$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa File: 1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa (raw, json) Hash identifier: eE4HnBZ9hHORCypJHewM9+QCCN5X7uqS+6VHyt43tas= Subject key identifier: A6:E1:E6:AE:35:0D:F5:29:30:71:31:22:47:62:B2:EC:58:FB:04:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15DD3A656DFC15577B61FD3E7CB1E91ECB69010C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa Signing time: Sat 23 Aug 2025 00:21:01 +0000 ROA not before: Sat 23 Aug 2025 00:21:01 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dd:3a:65:6d:fc:15:57:7b:61:fd:3e:7c:b1:e9:1e:cb:69:01:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:21:01 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=bef87f01cb6406302383bbf24f55caee494b272d7d99e8bdef4cecff96eb61cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:db:07:1c:e5:61:15:cb:e6:99:57:19:45: e4:21:de:43:6a:30:1a:a2:36:2e:0e:87:73:d6:91: db:44:18:67:1d:3a:d3:77:6d:b1:52:18:cc:46:5f: 49:a1:4c:d1:dd:f8:fa:b9:c6:19:e0:0a:b7:22:a4: 09:e9:6c:29:ea:51:f7:9d:3f:2b:f2:4b:58:82:af: 70:7c:5b:0b:ad:31:5e:23:9f:a6:a6:56:8f:13:12: cc:45:85:eb:66:46:bc:92:96:01:ad:cb:57:91:4e: 16:26:10:00:7c:d6:55:72:ce:4b:e3:65:d8:1f:75: 47:63:d6:54:3c:9b:65:aa:c2:8d:96:fb:4b:b8:bd: 7a:f9:02:3c:d9:2d:9b:49:65:3a:b4:10:0e:03:ee: d7:2d:a5:7d:6b:b0:39:95:e3:6c:ba:10:e2:48:3b: 20:79:05:4b:14:4b:19:7c:11:b8:51:84:81:a5:2d: 9c:cc:c4:e2:b9:88:2b:8e:43:b4:f6:5f:3d:21:74: 79:5a:18:b5:e1:42:f3:d6:3d:70:0f:dc:e1:09:a2: 98:03:03:10:71:e1:65:ed:73:c2:ba:c8:c8:e9:9a: 5e:fa:fe:0c:07:41:f3:bd:f7:b9:67:18:11:eb:db: 65:67:9b:6f:f1:6c:32:b8:ba:e5:83:50:9b:d9:f4: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:E6:AE:35:0D:F5:29:30:71:31:22:47:62:B2:EC:58:FB:04:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca5ecc2-6bbe-4ab5-b255-2b8de367dec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8080::/48 Signature Algorithm: sha256WithRSAEncryption 4e:b9:46:85:00:0d:0a:a5:4f:ac:f2:17:5e:50:28:72:73:72: 32:54:b3:78:5c:ed:fa:47:d0:93:48:c6:0c:5f:fb:1b:b9:4f: da:71:c0:61:59:7e:83:da:01:68:bb:3e:7d:97:9b:c9:62:97: 8f:ca:0d:b4:ba:b5:70:7f:11:80:ff:e0:d0:f7:26:7a:4f:a5: 92:6c:7e:fd:a8:54:13:30:fa:93:73:b4:94:7f:20:f2:b2:f1: df:70:fe:28:79:82:93:e0:2e:49:8a:76:f4:71:6f:52:8c:f1: d7:c4:3b:93:d4:3d:0d:43:02:a1:05:cc:ac:41:f9:0c:b1:a5: 59:b0:d0:60:46:9d:b3:ef:22:29:d6:28:5b:5f:bd:4f:70:55: 97:66:69:86:48:44:08:49:1d:ee:1e:92:de:46:9b:f1:46:03: 6c:57:e1:5a:b9:14:e2:80:7d:08:13:59:6c:f8:f6:56:a2:8b: 31:4d:3c:c6:7a:4b:5d:b9:d0:c4:30:b6:47:e6:ba:6a:fa:7f: 0a:f4:a2:ec:e7:e1:c6:65:85:6c:d0:d1:8b:90:28:30:5e:53: 33:ae:12:97:fd:51:22:83:59:84:65:75:10:31:15:1d:c5:b3: a0:d6:b4:b2:ce:a4:4a:68:9d:90:24:58:f7:08:55:a7:05:00: 98:1e:30:66 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFd06ZW38FVd7Yf0+fLHpHstpAQwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMjEwMVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAYmVmODdmMDFjYjY0MDYzMDIzODNi YmYyNGY1NWNhZWU0OTRiMjcyZDdkOTllOGJkZWY0Y2VjZmY5NmViNjFjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRTbBxzlYRXL5plXGUXkId5DajAa ojYuDodz1pHbRBhnHTrTd22xUhjMRl9JoUzR3fj6ucYZ4Aq3IqQJ6Wwp6lH3nT8r 8ktYgq9wfFsLrTFeI5+mplaPExLMRYXrZka8kpYBrctXkU4WJhAAfNZVcs5L42XY H3VHY9ZUPJtlqsKNlvtLuL16+QI82S2bSWU6tBAOA+7XLaV9a7A5leNsuhDiSDsg eQVLFEsZfBG4UYSBpS2czMTiuYgrjkO09l89IXR5Whi14ULz1j1wD9zhCaKYAwMQ ceFl7XPCusjI6Zpe+v4MB0Hzvfe5ZxgR69tlZ5tv8WwyuLrlg1Cb2fQE3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKbh5q41DfUpMHExIkdisuxY+wQnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjYTVlY2MyLTZiYmUtNGFiNS1iMjU1LTJiOGRlMzY3ZGVjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYCAMA0GCSqGSIb3DQEBCwUAA4IBAQBOuUaFAA0KpU+s8hde UChyc3IyVLN4XO36R9CTSMYMX/sbuU/accBhWX6D2gFouz59l5vJYpePyg20urVw fxGA/+DQ9yZ6T6WSbH79qFQTMPqTc7SUfyDysvHfcP4oeYKT4C5Jinb0cW9SjPHX xDuT1D0NQwKhBcysQfkMsaVZsNBgRp2z7yIp1ihbX71PcFWXZmmGSEQISR3uHpLe RpvxRgNsV+FauRTigH0IE1ls+PZWoosxTTzGektdudDEMLZH5rpq+n8K9KLs5+HG ZYVs0NGLkCgwXlMzrhKX/VEig1mEZXUQMRUdxbOg1rSyzqRKaJ2QJFj3CFWnBQCY HjBm -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:11 2025 by rpki-client