$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa File: 511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa (raw, json) Hash identifier: Q82pIbOJzcZb5tPt8XzhWFfbJA/l4f4w4qffYw0ft/0= Subject key identifier: EA:9A:01:C2:E0:04:B8:1F:82:F9:B0:39:9A:E6:27:73:EB:33:6A:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6473A9D09B6A7B8BF167DB89D232D48CD30530F9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa Signing time: Fri 15 Aug 2025 00:20:03 +0000 ROA not before: Fri 15 Aug 2025 00:20:03 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:73:a9:d0:9b:6a:7b:8b:f1:67:db:89:d2:32:d4:8c:d3:05:30:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:20:03 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=db8545f34a570b27604047da4a07667774413a60e2c916716983963ea174cfa8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:16:8a:31:ff:fa:79:bb:53:dc:7e:ae:c6: 1f:2d:0b:1a:43:ba:f9:83:c3:b9:a7:bd:cb:5c:10: de:3f:79:26:81:5b:bf:a2:f2:6a:04:67:c5:27:1f: 86:9f:6e:31:87:53:35:ce:b3:80:e6:74:71:7a:44: b6:40:28:e7:d7:16:82:c8:79:9d:4f:c8:b3:63:6a: 27:9c:71:59:03:f4:76:02:a3:63:46:b5:8a:57:fe: a1:14:a9:2c:2d:eb:47:0c:65:1b:a5:6e:e5:33:5a: f6:3d:5e:db:ac:22:ca:74:8c:4c:a5:5d:1d:e0:c1: a0:2c:67:28:c0:11:9e:67:eb:a7:4e:8e:52:71:bc: 43:8c:8e:9d:e6:c0:ca:29:1d:e3:88:a9:9d:66:14: bd:99:4b:81:df:00:c9:f3:76:80:5d:8a:b9:1b:6e: 7f:54:5a:09:2e:a9:71:22:ba:3a:11:a5:ef:41:6e: 9a:a9:64:18:3f:3b:3f:19:98:b7:aa:cf:29:ac:29: bf:d4:d4:d8:d1:62:37:fd:01:38:7d:42:97:3b:ea: 93:24:78:48:68:88:79:9c:59:52:37:ec:da:a2:52: 82:2f:31:52:98:b6:33:97:de:45:e7:a7:da:03:bb: dd:b8:f2:ce:a4:e7:ff:ab:f6:22:e8:d0:6b:c4:0b: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:01:C2:E0:04:B8:1F:82:F9:B0:39:9A:E6:27:73:EB:33:6A:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:f000::/40 Signature Algorithm: sha256WithRSAEncryption 66:1a:0b:8b:dc:de:87:73:51:d8:80:33:e1:f8:f0:ae:eb:bc: 6c:d6:3c:eb:43:9d:99:9b:d2:01:f8:f3:60:b9:93:e6:c0:81: 2f:e9:8a:9c:0c:dd:45:94:b9:96:8b:c8:0e:cc:ae:cc:c3:8b: d8:87:93:7a:68:3d:83:59:7c:b0:fe:86:4b:4f:3a:5c:37:64: f1:e5:f1:62:59:e4:71:08:6d:b1:39:26:ea:25:0d:1f:7d:b4: 54:25:bb:0a:f7:6d:52:74:80:5a:d5:4d:8d:43:46:80:47:19: 1d:cd:1e:b7:23:4f:5a:6b:e9:ff:f6:00:80:41:34:ee:34:f6: 20:ce:69:05:a8:8b:c2:98:b7:d6:42:6c:a4:62:af:a2:49:2a: f2:a4:fd:26:54:ed:0c:4f:32:9e:a5:0c:ca:2b:c4:a7:36:0d: f9:cd:de:73:0e:d9:d6:31:c3:b4:3d:51:30:90:92:a8:69:4d: 9c:fe:da:b7:15:d7:23:61:ee:e2:23:4f:66:ff:7a:00:4b:8e: 6b:7f:c9:3f:9b:02:5d:39:0a:75:48:9b:af:dd:c6:48:90:57: dc:e8:78:e9:66:b2:43:18:b2:76:28:d6:6f:da:9a:d5:92:99: cf:b9:a4:a5:f1:04:1a:82:6f:ab:3b:97:9d:64:c7:55:07:76: 86:c6:41:35 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZHOp0Jtqe4vxZ9uJ0jLUjNMFMPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMjAwM1oX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNAZGI4NTQ1ZjM0YTU3MGIyNzYwNDA0 N2RhNGEwNzY2Nzc3NDQxM2E2MGUyYzkxNjcxNjk4Mzk2M2VhMTc0Y2ZhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9sWijH/+nm7U9x+rsYfLQsaQ7r5 g8O5p73LXBDeP3kmgVu/ovJqBGfFJx+Gn24xh1M1zrOA5nRxekS2QCjn1xaCyHmd T8izY2onnHFZA/R2AqNjRrWKV/6hFKksLetHDGUbpW7lM1r2PV7brCLKdIxMpV0d 4MGgLGcowBGeZ+unTo5ScbxDjI6d5sDKKR3jiKmdZhS9mUuB3wDJ83aAXYq5G25/ VFoJLqlxIro6EaXvQW6aqWQYPzs/GZi3qs8prCm/1NTY0WI3/QE4fUKXO+qTJHhI aIh5nFlSN+zaolKCLzFSmLYzl95F56faA7vduPLOpOf/q/Yi6NBrxAs+PQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOqaAcLgBLgfgvmwOZrmJ3PrM2paMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxMTgxNmY5LTIzYzMtNDFmYi05ZDUwLTJhMmY0ZDY2NmM3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauPAwDQYJKoZIhvcNAQELBQADggEBAGYaC4vc3odzUdiAM+H4 8K7rvGzWPOtDnZmb0gH482C5k+bAgS/pipwM3UWUuZaLyA7MrszDi9iHk3poPYNZ fLD+hktPOlw3ZPHl8WJZ5HEIbbE5JuolDR99tFQluwr3bVJ0gFrVTY1DRoBHGR3N HrcjT1pr6f/2AIBBNO409iDOaQWoi8KYt9ZCbKRir6JJKvKk/SZU7QxPMp6lDMor xKc2DfnN3nMO2dYxw7Q9UTCQkqhpTZz+2rcV1yNh7uIjT2b/egBLjmt/yT+bAl05 CnVIm6/dxkiQV9zoeOlmskMYsnYo1m/amtWSmc+5pKXxBBqCb6s7l51kx1UHdobG QTU= -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:54 2025 by rpki-client