$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa File: b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa (raw, json) Hash identifier: 2CCs1tzZDhG/HAkLAnnnaXWqi3hQDSc8bpXKv72qIlg= Subject key identifier: 68:A0:44:D8:5E:03:86:E8:93:AF:86:2A:90:26:C3:33:11:B1:7F:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E10152D9A1C241FFFF7AD8279C7D186B04B03EA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa Signing time: Fri 15 Aug 2025 00:10:07 +0000 ROA not before: Fri 15 Aug 2025 00:10:07 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:10:15:2d:9a:1c:24:1f:ff:f7:ad:82:79:c7:d1:86:b0:4b:03:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:07 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=f0e5fc92756f21fed5de3bc57bb480f47249cca48fbee43ce86bbe814e5b6a61, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:37:16:b9:64:35:a2:47:b5:d6:6f:7d:75: dd:4f:e1:0b:d6:5a:e1:4c:23:c6:6b:10:50:24:1f: b0:cc:3b:a6:a0:a3:9a:97:52:7a:1d:a1:ee:47:8f: b3:a4:d0:5b:10:b8:e9:4d:d6:1b:1f:42:c6:92:14: 43:b8:d1:a2:34:ca:f8:da:98:65:84:0c:62:aa:a9: ca:d1:11:08:d7:b6:ff:cb:49:df:9a:ba:b6:bb:e2: 12:76:0e:f4:87:9f:d4:35:33:a9:c8:f5:3d:71:71: ad:47:68:66:3e:df:74:a6:af:18:c3:ad:74:98:40: c3:ad:a7:52:54:b2:2e:52:a2:90:90:2c:59:89:dd: 4e:cc:26:73:b4:10:7b:b6:0a:96:e9:a2:e8:9c:ad: a7:d7:e2:23:b4:a6:8f:23:1d:d7:5c:d9:64:0b:22: 14:7b:16:b6:eb:10:fc:f9:19:c2:fe:8c:b2:1b:dd: 5e:c4:79:ba:b7:7a:6b:95:61:cb:cc:b3:fc:2b:35: 17:99:fe:d8:d1:7c:82:fc:76:9e:d1:71:4d:74:ed: 93:d8:bf:96:29:1a:60:fc:04:fc:23:f4:20:55:e3: 7d:23:0f:b8:1a:7f:c8:c4:80:49:5c:01:84:67:a8: 68:c8:7c:9c:bb:1d:9c:3a:98:d6:e5:57:69:1d:e0: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A0:44:D8:5E:03:86:E8:93:AF:86:2A:90:26:C3:33:11:B1:7F:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:9000::/40 Signature Algorithm: sha256WithRSAEncryption 1c:b5:58:0c:53:bf:e2:99:97:1c:08:25:f7:c3:84:68:cd:cd: da:b8:8d:48:4b:56:2e:c2:45:f2:ec:58:47:21:5a:5e:3f:f0: 6d:77:08:93:4d:57:3b:4e:00:53:7b:d4:2a:76:c4:a9:d1:9e: 9c:e0:a3:3a:d7:7a:be:a4:e1:c0:6b:64:98:91:49:e4:43:9e: a6:f3:df:25:82:69:81:f4:d0:b4:1e:08:6d:89:7a:2a:2f:15: b6:db:46:ab:fe:e5:eb:55:a4:c6:84:02:fe:6e:8b:f8:45:35: 78:0f:4d:71:48:e6:16:7f:94:18:fa:8b:2e:07:d7:e2:fe:84: 32:c8:cd:4c:f2:0d:57:4f:57:b6:e0:47:59:eb:75:a7:04:95: 2e:3e:8a:40:02:fd:37:56:55:9f:78:a9:4c:9b:28:8c:d1:75: 2d:65:53:95:9d:e6:1b:ee:98:d6:b5:20:da:31:58:7c:ae:4d: dc:0f:6d:97:11:31:2b:ad:ff:34:12:c0:da:f2:a8:19:d8:37: 8a:d0:59:86:90:54:c2:b3:e1:d5:4f:0c:9a:d9:3c:9f:14:37: fc:94:76:3e:21:bb:c7:5f:50:93:92:fd:cf:fb:24:26:54:82: 84:4a:da:21:76:af:57:85:c8:c3:a9:e8:24:0c:63:82:09:75: 40:b0:46:3c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUThAVLZocJB//962CecfRhrBLA+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTAwN1oX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAZjBlNWZjOTI3NTZmMjFmZWQ1ZGUz YmM1N2JiNDgwZjQ3MjQ5Y2NhNDhmYmVlNDNjZTg2YmJlODE0ZTViNmE2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZk3FrlkNaJHtdZvfXXdT+EL1lrh TCPGaxBQJB+wzDumoKOal1J6HaHuR4+zpNBbELjpTdYbH0LGkhRDuNGiNMr42phl hAxiqqnK0REI17b/y0nfmrq2u+ISdg70h5/UNTOpyPU9cXGtR2hmPt90pq8Yw610 mEDDradSVLIuUqKQkCxZid1OzCZztBB7tgqW6aLonK2n1+IjtKaPIx3XXNlkCyIU exa26xD8+RnC/oyyG91exHm6t3prlWHLzLP8KzUXmf7Y0XyC/Hae0XFNdO2T2L+W KRpg/AT8I/QgVeN9Iw+4Gn/IxIBJXAGEZ6hoyHycux2cOpjW5VdpHeD15wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGigRNheA4bok6+GKpAmwzMRsX9bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwY2E1ZThkLWE1ZGItNDEzZS1hNDRiLWZiODhkMGQ4ZjhjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba85AwDQYJKoZIhvcNAQELBQADggEBABy1WAxTv+KZlxwIJffD hGjNzdq4jUhLVi7CRfLsWEchWl4/8G13CJNNVztOAFN71Cp2xKnRnpzgozrXer6k 4cBrZJiRSeRDnqbz3yWCaYH00LQeCG2JeiovFbbbRqv+5etVpMaEAv5ui/hFNXgP TXFI5hZ/lBj6iy4H1+L+hDLIzUzyDVdPV7bgR1nrdacElS4+ikAC/TdWVZ94qUyb KIzRdS1lU5Wd5hvumNa1INoxWHyuTdwPbZcRMSut/zQSwNryqBnYN4rQWYaQVMKz 4dVPDJrZPJ8UN/yUdj4hu8dfUJOS/c/7JCZUgoRK2iF2r1eFyMOp6CQMY4IJdUCw Rjw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:31 2025 by rpki-client