$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24d9e029-97cb-43ac-a07a-cb219c1b416c.roa File: 24d9e029-97cb-43ac-a07a-cb219c1b416c.roa (raw, json) Hash identifier: goRzobLByTSVnhSxb7vK5HO9vFOmYKyLJtrulDFsvVM= Subject key identifier: CB:A5:D8:C8:85:53:93:DF:D1:2E:9D:96:C3:3F:7A:07:76:68:9B:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 040B32BABDD73A0539A7E6280B319280B076761F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24d9e029-97cb-43ac-a07a-cb219c1b416c.roa Signing time: Sat 23 Aug 2025 00:21:09 +0000 ROA not before: Sat 23 Aug 2025 00:21:09 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0b:32:ba:bd:d7:3a:05:39:a7:e6:28:0b:31:92:80:b0:76:76:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:21:09 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=18edab59023e987f2943388501f310a920fb0f61d7a64488d338955352c1a22c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:4f:ca:d1:b2:2c:46:00:4f:20:d5:10:0c: cc:07:cc:ee:21:c6:94:d5:1b:34:2b:d0:8f:f5:1d: 2a:09:53:76:9a:52:83:fa:3d:ab:e0:26:2f:56:11: 50:dd:fc:c0:6e:1d:48:1e:a5:a2:b7:52:7b:84:3f: 3c:b6:94:f6:e7:fc:bc:de:52:cb:17:76:a6:09:73: 70:fc:98:11:3d:90:10:5e:44:81:7f:40:0a:06:9a: c9:70:85:a4:ef:29:88:3b:d7:8e:0b:80:0d:ff:51: a1:94:88:98:fa:b8:ae:d4:ac:cd:e0:b6:a7:2b:0c: a2:5d:bb:b1:2f:22:55:84:24:fb:b8:3d:8e:b9:ce: f4:c5:a7:f8:8e:ab:dc:80:81:75:b9:f7:a9:b7:12: 84:65:1f:80:f4:f7:9b:4a:ec:b9:3c:59:3e:f8:4a: aa:99:2d:c3:6e:69:64:31:3c:2c:b5:df:80:e7:87: 33:45:53:21:cd:01:39:f1:73:e0:df:d1:69:d2:b0: 46:23:cf:b1:e8:7e:22:fb:76:76:7f:be:ea:1a:3d: ac:37:41:c9:52:b6:b5:d0:10:63:ac:af:66:d8:26: 41:6e:56:ea:f7:15:d1:89:29:f8:5e:4b:99:97:68: 50:0d:a7:32:cc:13:24:42:4a:a6:76:bd:60:ef:6b: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A5:D8:C8:85:53:93:DF:D1:2E:9D:96:C3:3F:7A:07:76:68:9B:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24d9e029-97cb-43ac-a07a-cb219c1b416c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e000::/40 Signature Algorithm: sha256WithRSAEncryption 18:f0:27:61:e2:3b:8d:aa:fb:eb:40:88:09:85:bf:3e:ac:88: 7c:f7:75:b5:6f:90:a4:3e:33:1e:93:6d:3f:d8:76:be:6f:09: 6c:ca:84:62:2e:b5:47:f4:e7:69:09:e3:c9:82:aa:0f:2f:02: c0:72:ac:25:14:c0:b0:d8:cf:ed:2e:d4:1f:4b:b4:f5:21:ab: eb:34:30:aa:09:65:d5:db:b3:01:a3:ec:b4:f9:cf:35:3f:1e: b5:db:dc:ea:9e:51:9a:53:b8:7b:be:fe:f5:f0:e5:f2:b8:46: 90:87:57:5e:53:3b:21:3e:77:b6:6e:ba:30:54:d1:6b:ba:24: ce:4c:2c:df:59:56:00:81:ac:3a:e9:74:71:c2:db:66:aa:aa: ca:25:15:0b:9c:26:21:00:02:21:d3:b4:ae:10:b0:53:3e:ba: b8:6c:4d:4c:43:28:da:35:23:fd:2b:03:82:6f:28:2c:c4:12: 81:5d:e7:e9:f3:d3:96:9d:8c:d8:a6:3a:1e:f0:cd:46:9a:8a: d6:06:22:f7:e6:81:3e:77:45:bc:9d:db:f7:74:4b:a6:03:7c: 2d:61:37:f7:b0:0f:49:0c:d5:1c:dc:7c:58:18:18:d5:a2:b7: 06:ae:f1:83:0a:17:6b:f8:cd:f6:42:22:b4:0e:9c:4e:60:c5: f4:b7:3e:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBAsyur3XOgU5p+YoCzGSgLB2dh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMjEwOVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMThlZGFiNTkwMjNlOTg3ZjI5NDMz ODg1MDFmMzEwYTkyMGZiMGY2MWQ3YTY0NDg4ZDMzODk1NTM1MmMxYTIyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfdPytGyLEYATyDVEAzMB8zuIcaU 1Rs0K9CP9R0qCVN2mlKD+j2r4CYvVhFQ3fzAbh1IHqWit1J7hD88tpT25/y83lLL F3amCXNw/JgRPZAQXkSBf0AKBprJcIWk7ymIO9eOC4AN/1GhlIiY+riu1KzN4Lan KwyiXbuxLyJVhCT7uD2Ouc70xaf4jqvcgIF1ufeptxKEZR+A9PebSuy5PFk++Eqq mS3DbmlkMTwstd+A54czRVMhzQE58XPg39Fp0rBGI8+x6H4i+3Z2f77qGj2sN0HJ Ura10BBjrK9m2CZBblbq9xXRiSn4XkuZl2hQDacyzBMkQkqmdr1g72vTUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMul2MiFU5Pf0S6dlsM/egd2aJsXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0ZDllMDI5LTk3Y2ItNDNhYy1hMDdhLWNiMjE5YzFiNDE2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYeAwDQYJKoZIhvcNAQELBQADggEBABjwJ2HiO42q++tAiAmF vz6siHz3dbVvkKQ+Mx6TbT/Ydr5vCWzKhGIutUf052kJ48mCqg8vAsByrCUUwLDY z+0u1B9LtPUhq+s0MKoJZdXbswGj7LT5zzU/HrXb3OqeUZpTuHu+/vXw5fK4RpCH V15TOyE+d7ZuujBU0Wu6JM5MLN9ZVgCBrDrpdHHC22aqqsolFQucJiEAAiHTtK4Q sFM+urhsTUxDKNo1I/0rA4JvKCzEEoFd5+nz05adjNimOh7wzUaaitYGIvfmgT53 Rbyd2/d0S6YDfC1hN/ewD0kM1RzcfFgYGNWitwau8YMKF2v4zfZCIrQOnE5gxfS3 PrQ= -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:04 2025 by rpki-client