$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d8c9e34-0acc-492e-be2f-4e89b646d5da.roa File: 9d8c9e34-0acc-492e-be2f-4e89b646d5da.roa (raw, json) Hash identifier: pPiYwR8tbcQ0APVK9eD8++GPfFEPMVDM9Y3j6qx5i/Q= Subject key identifier: 07:29:5A:43:12:01:EF:1B:A2:46:54:3C:A4:FA:AD:F8:BD:B8:AD:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20331FF406A6847B82C23DBD2007A3CF9663A6E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d8c9e34-0acc-492e-be2f-4e89b646d5da.roa Signing time: Fri 15 Aug 2025 00:10:42 +0000 ROA not before: Fri 15 Aug 2025 00:10:42 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:33:1f:f4:06:a6:84:7b:82:c2:3d:bd:20:07:a3:cf:96:63:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:42 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=27262428e978076177b7b4015c93e455ef166cdd97859fb32fbd38040e8763cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:01:7c:be:16:b2:2c:31:9b:69:6f:44:ce: 13:42:95:5b:fd:30:14:f0:d5:19:79:86:6e:24:59: 30:fe:37:f2:c3:88:c7:1b:a6:ea:b8:ec:01:bc:01: 52:b9:08:1a:2c:9a:fa:14:0b:d2:95:e0:fa:2a:58: 78:7d:13:21:18:df:fa:98:b3:a8:ec:83:ee:0c:bc: bb:c9:11:3e:ee:11:a9:88:e4:e5:08:53:cd:6d:eb: 90:7e:f5:70:cc:90:1d:49:b6:a0:06:93:a5:d9:bb: 37:32:44:bc:51:7f:ba:69:a8:a0:32:0a:57:ae:39: 38:1d:07:08:14:34:8c:c5:13:0e:5e:d7:c1:50:f2: bc:41:2c:53:a3:02:de:8a:d4:df:d0:9c:4e:f2:8e: 6e:43:d2:f8:15:43:d4:f2:a3:8c:a9:a5:d2:7e:8f: d9:27:65:94:25:73:0a:3e:ee:0a:85:da:5d:03:17: 84:2e:73:8c:b3:08:5e:1b:3f:c0:09:ca:9f:7d:c0: 70:bd:8e:fb:cf:af:a4:3b:d9:a9:51:40:42:98:fd: 6b:2f:1a:b9:9f:0a:5c:e9:2e:06:37:45:67:75:35: da:44:07:4b:e0:a6:58:fa:ae:df:ba:7d:b8:dc:9f: bd:e5:0c:f8:ad:74:3a:86:d2:99:0b:f0:84:f1:a0: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:5A:43:12:01:EF:1B:A2:46:54:3C:A4:FA:AD:F8:BD:B8:AD:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d8c9e34-0acc-492e-be2f-4e89b646d5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a040::/46 Signature Algorithm: sha256WithRSAEncryption 1e:ea:24:5a:bc:ed:dc:c6:bc:d9:26:25:cf:d6:a5:95:0c:2f: c7:64:90:4a:ea:b7:e3:1e:d1:ee:7f:a5:fd:ca:5e:e4:2e:0e: fb:84:b4:b7:36:62:f8:35:d8:f5:50:18:ed:fd:29:40:8e:1e: f0:24:cf:16:b1:0a:ab:84:91:90:35:a6:14:16:6b:6f:a7:74: e6:7a:0f:c3:f8:74:1f:e4:44:54:b3:37:f0:a3:52:0b:d9:77: ab:69:94:65:a1:8f:33:9a:0c:41:d9:a5:45:95:05:29:6f:93: 45:4f:71:63:61:ad:9f:71:ca:95:04:b0:c2:86:29:51:5a:9d: 96:86:6f:27:fa:3b:8e:b0:4d:fe:4d:d3:88:4c:92:35:86:ad: 09:31:74:70:6d:21:61:59:40:db:5b:08:86:22:83:94:a2:70: 3d:6f:fa:9f:d3:df:5c:57:19:ad:bb:b1:ec:83:e3:00:42:8c: 55:f8:3f:6c:6e:9b:cc:01:d8:3e:af:19:7a:d8:11:1a:48:82: 8c:3c:8f:27:c9:76:03:a0:3e:c1:c5:94:95:1b:6e:ee:9c:86: 0e:50:69:fc:69:3c:2d:8c:56:05:27:dd:98:5a:e7:00:12:f2: 16:a4:13:44:d8:9f:72:c3:a7:db:f2:ce:ad:8f:4e:6e:42:80: 92:2e:39:3c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIDMf9AamhHuCwj29IAejz5ZjpuAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTA0MloX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAMjcyNjI0MjhlOTc4MDc2MTc3Yjdi NDAxNWM5M2U0NTVlZjE2NmNkZDk3ODU5ZmIzMmZiZDM4MDQwZTg3NjNjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDwBfL4Wsiwxm2lvRM4TQpVb/TAU 8NUZeYZuJFkw/jfyw4jHG6bquOwBvAFSuQgaLJr6FAvSleD6Klh4fRMhGN/6mLOo 7IPuDLy7yRE+7hGpiOTlCFPNbeuQfvVwzJAdSbagBpOl2bs3MkS8UX+6aaigMgpX rjk4HQcIFDSMxRMOXtfBUPK8QSxTowLeitTf0JxO8o5uQ9L4FUPU8qOMqaXSfo/Z J2WUJXMKPu4KhdpdAxeELnOMswheGz/ACcqffcBwvY77z6+kO9mpUUBCmP1rLxq5 nwpc6S4GN0VndTXaRAdL4KZY+q7fun243J+95Qz4rXQ6htKZC/CE8aDg5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAcpWkMSAe8bokZUPKT6rfi9uK12MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkOGM5ZTM0LTBhY2MtNDkyZS1iZTJmLTRlODliNjQ2ZDVkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba86BAMA0GCSqGSIb3DQEBCwUAA4IBAQAe6iRavO3cxrzZJiXP 1qWVDC/HZJBK6rfjHtHuf6X9yl7kLg77hLS3NmL4Ndj1UBjt/SlAjh7wJM8WsQqr hJGQNaYUFmtvp3Tmeg/D+HQf5ERUszfwo1IL2XeraZRloY8zmgxB2aVFlQUpb5NF T3FjYa2fccqVBLDChilRWp2Whm8n+juOsE3+TdOITJI1hq0JMXRwbSFhWUDbWwiG IoOUonA9b/qf099cVxmtu7Hsg+MAQoxV+D9sbpvMAdg+rxl62BEaSIKMPI8nyXYD oD7BxZSVG27unIYOUGn8aTwtjFYFJ92YWucAEvIWpBNE2J9yw6fb8s6tj05uQoCS Ljk8 -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:02 2025 by rpki-client