$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa File: 0f173998-8628-44e7-98de-49838888c622.roa (raw, json) Hash identifier: /Po9Jwy1rDxolfr/81NYMTH7icw0SOOVcnRqmkG44jY= Subject key identifier: 1F:40:60:A3:10:14:D6:1A:AA:C0:04:DA:62:E6:AA:2B:F9:C1:A9:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A60ACE751F94D6FFE7E00E2480B0903BC33DC34 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa Signing time: Sat 23 Aug 2025 00:22:03 +0000 ROA not before: Sat 23 Aug 2025 00:22:03 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:60:ac:e7:51:f9:4d:6f:fe:7e:00:e2:48:0b:09:03:bc:33:dc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:22:03 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=9b7f47ae1b553634a47ae58bb5485432c9935fe55940486150734fcdb0c13b82, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:b2:fa:59:b6:44:fa:26:ab:0e:f0:9c:b7: 14:9f:ad:69:fa:e8:06:f5:2a:6a:9a:52:46:0e:9f: 06:8d:7e:27:cd:98:87:9c:8a:9f:d8:8d:39:52:07: 63:dd:c4:3d:e8:37:b8:c4:57:4f:e7:02:9f:fb:3c: 96:a9:e9:1d:cb:69:39:50:95:8d:46:6f:19:99:36: 51:dc:4a:e3:1b:33:3f:bf:2d:72:9a:17:fc:87:67: c4:10:0c:3c:68:51:75:8b:f3:b3:f5:57:6b:28:38: e0:8c:9b:df:76:81:00:be:69:2f:da:24:a7:a8:b7: 51:75:30:4d:2e:4e:82:ee:6e:57:d9:0d:08:cf:69: 6b:d2:09:af:8f:d1:6a:b1:f0:1a:e9:13:cf:6d:1c: 7c:c5:52:79:38:c0:6e:01:10:cf:da:8b:af:f1:4e: e1:24:70:91:1a:f5:35:50:4f:f5:c2:e9:1a:3a:64: 53:d2:f6:a6:cf:8d:71:0d:7d:b3:bd:3d:e6:7a:54: 9c:9f:6d:ae:98:85:06:cb:84:d3:57:77:c0:3b:7f: 29:f4:81:bd:f4:ba:25:5a:f9:c5:04:10:d7:61:08: 92:c2:ff:bc:da:47:2c:90:c0:06:85:a9:3e:80:3d: d9:83:ae:17:dd:03:a5:d9:d6:1b:1d:b3:01:b5:6a: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:40:60:A3:10:14:D6:1A:AA:C0:04:DA:62:E6:AA:2B:F9:C1:A9:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c800::/40 Signature Algorithm: sha256WithRSAEncryption 8a:ff:15:92:66:8b:41:1b:f9:d5:0b:03:6e:d5:db:46:34:89: 3b:ec:0d:c5:fa:26:94:36:ec:05:38:39:c5:12:b9:76:b0:70: 9b:1c:00:3b:71:6e:95:0d:3a:0a:d1:69:07:e2:6a:99:57:06: f5:dc:91:e1:11:d3:3d:6f:f6:93:fe:75:49:09:c9:ba:f5:ac: 6a:0d:b2:e3:2b:9a:12:c8:c0:e4:6b:99:7d:7a:cd:9d:d5:b4: 6f:b4:02:07:02:55:c1:fc:52:00:1e:52:22:aa:b4:47:3a:74: b5:01:02:d9:60:02:cc:ef:0d:b0:a0:28:59:9b:d1:3f:7a:6e: f9:0f:b4:ee:82:e4:ae:16:7e:bc:1a:d8:7c:9a:31:8f:ae:7e: 53:ca:eb:f4:b8:5d:ac:0d:ee:45:ea:39:8b:3e:0c:bb:ad:f0: 4a:95:da:72:2b:c6:6c:fd:a4:cb:1f:83:4c:30:12:dc:5d:b4: e2:82:7f:e1:23:15:b6:6e:b1:f4:0d:25:f6:ac:bd:1c:1d:13: 78:5f:ac:16:4f:1a:7f:14:c9:c0:33:30:62:04:34:5e:bc:21: 60:67:ef:6f:4a:a6:b1:96:98:94:98:be:d5:6c:d1:13:3e:e6: b2:d0:65:f0:9c:ea:a3:b3:39:23:3c:b6:41:c2:56:41:45:9e: 02:ae:c7:47 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKmCs51H5TW/+fgDiSAsJA7wz3DQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMjIwM1oX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAOWI3ZjQ3YWUxYjU1MzYzNGE0N2Fl NThiYjU0ODU0MzJjOTkzNWZlNTU5NDA0ODYxNTA3MzRmY2RiMGMxM2I4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoiy+lm2RPomqw7wnLcUn61p+ugG 9SpqmlJGDp8GjX4nzZiHnIqf2I05Ugdj3cQ96De4xFdP5wKf+zyWqekdy2k5UJWN Rm8ZmTZR3ErjGzM/vy1ymhf8h2fEEAw8aFF1i/Oz9VdrKDjgjJvfdoEAvmkv2iSn qLdRdTBNLk6C7m5X2Q0Iz2lr0gmvj9FqsfAa6RPPbRx8xVJ5OMBuARDP2ouv8U7h JHCRGvU1UE/1wukaOmRT0vamz41xDX2zvT3melScn22umIUGy4TTV3fAO38p9IG9 9LolWvnFBBDXYQiSwv+82kcskMAGhak+gD3Zg64X3QOl2dYbHbMBtWppfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB9AYKMQFNYaqsAE2mLmqiv5walqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMTczOTk4LTg2MjgtNDRlNy05OGRlLTQ5ODM4ODg4YzYyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOMgwDQYJKoZIhvcNAQELBQADggEBAIr/FZJmi0Eb+dULA27V 20Y0iTvsDcX6JpQ27AU4OcUSuXawcJscADtxbpUNOgrRaQfiaplXBvXckeER0z1v 9pP+dUkJybr1rGoNsuMrmhLIwORrmX16zZ3VtG+0AgcCVcH8UgAeUiKqtEc6dLUB AtlgAszvDbCgKFmb0T96bvkPtO6C5K4Wfrwa2HyaMY+uflPK6/S4XawN7kXqOYs+ DLut8EqV2nIrxmz9pMsfg0wwEtxdtOKCf+EjFbZusfQNJfasvRwdE3hfrBZPGn8U ycAzMGIENF68IWBn729KprGWmJSYvtVs0RM+5rLQZfCc6qOzOSM8tkHCVkFFngKu x0c= -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:17 2025 by rpki-client