$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa File: 21f525e8-dbad-41ae-a8f0-380e644cd76d.roa (raw, json) Hash identifier: quj696OdozSYiQZ1Glx/uBPga+dd/2vF+s7QN4EYrZY= Subject key identifier: 65:C7:8B:0F:D4:A9:47:84:BE:F1:31:87:61:12:65:76:F0:34:35:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 639B2E4853AA3E257C4AA4C0D41398B784098FC8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa Signing time: Fri 15 Aug 2025 00:10:56 +0000 ROA not before: Fri 15 Aug 2025 00:10:56 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9b:2e:48:53:aa:3e:25:7c:4a:a4:c0:d4:13:98:b7:84:09:8f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:56 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=a30dd70647f245c3b2802632ef3ec9da8d87f06b9d60db48409fb00e1ec7a4cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:85:85:ac:1c:2a:a0:35:80:5a:ca:6d:c3: 8d:85:6f:c3:2e:c3:78:02:1e:ed:3f:3b:23:f4:34: 19:c4:77:71:99:fc:db:3c:4b:3c:6b:6a:c2:22:da: 09:b4:c1:3a:11:f4:fd:80:d9:2a:2b:3c:bf:c7:72: 44:11:1f:a8:6c:bb:1f:9e:60:b1:01:be:43:10:87: 7b:26:a4:66:70:bd:5e:35:89:2d:40:fc:01:6b:df: 72:9d:c6:49:d3:c6:2d:07:fe:ef:4a:b4:58:9a:5d: a3:57:61:43:7e:6b:98:13:d2:22:b5:55:1c:85:68: ec:03:50:14:66:a6:ac:e0:0c:dd:46:02:ac:7d:03: ad:e3:16:f7:1c:56:04:14:ad:ef:ae:b7:a9:3f:7c: d2:75:d8:40:06:17:5c:85:bb:ad:7b:d4:f0:9e:e2: d4:f3:69:aa:e1:4e:15:eb:8c:7c:cf:0f:4f:37:23: 27:67:ed:94:43:fe:0e:62:bd:d3:c9:56:c2:ba:b4: a2:74:98:0d:02:85:fa:11:fc:69:8f:3f:78:63:e1: e8:77:8e:b2:0c:4e:d3:97:f4:4b:49:f7:b4:74:dd: a3:55:01:0e:7e:29:5f:1a:61:7b:87:20:e4:25:5d: bd:69:7c:ba:2d:11:66:d1:72:ff:ed:c6:1d:f4:f4: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C7:8B:0F:D4:A9:47:84:BE:F1:31:87:61:12:65:76:F0:34:35:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4020::/46 Signature Algorithm: sha256WithRSAEncryption 4f:e0:7f:77:dd:ff:49:1c:e7:a2:c6:26:e8:b4:7b:ad:11:8f: 6e:07:bd:2c:c0:14:bd:7e:01:a0:ae:c7:24:0b:b3:57:4e:01: 34:2d:62:a5:c8:5b:f7:74:77:c6:da:90:12:9c:83:03:3f:d9: f7:35:f6:d5:eb:a5:2d:d1:ad:6c:23:8c:90:03:53:84:1f:f4: ba:26:81:22:7b:de:ee:c9:d5:d6:c0:4c:98:16:63:73:6c:9d: f3:05:f1:06:6a:3b:3e:c9:c2:c3:53:b3:27:7b:cc:99:9f:90: 44:da:c8:89:3f:7c:a7:75:4d:9b:0d:cf:62:db:55:8c:8e:50: 3e:7f:2d:ae:df:fd:4f:fc:de:19:eb:b4:1e:b7:36:9a:15:71: 24:09:d1:cf:f8:5b:21:f1:3a:08:0d:ab:2b:ad:33:10:b9:d9: 2a:ce:40:9c:a6:e9:ee:bd:8a:21:85:e0:5a:12:f8:96:0e:37: 18:c8:e6:09:75:a1:34:64:f8:13:24:52:7b:9f:e8:9c:dd:0b: 7c:0f:a1:0c:92:14:3b:9f:e6:3d:15:b9:34:fa:b8:04:9b:f7: 75:11:47:ac:96:66:a8:fa:6f:e7:cf:fd:77:39:ab:66:df:28: 4e:1a:f3:6a:bd:8f:16:6e:29:ad:25:7b:e2:50:7e:81:82:96: 45:d2:6d:68 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY5suSFOqPiV8SqTA1BOYt4QJj8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTA1NloX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAYTMwZGQ3MDY0N2YyNDVjM2IyODAy NjMyZWYzZWM5ZGE4ZDg3ZjA2YjlkNjBkYjQ4NDA5ZmIwMGUxZWM3YTRjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluKFhawcKqA1gFrKbcONhW/DLsN4 Ah7tPzsj9DQZxHdxmfzbPEs8a2rCItoJtME6EfT9gNkqKzy/x3JEER+obLsfnmCx Ab5DEId7JqRmcL1eNYktQPwBa99yncZJ08YtB/7vSrRYml2jV2FDfmuYE9IitVUc hWjsA1AUZqas4AzdRgKsfQOt4xb3HFYEFK3vrrepP3zSddhABhdchbute9TwnuLU 82mq4U4V64x8zw9PNyMnZ+2UQ/4OYr3TyVbCurSidJgNAoX6Efxpjz94Y+Hod46y DE7Tl/RLSfe0dN2jVQEOfilfGmF7hyDkJV29aXy6LRFm0XL/7cYd9PTIDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGXHiw/UqUeEvvExh2ESZXbwNDXKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIxZjUyNWU4LWRiYWQtNDFhZS1hOGYwLTM4MGU2NDRjZDc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80AgMA0GCSqGSIb3DQEBCwUAA4IBAQBP4H933f9JHOeixibo tHutEY9uB70swBS9fgGgrsckC7NXTgE0LWKlyFv3dHfG2pASnIMDP9n3NfbV66Ut 0a1sI4yQA1OEH/S6JoEie97uydXWwEyYFmNzbJ3zBfEGajs+ycLDU7Mne8yZn5BE 2siJP3yndU2bDc9i21WMjlA+fy2u3/1P/N4Z67QetzaaFXEkCdHP+Fsh8ToIDasr rTMQudkqzkCcpunuvYohheBaEviWDjcYyOYJdaE0ZPgTJFJ7n+ic3Qt8D6EMkhQ7 n+Y9Fbk0+rgEm/d1EUeslmao+m/nz/13Oatm3yhOGvNqvY8WbimtJXviUH6BgpZF 0m1o -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:23 2025 by rpki-client