$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa File: 4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa (raw, json) Hash identifier: WD7WFlo2mKpYZ98EzCfeJoWk09CZcRhauHAAirxB6M8= Subject key identifier: 1A:C3:8A:64:54:5D:46:E1:6B:42:CF:D6:5B:B3:0D:AF:99:F1:36:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13340262438C0F67440A5957955C97EA7EC1DDE0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa Signing time: Fri 22 Aug 2025 00:10:58 +0000 ROA not before: Fri 22 Aug 2025 00:10:58 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:34:02:62:43:8c:0f:67:44:0a:59:57:95:5c:97:ea:7e:c1:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:10:58 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=05300e7f2870207842ee4561bb1dcb56915179100a789e44173b1c66f2177682, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:5e:d7:84:af:5a:63:55:39:89:30:a0:91: 96:e4:c6:c8:a0:77:82:04:4a:e6:93:1d:0a:94:d6: 95:06:24:6a:d6:20:fc:10:ec:22:ec:e2:68:6c:0c: da:eb:ba:f5:42:e4:d9:fa:64:69:da:fc:f4:71:e9: 18:54:83:e9:41:c3:48:78:5f:ef:98:55:0e:67:b8: 5d:f5:80:7b:dc:80:c0:e0:85:1e:09:dc:d1:b1:fc: b1:7b:2d:28:ce:fe:80:e0:a1:b3:cd:8f:0a:1a:9a: fe:c1:ce:dd:89:f2:44:4e:06:2e:4c:df:f5:30:e0: 89:d8:24:93:8e:c1:a8:e0:b0:8e:11:57:64:ed:15: c1:ed:6f:5f:45:05:28:0e:87:a5:16:20:a5:29:a3: 03:6c:fe:68:ff:e9:3b:c4:c9:38:2d:3b:a4:e9:bf: 21:0b:ee:1d:89:9e:d4:da:91:73:c5:60:41:40:b4: ca:e6:74:92:ef:eb:ba:b4:cf:27:02:c6:7d:9d:a3: d1:6d:e1:68:6e:7b:81:46:b1:92:58:72:0c:76:f3: 8a:e9:d0:f0:71:31:1d:67:f6:01:da:77:18:4b:62: 7c:e6:35:cd:c9:f1:a3:2d:5b:48:be:9e:4f:03:ac: 7b:7c:92:d9:8c:78:1c:17:db:32:b4:28:b0:e3:ef: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:8A:64:54:5D:46:E1:6B:42:CF:D6:5B:B3:0D:AF:99:F1:36:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 06:19:db:09:e0:1e:f5:c9:de:ea:82:3f:a1:fc:b2:c7:9e:3d: 0b:b5:46:92:08:a9:d9:5e:da:39:cf:ca:1b:f5:a5:d5:8f:0a: 9f:dd:24:ff:6e:7e:58:78:a9:5d:80:11:87:ab:46:c4:87:fa: 89:76:66:98:ea:ed:74:b1:3b:8c:6c:34:35:2b:21:46:32:cb: 91:ab:08:61:72:cb:2f:0c:82:34:1d:40:77:d0:bb:86:51:0c: 65:59:53:d7:6b:70:a3:35:1c:6b:13:bd:90:e2:ce:a6:82:20: ba:33:e0:48:d7:64:15:c6:33:c2:fc:74:40:d9:55:14:9b:da: 53:e3:5f:b9:36:01:bf:c4:5c:8b:8e:0c:47:10:b9:11:84:d7: 6f:cb:11:81:a9:94:76:8c:1b:7d:fd:6a:92:8f:65:32:15:ab: 00:c8:19:b6:74:05:47:08:2f:da:7d:29:f3:db:27:25:20:26: 70:ab:46:a3:c4:96:a6:4e:73:db:c6:c2:de:4b:4b:0c:4b:66: 4a:e5:f9:a0:44:83:e9:ee:76:0b:6d:ce:5c:93:23:86:34:fb: d0:0c:f1:f3:21:93:29:9c:50:8e:37:e8:b6:15:62:3a:db:39: f5:98:6a:c5:81:d9:4f:c8:63:85:ef:1e:17:d8:e9:4d:fa:e4: 9a:b1:e8:7f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEzQCYkOMD2dECllXlVyX6n7B3eAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMTA1OFoX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAMDUzMDBlN2YyODcwMjA3ODQyZWU0 NTYxYmIxZGNiNTY5MTUxNzkxMDBhNzg5ZTQ0MTczYjFjNjZmMjE3NzY4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmNe14SvWmNVOYkwoJGW5MbIoHeC BErmkx0KlNaVBiRq1iD8EOwi7OJobAza67r1QuTZ+mRp2vz0cekYVIPpQcNIeF/v mFUOZ7hd9YB73IDA4IUeCdzRsfyxey0ozv6A4KGzzY8KGpr+wc7difJETgYuTN/1 MOCJ2CSTjsGo4LCOEVdk7RXB7W9fRQUoDoelFiClKaMDbP5o/+k7xMk4LTuk6b8h C+4diZ7U2pFzxWBBQLTK5nSS7+u6tM8nAsZ9naPRbeFobnuBRrGSWHIMdvOK6dDw cTEdZ/YB2ncYS2J85jXNyfGjLVtIvp5PA6x7fJLZjHgcF9sytCiw4+/FrQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBrDimRUXUbha0LP1luzDa+Z8TbKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiOTVlM2I0LTMwNDktNGVhMC1hMzljLTc1MjJjYzBiZWEwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAICgMA0GCSqGSIb3DQEBCwUAA4IBAQAGGdsJ4B71yd7qgj+h /LLHnj0LtUaSCKnZXto5z8ob9aXVjwqf3ST/bn5YeKldgBGHq0bEh/qJdmaY6u10 sTuMbDQ1KyFGMsuRqwhhcssvDII0HUB30LuGUQxlWVPXa3CjNRxrE72Q4s6mgiC6 M+BI12QVxjPC/HRA2VUUm9pT41+5NgG/xFyLjgxHELkRhNdvyxGBqZR2jBt9/WqS j2UyFasAyBm2dAVHCC/afSnz2yclICZwq0ajxJamTnPbxsLeS0sMS2ZK5fmgRIPp 7nYLbc5ckyOGNPvQDPHzIZMpnFCON+i2FWI62zn1mGrFgdlPyGOF7x4X2OlN+uSa seh/ -----END CERTIFICATE-----Generated at Sat Aug 23 06:37:17 2025 by rpki-client