$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: 5CJsU5g5G6LLEa48SswD2FXeYXO+fru9akkzeAOP8eI= Subject key identifier: 6D:91:32:6D:62:1B:7A:8F:79:0E:9C:15:DF:94:A0:69:BB:6C:C3:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 463B25B22EDA41F522FEF04486844EF7B47AF94A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Tue 26 Aug 2025 00:00:06 +0000 ROA not before: Tue 26 Aug 2025 00:00:06 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3b:25:b2:2e:da:41:f5:22:fe:f0:44:86:84:4e:f7:b4:7a:f9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 26 00:00:06 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=6f6ac318dde74ffed8a6553270b5674c26fc2ac3710a39cb1bf0e9ada4ce5d8e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:a1:1c:c4:a8:3f:06:fc:34:73:34:e1:70: 01:b3:80:9e:21:27:00:53:80:71:3a:3d:0d:3d:4c: 3d:b7:b6:29:9c:3d:ed:d5:57:5b:ff:c2:14:ce:2b: 88:29:a2:45:9e:49:4c:fa:52:2a:b1:c3:d6:2a:8d: d3:45:ec:7a:35:d7:a4:a1:0c:d3:33:85:00:50:2c: f8:69:81:27:cf:f2:fe:1a:c8:53:32:6b:f8:ad:27: fa:9a:94:86:63:e1:3a:ef:a0:72:ca:03:15:a0:ad: 7b:0a:60:c6:3f:0a:9f:ca:0e:fc:3b:53:3c:39:ae: 52:5e:a8:df:c3:3a:ad:4a:56:40:ec:b5:39:02:6f: d2:8e:ec:9a:3f:69:d2:31:02:a5:40:5b:d0:93:f5: f2:3b:ce:b8:41:4c:b4:cf:de:a3:6c:e0:ba:97:b6: c3:56:5b:2c:8c:df:88:1d:7e:31:17:93:43:35:e5: f5:9a:c6:2d:91:70:e1:3d:72:0b:0a:43:fc:2a:7a: c0:24:2e:40:42:4e:ca:96:0a:e4:00:12:39:01:b8: 2b:25:ba:93:9c:98:68:f7:cc:42:73:b2:18:6f:fa: f4:07:89:b5:2a:8e:bd:31:83:37:04:cd:1a:cc:99: 36:4e:2e:7b:f3:32:bc:21:86:da:53:9f:4c:6f:e2: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:91:32:6D:62:1B:7A:8F:79:0E:9C:15:DF:94:A0:69:BB:6C:C3:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption 49:c4:53:37:2f:33:3f:db:44:fc:ff:6b:e6:5e:5c:84:c9:f5: af:05:10:fa:ff:99:11:73:ca:ca:53:0a:e5:0d:62:0f:ec:fe: 5e:4d:bc:b8:5f:67:c7:ac:17:57:f1:ba:83:82:b5:45:6d:94: a1:88:d9:d3:92:3f:1d:ef:dd:da:f2:4a:c6:af:55:bb:d6:ea: ac:f2:b8:c4:68:07:7a:bb:4e:3c:0f:61:80:39:fc:e9:b6:53: ac:47:51:16:ab:a8:c6:59:c5:d2:03:05:fa:24:5b:36:11:1b: 84:ad:f4:7d:0f:33:1f:9f:41:1e:f4:4d:04:4e:4a:57:94:8b: 8b:30:52:1c:a0:cc:7f:9a:bc:fe:a4:fd:87:ba:5e:2b:ae:96: 40:50:fd:4c:8a:cb:75:8c:6d:a7:d2:b1:d0:a2:5a:c7:29:b3: 84:86:2e:48:1b:82:f9:34:29:26:90:de:27:02:d9:a8:a7:36: 38:3a:83:05:0d:92:94:18:40:89:bb:99:fd:ba:54:07:1d:06: aa:55:e5:2f:e1:df:8d:b4:10:10:7f:da:35:1c:9f:45:88:12: 63:e6:94:1c:e6:40:9a:95:72:ec:22:74:a2:a8:07:c0:17:f7: 4c:27:b8:c6:e8:9a:b9:68:81:cd:e2:a9:e8:7e:17:e6:00:48: 2f:ea:eb:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURjslsi7aQfUi/vBEhoRO97R6+UowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyNjAwMDAwNloX DTI1MDkzMDIzNTk1OVowejFJMEcGA1UEBRNANmY2YWMzMThkZGU3NGZmZWQ4YTY1 NTMyNzBiNTY3NGMyNmZjMmFjMzcxMGEzOWNiMWJmMGU5YWRhNGNlNWQ4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQKhHMSoPwb8NHM04XABs4CeIScA U4BxOj0NPUw9t7YpnD3t1Vdb/8IUziuIKaJFnklM+lIqscPWKo3TRex6NdekoQzT M4UAUCz4aYEnz/L+GshTMmv4rSf6mpSGY+E676ByygMVoK17CmDGPwqfyg78O1M8 Oa5SXqjfwzqtSlZA7LU5Am/SjuyaP2nSMQKlQFvQk/XyO864QUy0z96jbOC6l7bD VlssjN+IHX4xF5NDNeX1msYtkXDhPXILCkP8KnrAJC5AQk7KlgrkABI5AbgrJbqT nJho98xCc7IYb/r0B4m1Ko69MYM3BM0azJk2Ti578zK8IYbaU59Mb+IUIwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG2RMm1iG3qPeQ6cFd+UoGm7bMO0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBAEnEUzcvMz/bRPz/a+Ze XITJ9a8FEPr/mRFzyspTCuUNYg/s/l5NvLhfZ8esF1fxuoOCtUVtlKGI2dOSPx3v 3drySsavVbvW6qzyuMRoB3q7TjwPYYA5/Om2U6xHURarqMZZxdIDBfokWzYRG4St 9H0PMx+fQR70TQROSleUi4swUhygzH+avP6k/Ye6XiuulkBQ/UyKy3WMbafSsdCi Wscps4SGLkgbgvk0KSaQ3icC2ainNjg6gwUNkpQYQIm7mf26VAcdBqpV5S/h3420 EBB/2jUcn0WIEmPmlBzmQJqVcuwidKKoB8AX90wnuMbomrlogc3iqeh+F+YASC/q 6/k= -----END CERTIFICATE-----Generated at Thu Sep 18 05:40:53 2025 by rpki-client