$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa File: 230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa (raw, json) Hash identifier: Fb+M6ywZ9BQzqt9tAzJyazSUY31/ZUtvsya5ERfXs1I= Subject key identifier: 6F:0F:31:6A:D6:0C:A3:33:90:63:E6:35:5D:8E:9D:09:E2:24:B4:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C6D215F1AD042AED69ACC87694DB7BC5990BBC5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa Signing time: Tue 26 Aug 2025 00:51:10 +0000 ROA not before: Tue 26 Aug 2025 00:51:10 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 27.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6d:21:5f:1a:d0:42:ae:d6:9a:cc:87:69:4d:b7:bc:59:90:bb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 26 00:51:10 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=32cdc978a0dc561528393fb365762c43df28427abba2bc9b4b3bd903b83efba0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:99:1a:2e:91:b7:f3:5a:f7:21:90:ce:e0: d8:96:5c:dc:3f:f9:7b:b0:da:ec:45:5d:a8:c7:71: ac:80:34:45:67:9b:d7:8e:c1:e7:4f:d8:6f:4c:a8: 97:67:d7:76:7a:68:33:88:fd:72:fc:23:b4:50:00: 02:31:59:15:24:a2:f8:42:16:81:50:8d:ba:61:39: 5b:71:90:95:50:cc:53:ea:6f:5d:ec:48:24:24:4c: 30:d3:1d:3a:73:06:22:dc:e7:a8:5d:3c:cf:8d:69: 7d:ce:0f:b7:89:78:03:2d:ca:d8:e9:1e:67:05:89: 98:23:7a:f9:f5:6a:d9:65:78:3b:1f:fe:30:4b:1c: fd:1e:4b:e8:4f:83:cd:26:86:52:1c:a8:9a:a5:6e: 72:eb:40:70:e8:95:45:86:95:d6:6b:73:56:3d:c7: 9e:cf:db:d5:11:be:b7:7d:90:88:0f:4b:34:5e:75: ce:a7:95:cd:0d:e4:ae:df:ad:b4:df:64:b4:d6:80: 52:c6:e0:3e:9a:4b:a9:26:af:17:f2:04:84:6b:86: 2f:8d:75:2f:5f:80:df:59:9e:a3:1d:77:9f:bb:d1: b4:e7:81:85:dc:88:29:93:ff:dc:a2:b1:9f:80:33: eb:f9:3b:20:24:d9:b6:6d:1a:90:7b:81:0c:87:42: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0F:31:6A:D6:0C:A3:33:90:63:E6:35:5D:8E:9D:09:E2:24:B4:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:a5:89:6c:03:eb:b7:b3:cd:41:c8:c3:94:72:17:f9:21:a5: d0:c1:3a:69:b8:9f:58:7f:89:8e:a1:22:f1:b7:9c:f4:27:31: eb:e0:65:e2:db:6c:d2:af:dc:5b:b2:d7:93:61:3f:c7:b1:38: a8:61:8f:e6:16:8f:cf:70:76:41:2a:e8:94:7f:80:2a:58:24: 88:c7:1b:24:93:d1:f7:17:da:ab:bc:04:02:07:7a:c6:7b:d5: 15:6a:b2:e7:89:e0:6b:81:6d:b2:be:c2:d4:7a:70:e7:48:6a: 2c:cf:f3:e2:44:50:58:8b:c5:4d:85:a4:37:7b:e6:8e:93:b9: 53:1f:e4:e4:b0:dd:18:98:87:7b:ec:aa:95:87:1b:eb:05:e6: a7:73:2a:06:51:4a:da:0b:63:94:7d:b6:d4:cc:8f:c7:60:40: 4e:82:9c:6b:06:73:f2:8a:ee:1e:14:46:a8:3f:36:af:b7:85: 6d:02:ed:d9:12:93:29:30:86:0a:ac:da:29:98:0a:5b:51:6a: 43:53:73:dd:aa:13:31:c5:92:27:1b:77:26:da:af:21:2f:eb: f4:ac:c0:4d:4a:5f:fb:14:23:56:32:70:f5:83:a0:a4:8e:8b: 05:d1:a8:b3:22:f2:76:54:9d:65:f7:a3:5d:94:9f:9f:62:91: 3e:ae:54:8c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUbG0hXxrQQq7WmsyHaU23vFmQu8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNjAwNTExMFoX DTI1MDkzMDIzNTk1OVowejFJMEcGA1UEBRNAMzJjZGM5NzhhMGRjNTYxNTI4Mzkz ZmIzNjU3NjJjNDNkZjI4NDI3YWJiYTJiYzliNGIzYmQ5MDNiODNlZmJhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsiZGi6Rt/Na9yGQzuDYllzcP/l7 sNrsRV2ox3GsgDRFZ5vXjsHnT9hvTKiXZ9d2emgziP1y/CO0UAACMVkVJKL4QhaB UI26YTlbcZCVUMxT6m9d7EgkJEww0x06cwYi3OeoXTzPjWl9zg+3iXgDLcrY6R5n BYmYI3r59WrZZXg7H/4wSxz9HkvoT4PNJoZSHKiapW5y60Bw6JVFhpXWa3NWPcee z9vVEb63fZCID0s0XnXOp5XNDeSu362032S01oBSxuA+mkupJq8X8gSEa4YvjXUv X4DfWZ6jHXefu9G054GF3Igpk//corGfgDPr+TsgJNm2bRqQe4EMh0K+nQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFG8PMWrWDKMzkGPmNV2OnQniJLRFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDg5M2RiLTNmMjgtNGVhMy04YTlhLThiNGJhNmJiMTU4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCGwAAMA0GCSqGSIb3DQEBCwUAA4IBAQAspYlsA+u3s81ByMOUchf5 IaXQwTppuJ9Yf4mOoSLxt5z0JzHr4GXi22zSr9xbsteTYT/HsTioYY/mFo/PcHZB KuiUf4AqWCSIxxskk9H3F9qrvAQCB3rGe9UVarLnieBrgW2yvsLUenDnSGosz/Pi RFBYi8VNhaQ3e+aOk7lTH+TksN0YmId77KqVhxvrBeancyoGUUraC2OUfbbUzI/H YEBOgpxrBnPyiu4eFEaoPzavt4VtAu3ZEpMpMIYKrNopmApbUWpDU3PdqhMxxZIn G3cm2q8hL+v0rMBNSl/7FCNWMnD1g6CkjosF0aizIvJ2VJ1l96NdlJ+fYpE+rlSM -----END CERTIFICATE-----Generated at Fri Sep 19 12:08:39 2025 by rpki-client