$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370f03d8-51d7-4063-98be-9a7f8ce41bda.roa File: 370f03d8-51d7-4063-98be-9a7f8ce41bda.roa (raw, json) Hash identifier: YZjrMZgHxbUopL+ucSmsqteFedCO1kSuF36BtU9x1as= Subject key identifier: 14:F8:9C:C8:CE:C8:BA:25:81:35:15:C0:11:21:D2:CD:B2:C7:26:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E21117993ECB941A0DAC6B72E962813EC941B37 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370f03d8-51d7-4063-98be-9a7f8ce41bda.roa Signing time: Sat 23 Aug 2025 00:41:10 +0000 ROA not before: Sat 23 Aug 2025 00:41:10 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:21:11:79:93:ec:b9:41:a0:da:c6:b7:2e:96:28:13:ec:94:1b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:41:10 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=1c3de08e1a2b8f3276e5eb1ce83c4f01e8ee55344d1d800184b9e392e0dbf3c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:4d:3c:5c:7f:ab:63:5f:e4:27:26:fd:93: 96:60:2c:14:5d:3e:fd:ed:5c:aa:5d:01:bb:a5:73: fa:3d:5e:4e:46:0e:d5:a0:85:ec:8d:53:07:7f:cc: 03:67:78:e9:a1:fe:4d:05:63:95:1c:2c:d9:3c:ed: 6a:2a:4a:26:e4:4d:bf:84:f7:08:b9:3e:6a:78:fb: bc:3b:66:22:db:1d:f0:5c:b0:45:d7:ad:db:00:47: d4:82:69:2a:32:a0:30:40:87:bb:ce:51:ec:2b:5d: 62:c2:b3:91:e0:56:fe:52:57:70:5f:65:e4:17:85: dd:72:51:4a:7e:f6:d7:94:60:53:9c:9e:65:7f:9f: fe:e7:83:e6:8e:19:88:47:15:06:b7:ab:a3:b9:1c: ab:67:18:c0:85:25:0f:c9:25:4a:e1:4c:5a:a9:eb: ba:e6:4a:73:02:94:a2:46:67:38:87:4d:0d:14:64: 5d:0e:19:24:2a:18:88:89:3e:41:a8:42:e7:ce:74: a2:c5:f0:ff:7f:eb:f1:28:90:60:16:ab:92:9f:68: a4:e6:3b:5d:13:e2:17:29:b4:93:ae:06:f7:15:79: 20:d3:57:84:e6:f5:b9:9a:42:12:79:0c:3d:36:49: 31:fc:b5:fc:0e:97:bb:f8:a0:97:60:9a:7d:e4:f5: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F8:9C:C8:CE:C8:BA:25:81:35:15:C0:11:21:D2:CD:B2:C7:26:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370f03d8-51d7-4063-98be-9a7f8ce41bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:e040::/48 Signature Algorithm: sha256WithRSAEncryption 4f:e7:68:a4:a2:3e:0e:6e:c8:fa:97:b1:1e:da:ff:4e:71:d1: 4e:0d:e0:1d:e6:aa:c6:9d:65:5e:87:c6:a2:3c:81:e3:14:f0: ab:4a:15:cd:46:6d:21:3e:1f:f3:97:9a:c0:48:e0:ab:1c:c8: d1:c5:ed:7e:36:bc:0c:20:7b:1f:2b:98:a7:8b:5e:ac:2c:e9: 5b:be:a0:0d:e1:dc:e2:19:c5:11:e3:97:a4:6d:80:d2:ab:b2: 3b:72:58:26:fa:46:d1:d3:3b:9e:77:e0:47:ee:fc:de:d5:31: c9:f0:e9:59:5a:da:2b:e0:e4:33:3a:3f:0b:75:e5:63:be:1a: ce:d5:0a:32:9f:c3:26:9a:df:23:e9:95:8b:3e:c8:1c:7c:41: 82:2d:b2:4c:b1:f7:d5:e3:0b:2b:db:c6:86:da:9d:5f:82:45: c2:89:d8:d8:0f:1d:0c:aa:9b:57:07:ca:f5:71:3a:7f:ea:ce: ac:79:f5:5a:50:6a:66:e2:cb:53:96:8d:a0:47:b7:76:5f:16: 25:72:30:bd:18:ba:4d:d6:27:97:aa:ac:ef:70:12:24:c6:bb: 6e:07:a5:c9:09:1d:f2:4c:4d:a7:d5:f2:58:da:2b:07:17:fb: 59:b1:eb:13:63:f8:2c:b1:14:65:80:bd:58:32:c2:31:ca:d8: 72:da:0b:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXiEReZPsuUGg2sa3LpYoE+yUGzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNDExMFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMWMzZGUwOGUxYTJiOGYzMjc2ZTVl YjFjZTgzYzRmMDFlOGVlNTUzNDRkMWQ4MDAxODRiOWUzOTJlMGRiZjNjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd5NPFx/q2Nf5Ccm/ZOWYCwUXT79 7VyqXQG7pXP6PV5ORg7VoIXsjVMHf8wDZ3jpof5NBWOVHCzZPO1qKkom5E2/hPcI uT5qePu8O2Yi2x3wXLBF163bAEfUgmkqMqAwQIe7zlHsK11iwrOR4Fb+UldwX2Xk F4XdclFKfvbXlGBTnJ5lf5/+54PmjhmIRxUGt6ujuRyrZxjAhSUPySVK4Uxaqeu6 5kpzApSiRmc4h00NFGRdDhkkKhiIiT5BqELnznSixfD/f+vxKJBgFquSn2ik5jtd E+IXKbSTrgb3FXkg01eE5vW5mkISeQw9Nkkx/LX8Dpe7+KCXYJp95PVeiQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBT4nMjOyLolgTUVwBEh0s2yxybYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3MGYwM2Q4LTUxZDctNDA2My05OGJlLTlhN2Y4Y2U0MWJkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/+BAMA0GCSqGSIb3DQEBCwUAA4IBAQBP52ikoj4Obsj6l7Ee 2v9OcdFODeAd5qrGnWVeh8aiPIHjFPCrShXNRm0hPh/zl5rASOCrHMjRxe1+NrwM IHsfK5ini16sLOlbvqAN4dziGcUR45ekbYDSq7I7clgm+kbR0zued+BH7vze1THJ 8OlZWtor4OQzOj8LdeVjvhrO1Qoyn8Mmmt8j6ZWLPsgcfEGCLbJMsffV4wsr28aG 2p1fgkXCidjYDx0MqptXB8r1cTp/6s6sefVaUGpm4stTlo2gR7d2XxYlcjC9GLpN 1ieXqqzvcBIkxrtuB6XJCR3yTE2n1fJY2isHF/tZsesTY/gssRRlgL1YMsIxythy 2guF -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:26 2025 by rpki-client