$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3132158f-89b9-4064-adce-f249f4489521.roa File: 3132158f-89b9-4064-adce-f249f4489521.roa (raw, json) Hash identifier: FUvxvFbVaKDHudxVKHEUUxb65Ni6A9aLNzD9dM6AdLg= Subject key identifier: 01:AA:A1:D1:62:66:BF:7E:8B:41:50:D5:16:B6:04:56:74:CA:22:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C47B0DFD800EE9B103241F123FFFA4C65AA9578 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3132158f-89b9-4064-adce-f249f4489521.roa Signing time: Tue 19 Aug 2025 00:01:01 +0000 ROA not before: Tue 19 Aug 2025 00:01:01 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:47:b0:df:d8:00:ee:9b:10:32:41:f1:23:ff:fa:4c:65:aa:95:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:01 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=f6725c853a07aea141058f8244790b063df4a8cb0a41edac0b5e119d2dd4e368, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:1a:30:c1:04:0c:b4:97:7c:ab:17:3c:33: 4a:be:45:2f:81:22:0a:f7:fa:d5:9c:c9:1e:a7:8f: 5c:6d:71:8d:f2:b1:6d:38:4e:9e:29:74:9d:0c:57: d1:8f:e5:fe:d2:b9:24:33:8b:74:57:41:68:2e:ff: ef:88:e0:9e:7d:67:c5:f9:be:7d:cb:d8:0b:0e:60: b9:17:2d:ad:d7:c7:3e:36:80:c0:2a:b5:4f:9c:45: 6c:d1:68:e0:48:6b:41:7c:72:8e:b8:5c:2f:57:a3: 50:60:0b:67:ed:76:a8:a0:62:79:b4:cd:bc:cc:a4: c3:02:da:3c:ed:88:73:f2:b1:a0:05:2c:60:47:3a: 5a:a6:cd:8a:ab:e5:3f:29:d5:8a:ef:f7:1a:02:d9: 1d:d3:1e:54:fa:d6:d9:e6:24:ff:5d:79:a1:48:a6: 35:0c:44:c4:e9:54:f5:ac:65:26:29:90:9b:d5:0c: f8:96:87:7c:5d:fd:e8:1a:63:99:0f:c3:4a:98:f5: 20:d4:d4:43:ec:17:4b:fd:5a:55:09:ba:15:88:90: b1:fb:af:fb:a3:98:6a:01:e9:b8:6f:4a:8e:1b:aa: b1:82:1b:52:43:59:1f:98:63:71:6d:1c:7b:66:c1: 10:08:09:39:ea:40:35:25:80:48:25:ea:b0:d7:2f: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AA:A1:D1:62:66:BF:7E:8B:41:50:D5:16:B6:04:56:74:CA:22:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3132158f-89b9-4064-adce-f249f4489521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:2800::/40 Signature Algorithm: sha256WithRSAEncryption 2a:53:d4:35:45:9f:2e:1e:b8:b4:46:5a:91:e9:d8:6b:5b:ad: c7:66:05:be:31:30:9e:68:4d:0c:30:39:82:38:6b:57:34:88: 19:ee:ba:14:6a:34:9a:41:b4:87:8f:1f:d6:34:5f:de:dd:db: 71:52:8a:cc:96:40:39:a4:41:a8:86:91:d8:8b:a1:e5:7a:fb: 59:7f:09:d9:2a:6c:f8:7e:ce:69:b5:4a:51:37:86:a8:4f:23: 7e:eb:97:45:de:85:40:ef:9d:c1:b5:7c:77:21:9d:97:ac:53: c2:ce:f1:50:2c:64:f2:fe:08:35:4c:1a:84:7d:5c:5b:f1:7f: 84:c4:25:f9:f8:c0:35:7d:85:88:26:64:72:c6:5f:5e:68:2b: 35:6a:e1:70:bd:83:ad:0e:3b:08:d6:9c:9f:f1:a6:42:53:ea: 2f:3a:15:6b:a1:4a:a9:6f:fd:4f:c9:e4:48:be:e4:7f:c9:18: f2:1a:0a:2f:f3:7e:e0:df:38:c6:2f:6f:9a:39:a1:e4:b9:42: 38:e6:98:c5:84:cf:12:e2:88:e8:29:fc:74:4a:c4:52:29:4c: 83:0b:d1:f0:18:f9:4d:ff:91:db:b8:38:81:e6:52:4f:cd:b5: 49:15:79:3b:e7:86:1d:80:3c:ba:3a:e6:c3:cd:7c:ac:45:dd: 4b:4b:71:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTEew39gA7psQMkHxI//6TGWqlXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxOTAwMDEwMVoX DTI1MDkyMzIzNTk1OVowejFJMEcGA1UEBRNAZjY3MjVjODUzYTA3YWVhMTQxMDU4 ZjgyNDQ3OTBiMDYzZGY0YThjYjBhNDFlZGFjMGI1ZTExOWQyZGQ0ZTM2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c8aMMEEDLSXfKsXPDNKvkUvgSIK 9/rVnMkep49cbXGN8rFtOE6eKXSdDFfRj+X+0rkkM4t0V0FoLv/viOCefWfF+b59 y9gLDmC5Fy2t18c+NoDAKrVPnEVs0WjgSGtBfHKOuFwvV6NQYAtn7XaooGJ5tM28 zKTDAto87Yhz8rGgBSxgRzpaps2Kq+U/KdWK7/caAtkd0x5U+tbZ5iT/XXmhSKY1 DETE6VT1rGUmKZCb1Qz4lod8Xf3oGmOZD8NKmPUg1NRD7BdL/VpVCboViJCx+6/7 o5hqAem4b0qOG6qxghtSQ1kfmGNxbRx7ZsEQCAk56kA1JYBIJeqw1y/khQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAGqodFiZr9+i0FQ1Ra2BFZ0yiKRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxMzIxNThmLTg5YjktNDA2NC1hZGNlLWYyNDlmNDQ4OTUyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYCgwDQYJKoZIhvcNAQELBQADggEBACpT1DVFny4euLRGWpHp 2GtbrcdmBb4xMJ5oTQwwOYI4a1c0iBnuuhRqNJpBtIePH9Y0X97d23FSisyWQDmk QaiGkdiLoeV6+1l/CdkqbPh+zmm1SlE3hqhPI37rl0XehUDvncG1fHchnZesU8LO 8VAsZPL+CDVMGoR9XFvxf4TEJfn4wDV9hYgmZHLGX15oKzVq4XC9g60OOwjWnJ/x pkJT6i86FWuhSqlv/U/J5Ei+5H/JGPIaCi/zfuDfOMYvb5o5oeS5QjjmmMWEzxLi iOgp/HRKxFIpTIML0fAY+U3/kdu4OIHmUk/NtUkVeTvnhh2APLo65sPNfKxF3UtL cSc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:23 2025 by rpki-client