$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0c7d8f-32e4-429a-818c-c680fe972a02.roa File: 5f0c7d8f-32e4-429a-818c-c680fe972a02.roa (raw, json) Hash identifier: 1j/lGKAU9V/jY4v23tg9dQ2HdC2JEZpCSL8cglKlL84= Subject key identifier: 1E:18:54:3A:BE:4A:A4:B3:C5:FD:66:F3:BC:B4:A1:07:6D:F3:8F:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42F9C1781E683073BCFF60E92DD47C2C35C66D2F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0c7d8f-32e4-429a-818c-c680fe972a02.roa Signing time: Mon 18 Aug 2025 15:01:32 +0000 ROA not before: Mon 18 Aug 2025 15:01:32 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f9:c1:78:1e:68:30:73:bc:ff:60:e9:2d:d4:7c:2c:35:c6:6d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:01:32 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=104794e8a6cc5608ee23bb8556ba0c09f395f45906c9a63b43adde2c1f1c6cf5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:5f:02:81:57:2b:68:33:c9:cf:e0:9c:9b: ed:5b:c8:c4:bf:8e:f7:0f:1f:e1:58:0b:59:d6:9f: 9e:47:ea:87:8a:cd:0c:49:e2:01:38:de:74:4d:58: a3:4d:46:05:41:22:32:65:0d:8b:6b:2a:85:e6:82: b3:8b:57:b5:ec:61:76:59:90:35:17:ed:1c:e3:b0: 71:a1:46:7b:45:60:01:63:47:3d:c2:87:4c:48:ac: c3:57:d1:e9:28:85:12:58:61:32:89:08:0b:2e:0c: 99:d8:b6:aa:ed:20:2c:66:5c:d7:4b:90:c9:9f:b6: 35:cf:cc:1e:b0:43:a2:0e:85:e4:1b:bf:23:b9:ce: 3e:61:77:71:3b:bd:13:d1:4a:86:2a:0c:9d:f3:a1: 2c:2f:eb:89:3b:ff:35:49:61:b1:06:fc:d0:a9:24: c6:41:23:74:97:f7:1b:d6:11:92:f0:c3:13:21:4a: a5:53:4a:d1:ef:6a:62:ed:4d:e5:b3:8d:54:6d:44: 91:4a:ce:70:dd:21:28:b4:6f:52:77:3f:47:7f:ca: 1c:9d:dc:fc:5c:ab:98:1d:66:84:74:d6:d0:24:67: 77:60:ca:9a:9e:b4:9a:db:4e:44:28:40:28:c0:18: 6f:d4:94:e8:5a:95:cf:30:b4:6c:61:d5:44:84:ea: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:54:3A:BE:4A:A4:B3:C5:FD:66:F3:BC:B4:A1:07:6D:F3:8F:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0c7d8f-32e4-429a-818c-c680fe972a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:f000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:81:fd:98:21:4a:8a:17:ad:8f:1b:7a:67:9b:a1:13:ff:6e: f1:24:c5:0f:7f:19:f8:9e:b3:7f:9c:89:f4:51:86:63:0a:d2: 94:1f:ab:ea:98:bd:a5:61:b1:a1:82:e5:99:65:d1:2c:5a:6b: e4:3a:54:e8:33:00:0c:28:7f:8d:06:c1:8c:68:5a:ea:62:ac: 78:2b:ef:13:e9:32:cb:0c:c0:da:2d:5f:d9:68:2a:25:e0:49: c9:cc:75:74:e7:d2:14:42:8c:d8:c8:0c:ca:15:3a:cd:b1:18: d1:c5:5b:73:0d:7f:ce:88:c0:1c:d8:ab:87:e5:8f:3a:78:c4: aa:a9:e9:78:0b:ae:e3:ff:1c:1a:dc:10:ea:5b:3a:e4:16:96: 75:2a:ee:60:9e:87:34:5e:36:c1:cf:a1:1c:aa:20:82:0a:5b: 21:de:e8:7a:08:4a:bf:2f:96:80:8d:2c:cc:ce:d0:0b:57:e8: b2:3a:0c:0a:44:aa:7a:5d:82:17:f2:c2:a1:5c:26:1c:72:cd: 43:ce:08:79:35:ae:c1:7c:4a:33:cf:8d:cf:52:8b:e9:7f:cf: 8f:4f:9f:da:23:d9:2e:b9:d8:d4:2d:97:62:a1:55:02:a5:ba: 5f:2a:e7:4c:f1:2f:d5:46:76:12:eb:d6:a4:b0:e9:fd:ae:ec: 63:a6:34:5b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQvnBeB5oMHO8/2DpLdR8LDXGbS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDEzMloX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAMTA0Nzk0ZThhNmNjNTYwOGVlMjNi Yjg1NTZiYTBjMDlmMzk1ZjQ1OTA2YzlhNjNiNDNhZGRlMmMxZjFjNmNmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR5fAoFXK2gzyc/gnJvtW8jEv473 Dx/hWAtZ1p+eR+qHis0MSeIBON50TVijTUYFQSIyZQ2LayqF5oKzi1e17GF2WZA1 F+0c47BxoUZ7RWABY0c9wodMSKzDV9HpKIUSWGEyiQgLLgyZ2Laq7SAsZlzXS5DJ n7Y1z8wesEOiDoXkG78juc4+YXdxO70T0UqGKgyd86EsL+uJO/81SWGxBvzQqSTG QSN0l/cb1hGS8MMTIUqlU0rR72pi7U3ls41UbUSRSs5w3SEotG9Sdz9Hf8ocndz8 XKuYHWaEdNbQJGd3YMqanrSa205EKEAowBhv1JToWpXPMLRsYdVEhOq7+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB4YVDq+SqSzxf1m87y0oQdt84+KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmMGM3ZDhmLTMyZTQtNDI5YS04MThjLWM2ODBmZTk3MmEwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9PAwDQYJKoZIhvcNAQELBQADggEBABuB/ZghSooXrY8bemeb oRP/bvEkxQ9/Gfies3+cifRRhmMK0pQfq+qYvaVhsaGC5Zll0Sxaa+Q6VOgzAAwo f40GwYxoWupirHgr7xPpMssMwNotX9loKiXgScnMdXTn0hRCjNjIDMoVOs2xGNHF W3MNf86IwBzYq4fljzp4xKqp6XgLruP/HBrcEOpbOuQWlnUq7mCehzReNsHPoRyq IIIKWyHe6HoISr8vloCNLMzO0AtX6LI6DApEqnpdghfywqFcJhxyzUPOCHk1rsF8 SjPPjc9Si+l/z49Pn9oj2S652NQtl2KhVQKlul8q50zxL9VGdhLr1qSw6f2u7GOm NFs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:22 2025 by rpki-client