$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa File: 68f22ed7-c8a5-4cae-956a-e93f94070791.roa (raw, json) Hash identifier: YFJKcoAJjkmb9b99TPstZVsDjj09RuF6xiP14htd03Q= Subject key identifier: 9C:8E:F2:F1:5D:9F:5B:34:19:09:E0:29:62:19:ED:66:DD:AC:DA:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61586BED408F50775E80D1C4F378D93C247E2B9D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa Signing time: Sat 23 Aug 2025 00:00:17 +0000 ROA not before: Sat 23 Aug 2025 00:00:17 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:58:6b:ed:40:8f:50:77:5e:80:d1:c4:f3:78:d9:3c:24:7e:2b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:00:17 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=855b47f093d99fecb8b691c2db8ae052f6cab63cae9ee3b32bc23a07e15f8369, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:07:71:a5:cd:14:43:c3:a9:cb:41:1e:0e: 8e:fb:74:a6:b2:94:6f:c6:41:76:9e:d6:fb:9b:f3: e2:55:f8:89:73:6e:0f:d3:79:92:91:2f:4b:f0:af: 7d:b7:c8:6a:66:7e:db:0c:7d:a1:67:52:e2:4e:be: 65:7f:7c:1d:b0:92:14:81:e8:bc:5e:48:da:fc:52: 7a:68:4b:1a:46:7e:ee:bd:e6:63:bb:5c:1b:87:86: fd:3b:b9:d7:da:a2:c1:f2:55:d7:ac:d6:26:2b:0e: 43:7c:d0:09:40:9b:34:30:35:f4:4c:bd:4a:f6:78: a8:a3:a5:ed:78:d7:67:b2:e6:7b:25:d0:4f:cd:cd: ec:5d:b5:9e:ca:6b:e4:66:ff:52:a3:3b:0f:56:4d: f5:13:50:35:23:3f:75:82:0c:55:7a:4b:15:cc:dc: 2a:e0:c3:41:ec:b7:a4:33:5f:82:9d:8d:44:fb:8b: ae:51:77:2a:ed:2d:db:b2:8a:97:7e:cf:72:1a:49: ab:25:17:e2:38:aa:a6:25:7d:83:88:40:59:db:82: f3:d5:8e:72:ea:9f:e0:91:66:c9:53:98:83:6a:86: c4:bd:0c:a5:80:e1:67:ad:64:33:4d:c0:9d:22:c1: 85:fb:8f:01:f8:2a:f0:ee:ff:1f:e1:1e:5e:3e:e1: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8E:F2:F1:5D:9F:5B:34:19:09:E0:29:62:19:ED:66:DD:AC:DA:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e080::/48 Signature Algorithm: sha256WithRSAEncryption 76:e5:ea:ae:ee:f2:66:a9:ef:f9:85:5a:b0:8e:d5:5d:b8:60: 0a:92:65:b5:e0:b5:21:ed:d5:a5:9e:c5:b1:3a:87:c9:2f:b0: 8e:26:9b:53:ed:7a:9e:3d:03:b2:6d:ad:f8:b1:3d:23:4a:14: 88:50:40:d3:d3:2f:27:dd:af:87:b1:eb:7f:94:9a:63:81:41: e8:3a:9d:5d:ac:4e:71:25:79:fe:33:ad:a4:1d:f0:68:fd:4b: 8b:2f:40:4b:41:dc:a1:d0:c6:5a:18:10:fe:2a:72:bb:c4:4a: 14:93:7d:a4:a7:a3:77:26:b1:d7:55:0e:6a:07:6a:36:8d:d4: bd:fe:94:31:ea:1b:69:1f:74:0d:1f:b7:d2:5c:22:ca:80:b7: 4b:33:0b:ce:13:2a:d1:bc:e9:f8:3e:61:bd:86:12:f4:18:94: de:3b:be:4c:2f:df:17:26:dc:a7:51:2d:ac:92:1b:0f:93:21: a4:f0:23:fa:1c:65:d2:02:2f:3b:52:a1:7a:ca:98:9e:b0:fa: 2e:fd:23:00:2d:19:ea:0f:e9:dd:a7:3a:e7:c7:14:64:19:a2: 2c:54:a9:43:aa:ae:40:54:93:14:76:08:1e:e8:50:ce:9d:bf: 88:d5:f2:3d:1f:2c:e9:f4:3f:84:2f:a6:88:58:dc:16:2a:99: 1d:7c:ad:a8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYVhr7UCPUHdegNHE83jZPCR+K50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMDAxN1oX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAODU1YjQ3ZjA5M2Q5OWZlY2I4YjY5 MWMyZGI4YWUwNTJmNmNhYjYzY2FlOWVlM2IzMmJjMjNhMDdlMTVmODM2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMHcaXNFEPDqctBHg6O+3SmspRv xkF2ntb7m/PiVfiJc24P03mSkS9L8K99t8hqZn7bDH2hZ1LiTr5lf3wdsJIUgei8 Xkja/FJ6aEsaRn7uveZju1wbh4b9O7nX2qLB8lXXrNYmKw5DfNAJQJs0MDX0TL1K 9nioo6XteNdnsuZ7JdBPzc3sXbWeymvkZv9SozsPVk31E1A1Iz91ggxVeksVzNwq 4MNB7LekM1+CnY1E+4uuUXcq7S3bsoqXfs9yGkmrJRfiOKqmJX2DiEBZ24Lz1Y5y 6p/gkWbJU5iDaobEvQylgOFnrWQzTcCdIsGF+48B+Crw7v8f4R5ePuGf3QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJyO8vFdn1s0GQngKWIZ7WbdrNpoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4ZjIyZWQ3LWM4YTUtNGNhZS05NTZhLWU5M2Y5NDA3MDc5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uCAMA0GCSqGSIb3DQEBCwUAA4IBAQB25equ7vJmqe/5hVqw jtVduGAKkmW14LUh7dWlnsWxOofJL7COJptT7XqePQOyba34sT0jShSIUEDT0y8n 3a+Hset/lJpjgUHoOp1drE5xJXn+M62kHfBo/UuLL0BLQdyh0MZaGBD+KnK7xEoU k32kp6N3JrHXVQ5qB2o2jdS9/pQx6htpH3QNH7fSXCLKgLdLMwvOEyrRvOn4PmG9 hhL0GJTeO75ML98XJtynUS2skhsPkyGk8CP6HGXSAi87UqF6ypiesPou/SMALRnq D+ndpzrnxxRkGaIsVKlDqq5AVJMUdgge6FDOnb+I1fI9Hyzp9D+EL6aIWNwWKpkd fK2o -----END CERTIFICATE-----Generated at Sat Aug 23 06:40:04 2025 by rpki-client