$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa File: a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa (raw, json) Hash identifier: Gl8h60vVox0bD4KBx70gHy5f1yEldPdWaLWaUjodajk= Subject key identifier: B6:35:5F:F4:92:75:EA:20:4F:3A:0E:AD:15:DE:42:B7:5B:27:4E:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A2AC9E32C580476E8D438817EC35C02706E8122 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa Signing time: Wed 30 Jul 2025 00:01:14 +0000 ROA not before: Wed 30 Jul 2025 00:01:14 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:c9:e3:2c:58:04:76:e8:d4:38:81:7e:c3:5c:02:70:6e:81:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:01:14 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=a74b9f67cf18fa3b1164de59aee32bfcab54d1efed9be3bb372df026a78a26e3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ab:05:45:31:67:9e:c5:c8:b3:c2:9a:cc:dc: 01:26:ed:3d:51:bc:5c:90:f5:a3:2b:f2:fb:a2:d4: be:1a:d7:78:4a:e9:11:03:2b:fa:24:83:1c:20:19: 4c:66:c8:35:06:95:7a:0f:e6:74:43:49:7a:d8:ed: b6:84:f6:a3:1d:e2:5b:40:3f:e3:41:6d:d4:d3:27: 0c:ef:ce:23:39:e1:f2:b9:ca:2d:63:87:6e:16:60: 9b:f4:cc:d1:dc:e9:72:f9:b9:f0:5c:13:75:84:f2: fb:d1:cb:62:4c:83:c2:fb:f8:e8:d5:1d:3d:1e:d6: 5e:5b:c1:55:70:1b:5e:5d:89:28:4d:a7:48:d0:a4: db:d3:aa:14:0c:4f:4b:f1:db:97:c8:ff:a4:47:eb: 35:fc:8f:46:f7:30:8f:45:f4:ff:d5:b3:71:b9:d8: 11:06:14:d1:1b:bf:ac:ea:26:b5:81:b7:25:44:e9: 48:e4:aa:16:43:a2:29:88:fd:3d:65:14:4e:75:b9: e7:85:32:62:59:14:f2:35:ea:03:b4:6f:ed:02:11: 25:46:0c:aa:22:7c:b4:61:54:5c:40:77:f6:c8:23: b2:ff:8f:8b:44:f2:42:e3:65:cd:cb:97:9d:51:d0: d7:5d:05:78:d7:4e:d0:9d:e0:94:6b:e5:83:2e:5b: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:35:5F:F4:92:75:EA:20:4F:3A:0E:AD:15:DE:42:B7:5B:27:4E:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8000::/40 Signature Algorithm: sha256WithRSAEncryption 29:e7:50:32:6f:86:89:14:66:5b:d7:d5:cd:46:d7:81:55:01: bd:5e:82:78:de:28:22:c0:70:09:e3:a1:27:10:d9:15:c7:f0: 90:e5:c3:f0:a8:7b:54:24:fb:1f:ee:6e:f5:54:bc:2e:cb:54: b5:e6:db:de:ad:07:9a:6e:eb:db:a8:97:37:68:39:c4:0f:0d: 9d:90:be:6f:d4:b8:3e:f7:4c:d4:c9:33:09:56:b5:ad:61:19: 4e:ed:e6:e0:85:75:c9:5d:12:a7:dc:c7:d7:2d:ca:f3:09:5c: 5a:09:0d:67:7d:28:a6:72:9f:1d:5c:e2:e9:41:a1:16:2b:37: 8b:0d:c9:13:7b:2c:82:b5:6b:cf:00:70:ba:46:33:79:e1:2e: 8c:a7:15:c5:29:f8:83:52:2d:f6:21:83:27:29:67:1a:16:3c: c1:bc:c9:50:4b:55:a6:16:10:92:ea:60:92:66:58:95:1c:a1: 6b:93:09:d9:ba:a3:2c:17:4b:b0:22:6d:5c:b9:83:a4:44:b5: 8a:b3:42:70:f3:fc:c7:f8:98:ad:bb:82:87:fc:a8:d5:3d:5c: f2:c2:d3:54:2c:81:f6:2c:42:cd:60:d2:2c:85:8e:21:91:28: ed:5e:f0:f2:82:67:ee:c6:f0:ed:81:6a:a3:b5:a8:c8:56:77: b6:10:e3:ef -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCirJ4yxYBHbo1DiBfsNcAnBugSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMDExNFoX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAYTc0YjlmNjdjZjE4ZmEzYjExNjRk ZTU5YWVlMzJiZmNhYjU0ZDFlZmVkOWJlM2JiMzcyZGYwMjZhNzhhMjZlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjasFRTFnnsXIs8KazNwBJu09Ubxc kPWjK/L7otS+Gtd4SukRAyv6JIMcIBlMZsg1BpV6D+Z0Q0l62O22hPajHeJbQD/j QW3U0ycM784jOeHyucotY4duFmCb9MzR3Oly+bnwXBN1hPL70ctiTIPC+/jo1R09 HtZeW8FVcBteXYkoTadI0KTb06oUDE9L8duXyP+kR+s1/I9G9zCPRfT/1bNxudgR BhTRG7+s6ia1gbclROlI5KoWQ6IpiP09ZRROdbnnhTJiWRTyNeoDtG/tAhElRgyq Iny0YVRcQHf2yCOy/4+LRPJC42XNy5edUdDXXQV4107QneCUa+WDLlvYgwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLY1X/SSdeogTzoOrRXeQrdbJ07lMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5MmYxZTIyLWU2N2ItNGZhOS05Y2FjLTBjMDA1MWVlMTNkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOIAwDQYJKoZIhvcNAQELBQADggEBACnnUDJvhokUZlvX1c1G 14FVAb1egnjeKCLAcAnjoScQ2RXH8JDlw/Coe1Qk+x/ubvVUvC7LVLXm296tB5pu 69uolzdoOcQPDZ2Qvm/UuD73TNTJMwlWta1hGU7t5uCFdcldEqfcx9ctyvMJXFoJ DWd9KKZynx1c4ulBoRYrN4sNyRN7LIK1a88AcLpGM3nhLoynFcUp+INSLfYhgycp ZxoWPMG8yVBLVaYWEJLqYJJmWJUcoWuTCdm6oywXS7AibVy5g6REtYqzQnDz/Mf4 mK27gof8qNU9XPLC01QsgfYsQs1g0iyFjiGRKO1e8PKCZ+7G8O2BaqO1qMhWd7YQ 4+8= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:28 2025 by rpki-client