$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66d9e388-aa28-4860-9a9f-792c475c3583.roa File: 66d9e388-aa28-4860-9a9f-792c475c3583.roa (raw, json) Hash identifier: OwOuT/8FjYzStrfDtUhD7OVH7Xg++gqthTVa5R4HHiw= Subject key identifier: B8:38:60:FE:53:B3:0B:55:A0:E3:AF:D2:11:8D:9C:F9:A2:DA:8A:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39AA059AC0812842C5FF01FF3194188B7E752B21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66d9e388-aa28-4860-9a9f-792c475c3583.roa Signing time: Fri 15 Aug 2025 00:10:21 +0000 ROA not before: Fri 15 Aug 2025 00:10:21 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:aa:05:9a:c0:81:28:42:c5:ff:01:ff:31:94:18:8b:7e:75:2b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:21 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=7f48bf4338bf78be492094fd722fc5cea8e8825a80eda4680ee5a24eb07432f9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:f5:a4:16:7d:85:56:1c:61:d8:14:27:44: 9f:f3:3b:45:fa:96:2e:e6:5d:1f:ff:b1:2a:ea:40: eb:3d:8e:25:dd:42:c5:c1:fd:58:ce:6b:89:8d:a2: 49:ec:e7:e3:85:0b:fe:d5:6c:af:ea:a4:31:05:2d: 66:5a:6c:70:53:39:dc:e4:7b:78:3a:f4:51:27:86: c6:e3:5c:09:af:1a:34:a8:c5:31:50:d8:4e:95:af: bc:c0:5e:73:2d:a1:81:2e:c9:2f:f4:7b:02:f6:3d: cf:2f:83:0c:cc:95:85:fa:07:f6:b3:29:7c:ef:d4: 58:1f:31:61:99:15:84:7c:19:b0:18:51:b8:ac:d5: 8c:15:eb:71:6e:0b:ac:b6:ca:ab:53:19:a4:27:e5: 0e:11:01:af:fe:0f:02:aa:96:99:9d:0a:93:1a:64: 4c:50:69:b2:63:5e:bc:d7:f4:ef:9f:e2:11:3d:d5: 50:27:24:81:bd:a5:d3:1d:ab:0c:41:7f:7d:ee:f0: 60:87:6f:32:8d:c0:4a:32:82:51:3d:0f:99:bb:ce: 5c:72:16:e2:40:ea:50:0c:c3:81:d8:cb:6b:ba:93: 56:dc:29:97:d0:a7:57:93:ae:2a:53:95:d7:ed:83: ad:eb:bb:0d:13:70:85:29:a5:fb:28:bd:14:39:d4: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:60:FE:53:B3:0B:55:A0:E3:AF:D2:11:8D:9C:F9:A2:DA:8A:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66d9e388-aa28-4860-9a9f-792c475c3583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c080::/46 Signature Algorithm: sha256WithRSAEncryption c0:82:b3:82:5c:03:43:91:46:5f:85:b1:05:cb:12:d5:72:cf: a5:d7:59:b3:c4:d0:c1:37:15:0e:c3:37:02:56:e4:17:05:e1: 82:f3:3f:93:8f:2f:e2:8e:84:1f:27:3f:2a:35:b4:6b:f9:50: 5d:95:23:14:30:85:0e:c8:70:9f:19:3d:80:eb:db:d1:d0:ac: fe:27:6c:f6:33:55:9e:a8:b9:36:41:57:cb:cf:33:31:e9:ff: 87:da:07:cd:1b:16:d3:08:ad:bf:cf:a1:9a:e1:4f:f0:0f:70: 30:b2:fc:e3:71:7b:4a:a4:77:c9:2b:77:89:52:30:ae:49:ca: cf:20:45:e5:a0:0d:46:3f:ad:8f:cc:5c:64:dd:78:24:5c:ea: 8f:5d:88:2a:41:e1:19:ee:fc:28:4c:e4:92:d1:0a:1c:51:b2: 61:b7:fb:a3:cd:d9:bd:3c:99:d5:86:3f:5c:2f:30:c5:bd:e9: 4e:d3:df:5b:c2:91:19:85:7b:0a:9c:bb:24:c8:a2:36:5d:55: 3d:f1:f1:bf:63:ca:d7:dc:bc:ad:ec:f3:dc:eb:ba:22:14:60: e0:73:23:ea:ca:64:6f:ff:11:0b:7b:9a:5f:c3:1d:cb:51:69: 20:41:cd:61:42:ee:1a:d5:d2:01:34:61:b6:fe:50:32:26:4a: 7d:b6:d4:e0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOaoFmsCBKELF/wH/MZQYi351KyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTAyMVoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAN2Y0OGJmNDMzOGJmNzhiZTQ5MjA5 NGZkNzIyZmM1Y2VhOGU4ODI1YTgwZWRhNDY4MGVlNWEyNGViMDc0MzJmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36T1pBZ9hVYcYdgUJ0Sf8ztF+pYu 5l0f/7Eq6kDrPY4l3ULFwf1YzmuJjaJJ7OfjhQv+1Wyv6qQxBS1mWmxwUznc5Ht4 OvRRJ4bG41wJrxo0qMUxUNhOla+8wF5zLaGBLskv9HsC9j3PL4MMzJWF+gf2syl8 79RYHzFhmRWEfBmwGFG4rNWMFetxbgustsqrUxmkJ+UOEQGv/g8CqpaZnQqTGmRM UGmyY1681/Tvn+IRPdVQJySBvaXTHasMQX997vBgh28yjcBKMoJRPQ+Zu85cchbi QOpQDMOB2MtrupNW3CmX0KdXk64qU5XX7YOt67sNE3CFKaX7KL0UOdRHEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLg4YP5TswtVoOOv0hGNnPmi2opqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2ZDllMzg4LWFhMjgtNDg2MC05YTlmLTc5MmM0NzVjMzU4My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88CAMA0GCSqGSIb3DQEBCwUAA4IBAQDAgrOCXANDkUZfhbEF yxLVcs+l11mzxNDBNxUOwzcCVuQXBeGC8z+Tjy/ijoQfJz8qNbRr+VBdlSMUMIUO yHCfGT2A69vR0Kz+J2z2M1WeqLk2QVfLzzMx6f+H2gfNGxbTCK2/z6Ga4U/wD3Aw svzjcXtKpHfJK3eJUjCuScrPIEXloA1GP62PzFxk3XgkXOqPXYgqQeEZ7vwoTOSS 0QocUbJht/ujzdm9PJnVhj9cLzDFvelO099bwpEZhXsKnLskyKI2XVU98fG/Y8rX 3Lyt7PPc67oiFGDgcyPqymRv/xELe5pfwx3LUWkgQc1hQu4a1dIBNGG2/lAyJkp9 ttTg -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:33 2025 by rpki-client