$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d6e9e37-2d45-4471-8b16-c8171595635a.roa File: 6d6e9e37-2d45-4471-8b16-c8171595635a.roa (raw, json) Hash identifier: M07njVJEqVF8OGGWsbpJV7RnX9Fb2gju/10Bpslt1fQ= Subject key identifier: 91:EE:87:D4:0B:9A:56:11:29:BA:46:0D:81:45:31:95:09:A0:0C:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3ED77ACF9421D766AE9914A4FD04907F1D6D3270 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d6e9e37-2d45-4471-8b16-c8171595635a.roa Signing time: Tue 05 Aug 2025 00:00:15 +0000 ROA not before: Tue 05 Aug 2025 00:00:15 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d7:7a:cf:94:21:d7:66:ae:99:14:a4:fd:04:90:7f:1d:6d:32:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 5 00:00:15 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=ae42a250fb21909baf1efd7954ccad776a234c7c78bff973df46cf822b9ff61d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f5:74:df:e9:d5:44:16:2b:cc:d9:75:d4:db: de:c7:55:45:e6:61:74:2a:e3:68:09:1d:7f:8d:2e: 23:be:21:5c:90:72:5f:c5:41:0e:5f:57:26:81:52: 65:20:e4:e4:c9:a2:84:98:f0:61:a2:8b:4f:92:79: 45:2a:62:9f:0e:1e:f1:17:46:87:b6:27:c2:3d:ed: b5:46:f8:1d:4c:43:f8:e1:34:0f:44:8b:a7:bf:bb: 7e:ce:9b:31:7e:e4:ea:b5:91:c8:d3:db:25:bb:08: 35:57:bf:26:f0:38:5d:37:b0:45:64:74:3d:0b:dc: 4b:d9:1e:78:65:f2:fb:77:e2:f1:a8:f6:0c:2d:6b: 49:e4:9e:39:65:f1:58:ec:51:10:e7:ff:c0:f8:c3: 94:89:f6:2a:82:28:67:89:00:37:8c:7d:bc:72:cc: f4:d5:48:9e:a3:3b:5a:75:a9:85:55:e9:b4:fa:21: 40:37:76:8a:69:eb:74:23:f0:c3:cf:bd:7f:38:80: 16:1c:05:55:db:72:e8:2d:e4:8e:94:44:1f:68:c5: 8c:76:ee:f5:b5:80:b4:88:5f:f9:e0:f0:5e:0b:22: 23:e5:c0:06:68:eb:9e:80:26:a0:d2:5c:13:c8:95: f5:6a:14:c1:af:26:d9:3d:c3:53:9a:a9:89:de:d1: bd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EE:87:D4:0B:9A:56:11:29:BA:46:0D:81:45:31:95:09:A0:0C:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d6e9e37-2d45-4471-8b16-c8171595635a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:7000::/40 Signature Algorithm: sha256WithRSAEncryption 76:59:10:50:76:fc:e2:bb:2a:73:2f:9f:ce:6b:1a:69:41:c0: 28:93:40:8c:82:c3:3f:0f:e0:e8:42:c9:4f:e4:58:b7:de:fb: c9:62:7c:e8:e7:1c:13:3c:a2:0e:6b:71:d9:f0:70:42:da:2b: f3:fc:34:2b:2e:b0:dd:7d:86:0f:3d:57:55:8b:6d:69:93:d6: e4:08:fd:81:44:b7:f8:b4:1a:62:04:4c:41:92:77:36:ec:19: 9d:dc:c2:57:74:0d:dc:e0:8d:52:87:54:9f:9f:75:10:e6:e7: b3:f2:04:c2:00:52:9e:d3:14:cc:31:a5:2e:2f:1b:99:cc:84: c9:8a:46:61:83:29:ab:f0:2b:96:b6:2d:0f:29:2f:0d:b3:3f: 40:b3:ba:c5:40:33:5e:e5:04:8e:1b:c6:83:f4:52:e9:e7:89: 7a:b1:46:30:69:51:09:76:a4:6e:72:f9:50:50:12:bf:01:43: 8a:17:d2:9d:3c:ce:c4:eb:cd:ac:a5:fd:8b:62:ea:2c:7b:05: 4b:57:a1:3a:1e:52:05:2b:37:d1:18:61:28:72:85:d0:71:35: de:15:0c:9b:2a:97:7a:76:54:8c:20:82:5f:01:15:c3:a8:57: 2a:96:30:fd:27:8f:b6:1e:c3:08:b9:24:f8:04:50:ca:5f:1a: b9:76:4b:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPtd6z5Qh12aumRSk/QSQfx1tMnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNTAwMDAxNVoX DTI1MDkwOTIzNTk1OVowejFJMEcGA1UEBRNAYWU0MmEyNTBmYjIxOTA5YmFmMWVm ZDc5NTRjY2FkNzc2YTIzNGM3Yzc4YmZmOTczZGY0NmNmODIyYjlmZjYxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fV03+nVRBYrzNl11Nvex1VF5mF0 KuNoCR1/jS4jviFckHJfxUEOX1cmgVJlIOTkyaKEmPBhootPknlFKmKfDh7xF0aH tifCPe21RvgdTEP44TQPRIunv7t+zpsxfuTqtZHI09sluwg1V78m8DhdN7BFZHQ9 C9xL2R54ZfL7d+LxqPYMLWtJ5J45ZfFY7FEQ5//A+MOUifYqgihniQA3jH28csz0 1UieoztadamFVem0+iFAN3aKaet0I/DDz71/OIAWHAVV23LoLeSOlEQfaMWMdu71 tYC0iF/54PBeCyIj5cAGaOuegCag0lwTyJX1ahTBrybZPcNTmqmJ3tG94QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJHuh9QLmlYRKbpGDYFFMZUJoAxAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZkNmU5ZTM3LTJkNDUtNDQ3MS04YjE2LWM4MTcxNTk1NjM1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7XAwDQYJKoZIhvcNAQELBQADggEBAHZZEFB2/OK7KnMvn85r GmlBwCiTQIyCwz8P4OhCyU/kWLfe+8lifOjnHBM8og5rcdnwcELaK/P8NCsusN19 hg89V1WLbWmT1uQI/YFEt/i0GmIETEGSdzbsGZ3cwld0DdzgjVKHVJ+fdRDm57Py BMIAUp7TFMwxpS4vG5nMhMmKRmGDKavwK5a2LQ8pLw2zP0CzusVAM17lBI4bxoP0 UunniXqxRjBpUQl2pG5y+VBQEr8BQ4oX0p08zsTrzayl/Yti6ix7BUtXoToeUgUr N9EYYShyhdBxNd4VDJsql3p2VIwggl8BFcOoVyqWMP0nj7Yewwi5JPgEUMpfGrl2 SzI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:10:56 2025 by rpki-client