$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa File: 204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa (raw, json) Hash identifier: ScTeU+bbewkXg6e6Mhi4/Ba3+Bmtazi37dLCWc2zNNM= Subject key identifier: 89:FF:A7:CB:76:FB:28:42:62:A0:C5:B5:5A:AE:87:36:65:F1:70:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D79546A8597C10956140AB17ECB531C5297EB56 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa Signing time: Fri 15 Aug 2025 00:10:17 +0000 ROA not before: Fri 15 Aug 2025 00:10:17 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:79:54:6a:85:97:c1:09:56:14:0a:b1:7e:cb:53:1c:52:97:eb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:17 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=87ae7fed0ab2f3dca627d2b3e1846b5e67894eff5baff7cd8eb93c3fa33be932, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:66:04:12:ab:6b:7a:c7:b4:dc:91:00:48: 85:5e:3f:02:5b:72:2c:20:fe:d5:8a:5e:0d:96:98: 9a:12:94:85:1a:da:03:55:99:80:30:97:65:68:db: 7f:4a:71:8e:3a:d4:f5:5e:f3:df:9a:cb:73:20:84: 3e:5b:83:56:89:16:dd:62:57:ce:10:c9:6b:2b:63: 79:dd:d6:69:ce:34:0f:6e:fb:88:67:fe:7b:87:c9: c0:87:0e:80:1d:c2:e2:0c:fc:59:f8:db:1f:af:69: 18:9c:1b:fe:c6:22:8c:6c:07:71:d3:5d:dc:90:29: ad:44:cb:ae:91:f6:b6:59:15:51:d3:b9:17:12:fc: 26:fd:e5:86:fe:2c:80:aa:d9:09:5b:4c:ae:93:db: 95:4e:48:39:46:d7:e6:4f:11:8c:cd:e8:e3:6e:a3: 81:d8:b4:df:06:c1:35:8a:b1:09:e7:05:6f:a1:93: 6c:f6:5b:19:d4:6f:15:3c:62:59:d7:43:f5:fe:0d: 4d:4a:61:23:dc:00:23:d5:c5:21:94:02:3d:54:b7: a6:ea:f0:ed:cb:db:21:5d:95:e8:9d:cd:de:d7:dd: 8c:79:79:58:98:ba:23:3d:79:46:9a:d7:10:2c:c0: 52:22:b5:57:74:39:ed:67:c2:b7:cd:67:8c:a1:59: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:A7:CB:76:FB:28:42:62:A0:C5:B5:5A:AE:87:36:65:F1:70:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c840::/46 Signature Algorithm: sha256WithRSAEncryption bb:51:bc:2a:b9:2a:45:c2:e5:07:6a:59:e7:67:29:53:f8:3f: db:18:cb:57:99:1b:02:44:f2:ad:d0:26:54:07:e5:22:e2:18: 48:1c:38:7b:dd:96:0c:28:7b:96:6c:94:fe:55:1b:1a:ee:91: 0b:f3:71:20:f5:70:42:b2:24:87:6d:05:74:cc:29:2e:d7:f2: 32:7d:3c:55:a2:e3:25:c4:93:de:39:fb:bc:12:ac:da:e4:6a: 63:93:be:19:df:61:cd:25:a9:4b:fc:18:59:51:47:1b:4a:34: 32:d4:7e:a3:30:85:0a:56:40:24:06:3a:b1:26:3f:70:ee:9a: f1:6b:02:44:29:01:1d:a6:5a:52:b7:8f:cc:47:bc:62:55:aa: 52:a0:9b:f1:9f:75:83:c4:26:c7:42:6d:26:70:3a:d6:38:96: 42:f4:72:74:e2:44:5b:cf:a4:7b:f6:12:54:14:b8:9d:3f:fc: 43:ac:1f:1b:67:dd:ac:c0:22:64:06:2c:3b:ff:82:ba:26:8d: b9:c0:11:ed:06:4f:83:aa:ed:ea:fe:2f:b6:f2:e3:00:1b:39: 46:68:10:28:ed:25:41:e5:f5:04:fd:5d:81:a2:77:4f:e2:10: 71:f7:c1:6b:85:34:1f:f0:a9:f6:24:49:48:1d:99:0f:4f:a2: 26:4b:5d:cf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfXlUaoWXwQlWFAqxfstTHFKX61YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTAxN1oX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAODdhZTdmZWQwYWIyZjNkY2E2Mjdk MmIzZTE4NDZiNWU2Nzg5NGVmZjViYWZmN2NkOGViOTNjM2ZhMzNiZTkzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmdmBBKra3rHtNyRAEiFXj8CW3Is IP7Vil4NlpiaEpSFGtoDVZmAMJdlaNt/SnGOOtT1XvPfmstzIIQ+W4NWiRbdYlfO EMlrK2N53dZpzjQPbvuIZ/57h8nAhw6AHcLiDPxZ+Nsfr2kYnBv+xiKMbAdx013c kCmtRMuukfa2WRVR07kXEvwm/eWG/iyAqtkJW0yuk9uVTkg5RtfmTxGMzejjbqOB 2LTfBsE1irEJ5wVvoZNs9lsZ1G8VPGJZ10P1/g1NSmEj3AAj1cUhlAI9VLem6vDt y9shXZXonc3e192MeXlYmLojPXlGmtcQLMBSIrVXdDntZ8K3zWeMoVnFCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIn/p8t2+yhCYqDFtVquhzZl8XAzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNGQ4M2MwLTNmOTQtNGNhOC1iMzZjLTJjZDNjYTkyN2NmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88hAMA0GCSqGSIb3DQEBCwUAA4IBAQC7UbwquSpFwuUHalnn ZylT+D/bGMtXmRsCRPKt0CZUB+Ui4hhIHDh73ZYMKHuWbJT+VRsa7pEL83Eg9XBC siSHbQV0zCku1/IyfTxVouMlxJPeOfu8Eqza5Gpjk74Z32HNJalL/BhZUUcbSjQy 1H6jMIUKVkAkBjqxJj9w7prxawJEKQEdplpSt4/MR7xiVapSoJvxn3WDxCbHQm0m cDrWOJZC9HJ04kRbz6R79hJUFLidP/xDrB8bZ92swCJkBiw7/4K6Jo25wBHtBk+D qu3q/i+28uMAGzlGaBAo7SVB5fUE/V2BondP4hBx98FrhTQf8Kn2JElIHZkPT6Im S13P -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:58 2025 by rpki-client