$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa File: bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa (raw, json) Hash identifier: 6vZhA1UWLpZQF78Mfx4XyJ/6WGhRI+PiNSrfCX+Dz/c= Subject key identifier: 3F:B5:23:E6:4A:7F:88:08:24:F8:44:DF:7C:2B:5B:32:F8:BD:36:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 277752653454EB7124E03FFEF4D33424BE2D084D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa Signing time: Fri 15 Aug 2025 00:10:13 +0000 ROA not before: Fri 15 Aug 2025 00:10:13 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:8840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:77:52:65:34:54:eb:71:24:e0:3f:fe:f4:d3:34:24:be:2d:08:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:10:13 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=e1093c997c7594297f26663abb6f052d2354dc9115745a3503d1a9705eaeeec4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:41:96:47:54:38:cc:81:e5:75:5c:7b:01: f1:92:e1:7f:14:93:40:e1:4a:d3:cf:6e:1a:f2:19: 7d:01:13:5d:e6:ff:43:3a:c7:b3:3a:f0:10:6e:6c: 9b:ce:a6:d4:56:8e:a6:29:74:fb:40:9e:a4:f6:96: 40:98:76:74:78:6c:fb:e6:f7:2c:cf:a5:73:7c:c3: 92:c6:38:b9:79:e3:2c:b3:15:a5:79:09:d4:0f:82: 40:0a:84:23:73:2e:b7:1b:5a:3e:bc:de:05:e4:9d: db:52:dc:ca:52:3e:8f:43:a7:13:e8:8e:00:51:cb: 1e:99:9b:bb:57:f6:56:d0:4e:c1:74:f1:f0:1e:d6: 21:d4:b8:1f:30:7e:10:2b:db:17:52:e5:be:5c:3a: 5d:92:78:b2:d9:f9:36:51:94:02:0d:4b:e1:ac:95: a3:a7:a3:a1:4b:5c:b4:ad:78:e6:a7:7c:07:03:75: 37:f1:b7:cb:96:42:0b:c3:d8:67:94:23:0f:04:b1: 72:ad:29:3b:ec:55:8b:84:7d:c1:21:28:26:c0:7c: 69:2c:e6:8c:23:eb:c7:90:79:44:c9:f0:c1:b2:75: ec:ed:58:66:f0:fa:df:19:91:69:82:42:4c:30:26: 62:f7:d7:e9:5e:2d:db:b1:a4:41:1e:e7:dd:7b:7a: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B5:23:E6:4A:7F:88:08:24:F8:44:DF:7C:2B:5B:32:F8:BD:36:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:8840::/46 Signature Algorithm: sha256WithRSAEncryption 5d:4a:4f:eb:dd:d9:8e:70:27:1f:b7:c5:d3:7a:aa:97:c3:c5: f3:e3:ef:a9:e0:51:aa:98:af:99:d6:e2:09:67:eb:dc:00:f3: 97:f0:37:bd:f8:e0:a9:8a:d5:5d:d5:76:76:f3:9c:c7:e0:b9: b7:38:11:1e:8c:7f:4b:c3:05:4e:3b:33:e3:c0:86:c2:86:32: 94:8f:aa:4c:2a:14:18:45:e4:a9:c0:9f:ed:64:39:d6:41:d7: 2c:1a:d6:c2:6e:8c:fe:33:69:37:f2:29:c8:41:9e:3e:83:86: 85:91:fd:b6:87:34:07:f3:81:fd:ac:98:bd:48:d0:7e:06:9c: a3:d7:4a:75:86:b0:b7:3b:b6:5a:55:cb:9e:23:65:53:26:57: 1e:da:f6:88:bd:3c:fb:5e:3e:22:c8:a9:ed:79:b3:c8:e0:a0: 9b:e6:e0:f9:91:77:46:8b:7e:71:30:4d:3f:75:b0:9f:71:85: 7d:75:71:e4:dc:1d:9e:03:a1:13:d7:a1:69:a2:76:db:01:67: f1:98:17:4f:11:3a:2d:dd:64:22:e4:fe:94:c8:83:01:0a:42: 45:37:70:55:0b:38:8e:66:20:d8:6f:7b:1b:b7:80:17:9e:8e: 2b:6a:d1:8c:d6:89:24:0b:9b:14:57:2e:16:a1:8a:7e:c1:de: 92:65:3d:35 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJ3dSZTRU63Ek4D/+9NM0JL4tCE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTAxM1oX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAZTEwOTNjOTk3Yzc1OTQyOTdmMjY2 NjNhYmI2ZjA1MmQyMzU0ZGM5MTE1NzQ1YTM1MDNkMWE5NzA1ZWFlZWVjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa1BlkdUOMyB5XVcewHxkuF/FJNA 4UrTz24a8hl9ARNd5v9DOsezOvAQbmybzqbUVo6mKXT7QJ6k9pZAmHZ0eGz75vcs z6VzfMOSxji5eeMssxWleQnUD4JACoQjcy63G1o+vN4F5J3bUtzKUj6PQ6cT6I4A UcsemZu7V/ZW0E7BdPHwHtYh1LgfMH4QK9sXUuW+XDpdkniy2fk2UZQCDUvhrJWj p6OhS1y0rXjmp3wHA3U38bfLlkILw9hnlCMPBLFyrSk77FWLhH3BISgmwHxpLOaM I+vHkHlEyfDBsnXs7Vhm8PrfGZFpgkJMMCZi99fpXi3bsaRBHufde3rZdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD+1I+ZKf4gIJPhE33wrWzL4vTadMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JjYmY0NzA1LWE4ODgtNDU5Zi1iZjQwLTZhNjY0YTFjOGFhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba84hAMA0GCSqGSIb3DQEBCwUAA4IBAQBdSk/r3dmOcCcft8XT eqqXw8Xz4++p4FGqmK+Z1uIJZ+vcAPOX8De9+OCpitVd1XZ285zH4Lm3OBEejH9L wwVOOzPjwIbChjKUj6pMKhQYReSpwJ/tZDnWQdcsGtbCboz+M2k38inIQZ4+g4aF kf22hzQH84H9rJi9SNB+Bpyj10p1hrC3O7ZaVcueI2VTJlce2vaIvTz7Xj4iyKnt ebPI4KCb5uD5kXdGi35xME0/dbCfcYV9dXHk3B2eA6ET16FponbbAWfxmBdPETot 3WQi5P6UyIMBCkJFN3BVCziOZiDYb3sbt4AXno4ratGM1okkC5sUVy4WoYp+wd6S ZT01 -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:14 2025 by rpki-client