$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa File: 5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa (raw, json) Hash identifier: LrBaMOFWSrxQVXRJ96+5irIIcz0Uu57SAz48ve2YUIY= Subject key identifier: CB:7F:98:26:C8:DC:FC:66:A9:DD:B0:99:1F:3F:FE:90:1E:DA:EB:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1EAD67AB66FB00E4FF694BE8178C0216C879A8BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa Signing time: Mon 18 Aug 2025 15:01:26 +0000 ROA not before: Mon 18 Aug 2025 15:01:26 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ad:67:ab:66:fb:00:e4:ff:69:4b:e8:17:8c:02:16:c8:79:a8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:01:26 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=571ea3613026a0f7a1810b253ee3f3e3e0cbb83affea502f4a06a22e316a2c46, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:88:a8:37:43:4a:26:cd:f5:b6:f0:bb:7c: 67:6f:31:02:0d:8d:de:2f:a8:d5:fa:74:b3:68:e2: 12:00:3b:a1:b7:9a:3b:f7:7f:9a:c8:42:b8:27:73: 96:db:e6:01:43:ea:eb:68:6a:e8:b3:3a:d3:dc:1d: 9e:79:e2:0f:81:8d:cf:da:e4:32:6c:57:87:7b:f8: d9:13:9c:15:c9:47:89:09:f1:cb:15:a0:d3:c2:bf: 0a:be:d5:04:c2:d5:8e:40:e4:41:c6:8d:cc:fb:14: b9:1a:6a:78:69:d3:e4:fb:c0:a9:9b:e4:1b:57:bb: 75:e6:67:94:6c:04:24:30:41:d6:25:1f:e5:5c:b4: ad:10:f1:ca:1b:7e:0d:1d:7e:2e:81:b1:1c:3e:8c: 3f:c2:af:1c:43:9d:41:34:84:e4:a1:0a:e7:4a:74: 4e:27:dc:79:d2:21:9d:f5:58:08:52:3f:c9:85:6f: b4:a6:b0:39:5c:03:c2:1e:d5:4b:cc:ca:fa:d1:ae: 2b:20:bf:7e:7f:50:fc:84:1e:d9:30:49:b7:db:f6: c2:7d:f5:de:7b:fe:79:65:94:74:8f:11:b2:a7:5e: ae:31:f2:71:3c:7f:be:d2:a0:0b:33:c8:d3:8f:20: ce:eb:2f:ad:fe:96:81:1e:57:43:e8:c0:df:d1:1c: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:98:26:C8:DC:FC:66:A9:DD:B0:99:1F:3F:FE:90:1E:DA:EB:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:b000::/40 Signature Algorithm: sha256WithRSAEncryption 69:46:9b:53:e1:3c:10:ce:2f:74:de:b8:ff:77:da:54:7a:b1: fb:a5:23:19:be:58:3c:95:9d:cb:c0:fd:33:10:10:66:07:82: 65:54:f9:f1:fe:8a:ae:bc:b3:dd:4a:98:32:07:fd:95:82:cb: 25:54:67:b9:64:dd:62:f5:40:7b:ef:e8:ae:16:b8:2e:26:ff: 0f:c3:d8:ab:37:6d:f2:b4:10:15:14:40:fa:13:5d:67:16:17: 7c:95:d0:bc:f4:4b:19:eb:8b:df:90:cf:be:b9:cd:cf:19:01: 23:c0:a6:00:66:fa:5d:69:3d:12:21:5c:57:86:1c:6b:d3:cd: 6f:6b:20:4b:ef:3d:04:43:11:56:ba:e1:7c:8c:b8:22:77:07: 94:b9:34:46:aa:b6:77:d1:8f:0a:d8:20:ae:e6:02:a2:a3:37: e9:f8:e1:27:cd:21:52:71:af:d0:a3:8e:17:5e:3f:f0:af:39: a0:44:e5:d9:89:ea:be:60:bb:8a:17:85:f9:c1:6b:23:dc:82: 41:1d:af:7c:5a:f8:c1:9c:f0:cd:75:51:2f:0b:0b:fe:e4:77: d8:e6:05:4b:3d:a6:82:67:12:ca:98:b2:07:ca:3d:5f:bc:fa: ba:67:5f:d3:1f:84:53:40:28:70:30:26:72:6e:36:ee:92:ec: b5:22:9d:da -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHq1nq2b7AOT/aUvoF4wCFsh5qL4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDEyNloX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNANTcxZWEzNjEzMDI2YTBmN2ExODEw YjI1M2VlM2YzZTNlMGNiYjgzYWZmZWE1MDJmNGEwNmEyMmUzMTZhMmM0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0eIqDdDSibN9bbwu3xnbzECDY3e L6jV+nSzaOISADuht5o793+ayEK4J3OW2+YBQ+rraGroszrT3B2eeeIPgY3P2uQy bFeHe/jZE5wVyUeJCfHLFaDTwr8KvtUEwtWOQORBxo3M+xS5Gmp4adPk+8Cpm+Qb V7t15meUbAQkMEHWJR/lXLStEPHKG34NHX4ugbEcPow/wq8cQ51BNITkoQrnSnRO J9x50iGd9VgIUj/JhW+0prA5XAPCHtVLzMr60a4rIL9+f1D8hB7ZMEm32/bCffXe e/55ZZR0jxGyp16uMfJxPH++0qALM8jTjyDO6y+t/paBHldD6MDf0RxqgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMt/mCbI3Pxmqd2wmR8//pAe2uumMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0MjFmMDMwLWJkOGUtNDU3ZS1iOWU1LWZmYmM0OWFmZWJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaubAwDQYJKoZIhvcNAQELBQADggEBAGlGm1PhPBDOL3TeuP93 2lR6sfulIxm+WDyVncvA/TMQEGYHgmVU+fH+iq68s91KmDIH/ZWCyyVUZ7lk3WL1 QHvv6K4WuC4m/w/D2Ks3bfK0EBUUQPoTXWcWF3yV0Lz0Sxnri9+Qz765zc8ZASPA pgBm+l1pPRIhXFeGHGvTzW9rIEvvPQRDEVa64XyMuCJ3B5S5NEaqtnfRjwrYIK7m AqKjN+n44SfNIVJxr9CjjhdeP/CvOaBE5dmJ6r5gu4oXhfnBayPcgkEdr3xa+MGc 8M11US8LC/7kd9jmBUs9poJnEsqYsgfKPV+8+rpnX9MfhFNAKHAwJnJuNu6S7LUi ndo= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:32 2025 by rpki-client