$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/129d128d-4dcc-4138-98a4-dd76142c4fb3.roa File: 129d128d-4dcc-4138-98a4-dd76142c4fb3.roa (raw, json) Hash identifier: AmgR2UY6vIEG4hnwjfLlYSAtAzUN5azqkQX2UYKmwlk= Subject key identifier: 45:76:45:A9:01:79:4C:44:23:8E:94:9E:FB:0A:4D:AD:61:A3:81:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 535EEC422F3D62A73379237BEC463AF5C2573E4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/129d128d-4dcc-4138-98a4-dd76142c4fb3.roa Signing time: Tue 26 Aug 2025 00:20:11 +0000 ROA not before: Tue 26 Aug 2025 00:20:11 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5e:ec:42:2f:3d:62:a7:33:79:23:7b:ec:46:3a:f5:c2:57:3e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 26 00:20:11 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=115dca30b045c78ba931f90da28127da73f93a02b80e7ddf96a72f717954e663, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:82:4d:57:d1:65:50:f1:b1:bf:b7:40:40: d5:93:d7:ca:aa:e8:bb:9e:3b:9f:49:73:13:e1:5d: 09:8b:67:48:b5:9f:b7:3f:3a:07:00:39:d6:76:ae: 52:de:49:da:f3:8c:73:17:46:9c:5f:48:24:a6:0f: c9:64:9c:3f:be:81:5d:9b:04:92:8a:ed:95:3a:69: 8f:05:53:80:8d:c8:12:4b:04:9a:4a:06:a1:f4:54: 13:d9:46:ae:d2:ef:ea:f9:cd:7a:24:5b:11:4a:9a: 0c:78:85:38:58:38:2f:1f:1e:35:42:ef:3d:4b:b1: 97:cd:88:75:ee:4b:15:47:7e:f0:bb:6d:4c:8d:bf: 06:df:92:55:bd:ed:26:8d:9b:a9:12:b6:1a:21:7a: 2e:28:9c:62:ee:ac:dd:09:73:8c:c0:08:eb:f1:1a: 13:42:53:9d:b6:fa:4e:f4:a5:96:6c:df:90:ca:76: b0:39:fc:70:2d:2d:df:55:3f:62:22:f4:62:11:15: 36:d1:29:99:4d:52:e8:8a:0e:40:40:1a:0c:df:54: a0:57:7c:80:cb:a9:60:38:2b:59:e5:0e:b2:ea:83: 0a:06:b2:a5:36:cb:58:11:42:38:2f:41:11:9e:09: 94:a7:81:4e:9f:cb:34:27:63:ef:30:7f:68:b8:7c: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:45:A9:01:79:4C:44:23:8E:94:9E:FB:0A:4D:AD:61:A3:81:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/129d128d-4dcc-4138-98a4-dd76142c4fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:4000::/40 Signature Algorithm: sha256WithRSAEncryption 5d:b2:03:7e:25:a5:36:5c:67:26:35:8b:7c:c9:44:a6:f2:1b: bf:14:d9:65:9f:0f:8c:8b:5e:68:60:86:fc:15:65:f2:db:18: b2:5b:ad:5f:36:ed:78:69:ed:2a:1c:c8:bc:21:9e:89:ec:7d: 75:1a:70:5b:f8:75:a5:c8:48:bf:17:4a:48:6d:a0:bd:63:17: 42:3f:17:5d:26:36:b0:b4:2e:4a:5e:47:82:4f:55:6e:25:11: 9b:b4:1d:91:1d:41:6b:0a:cb:4d:74:60:d5:67:68:92:a5:ba: c8:b4:3c:0d:b9:0a:35:2c:0e:92:30:5c:b9:80:88:c0:11:3b: ae:22:e3:54:86:5a:1e:7e:b7:99:90:62:cc:31:84:99:99:06: 61:31:46:d4:14:d3:10:6b:4a:9e:d1:cb:49:17:bc:73:eb:be: af:1e:3e:00:fe:a7:86:3f:1d:01:4c:87:96:a6:dd:b1:03:ca: ac:7f:61:25:52:d3:19:2d:a4:28:30:36:ae:ca:2f:70:e7:aa: 64:55:01:33:61:85:5f:8e:fe:b4:e8:58:77:51:f4:ee:18:d8: a4:be:00:4a:50:6a:1c:c5:65:01:64:df:dc:71:a9:ae:8c:20: 7e:80:65:71:1e:15:ea:d1:22:bf:90:1a:bb:f6:e6:06:58:7d: bf:49:dc:4c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU17sQi89YqczeSN77EY69cJXPk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNjAwMjAxMVoX DTI1MDkzMDIzNTk1OVowejFJMEcGA1UEBRNAMTE1ZGNhMzBiMDQ1Yzc4YmE5MzFm OTBkYTI4MTI3ZGE3M2Y5M2EwMmI4MGU3ZGRmOTZhNzJmNzE3OTU0ZTY2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHiCTVfRZVDxsb+3QEDVk9fKqui7 njufSXMT4V0Ji2dItZ+3PzoHADnWdq5S3kna84xzF0acX0gkpg/JZJw/voFdmwSS iu2VOmmPBVOAjcgSSwSaSgah9FQT2Uau0u/q+c16JFsRSpoMeIU4WDgvHx41Qu89 S7GXzYh17ksVR37wu21Mjb8G35JVve0mjZupErYaIXouKJxi7qzdCXOMwAjr8RoT QlOdtvpO9KWWbN+QynawOfxwLS3fVT9iIvRiERU20SmZTVLoig5AQBoM31SgV3yA y6lgOCtZ5Q6y6oMKBrKlNstYEUI4L0ERngmUp4FOn8s0J2PvMH9ouHwxOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEV2RakBeUxEI46UnvsKTa1ho4FHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyOWQxMjhkLTRkY2MtNDEzOC05OGE0LWRkNzYxNDJjNGZiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaEAwDQYJKoZIhvcNAQELBQADggEBAF2yA34lpTZcZyY1i3zJ RKbyG78U2WWfD4yLXmhghvwVZfLbGLJbrV827Xhp7SocyLwhnonsfXUacFv4daXI SL8XSkhtoL1jF0I/F10mNrC0LkpeR4JPVW4lEZu0HZEdQWsKy010YNVnaJKlusi0 PA25CjUsDpIwXLmAiMARO64i41SGWh5+t5mQYswxhJmZBmExRtQU0xBrSp7Ry0kX vHPrvq8ePgD+p4Y/HQFMh5am3bEDyqx/YSVS0xktpCgwNq7KL3DnqmRVATNhhV+O /rToWHdR9O4Y2KS+AEpQahzFZQFk39xxqa6MIH6AZXEeFerRIr+QGrv25gZYfb9J 3Ew= -----END CERTIFICATE-----Generated at Thu Sep 18 10:09:07 2025 by rpki-client