$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29b6a80d-d7d9-4944-b37a-ec4bf5734825.roa File: 29b6a80d-d7d9-4944-b37a-ec4bf5734825.roa (raw, json) Hash identifier: lTo04wSsrWZWLgXV7Ksh/nNBZboVfdomGlJs9tPQdEM= Subject key identifier: E9:59:97:62:4E:FA:FB:1C:EB:7D:78:43:AC:0A:5E:65:A0:FB:46:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 302777216EEB1B1B62E6651CE58E66BCD5A76729 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29b6a80d-d7d9-4944-b37a-ec4bf5734825.roa Signing time: Fri 22 Aug 2025 00:00:57 +0000 ROA not before: Fri 22 Aug 2025 00:00:57 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:27:77:21:6e:eb:1b:1b:62:e6:65:1c:e5:8e:66:bc:d5:a7:67:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:00:57 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=29a16edd80fd9dda362932c57498726a8152f34c573e6da7cd9a3a05a1fc5447, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:ca:18:09:7d:97:37:a2:36:92:64:d2:cf: e8:60:16:0d:b8:89:cd:92:77:22:3d:62:d6:0e:c9: 23:1f:e4:f4:5a:f7:24:c6:03:39:91:9c:64:12:35: 19:f2:a7:f9:4b:b0:89:f7:fa:fe:c8:11:3f:3f:77: 57:35:f7:a2:fe:31:55:60:e3:fa:53:40:b1:a2:e4: 80:a0:96:e5:37:36:73:fa:55:da:6e:28:2b:c0:4b: c2:c7:e5:0e:f3:7f:d6:8b:24:b2:09:a0:7c:b5:76: a3:00:75:ad:86:f9:df:84:ce:f8:cb:dd:24:61:cc: 5d:95:93:22:ae:d4:59:26:7e:f0:bb:91:fe:fb:8b: ec:5a:18:85:87:29:79:a0:3e:af:c5:6d:83:45:d4: af:62:90:4b:84:1a:7b:1f:75:f8:fa:65:6d:a2:7d: 04:f6:f7:15:42:7c:98:38:ef:8a:fd:7a:e8:1b:8e: 5a:4a:c5:51:3a:75:2b:eb:7d:b6:8c:aa:4b:66:d5: c3:54:67:ec:37:88:31:c4:3c:0c:62:27:02:45:d3: 40:32:0d:34:25:4d:c7:fc:a1:b0:b7:b2:d2:31:82: 7b:df:21:8c:b2:63:97:ef:b0:af:d1:58:e1:40:c1: b8:4a:1b:e5:2c:74:13:a3:6d:ba:77:d3:16:eb:8c: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:59:97:62:4E:FA:FB:1C:EB:7D:78:43:AC:0A:5E:65:A0:FB:46:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29b6a80d-d7d9-4944-b37a-ec4bf5734825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4880::/48 Signature Algorithm: sha256WithRSAEncryption 23:24:dd:bf:1c:7d:7f:0b:ea:85:88:df:98:50:79:eb:fc:34: d4:cd:25:60:4b:b6:18:73:27:0b:cc:79:49:07:03:60:b3:8c: 94:0b:b6:c7:e7:aa:5a:58:ed:c6:86:33:1d:bf:b3:d9:23:d8: f9:39:0d:aa:f7:16:aa:af:4a:e1:28:f9:41:85:1e:d9:09:16: 89:ba:3c:d7:b2:bb:34:05:c9:62:51:4d:0d:a4:0a:d5:7b:8f: af:b7:c8:4a:51:78:a0:51:96:8e:32:f6:de:5d:08:a2:54:4a: bc:97:3a:4d:ab:b3:6c:57:61:73:f9:08:10:c2:84:01:a5:0c: 45:04:d3:7d:d3:5e:9e:26:58:98:c3:d1:b4:6e:bd:68:04:b5: 2e:a5:61:bc:25:19:ce:20:38:98:7b:07:e4:32:f7:7b:b0:ef: 9a:23:cc:d2:e6:8d:68:5c:5d:6f:3f:ee:ce:c8:e6:09:e0:56: ed:96:8a:d6:ee:0f:d3:7f:84:1e:72:a2:9c:4b:b9:0d:ac:3f: 98:00:2c:08:9d:6c:13:c7:f5:dd:3f:d1:41:2f:a2:b4:ef:f7: a2:8a:dc:8a:38:70:e1:2e:fa:da:1c:43:48:9c:e6:72:b3:0a: d4:e6:3f:c7:5e:fd:d3:b2:d2:a7:4a:c9:aa:4f:6b:46:e3:5d: 69:d6:48:1f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMCd3IW7rGxti5mUc5Y5mvNWnZykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMDA1N1oX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAMjlhMTZlZGQ4MGZkOWRkYTM2Mjkz MmM1NzQ5ODcyNmE4MTUyZjM0YzU3M2U2ZGE3Y2Q5YTNhMDVhMWZjNTQ0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6LKGAl9lzeiNpJk0s/oYBYNuInN knciPWLWDskjH+T0WvckxgM5kZxkEjUZ8qf5S7CJ9/r+yBE/P3dXNfei/jFVYOP6 U0CxouSAoJblNzZz+lXabigrwEvCx+UO83/WiySyCaB8tXajAHWthvnfhM74y90k YcxdlZMirtRZJn7wu5H++4vsWhiFhyl5oD6vxW2DRdSvYpBLhBp7H3X4+mVton0E 9vcVQnyYOO+K/XroG45aSsVROnUr6322jKpLZtXDVGfsN4gxxDwMYicCRdNAMg00 JU3H/KGwt7LSMYJ73yGMsmOX77Cv0VjhQMG4ShvlLHQTo226d9MW64wTWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOlZl2JO+vsc6314Q6wKXmWg+0Z3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI5YjZhODBkLWQ3ZDktNDk0NC1iMzdhLWVjNGJmNTczNDgyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kiAMA0GCSqGSIb3DQEBCwUAA4IBAQAjJN2/HH1/C+qFiN+Y UHnr/DTUzSVgS7YYcycLzHlJBwNgs4yUC7bH56paWO3GhjMdv7PZI9j5OQ2q9xaq r0rhKPlBhR7ZCRaJujzXsrs0BcliUU0NpArVe4+vt8hKUXigUZaOMvbeXQiiVEq8 lzpNq7NsV2Fz+QgQwoQBpQxFBNN9016eJliYw9G0br1oBLUupWG8JRnOIDiYewfk Mvd7sO+aI8zS5o1oXF1vP+7OyOYJ4FbtlorW7g/Tf4QecqKcS7kNrD+YACwInWwT x/XdP9FBL6K07/eiityKOHDhLvraHENInOZyswrU5j/HXv3TstKnSsmqT2tG411p 1kgf -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:17 2025 by rpki-client