$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/235f359d-e1b2-4bd7-9910-360fce79f1be.roa File: 235f359d-e1b2-4bd7-9910-360fce79f1be.roa (raw, json) Hash identifier: 550OsBLDXPpO9OFlFCK5Ffb2ef12jfyQ2b62qp78TC0= Subject key identifier: 3B:62:BB:AE:9F:71:9B:DC:B9:DC:36:C3:F6:67:B8:78:23:40:AF:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66D948C3D50622C04ABD5457737CF21856725577 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/235f359d-e1b2-4bd7-9910-360fce79f1be.roa Signing time: Wed 27 Aug 2025 00:00:18 +0000 ROA not before: Wed 27 Aug 2025 00:00:18 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 00:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d9:48:c3:d5:06:22:c0:4a:bd:54:57:73:7c:f2:18:56:72:55:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 27 00:00:18 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=5de7365517c1a6e913558f514657d11b1bb6e43d3652d101c1e93770349cd8cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:ef:2e:ad:11:1f:5a:65:8e:3e:0a:a5:ca: 42:3e:fc:96:e9:3e:0f:c9:0e:cb:85:33:7b:db:40: 47:bf:d5:a2:a8:90:c0:2b:c1:83:fb:15:cc:1c:5d: d0:ae:85:c3:ea:b6:88:ba:f3:42:41:66:0c:85:16: de:66:21:6f:e2:fd:1d:d9:01:93:3f:14:ca:16:6e: 13:39:10:84:21:70:3c:8c:ef:9e:2b:84:48:3d:e2: 66:a4:df:30:16:55:41:a3:d4:54:9c:de:d5:ef:6b: f0:59:88:4f:30:eb:9f:20:bf:af:fd:03:c7:3f:df: a6:4b:39:82:20:a7:ef:4e:f3:a4:ff:db:f5:8a:fb: 43:3f:b9:aa:17:f8:53:dd:b9:78:56:ce:28:14:8e: 60:69:bd:c8:37:70:43:1e:12:93:9f:ed:f0:64:6f: 7f:28:e8:2c:97:12:8e:f1:e6:55:43:c7:80:a0:c7: 0b:3f:80:0d:70:b7:e8:9d:c1:44:f8:20:51:be:28: 7a:ef:d0:f9:4e:84:ec:64:af:dc:3f:ff:8b:6d:73: 2a:5e:53:5b:42:bf:96:92:4d:86:a4:91:c6:66:84: 79:e1:05:d3:8c:6e:ae:e5:b2:31:68:dc:45:ae:d6: bf:8e:8f:65:13:a9:4f:1c:aa:4e:4b:8f:02:9e:be: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:62:BB:AE:9F:71:9B:DC:B9:DC:36:C3:F6:67:B8:78:23:40:AF:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/235f359d-e1b2-4bd7-9910-360fce79f1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:2000::/40 Signature Algorithm: sha256WithRSAEncryption b1:bd:f4:89:a7:d3:2c:51:1f:37:34:80:81:13:8c:46:a1:34: 03:eb:4e:02:bd:04:a4:57:b4:38:1a:a1:0b:82:7b:80:de:8d: 2b:d9:1f:af:8a:e2:68:56:a4:3a:56:b7:6d:a9:38:d3:d7:5b: a9:cf:70:8f:7f:76:6d:2e:27:88:e3:72:29:c6:62:19:53:19: 2c:96:f9:32:b9:47:a6:02:38:d3:e1:a2:31:7e:26:ba:f9:a2: 94:af:8e:30:43:1e:1d:7a:0a:19:d9:09:23:46:c1:c0:66:6d: 0b:24:fc:08:9d:ba:2a:69:97:d8:07:f2:6b:e9:68:ba:39:09: a5:9c:ec:e7:85:b3:02:c8:df:58:e7:01:b8:84:2c:cf:b7:4f: 81:60:15:01:b0:09:7e:18:37:aa:0c:6d:62:ff:37:6e:32:3f: ea:d5:79:19:90:ef:ba:96:27:8c:25:d2:3e:f0:a3:21:ce:b1: a0:eb:ea:ea:78:b1:04:05:16:e0:60:89:d9:6f:8a:3e:7d:79: c8:d9:a8:e8:8b:40:5b:fb:64:2c:35:32:59:2a:fc:8c:24:36: d1:54:21:6b:16:41:3e:1d:32:84:60:06:b5:d8:6a:b5:96:53: e7:f2:2e:65:39:6b:24:ce:2f:98:2b:86:fe:3a:6f:de:08:69: 36:72:05:34 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZtlIw9UGIsBKvVRXc3zyGFZyVXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNzAwMDAxOFoX DTI1MTAwMTIzNTk1OVowejFJMEcGA1UEBRNANWRlNzM2NTUxN2MxYTZlOTEzNTU4 ZjUxNDY1N2QxMWIxYmI2ZTQzZDM2NTJkMTAxYzFlOTM3NzAzNDljZDhjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/LvLq0RH1pljj4KpcpCPvyW6T4P yQ7LhTN720BHv9WiqJDAK8GD+xXMHF3QroXD6raIuvNCQWYMhRbeZiFv4v0d2QGT PxTKFm4TORCEIXA8jO+eK4RIPeJmpN8wFlVBo9RUnN7V72vwWYhPMOufIL+v/QPH P9+mSzmCIKfvTvOk/9v1ivtDP7mqF/hT3bl4Vs4oFI5gab3IN3BDHhKTn+3wZG9/ KOgslxKO8eZVQ8eAoMcLP4ANcLfoncFE+CBRvih679D5ToTsZK/cP/+LbXMqXlNb Qr+Wkk2GpJHGZoR54QXTjG6u5bIxaNxFrta/jo9lE6lPHKpOS48Cnr5nzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDtiu66fcZvcudw2w/ZnuHgjQK90MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzNWYzNTlkLWUxYjItNGJkNy05OTEwLTM2MGZjZTc5ZjFiZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaCAwDQYJKoZIhvcNAQELBQADggEBALG99Imn0yxRHzc0gIET jEahNAPrTgK9BKRXtDgaoQuCe4DejSvZH6+K4mhWpDpWt22pONPXW6nPcI9/dm0u J4jjcinGYhlTGSyW+TK5R6YCONPhojF+Jrr5opSvjjBDHh16ChnZCSNGwcBmbQsk /Aiduippl9gH8mvpaLo5CaWc7OeFswLI31jnAbiELM+3T4FgFQGwCX4YN6oMbWL/ N24yP+rVeRmQ77qWJ4wl0j7woyHOsaDr6up4sQQFFuBgidlvij59ecjZqOiLQFv7 ZCw1Mlkq/IwkNtFUIWsWQT4dMoRgBrXYarWWU+fyLmU5ayTOL5grhv46b94IaTZy BTQ= -----END CERTIFICATE-----Generated at Wed Sep 17 23:29:22 2025 by rpki-client