$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa File: 19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa (raw, json) Hash identifier: DLALdp+wx9SLn74yHhPcon4JwcQ+PIUleO5/zs+zCHg= Subject key identifier: 38:32:A3:04:5F:C5:FE:4C:FB:4C:54:1E:69:9B:0F:50:5D:80:07:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EC2C374B484640BC04850BEAD757C0F50686A91 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa Signing time: Sat 23 Aug 2025 00:40:05 +0000 ROA not before: Sat 23 Aug 2025 00:40:05 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c2:c3:74:b4:84:64:0b:c0:48:50:be:ad:75:7c:0f:50:68:6a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:40:05 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=a98226e4c901b9e8f8abb67c9d6402d7a58a8a5194977fd3173f6daa97967731, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:38:ff:03:d4:ad:19:e1:f2:e0:a8:26:12: 20:2a:d9:ed:73:34:61:53:70:64:bf:29:1e:d1:4d: 0f:50:5b:4b:e2:53:60:40:c0:67:00:ca:1b:73:46: ca:87:57:f9:4f:e8:06:a2:ff:79:54:ce:bc:5e:57: be:e6:90:eb:26:07:13:d5:2c:76:73:0a:72:d4:72: 7c:0d:35:b5:08:85:5e:b6:84:e2:64:65:c2:a3:0f: b7:78:56:46:f5:b9:f8:48:4c:5e:1c:9f:8a:6b:6e: 72:8f:6e:1f:48:83:4c:76:35:85:7a:aa:73:10:09: 26:fc:d2:47:d3:59:b7:d7:36:90:63:d2:4b:82:8a: 82:65:d2:94:fc:d2:ff:a4:7b:de:5a:94:86:ad:ab: 02:da:41:75:d4:02:5e:0c:a3:0b:1a:04:eb:c1:f9: 57:80:0d:40:76:2e:d0:1d:e4:74:5c:a2:6a:ae:83: c9:d4:ed:41:0e:25:9f:2d:4c:db:c1:bd:31:6a:84: 51:17:cf:56:5d:3c:31:48:4c:b2:63:8b:48:5f:b8: 3b:b4:b9:a3:4e:d1:65:a4:2d:73:0c:58:56:6b:a7: 07:a9:ea:4e:62:62:18:2b:63:73:02:fa:ea:ae:6c: 14:d4:ff:dc:62:a0:8f:76:4b:70:e3:17:fe:af:f1: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:32:A3:04:5F:C5:FE:4C:FB:4C:54:1E:69:9B:0F:50:5D:80:07:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8880::/48 Signature Algorithm: sha256WithRSAEncryption 03:f7:f0:7d:73:51:3b:48:69:48:0b:1c:61:90:de:41:ea:c5: ac:d4:6f:75:81:7c:b3:2c:f1:a3:ad:d4:65:e9:24:f5:da:96: a9:cd:70:af:49:c7:63:e7:94:0a:78:6f:1b:73:2f:10:c9:87: 65:d3:a9:c3:89:65:cf:8d:8f:19:e7:f8:15:22:66:b6:96:53: 3d:15:e5:8a:43:9d:dd:32:f4:7a:ef:00:fe:8a:1b:aa:7b:54: aa:45:b8:51:2b:0e:ba:99:e3:bd:36:ef:2c:ac:85:73:94:0a: 2a:e7:b4:89:8a:25:78:15:e8:51:a8:6c:bb:59:4e:94:c8:35: 33:5c:75:81:8e:bc:bf:ff:c0:f7:14:28:d8:99:d5:3c:c6:47: bb:90:e5:99:04:2a:3c:e4:74:5f:8a:65:21:0b:b3:11:ac:34: 01:c8:c1:79:a8:ea:c2:d9:22:c4:9d:d0:d1:83:5a:35:f9:e6: 96:68:a2:16:2f:1d:82:67:61:9a:db:3a:99:5a:88:a1:26:04: 41:3a:f5:0b:da:e3:c3:de:f2:1c:00:93:68:2a:20:80:56:f2: 24:05:c0:a7:71:15:4d:7d:8c:78:e6:67:81:95:d7:03:cd:12: d5:11:92:fe:5e:8f:db:a8:79:d3:fa:74:81:e5:d5:9f:6d:f6: 23:60:92:4a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPsLDdLSEZAvASFC+rXV8D1BoapEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNDAwNVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAYTk4MjI2ZTRjOTAxYjllOGY4YWJi NjdjOWQ2NDAyZDdhNThhOGE1MTk0OTc3ZmQzMTczZjZkYWE5Nzk2NzczMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3I4/wPUrRnh8uCoJhIgKtntczRh U3Bkvyke0U0PUFtL4lNgQMBnAMobc0bKh1f5T+gGov95VM68Xle+5pDrJgcT1Sx2 cwpy1HJ8DTW1CIVetoTiZGXCow+3eFZG9bn4SExeHJ+Ka25yj24fSINMdjWFeqpz EAkm/NJH01m31zaQY9JLgoqCZdKU/NL/pHveWpSGrasC2kF11AJeDKMLGgTrwflX gA1Adi7QHeR0XKJqroPJ1O1BDiWfLUzbwb0xaoRRF89WXTwxSEyyY4tIX7g7tLmj TtFlpC1zDFhWa6cHqepOYmIYK2NzAvrqrmwU1P/cYqCPdktw4xf+r/E3bwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDgyowRfxf5M+0xUHmmbD1BdgAf0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5OTE5Nzk4LWRhNWUtNGE5Yy05NGZlLWRiZjRlNTFmMmFmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIiAMA0GCSqGSIb3DQEBCwUAA4IBAQAD9/B9c1E7SGlICxxh kN5B6sWs1G91gXyzLPGjrdRl6ST12papzXCvScdj55QKeG8bcy8QyYdl06nDiWXP jY8Z5/gVIma2llM9FeWKQ53dMvR67wD+ihuqe1SqRbhRKw66meO9Nu8srIVzlAoq 57SJiiV4FehRqGy7WU6UyDUzXHWBjry//8D3FCjYmdU8xke7kOWZBCo85HRfimUh C7MRrDQByMF5qOrC2SLEndDRg1o1+eaWaKIWLx2CZ2Ga2zqZWoihJgRBOvUL2uPD 3vIcAJNoKiCAVvIkBcCncRVNfYx45meBldcDzRLVEZL+Xo/bqHnT+nSB5dWfbfYj YJJK -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:18 2025 by rpki-client