$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa File: 001c821e-ff58-41fe-8cf9-9e4942937836.roa (raw, json) Hash identifier: tiyj+57g0ECJpKEfizo8xxM0uHkDAcTo/ZcYt1Xta0A= Subject key identifier: EE:BA:8A:12:20:7E:60:22:A2:4D:17:AB:3F:4F:DB:78:63:2B:CE:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31C0A7066327748BE13D7E1AD9EA4230E8E076A0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa Signing time: Tue 26 Aug 2025 00:11:27 +0000 ROA not before: Tue 26 Aug 2025 00:11:27 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 00:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c0:a7:06:63:27:74:8b:e1:3d:7e:1a:d9:ea:42:30:e8:e0:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 26 00:11:27 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=f4b4f213980a48ffdab2c195429e980a0156725ff5365e05522e72da5c663228, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:ae:ff:c9:2a:97:80:4e:02:c8:9a:87:47: 5e:46:21:6c:48:fc:d5:2e:18:9d:ab:e5:f1:bb:d1: f0:82:f4:27:57:75:e2:17:ed:03:ff:88:fc:83:ce: 75:29:47:67:d5:ff:4b:ab:12:28:62:fd:55:1b:57: c5:a5:46:e0:7f:05:a3:a1:64:bb:f1:5b:b9:71:4a: 8f:55:c1:49:21:1b:d8:ef:f3:bc:94:c6:eb:8e:85: 0a:ea:9e:03:20:d9:d5:16:d4:5b:b4:b0:c5:83:19: 3a:13:46:8b:1c:22:e3:b7:e0:2a:3f:c2:50:b3:6b: 03:78:e0:5d:5f:c4:1d:11:56:78:ff:9d:16:a1:0a: 20:f3:46:1e:32:78:a2:3a:05:06:99:af:e6:46:7f: e9:8b:25:4d:99:9b:8b:35:50:db:ca:b9:c3:5f:ab: 24:d6:0e:44:04:ee:af:43:af:1f:9c:40:9d:54:83: 66:79:4c:0c:91:6a:d7:e6:72:fc:3f:91:24:80:e0: 65:96:82:ab:30:42:0b:b1:8d:be:fe:c5:06:43:c8: e7:35:3e:29:f2:4f:14:2a:e7:d3:a5:39:65:5c:cc: be:83:7e:fb:ab:e6:52:25:a4:2b:8a:c7:a3:c3:80: 45:85:c0:2c:a8:e7:10:5a:61:cf:65:e1:0a:e9:bd: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:8A:12:20:7E:60:22:A2:4D:17:AB:3F:4F:DB:78:63:2B:CE:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1e:b7:7e:a6:07:ac:80:5e:1d:6f:55:92:70:1c:a9:94:c5:4d: f1:d9:8c:5b:37:24:04:4d:e6:34:c7:bf:4a:34:0d:80:73:f1: 31:c0:8b:95:25:f8:17:fc:29:1b:62:45:a0:9d:70:7e:52:c8: 78:aa:b6:5b:1d:02:25:99:47:a2:f7:ef:3a:5e:5c:ca:26:df: c1:69:d0:e9:42:7d:65:3e:2e:3e:1c:d9:f6:eb:c0:a3:7c:e2: 90:1f:0b:f4:d1:a1:2d:2a:ee:8c:b1:f3:a7:2c:6a:1b:6a:3f: f0:01:bf:69:5e:89:c4:56:3f:05:22:12:c1:41:32:a7:55:4f: d1:3f:df:c2:96:68:a7:59:bf:1c:d6:64:3c:16:fc:4b:b5:0c: 21:51:21:ee:1e:7c:89:dc:b2:66:83:28:7d:d1:46:55:6e:90: 6f:57:b7:31:22:51:93:18:29:69:02:6d:cb:e0:48:3f:b0:d5: 74:33:94:c0:6a:00:80:a8:dc:af:0e:b3:7d:87:ef:54:ef:54: e3:57:fb:ce:01:69:cc:89:82:b5:9c:b8:a5:91:c8:d6:9c:6c: 26:00:b8:8b:e3:10:d6:02:e6:83:3a:44:f7:55:fb:e8:f1:23: 79:ae:94:d2:5f:f8:6f:e3:4b:36:15:be:28:d1:eb:0a:a8:7b: 1f:d3:6d:d8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMcCnBmMndIvhPX4a2epCMOjgdqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNjAwMTEyN1oX DTI1MDkzMDIzNTk1OVowejFJMEcGA1UEBRNAZjRiNGYyMTM5ODBhNDhmZmRhYjJj MTk1NDI5ZTk4MGEwMTU2NzI1ZmY1MzY1ZTA1NTIyZTcyZGE1YzY2MzIyODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQiu/8kql4BOAsiah0deRiFsSPzV Lhidq+Xxu9HwgvQnV3XiF+0D/4j8g851KUdn1f9LqxIoYv1VG1fFpUbgfwWjoWS7 8Vu5cUqPVcFJIRvY7/O8lMbrjoUK6p4DINnVFtRbtLDFgxk6E0aLHCLjt+AqP8JQ s2sDeOBdX8QdEVZ4/50WoQog80YeMniiOgUGma/mRn/piyVNmZuLNVDbyrnDX6sk 1g5EBO6vQ68fnECdVINmeUwMkWrX5nL8P5EkgOBlloKrMEILsY2+/sUGQ8jnNT4p 8k8UKufTpTllXMy+g377q+ZSJaQrisejw4BFhcAsqOcQWmHPZeEK6b30twIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO66ihIgfmAiok0Xqz9P23hjK854MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwMWM4MjFlLWZmNTgtNDFmZS04Y2Y5LTllNDk0MjkzNzgzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoIAwDQYJKoZIhvcNAQELBQADggEBAB63fqYHrIBeHW9VknAc qZTFTfHZjFs3JARN5jTHv0o0DYBz8THAi5Ul+Bf8KRtiRaCdcH5SyHiqtlsdAiWZ R6L37zpeXMom38Fp0OlCfWU+Lj4c2fbrwKN84pAfC/TRoS0q7oyx86csahtqP/AB v2leicRWPwUiEsFBMqdVT9E/38KWaKdZvxzWZDwW/Eu1DCFRIe4efIncsmaDKH3R RlVukG9XtzEiUZMYKWkCbcvgSD+w1XQzlMBqAICo3K8Os32H71TvVONX+84BacyJ grWcuKWRyNacbCYAuIvjENYC5oM6RPdV++jxI3mulNJf+G/jSzYVvijR6wqoex/T bdg= -----END CERTIFICATE-----Generated at Wed Sep 17 07:47:26 2025 by rpki-client