$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa File: 206f10d0-0840-46e9-be47-09127e97b837.roa (raw, json) Hash identifier: r0Bp0EoODKIw3lSsPxaO5oUESEKjQhC2QYgLZwcuG4g= Subject key identifier: 58:27:85:CD:3D:AA:E2:99:BE:B9:03:15:C8:C1:33:5F:8C:97:26:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A1EAE0BB7FDD35841F98E273BA6F333C18E3CEE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa Signing time: Fri 22 Aug 2025 00:10:12 +0000 ROA not before: Fri 22 Aug 2025 00:10:12 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1e:ae:0b:b7:fd:d3:58:41:f9:8e:27:3b:a6:f3:33:c1:8e:3c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:10:12 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=3977a580ac6ed3188cb0ff72a7fc23041a777a96fe1ecafaa44c953930890b75, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:ce:f7:b4:7b:fe:1f:0d:a3:da:b1:3b:3f: 5c:11:4c:bd:ae:25:68:4e:69:ba:44:a1:95:70:c0: 70:4c:7c:05:68:bb:0c:19:4e:e9:a8:e6:30:c8:fc: 92:c0:48:ba:e6:95:fd:b8:bb:c5:99:b6:02:23:5f: d6:6c:30:4b:a1:b1:c1:6e:21:d2:d8:dc:c5:15:47: ee:af:9f:95:83:c8:4c:41:ef:ba:a7:5e:74:e3:4e: c0:4f:85:c0:e3:58:1c:7f:74:c9:60:1e:d2:ac:f8: 42:25:ff:d9:10:07:e0:55:8f:e1:13:65:c5:68:46: 56:8c:4b:1d:f5:76:5b:eb:90:64:dc:75:7b:ac:bf: 57:33:33:bf:c5:7f:18:d0:26:df:8b:6e:83:9f:45: 69:e8:7b:d8:d9:7f:04:c7:0a:9c:e8:bc:1c:fa:cd: d8:b6:cb:78:96:52:9e:91:20:f4:4f:e0:e3:a3:d5: a1:a8:3a:c6:20:2b:b7:2c:aa:a9:a1:c8:91:51:03: a1:fe:72:2a:98:76:7e:ce:bf:a1:65:89:66:ea:98: f4:80:b6:00:6c:d2:eb:45:24:08:77:9c:1f:8a:c8: 38:bf:05:b3:1c:47:59:09:d9:91:91:52:5f:9c:5f: 92:00:c9:f4:69:94:93:26:86:63:03:73:89:9f:a1: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:27:85:CD:3D:AA:E2:99:BE:B9:03:15:C8:C1:33:5F:8C:97:26:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 05:bf:c6:8b:7d:54:6b:80:2c:7b:ec:7d:e2:cd:56:5a:09:28: b1:78:83:ab:d2:e4:6f:7d:f6:82:60:62:43:86:be:4a:c4:b5: 77:95:99:99:13:48:fd:3f:16:0e:d7:6a:39:dc:0e:61:33:60: 1e:fa:92:63:ae:24:1f:4e:a2:2e:34:38:9a:fb:ab:e3:f3:6b: 53:7b:20:d2:61:a4:8d:28:70:a4:31:0b:86:99:0f:db:46:0d: 1a:11:68:a8:6c:61:7d:3b:89:ff:e3:f4:e9:10:f7:61:72:41: f1:f5:78:32:90:41:7b:7b:2d:10:41:bd:78:5a:37:ee:32:7a: f4:66:89:82:4b:d2:db:43:e8:07:4f:63:f9:e1:c3:56:af:69: e9:e6:29:3d:9a:e0:5c:2d:7f:a2:f7:09:cc:88:68:1c:0b:b9: 7e:fb:96:e2:a8:87:95:4a:b0:25:0a:6a:90:6a:f5:d9:03:4e: 41:68:60:22:9d:24:4e:d2:f7:d6:c2:0b:c1:e8:47:40:64:1d: a3:f0:4d:b8:f0:53:25:b0:29:16:5a:39:16:1b:4c:3f:0d:17: 3f:d7:fb:61:b0:12:93:2c:9c:7e:b0:86:a3:47:59:59:e4:10: f7:57:c5:72:a9:48:bc:c1:87:69:3f:d3:3e:7d:bb:a2:a4:1b: 51:d1:6c:7d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGh6uC7f901hB+Y4nO6bzM8GOPO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMTAxMloX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAMzk3N2E1ODBhYzZlZDMxODhjYjBm ZjcyYTdmYzIzMDQxYTc3N2E5NmZlMWVjYWZhYTQ0Yzk1MzkzMDg5MGI3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgfO97R7/h8No9qxOz9cEUy9riVo Tmm6RKGVcMBwTHwFaLsMGU7pqOYwyPySwEi65pX9uLvFmbYCI1/WbDBLobHBbiHS 2NzFFUfur5+Vg8hMQe+6p150407AT4XA41gcf3TJYB7SrPhCJf/ZEAfgVY/hE2XF aEZWjEsd9XZb65Bk3HV7rL9XMzO/xX8Y0Cbfi26Dn0Vp6HvY2X8Exwqc6Lwc+s3Y tst4llKekSD0T+Djo9WhqDrGICu3LKqpociRUQOh/nIqmHZ+zr+hZYlm6pj0gLYA bNLrRSQId5wfisg4vwWzHEdZCdmRkVJfnF+SAMn0aZSTJoZjA3OJn6FJawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFgnhc09quKZvrkDFcjBM1+MlyaRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNmYxMGQwLTA4NDAtNDZlOS1iZTQ3LTA5MTI3ZTk3YjgzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8nDAMA0GCSqGSIb3DQEBCwUAA4IBAQAFv8aLfVRrgCx77H3i zVZaCSixeIOr0uRvffaCYGJDhr5KxLV3lZmZE0j9PxYO12o53A5hM2Ae+pJjriQf TqIuNDia+6vj82tTeyDSYaSNKHCkMQuGmQ/bRg0aEWiobGF9O4n/4/TpEPdhckHx 9XgykEF7ey0QQb14WjfuMnr0ZomCS9LbQ+gHT2P54cNWr2np5ik9muBcLX+i9wnM iGgcC7l++5biqIeVSrAlCmqQavXZA05BaGAinSRO0vfWwgvB6EdAZB2j8E248FMl sCkWWjkWG0w/DRc/1/thsBKTLJx+sIajR1lZ5BD3V8VyqUi8wYdpP9M+fbuipBtR 0Wx9 -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:52 2025 by rpki-client