$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa File: 13126cec-b0b1-4417-bf14-3d918163685c.roa (raw, json) Hash identifier: /umgLNT2/tyy71c/uhGCUY1trNBrapOlkTfx23DWjVs= Subject key identifier: 02:BA:57:73:7C:F8:76:C6:6E:83:CD:D1:D8:EB:91:93:F2:18:60:37 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 016BD525FD345E8E20A2120862A48DB2066B16BA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa Signing time: Fri 22 Aug 2025 00:10:55 +0000 ROA not before: Fri 22 Aug 2025 00:10:55 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6b:d5:25:fd:34:5e:8e:20:a2:12:08:62:a4:8d:b2:06:6b:16:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:10:55 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=b2c77562f5e3fd34a50929ca98aef693b98b653432c33520eacf611062198811, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:0b:31:e4:33:93:a7:49:10:e0:e4:05:18: 8b:0b:9f:d5:16:c8:30:6b:53:58:de:8d:b3:62:ba: 44:0c:f3:d4:fe:c5:c3:ab:cd:a1:5d:d5:6e:9a:4e: 94:36:cd:d7:a2:7d:02:d4:5b:ca:94:7d:f5:62:3d: 11:e5:5b:b9:f3:6d:aa:d3:f7:6f:cf:0e:8f:56:6a: c1:6f:3b:da:d3:0b:c2:b6:7c:36:f7:81:a5:bc:5d: 43:95:85:69:bd:96:3d:34:d9:91:96:79:a1:4b:a1: 06:23:2d:91:c8:95:80:59:d6:62:7d:9d:fb:ba:51: a7:73:eb:af:96:63:46:ab:13:cd:b7:89:69:63:3e: e2:ea:c3:9e:cd:4d:97:70:72:a8:b5:da:e4:1d:a0: 70:27:04:f0:43:99:b9:ab:38:e1:b4:9c:32:15:47: 9b:e6:00:ad:32:c4:f2:8d:43:9b:92:dc:d9:0f:95: fb:b5:b1:f7:b4:7c:d7:09:e3:74:f0:28:fb:5d:c7: cb:8e:a9:10:4a:2b:a7:ed:06:09:f9:aa:c2:1a:57: 74:72:c9:35:28:db:d0:55:c3:a5:b2:52:3c:d7:96: d9:3b:4f:7c:ed:7f:09:e4:ee:1a:ca:44:0a:8d:7f: 7a:98:85:ac:8e:7b:26:ba:db:6c:3a:89:31:6a:ea: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:57:73:7C:F8:76:C6:6E:83:CD:D1:D8:EB:91:93:F2:18:60:37 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e040::/48 Signature Algorithm: sha256WithRSAEncryption b2:8d:b5:6a:ab:bb:83:8c:32:ad:09:87:c4:b0:95:e7:a7:9a: a5:64:e8:59:3e:7f:28:c1:04:a7:dd:84:5b:b3:af:85:d0:09: 42:9d:57:f9:72:f0:f9:1b:94:7c:6f:81:93:dc:cf:da:83:d3: 27:a4:05:92:2f:64:59:b9:62:b4:24:1b:c4:d2:f0:1e:02:c2: 15:44:07:2c:5f:2e:46:38:82:2f:7c:bf:d4:45:b5:70:24:81: 03:0a:8f:0b:b6:48:e7:45:61:1c:d6:81:64:7c:98:cf:56:ea: c3:7c:30:ca:2c:8e:af:00:3b:61:10:43:8a:d3:ba:57:a4:ea: 2a:4f:7a:aa:b5:06:9f:34:df:66:d0:f0:37:af:e7:f6:b5:22: f9:5a:a3:41:66:9e:70:6d:bc:41:d1:bd:db:41:da:6a:97:b1: 8b:c5:6d:c5:ae:62:0b:e5:bd:6c:a3:a3:a5:3c:12:79:40:f0: 8d:d5:5d:00:30:13:f3:15:16:c0:32:73:34:d4:5f:af:dc:d6: ab:12:1a:a6:fd:02:a5:06:74:a8:d8:56:0e:57:8f:f5:8e:73: e5:32:e4:9f:50:bc:f2:a8:08:ae:d6:93:c3:ac:bd:a7:51:a6: 5d:02:22:56:02:6e:4d:22:9a:23:8a:c2:f9:ba:87:4a:22:5a: 0a:15:f8:88 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAWvVJf00Xo4gohIIYqSNsgZrFrowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMTA1NVoX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAYjJjNzc1NjJmNWUzZmQzNGE1MDky OWNhOThhZWY2OTNiOThiNjUzNDMyYzMzNTIwZWFjZjYxMTA2MjE5ODgxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEMLMeQzk6dJEODkBRiLC5/VFsgw a1NY3o2zYrpEDPPU/sXDq82hXdVumk6UNs3Xon0C1FvKlH31Yj0R5Vu5822q0/dv zw6PVmrBbzva0wvCtnw294GlvF1DlYVpvZY9NNmRlnmhS6EGIy2RyJWAWdZifZ37 ulGnc+uvlmNGqxPNt4lpYz7i6sOezU2XcHKotdrkHaBwJwTwQ5m5qzjhtJwyFUeb 5gCtMsTyjUObktzZD5X7tbH3tHzXCeN08Cj7XcfLjqkQSiun7QYJ+arCGld0csk1 KNvQVcOlslI815bZO0987X8J5O4aykQKjX96mIWsjnsmuttsOokxauq0vwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAK6V3N8+HbGboPN0djrkZPyGGA3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTI2Y2VjLWIwYjEtNDQxNy1iZjE0LTNkOTE4MTYzNjg1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uBAMA0GCSqGSIb3DQEBCwUAA4IBAQCyjbVqq7uDjDKtCYfE sJXnp5qlZOhZPn8owQSn3YRbs6+F0AlCnVf5cvD5G5R8b4GT3M/ag9MnpAWSL2RZ uWK0JBvE0vAeAsIVRAcsXy5GOIIvfL/URbVwJIEDCo8LtkjnRWEc1oFkfJjPVurD fDDKLI6vADthEEOK07pXpOoqT3qqtQafNN9m0PA3r+f2tSL5WqNBZp5wbbxB0b3b Qdpql7GLxW3FrmIL5b1so6OlPBJ5QPCN1V0AMBPzFRbAMnM01F+v3NarEhqm/QKl BnSo2FYOV4/1jnPlMuSfULzyqAiu1pPDrL2nUaZdAiJWAm5NIpojisL5uodKIloK FfiI -----END CERTIFICATE-----Generated at Sat Aug 23 08:07:09 2025 by rpki-client