$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916274ac-ad35-485a-8776-5c711286839b.roa File: 916274ac-ad35-485a-8776-5c711286839b.roa (raw, json) Hash identifier: su6ib8YvK2gPcPz/9VshRaEX5PBui2qgfRzwwGcQyus= Subject key identifier: 93:07:74:D2:11:A5:B9:2F:35:F6:0C:61:F0:61:66:54:84:2C:38:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 521AA7AF353CC9D57D27F3A9614FC60A917B6E69 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916274ac-ad35-485a-8776-5c711286839b.roa Signing time: Fri 15 Aug 2025 00:00:30 +0000 ROA not before: Fri 15 Aug 2025 00:00:30 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:f080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1a:a7:af:35:3c:c9:d5:7d:27:f3:a9:61:4f:c6:0a:91:7b:6e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:00:30 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=4f1ad78c9d43d471ef22d06aa776f42fac93f3abeb8e15005d42c704ad3f82ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:cb:98:c8:07:5f:ad:8b:49:30:02:16:f2: a6:ff:62:bf:ac:7a:c3:44:3a:7e:72:d2:30:7b:c3: 87:7d:3a:98:42:54:2a:dc:b0:45:20:7e:de:ee:bc: b0:42:46:d2:8a:00:6f:39:4d:9f:13:68:f7:c3:76: 36:bd:0a:73:16:66:7d:d7:e2:bb:1c:fe:a0:21:07: 34:91:f7:42:bd:21:36:65:90:f8:08:6f:5c:a2:7b: 70:10:5b:ff:71:20:13:1d:e3:1e:c1:16:27:35:b5: 8c:e7:15:c2:b0:00:56:40:21:2c:9d:8e:7f:b8:e9: 84:0f:af:c0:3b:05:17:d2:23:c8:17:e2:4f:34:58: 05:34:64:b0:67:ad:80:db:4f:fb:0d:8a:f3:83:1b: 8f:6e:6c:ad:15:46:5d:16:58:5d:e4:46:c3:98:96: 72:19:0d:2a:cf:48:b9:ff:fd:01:c6:53:9e:eb:dc: 54:1a:95:92:c2:7c:4e:d3:4c:6b:61:4e:62:67:48: 02:ff:63:9d:a6:bb:d0:00:43:60:44:08:f4:de:90: 09:42:6f:18:68:3d:78:ab:5f:35:7d:43:4f:fd:34: 1d:f0:91:1a:15:bf:84:25:83:bb:c2:fd:0f:ba:88: 5f:82:d9:ac:36:33:39:8a:5a:31:f6:27:f8:51:26: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:07:74:D2:11:A5:B9:2F:35:F6:0C:61:F0:61:66:54:84:2C:38:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916274ac-ad35-485a-8776-5c711286839b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:f080::/46 Signature Algorithm: sha256WithRSAEncryption a0:74:5e:52:ce:b4:bb:9d:62:72:94:e1:8b:77:3c:ab:6b:d1: ee:ae:06:17:e5:7c:31:96:e0:13:fb:4b:d3:68:20:94:ce:c9: 17:fa:e2:03:bc:30:97:05:8c:60:d2:cf:d3:ab:ea:88:78:c8: c7:74:f2:2c:51:1f:93:25:83:27:37:76:ea:14:a6:92:35:21: 87:93:48:43:06:23:d2:62:b2:54:02:68:79:14:53:63:3d:67: 19:ac:40:71:87:f4:fd:de:7c:15:c8:e6:c0:74:5d:3b:b7:fa: f4:fd:90:b4:93:c1:02:5c:18:b2:17:05:a4:e2:5e:4f:a9:a7: e0:9f:99:fc:4b:2a:8d:71:2f:ed:f3:47:41:78:15:42:85:3b: 2e:6f:71:cf:be:ba:db:a7:66:f0:43:34:00:b0:93:df:20:74: b6:26:81:2d:01:46:8e:4e:2c:50:0c:ac:37:dd:59:d4:88:d5: 1f:1e:04:6d:db:eb:87:43:93:6f:85:8c:ea:54:65:8c:ed:c0: 12:45:ed:8d:ea:d8:bc:c0:ae:52:74:8f:a7:89:9b:4c:e2:e3: 84:f7:f6:e7:45:67:6a:91:59:a2:00:b0:42:51:1d:66:e3:27: d0:fa:ae:3a:e5:9f:0c:f2:18:00:0d:54:4f:b4:5a:b4:d6:80: b2:25:9e:6f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUhqnrzU8ydV9J/OpYU/GCpF7bmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMDAzMFoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNANGYxYWQ3OGM5ZDQzZDQ3MWVmMjJk MDZhYTc3NmY0MmZhYzkzZjNhYmViOGUxNTAwNWQ0MmM3MDRhZDNmODJhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1vLmMgHX62LSTACFvKm/2K/rHrD RDp+ctIwe8OHfTqYQlQq3LBFIH7e7rywQkbSigBvOU2fE2j3w3Y2vQpzFmZ91+K7 HP6gIQc0kfdCvSE2ZZD4CG9contwEFv/cSATHeMewRYnNbWM5xXCsABWQCEsnY5/ uOmED6/AOwUX0iPIF+JPNFgFNGSwZ62A20/7DYrzgxuPbmytFUZdFlhd5EbDmJZy GQ0qz0i5//0BxlOe69xUGpWSwnxO00xrYU5iZ0gC/2OdprvQAENgRAj03pAJQm8Y aD14q181fUNP/TQd8JEaFb+EJYO7wv0PuohfgtmsNjM5ilox9if4USbd1wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJMHdNIRpbkvNfYMYfBhZlSELDiVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxNjI3NGFjLWFkMzUtNDg1YS04Nzc2LTVjNzExMjg2ODM5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8/CAMA0GCSqGSIb3DQEBCwUAA4IBAQCgdF5SzrS7nWJylOGL dzyra9HurgYX5XwxluAT+0vTaCCUzskX+uIDvDCXBYxg0s/Tq+qIeMjHdPIsUR+T JYMnN3bqFKaSNSGHk0hDBiPSYrJUAmh5FFNjPWcZrEBxh/T93nwVyObAdF07t/r0 /ZC0k8ECXBiyFwWk4l5Pqafgn5n8SyqNcS/t80dBeBVChTsub3HPvrrbp2bwQzQA sJPfIHS2JoEtAUaOTixQDKw33VnUiNUfHgRt2+uHQ5NvhYzqVGWM7cASRe2N6ti8 wK5SdI+niZtM4uOE9/bnRWdqkVmiALBCUR1m4yfQ+q465Z8M8hgADVRPtFq01oCy JZ5v -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:25 2025 by rpki-client