$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b32b47b-b0c8-4453-89b7-6542c0f942d3.roa File: 6b32b47b-b0c8-4453-89b7-6542c0f942d3.roa (raw, json) Hash identifier: E4rrg7Qj3lp/rmcf5rfV9lA2WBOIXIbUisb+zO42lGg= Subject key identifier: 79:07:FA:1E:25:0C:85:DC:44:D0:74:03:99:D3:7B:CA:7A:BE:94:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 178CF8F1BE9C2FB06FE31DCF31E58CEF66F27197 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b32b47b-b0c8-4453-89b7-6542c0f942d3.roa Signing time: Sat 23 Aug 2025 00:30:13 +0000 ROA not before: Sat 23 Aug 2025 00:30:13 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8c:f8:f1:be:9c:2f:b0:6f:e3:1d:cf:31:e5:8c:ef:66:f2:71:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:30:13 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=325d91c3e1b96956d506c3de659ff50401677b55ca047649f02b70f835bde8cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:07:2a:4b:40:0f:fd:3c:bd:e7:0c:98:66: 65:dd:82:1c:99:2c:97:c3:fc:98:0e:2d:60:e9:01: d6:5c:4c:0e:84:ce:32:8f:9b:ef:a6:c6:12:66:27: 34:f2:2f:e2:aa:bd:84:d0:34:60:e4:60:be:6e:d4: a7:08:1c:49:11:0f:9c:b8:b7:3f:3c:c9:82:76:82: 29:cb:77:cc:a2:de:bd:25:db:25:a7:1c:21:ff:44: 7f:0d:86:d8:71:34:a2:ec:34:a7:15:ee:d7:79:4c: 0c:41:69:7c:80:3d:9a:77:79:8a:92:9d:ad:3d:c6: e0:b7:a7:96:e6:ac:be:5a:9e:41:15:ae:d6:f6:73: 7e:b6:a3:11:55:00:21:77:75:b5:55:28:bf:b2:48: 91:99:bd:3b:d2:56:73:d0:8c:b7:de:a3:c2:5a:4b: 71:7e:65:14:bb:ac:6c:e1:23:93:e7:e7:80:95:b0: aa:11:8b:93:6f:1a:d9:5d:14:36:11:62:50:5f:f5: 79:1c:04:7a:20:12:ca:5d:27:ee:ae:1c:19:74:a2: 1d:ad:70:41:a0:f8:b9:55:a3:7b:df:a8:2a:e1:51: b8:17:bc:52:e2:ad:31:55:70:1b:f6:7b:c0:a9:2f: 09:f9:10:b7:36:0c:14:74:b2:e8:e3:af:d6:84:cc: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:07:FA:1E:25:0C:85:DC:44:D0:74:03:99:D3:7B:CA:7A:BE:94:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b32b47b-b0c8-4453-89b7-6542c0f942d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c040::/48 Signature Algorithm: sha256WithRSAEncryption 4e:3a:ae:90:bc:c3:57:37:53:6d:64:f8:80:8b:a8:eb:3a:28: 7e:41:7e:a9:e0:2d:ad:5f:7f:e5:e4:f1:97:b0:b4:d2:88:87: e9:a3:99:74:7a:cb:c6:f4:2e:4f:bd:a0:16:dd:4e:2f:cd:56: cb:50:ec:7f:af:73:00:7a:11:fc:44:c7:93:ec:04:2d:2b:d6: 85:d4:ec:17:4b:53:e0:b3:5b:a7:c7:e1:5b:6b:15:04:6e:b1: 03:a8:e7:90:83:f8:6c:5d:24:41:d2:a5:1f:21:b9:25:30:8f: db:4c:4a:97:9b:e7:0f:a3:66:c4:2a:d8:d7:06:88:c9:15:95: b9:1a:24:1a:a9:78:08:76:e5:39:51:74:31:37:20:24:6a:d2: df:8a:a4:b8:b5:4b:a9:88:51:b5:80:ac:35:db:02:2f:4f:37: 99:f5:71:03:cb:4f:a8:da:d0:2a:f6:5a:35:d3:0a:70:2c:36: 92:b2:64:0d:a0:92:aa:00:f0:71:9f:eb:6e:f7:bd:95:ba:14: 02:a2:7e:f1:44:7e:f6:64:94:a6:5d:b6:7a:b7:86:5b:bc:9a: bd:b8:2b:96:20:40:92:f2:c3:82:ee:b0:b6:b1:8f:a9:07:62: 95:8a:82:2c:98:9d:d2:57:b3:84:eb:6d:1c:b6:57:08:1f:3c: c5:2b:02:3d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUF4z48b6cL7Bv4x3PMeWM72bycZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMzAxM1oX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMzI1ZDkxYzNlMWI5Njk1NmQ1MDZj M2RlNjU5ZmY1MDQwMTY3N2I1NWNhMDQ3NjQ5ZjAyYjcwZjgzNWJkZThjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oQHKktAD/08vecMmGZl3YIcmSyX w/yYDi1g6QHWXEwOhM4yj5vvpsYSZic08i/iqr2E0DRg5GC+btSnCBxJEQ+cuLc/ PMmCdoIpy3fMot69Jdslpxwh/0R/DYbYcTSi7DSnFe7XeUwMQWl8gD2ad3mKkp2t Pcbgt6eW5qy+Wp5BFa7W9nN+tqMRVQAhd3W1VSi/skiRmb070lZz0Iy33qPCWktx fmUUu6xs4SOT5+eAlbCqEYuTbxrZXRQ2EWJQX/V5HAR6IBLKXSfurhwZdKIdrXBB oPi5VaN736gq4VG4F7xS4q0xVXAb9nvAqS8J+RC3NgwUdLLo46/WhMwZnQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHkH+h4lDIXcRNB0A5nTe8p6vpR+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMzJiNDdiLWIwYzgtNDQ1My04OWI3LTY1NDJjMGY5NDJkMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMBAMA0GCSqGSIb3DQEBCwUAA4IBAQBOOq6QvMNXN1NtZPiA i6jrOih+QX6p4C2tX3/l5PGXsLTSiIfpo5l0esvG9C5PvaAW3U4vzVbLUOx/r3MA ehH8RMeT7AQtK9aF1OwXS1Pgs1unx+FbaxUEbrEDqOeQg/hsXSRB0qUfIbklMI/b TEqXm+cPo2bEKtjXBojJFZW5GiQaqXgIduU5UXQxNyAkatLfiqS4tUupiFG1gKw1 2wIvTzeZ9XEDy0+o2tAq9lo10wpwLDaSsmQNoJKqAPBxn+tu972VuhQCon7xRH72 ZJSmXbZ6t4ZbvJq9uCuWIECS8sOC7rC2sY+pB2KVioIsmJ3SV7OE620ctlcIHzzF KwI9 -----END CERTIFICATE-----Generated at Sat Aug 23 06:45:05 2025 by rpki-client