$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/699e1901-6701-4fae-ba1b-680131cc39df.roa File: 699e1901-6701-4fae-ba1b-680131cc39df.roa (raw, json) Hash identifier: E1p2mAxxxvVEkukrM3FY5uyHdYwA+Q9BxfKCqtqxVkc= Subject key identifier: 6C:59:51:89:A4:2D:87:47:F5:CC:2A:96:09:87:21:57:97:1A:AC:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E879FBB920A5C74FB2E988A315AEAE3834B843E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/699e1901-6701-4fae-ba1b-680131cc39df.roa Signing time: Fri 01 Aug 2025 00:40:20 +0000 ROA not before: Fri 01 Aug 2025 00:40:20 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:87:9f:bb:92:0a:5c:74:fb:2e:98:8a:31:5a:ea:e3:83:4b:84:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:40:20 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=ac5700cf2396063e1f49539388f71ae522aa1275dba5f63a62f9c9bf25bac151, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:28:46:62:b7:4b:e3:f3:a6:b1:ac:a4:8f: 6e:8e:af:5e:80:08:e6:b7:0c:4d:c6:0d:96:ef:e9: 0f:f5:5c:64:37:7c:12:85:7c:e0:d8:71:91:3b:42: 81:76:df:b5:9b:d8:ed:8c:d3:1c:1e:59:31:9c:ea: e0:6a:a5:28:6a:c4:11:1e:e0:d8:d9:2b:a8:34:59: de:67:7a:3f:49:3d:73:fe:61:a9:37:ef:01:9e:9e: 72:c3:53:9c:db:49:6e:3a:51:b6:e4:e2:8a:c3:0c: 34:35:da:42:b2:b5:bf:60:ad:49:f7:79:e6:61:56: 71:63:e2:cb:04:b2:2a:3c:7b:aa:15:46:8b:2d:e3: 7d:4e:77:f9:b7:d2:da:7d:42:8f:c5:56:3e:49:bf: 64:79:0a:7e:4d:c2:f6:39:14:fa:da:b2:31:87:1b: 5a:ad:b1:a8:de:43:db:92:82:2f:af:7a:c4:76:3f: 4c:a0:e9:f9:5d:20:3e:65:3c:f3:f6:e4:d0:7f:71: a4:1a:d8:9a:93:f9:3a:2d:6f:8c:e8:ec:ba:78:9e: ea:0e:03:cb:d2:a7:6b:d0:7b:aa:f2:37:5c:b3:93: 9a:43:82:14:cd:ec:97:c9:39:c2:38:75:52:30:e9: 8c:f1:be:02:27:e6:00:a1:e3:20:c3:4b:73:52:d5: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:51:89:A4:2D:87:47:F5:CC:2A:96:09:87:21:57:97:1A:AC:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/699e1901-6701-4fae-ba1b-680131cc39df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b::/38 Signature Algorithm: sha256WithRSAEncryption 30:16:5c:df:56:09:75:ae:c1:36:d1:58:ff:3a:3a:95:e2:1e: 8c:3a:95:e5:f8:a4:c5:b5:4f:b3:fc:1b:a9:70:48:e5:62:43: 61:88:81:c0:0f:e7:c8:a1:78:fc:67:91:00:69:56:f4:ef:44: cd:ff:0b:bd:9a:35:f0:34:2c:ef:62:87:39:d3:4d:28:27:9b: 89:c1:99:0e:f2:3e:fc:56:b8:c9:b6:7c:85:6b:0f:29:21:5c: 41:b7:4f:1a:d5:72:1c:66:b3:d0:c4:23:26:51:8f:cd:6c:40: 71:87:c5:f7:cf:92:82:08:78:b4:d4:2d:e6:b9:0d:ce:3a:36: 62:7d:16:a5:71:f7:b6:7c:bf:30:4b:3e:94:1b:33:20:c6:a1: 27:c7:00:61:38:b6:a5:46:5b:ee:d0:18:a4:f0:ca:64:6c:2d: 97:c0:c6:87:a8:98:4d:8b:bd:60:86:91:4a:b9:6e:4c:50:b6: b4:58:0f:e6:01:42:6e:97:cf:5b:81:29:14:a2:28:fc:ca:40: 5c:b8:27:d8:1d:c9:6d:f8:a3:5d:2a:68:da:8a:8b:86:8b:be: 8e:93:51:51:78:df:14:c2:44:79:60:d8:17:76:d8:c0:1c:d0: 97:d1:a5:94:2b:47:b1:e2:7e:e5:01:26:75:43:40:2a:15:be: 5c:8a:83:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDoefu5IKXHT7LpiKMVrq44NLhD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNDAyMFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYWM1NzAwY2YyMzk2MDYzZTFmNDk1 MzkzODhmNzFhZTUyMmFhMTI3NWRiYTVmNjNhNjJmOWM5YmYyNWJhYzE1MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgYoRmK3S+PzprGspI9ujq9egAjm twxNxg2W7+kP9VxkN3wShXzg2HGRO0KBdt+1m9jtjNMcHlkxnOrgaqUoasQRHuDY 2SuoNFneZ3o/ST1z/mGpN+8Bnp5yw1Oc20luOlG25OKKwww0NdpCsrW/YK1J93nm YVZxY+LLBLIqPHuqFUaLLeN9Tnf5t9LafUKPxVY+Sb9keQp+TcL2ORT62rIxhxta rbGo3kPbkoIvr3rEdj9MoOn5XSA+ZTzz9uTQf3GkGtiak/k6LW+M6Oy6eJ7qDgPL 0qdr0Huq8jdcs5OaQ4IUzeyXyTnCOHVSMOmM8b4CJ+YAoeMgw0tzUtVkRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGxZUYmkLYdH9cwqlgmHIVeXGqyOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5OWUxOTAxLTY3MDEtNGZhZS1iYTFiLTY4MDEzMWNjMzlkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwAwDQYJKoZIhvcNAQELBQADggEBADAWXN9WCXWuwTbRWP86 OpXiHow6leX4pMW1T7P8G6lwSOViQ2GIgcAP58ihePxnkQBpVvTvRM3/C72aNfA0 LO9ihznTTSgnm4nBmQ7yPvxWuMm2fIVrDykhXEG3TxrVchxms9DEIyZRj81sQHGH xffPkoIIeLTULea5Dc46NmJ9FqVx97Z8vzBLPpQbMyDGoSfHAGE4tqVGW+7QGKTw ymRsLZfAxoeomE2LvWCGkUq5bkxQtrRYD+YBQm6Xz1uBKRSiKPzKQFy4J9gdyW34 o10qaNqKi4aLvo6TUVF43xTCRHlg2Bd22MAc0JfRpZQrR7HifuUBJnVDQCoVvlyK gzs= -----END CERTIFICATE-----Generated at Sat Aug 23 08:32:47 2025 by rpki-client