$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa File: 4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa (raw, json) Hash identifier: gGuDwBRAcRjO+xhw5LjF7HAZdS3AScLDwGeseThO+f8= Subject key identifier: 06:93:7A:F8:85:CD:CE:45:13:5F:D2:05:D9:1E:C6:97:FA:23:33:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C9168FE680FE0011CF450F772100662B4CC60A1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa Signing time: Wed 27 Aug 2025 00:00:51 +0000 ROA not before: Wed 27 Aug 2025 00:00:51 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:91:68:fe:68:0f:e0:01:1c:f4:50:f7:72:10:06:62:b4:cc:60:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 27 00:00:51 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=184e7b8d807949898ab9c8c02d6eacfd7bb9ff3b9a1be077b0e4055489250203, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:4f:0d:4f:aa:05:16:ce:d2:42:49:25:8c: 51:f2:74:e4:d5:17:f1:bf:f0:7c:f2:27:ce:14:7b: 21:fd:ba:de:35:71:c3:66:a0:e0:90:6a:09:32:4f: c6:4d:c5:90:e4:82:cf:27:c4:de:93:94:60:e9:80: 31:ac:39:66:51:3c:51:c7:aa:5e:dc:48:23:d3:36: 28:15:45:43:a1:56:eb:d5:77:ed:98:71:be:8c:e0: 92:a5:3f:0c:1f:4c:5a:c1:40:61:2b:31:ae:d6:88: 04:c9:ff:d8:40:c4:57:fc:0d:af:88:bf:35:c7:01: 54:dd:67:fb:bf:2c:d3:67:6e:17:5a:50:5c:3b:ed: 3d:bb:72:83:ca:81:dc:45:fb:55:8b:2c:a7:ca:bf: 35:43:81:84:b7:d7:da:2c:f0:c3:0d:fc:5c:92:67: a5:9d:c7:62:7f:eb:b6:b6:7b:26:eb:4e:04:14:ba: cb:45:d9:2e:89:54:23:a4:e5:da:3f:46:cc:e0:4c: ce:a7:88:85:1c:e2:42:30:ba:df:21:47:c8:18:41: 59:b1:a2:0d:6a:ee:fc:14:af:19:44:7c:ab:cd:69: 70:fc:15:2c:32:62:4e:7f:f1:71:8b:a7:90:90:c5: 6f:e4:63:84:39:da:2c:fd:46:53:a5:2d:97:13:cc: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:93:7A:F8:85:CD:CE:45:13:5F:D2:05:D9:1E:C6:97:FA:23:33:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:e000::/40 Signature Algorithm: sha256WithRSAEncryption 84:99:94:01:32:22:4c:b0:72:20:35:15:ed:c0:77:88:b0:25: e6:23:fc:8d:6e:37:a8:34:4b:e3:3c:a5:ac:e6:51:e8:0a:71: 3a:b6:37:f3:a7:e8:80:df:b8:eb:e4:dd:e4:59:76:9e:59:bd: a4:80:08:e9:a4:a7:3b:14:27:6c:29:b6:9d:d5:7a:b1:0b:fc: f3:ff:51:5f:16:ad:13:26:01:70:4c:3c:5e:1a:b8:ba:62:ff: e1:0c:57:23:86:ca:23:66:93:33:f9:bf:7c:e6:96:30:c8:ac: ad:d0:10:24:78:c8:63:50:b1:4f:dc:d7:ea:64:50:7a:1a:b1: 59:8d:e2:eb:1c:9f:bb:93:02:36:bb:55:81:ad:df:ad:8a:da: 43:bf:18:ae:1f:cf:f8:ce:8f:3d:83:25:72:11:c0:39:53:fc: 8b:24:37:e0:8f:5e:1b:1f:06:bf:1c:81:e3:7a:33:53:c9:92: 14:9e:7c:08:96:70:ce:1d:87:02:41:7e:60:56:2a:5f:b0:6f: 7f:9c:2b:ed:c2:33:a1:6b:f0:6c:b5:e6:f3:37:f5:a8:a4:17: 6b:5e:5b:b0:b9:90:c8:2d:74:82:dd:c4:a2:6e:26:3b:85:31: 2a:c1:cd:6f:b0:93:a7:1e:71:8d:40:6f:e3:a9:16:b3:6c:49: 0f:9d:7d:72 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbJFo/mgP4AEc9FD3chAGYrTMYKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNzAwMDA1MVoX DTI1MTAwMTIzNTk1OVowejFJMEcGA1UEBRNAMTg0ZTdiOGQ4MDc5NDk4OThhYjlj OGMwMmQ2ZWFjZmQ3YmI5ZmYzYjlhMWJlMDc3YjBlNDA1NTQ4OTI1MDIwMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP5PDU+qBRbO0kJJJYxR8nTk1Rfx v/B88ifOFHsh/breNXHDZqDgkGoJMk/GTcWQ5ILPJ8Tek5Rg6YAxrDlmUTxRx6pe 3Egj0zYoFUVDoVbr1XftmHG+jOCSpT8MH0xawUBhKzGu1ogEyf/YQMRX/A2viL81 xwFU3Wf7vyzTZ24XWlBcO+09u3KDyoHcRftViyynyr81Q4GEt9faLPDDDfxckmel ncdif+u2tnsm604EFLrLRdkuiVQjpOXaP0bM4EzOp4iFHOJCMLrfIUfIGEFZsaIN au78FK8ZRHyrzWlw/BUsMmJOf/Fxi6eQkMVv5GOEOdos/UZTpS2XE8zR1wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAaTeviFzc5FE1/SBdkexpf6IzMoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiN2JlYzhiLTZkNmEtNGYwNS04MjYxLWUwNmQ5ZjNkMmRiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+uAwDQYJKoZIhvcNAQELBQADggEBAISZlAEyIkywciA1Fe3A d4iwJeYj/I1uN6g0S+M8pazmUegKcTq2N/On6IDfuOvk3eRZdp5ZvaSACOmkpzsU J2wptp3VerEL/PP/UV8WrRMmAXBMPF4auLpi/+EMVyOGyiNmkzP5v3zmljDIrK3Q ECR4yGNQsU/c1+pkUHoasVmN4uscn7uTAja7VYGt362K2kO/GK4fz/jOjz2DJXIR wDlT/IskN+CPXhsfBr8cgeN6M1PJkhSefAiWcM4dhwJBfmBWKl+wb3+cK+3CM6Fr 8Gy15vM39aikF2teW7C5kMgtdILdxKJuJjuFMSrBzW+wk6cecY1Ab+OpFrNsSQ+d fXI= -----END CERTIFICATE-----Generated at Thu Sep 18 16:28:48 2025 by rpki-client