2/IK1gLNoiVi5KPf//JMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EwMThmMmU5LWYwM2QtNDY1Ni04OWYzLTYxNjE1MTUxNTg5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfr8wDQYJKoZIhvcNAQELBQADggEBAIKeAomXEgcjZ+xM5d1Y9s9Z SFwSFtdk9nzH+1s63RRIv6Snid3MyT/IkDywJkxF+FQXjkv6jCP0gUuuvBpN1BNi rZcuwgD/1b2PSL0yiZVyuGYo8SUTstLtUsw7VPWT27YglIfdO/BtrhqI/+qnNZaw KNQMn/8THRiEOyAeJwx7+5WOZ22koFhZCizrYD//Q+hj7FVJm9I6+imto2Ve2Fxk z2PbqMDnLojCPwsY1+463NRGf5ysgB3rVMU8jRl/QfvJtIR4xQUjXPrswLRWvFVo FpUSXyMXKwmqiqKA+qxvHU2LNuh+s41bBdAkai9SXLm+Bn24yBmUL5g6cqD5xkc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:19 2025 by rpki-client