$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa File: 46906009-c3b9-49b3-a5f1-d017b200e422.roa (raw, json) Hash identifier: 4z3sylCtIVmgOWxKPElkrUA+uRZxU5S0u9nGQdiruVY= Subject key identifier: 77:2A:90:F8:7D:DE:17:7C:6B:E7:9B:BC:E5:28:D2:1D:1E:A7:85:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50D8C837EF34250383EADDBE37CBAB6A6B835F78 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa Signing time: Sat 23 Aug 2025 00:41:41 +0000 ROA not before: Sat 23 Aug 2025 00:41:41 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d8:c8:37:ef:34:25:03:83:ea:dd:be:37:cb:ab:6a:6b:83:5f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:41:41 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=d3a826d6f21f9f32298c5e90f96640152864667501efa9f9040485e123c0155d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:f0:c2:ad:5f:ea:b7:ab:47:ce:3f:cb:fa: 97:37:e7:bb:e7:28:8d:8f:58:f8:13:52:5a:a5:07: 6a:30:5e:4b:71:a9:e1:04:b1:a0:c0:ae:c6:c7:94: f7:68:9c:d6:3d:eb:34:79:a5:81:ff:2c:54:dc:a7: 59:ae:7f:6a:57:a5:6d:53:c2:4a:c7:f2:c7:a9:7f: aa:b3:5b:77:29:f7:c1:75:84:8f:ca:21:e9:e1:c5: bd:39:cd:d2:3e:5d:40:6f:1c:61:2c:61:eb:d6:01: 83:50:3f:aa:5c:66:48:eb:7f:84:33:d9:5d:1c:31: 8f:7b:82:f8:53:f4:fc:05:ad:9e:ad:14:e8:c4:9c: 49:b1:30:95:68:33:45:40:9f:d2:51:83:48:d6:d2: cc:4f:55:fd:ea:52:37:f5:04:fa:70:cf:8f:a9:26: 18:c1:5d:59:d8:f7:a6:d2:b9:6a:6e:56:71:68:97: 1b:91:33:bd:b2:56:48:c8:13:d4:2b:8f:94:85:3c: 6e:ec:97:80:62:7b:80:29:d3:b3:eb:fd:af:c2:24: 8c:53:d0:61:c2:53:55:39:9a:bb:bc:65:3c:ec:42: 18:65:e9:da:d8:49:4f:46:de:26:1f:9c:a4:d8:54: 51:24:f9:88:9c:db:da:a2:83:99:e4:1a:0f:18:02: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2A:90:F8:7D:DE:17:7C:6B:E7:9B:BC:E5:28:D2:1D:1E:A7:85:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 17:0d:e7:a9:3d:f7:94:e6:6d:16:61:8a:9e:96:74:49:4d:e4: 9b:c2:ec:a7:9d:c9:b8:ff:45:92:b5:15:59:0e:d9:fe:47:00: a8:30:e6:24:f6:d0:cd:1b:52:a0:73:10:93:2d:e3:69:b6:84: 75:ec:51:7a:3b:be:1e:c6:e2:28:d7:53:f9:60:20:37:18:92: 01:81:e6:40:0e:f1:1f:2f:90:d4:87:0c:ef:2e:6c:56:02:f2: fe:3e:1d:c3:b3:74:04:0f:6b:c2:d7:54:10:cb:52:50:fc:8b: f9:ed:00:c3:5a:6e:d3:8f:f7:0e:b7:8a:61:56:e6:a3:68:9a: ae:69:a5:1b:cd:43:f9:b2:8a:38:d6:cf:1a:a1:75:7b:8c:ab: 43:7e:9d:8f:49:1a:c5:cb:a9:b0:9e:7f:3e:52:8f:97:31:11: a2:bc:04:35:19:a4:06:d9:1c:28:d6:19:74:87:28:c9:09:db: 22:18:db:dc:72:87:ad:c7:40:e0:6f:95:dd:91:42:e2:fb:a1: 1e:7d:c4:d5:36:bc:76:42:cf:a0:d2:23:b2:fb:ec:55:c3:2b: 3a:7c:5f:6b:cf:91:1c:ea:f9:a6:97:6a:20:eb:f0:72:84:b0: 03:7f:99:a2:97:5a:09:cf:00:19:82:94:bf:0c:06:05:77:dc: c3:d5:89:ff -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUNjIN+80JQOD6t2+N8uramuDX3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNDE0MVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAZDNhODI2ZDZmMjFmOWYzMjI5OGM1 ZTkwZjk2NjQwMTUyODY0NjY3NTAxZWZhOWY5MDQwNDg1ZTEyM2MwMTU1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK3wwq1f6rerR84/y/qXN+e75yiN j1j4E1JapQdqMF5LcanhBLGgwK7Gx5T3aJzWPes0eaWB/yxU3KdZrn9qV6VtU8JK x/LHqX+qs1t3KffBdYSPyiHp4cW9Oc3SPl1AbxxhLGHr1gGDUD+qXGZI63+EM9ld HDGPe4L4U/T8Ba2erRToxJxJsTCVaDNFQJ/SUYNI1tLMT1X96lI39QT6cM+PqSYY wV1Z2Pem0rlqblZxaJcbkTO9slZIyBPUK4+UhTxu7JeAYnuAKdOz6/2vwiSMU9Bh wlNVOZq7vGU87EIYZena2ElPRt4mH5yk2FRRJPmInNvaooOZ5BoPGAKr8wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHcqkPh93hd8a+ebvOUo0h0ep4X0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2OTA2MDA5LWMzYjktNDliMy1hNWYxLWQwMTdiMjAwZTQyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEjAMA0GCSqGSIb3DQEBCwUAA4IBAQAXDeepPfeU5m0WYYqe lnRJTeSbwuynncm4/0WStRVZDtn+RwCoMOYk9tDNG1KgcxCTLeNptoR17FF6O74e xuIo11P5YCA3GJIBgeZADvEfL5DUhwzvLmxWAvL+Ph3Ds3QED2vC11QQy1JQ/Iv5 7QDDWm7Tj/cOt4phVuajaJquaaUbzUP5soo41s8aoXV7jKtDfp2PSRrFy6mwnn8+ Uo+XMRGivAQ1GaQG2Rwo1hl0hyjJCdsiGNvccoetx0Dgb5XdkULi+6EefcTVNrx2 Qs+g0iOy++xVwys6fF9rz5Ec6vmml2og6/ByhLADf5mil1oJzwAZgpS/DAYFd9zD 1Yn/ -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:43 2025 by rpki-client