$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa File: 26a214fb-fd3b-42e4-bc36-09523d6390f5.roa (raw, json) Hash identifier: mhu89HpiWC8a+SQzie+fuhsKQld4JgjWr7eh0jjl3fQ= Subject key identifier: E2:C8:D9:62:FA:FB:DF:B2:56:87:9C:1B:01:03:83:CF:AB:90:62:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6064809C8EC4F4C492E33CD5F2989564CE61AE79 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa Signing time: Sat 23 Aug 2025 00:01:24 +0000 ROA not before: Sat 23 Aug 2025 00:01:24 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:64:80:9c:8e:c4:f4:c4:92:e3:3c:d5:f2:98:95:64:ce:61:ae:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:01:24 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=c4874c65b385bc7c5e28a90df2af8981dbe69b0efcebb0f5e984f5bc935c31f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:51:a0:2b:c9:dc:4d:89:ad:61:9c:40:08: 92:20:77:7f:e0:f6:16:e6:f4:38:7c:55:c1:40:f3: db:6c:99:fa:42:16:65:75:07:f7:6d:b0:91:32:2b: da:8a:83:13:f4:a0:aa:14:0f:28:44:13:c8:51:a7: 9b:54:ca:7b:87:c4:45:3d:d5:d8:44:61:7c:ee:29: 9c:43:06:7c:28:f2:6f:64:77:b1:a1:a0:5a:79:5f: 2a:2a:41:82:1c:47:ba:ef:8f:bd:55:ad:7c:21:33: 52:36:a4:ca:02:b8:90:08:fe:c5:b5:52:0e:2a:80: f2:9c:3f:af:f7:3b:4e:0b:b7:d4:38:dc:43:0c:a9: 79:6a:a9:ef:07:61:9e:93:e9:ea:ef:87:1d:3d:99: 9b:00:e7:fd:89:5c:38:38:18:f6:4f:d3:54:88:77: 38:4f:a1:d5:dd:ed:c2:43:c5:76:92:49:e9:5e:d8: 51:8e:6c:9f:f3:d6:aa:30:4c:80:f2:73:50:3e:7f: a0:1b:fa:73:f8:14:ee:74:10:5f:a9:cf:69:4e:01: 5d:a6:4f:88:c9:2b:60:4f:64:74:8a:ca:93:e7:20: 2a:f3:57:0d:01:77:17:d0:94:46:95:27:8e:f1:60: 32:53:6a:ce:85:77:e8:3b:1a:9f:3f:a6:d8:8c:4d: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C8:D9:62:FA:FB:DF:B2:56:87:9C:1B:01:03:83:CF:AB:90:62:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 60:07:ae:db:73:44:2a:8e:5e:e3:d2:b9:e7:98:ce:21:25:e6: 00:d9:e2:44:aa:98:63:1a:7a:a8:5e:e1:15:d1:f1:6a:0b:b4: ac:fc:f0:aa:14:48:7f:32:d7:d6:44:30:62:4a:11:7b:d1:d7: 7d:b4:c9:fe:a0:e2:c5:08:18:e9:b9:de:87:b9:bb:d3:00:bf: 48:a3:d6:12:04:13:0d:e7:a6:01:c4:ba:d0:f4:f3:d9:e8:20: ce:b6:76:65:74:e7:23:4c:5f:39:08:33:76:ae:e5:c0:b1:1e: f3:2e:fd:0d:2f:03:d6:a0:c2:d4:8b:54:6e:27:c7:6f:eb:c4: 69:10:e9:3f:63:f1:85:d6:56:7a:ce:2d:84:40:5b:30:67:a4: fb:2f:90:9c:8e:5a:38:13:4e:fb:7d:e2:e1:84:04:01:30:6b: 72:d3:d3:61:c5:8b:c9:2c:e2:84:61:fa:5c:dd:f9:46:0c:de: dd:79:46:a7:76:12:95:e6:bb:11:ab:1e:f2:98:d8:53:56:ec: 8a:f2:13:eb:88:13:f4:1f:2a:db:2a:65:8c:fa:b6:1b:c1:1f: 67:2c:5b:f1:03:da:79:46:ee:82:d3:28:4f:a8:bc:a1:8c:5f: 86:a4:d5:05:e3:42:0f:ce:d5:24:bd:5b:96:fb:be:88:c2:2e: 9d:fc:18:c0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYGSAnI7E9MSS4zzV8piVZM5hrnkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMDEyNFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAYzQ4NzRjNjViMzg1YmM3YzVlMjhh OTBkZjJhZjg5ODFkYmU2OWIwZWZjZWJiMGY1ZTk4NGY1YmM5MzVjMzFmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtndRoCvJ3E2JrWGcQAiSIHd/4PYW 5vQ4fFXBQPPbbJn6QhZldQf3bbCRMivaioMT9KCqFA8oRBPIUaebVMp7h8RFPdXY RGF87imcQwZ8KPJvZHexoaBaeV8qKkGCHEe674+9Va18ITNSNqTKAriQCP7FtVIO KoDynD+v9ztOC7fUONxDDKl5aqnvB2Gek+nq74cdPZmbAOf9iVw4OBj2T9NUiHc4 T6HV3e3CQ8V2kknpXthRjmyf89aqMEyA8nNQPn+gG/pz+BTudBBfqc9pTgFdpk+I yStgT2R0isqT5yAq81cNAXcX0JRGlSeO8WAyU2rOhXfoOxqfP6bYjE1grQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOLI2WL6+9+yVoecGwEDg8+rkGL/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2YTIxNGZiLWZkM2ItNDJlNC1iYzM2LTA5NTIzZDYzOTBmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMjAMA0GCSqGSIb3DQEBCwUAA4IBAQBgB67bc0Qqjl7j0rnn mM4hJeYA2eJEqphjGnqoXuEV0fFqC7Ss/PCqFEh/MtfWRDBiShF70dd9tMn+oOLF CBjpud6HubvTAL9Io9YSBBMN56YBxLrQ9PPZ6CDOtnZldOcjTF85CDN2ruXAsR7z Lv0NLwPWoMLUi1RuJ8dv68RpEOk/Y/GF1lZ6zi2EQFswZ6T7L5Ccjlo4E077feLh hAQBMGty09NhxYvJLOKEYfpc3flGDN7deUandhKV5rsRqx7ymNhTVuyK8hPriBP0 HyrbKmWM+rYbwR9nLFvxA9p5Ru6C0yhPqLyhjF+GpNUF40IPztUkvVuW+76Iwi6d /BjA -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:00 2025 by rpki-client