$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6eb07e74-6969-4ca7-9ff9-879dfb24b1d1.roa File: 6eb07e74-6969-4ca7-9ff9-879dfb24b1d1.roa (raw, json) Hash identifier: t2cuuYs+BsgCBSSM16CFYJjcv41tw6uZ0rWWgy5puSw= Subject key identifier: 37:BF:35:D3:6F:0E:C2:EF:3D:DB:95:8C:70:60:2A:33:E6:0B:69:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A65F6B79B9580106683F5A72B4CA9B707199604 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6eb07e74-6969-4ca7-9ff9-879dfb24b1d1.roa Signing time: Sat 23 Aug 2025 00:50:05 +0000 ROA not before: Sat 23 Aug 2025 00:50:05 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:65:f6:b7:9b:95:80:10:66:83:f5:a7:2b:4c:a9:b7:07:19:96:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:50:05 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=300a30c65f5bf809be665eedf881328cc3e781a6ae8efb6222f510d3be1c314f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:ee:c3:38:9b:e3:0e:fa:8c:1d:db:a1:37: fb:5b:13:ad:2b:e2:a9:09:4a:49:01:e8:bb:4b:44: 1e:2b:e7:3e:a1:54:03:cf:dd:aa:16:3e:b9:6e:d8: 6c:e8:c7:1c:44:17:4e:b2:f6:6a:b9:81:a4:5f:c5: b8:ce:ee:6d:bc:7f:11:10:b4:ca:a4:d1:d4:15:d7: 73:8c:aa:c2:78:ff:2d:ae:93:49:46:7a:e6:bd:cc: 18:25:3b:1c:67:86:84:05:ae:aa:93:4b:50:4c:0c: b0:f0:e9:2a:b8:45:46:3f:17:02:e8:ca:8b:7a:57: e6:c7:97:65:93:39:de:81:65:b2:8e:a0:9a:54:99: bb:bd:db:e4:7d:c4:6a:f6:e8:20:ba:68:1f:36:a9: 58:1a:bf:bf:9e:cc:40:bd:4a:61:63:f7:8f:74:80: 62:fd:f3:ab:95:e2:93:af:f4:90:6c:88:2f:a6:ad: 15:f5:a8:d2:31:50:1f:3d:98:d9:f4:3b:4c:4c:1d: 59:40:7e:10:cf:09:7a:fb:47:40:53:79:c2:4b:1a: 99:6b:62:26:01:77:df:30:ab:04:9b:66:76:96:29: 5c:2d:f0:33:48:8c:12:b9:bc:90:d9:59:79:cf:a4: fc:84:e3:19:d0:ed:ba:95:b6:00:29:c5:46:57:75: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:35:D3:6F:0E:C2:EF:3D:DB:95:8C:70:60:2A:33:E6:0B:69:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6eb07e74-6969-4ca7-9ff9-879dfb24b1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00::/24 Signature Algorithm: sha256WithRSAEncryption 10:0d:68:7f:73:d6:cb:64:00:0c:e9:bc:0a:a3:c9:2b:8a:ac: 0e:37:bf:fa:1d:3c:0b:4d:38:18:c8:8f:f4:ee:74:7e:40:11: 15:ba:24:42:7c:e6:59:02:87:fa:03:0a:62:2b:3f:ea:7c:a5: dc:27:d8:3f:c5:5e:8d:e0:b8:2d:9d:6f:b3:04:05:fe:50:3d: ff:b4:39:e5:48:50:c3:3d:d5:c6:60:a0:e4:9d:c0:67:a8:cd: f2:d2:04:ac:1c:4c:a9:86:2f:a7:d0:aa:7e:5d:9b:35:9a:d3: c7:8b:99:0c:5f:dc:35:26:da:6f:ab:e4:c3:62:fc:74:ae:d2: 77:51:d2:c7:ca:37:3c:16:28:a8:49:8c:64:e1:8d:02:9d:a0: 19:58:97:21:af:58:1c:8e:63:37:0f:a2:9f:bf:82:44:c6:ff: f0:93:e0:79:08:ae:2c:ea:b5:9a:57:79:5e:f3:a2:93:99:d1: 41:35:25:64:a1:5d:d0:af:a6:c6:2c:8b:5e:7f:e4:18:62:74: 54:8a:06:05:8a:27:c0:3a:70:3c:d3:f5:1a:c5:ce:8f:86:f4: cd:5e:51:39:d5:36:07:c9:56:ea:46:53:14:2a:1a:ad:4c:78: e5:74:73:65:f8:a2:0d:ec:be:26:f1:d9:23:0f:b9:9b:d8:e5: dd:f9:8b:27 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOmX2t5uVgBBmg/WnK0yptwcZlgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNTAwNVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMzAwYTMwYzY1ZjViZjgwOWJlNjY1 ZWVkZjg4MTMyOGNjM2U3ODFhNmFlOGVmYjYyMjJmNTEwZDNiZTFjMzE0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaPuwzib4w76jB3boTf7WxOtK+Kp CUpJAei7S0QeK+c+oVQDz92qFj65bths6MccRBdOsvZquYGkX8W4zu5tvH8RELTK pNHUFddzjKrCeP8trpNJRnrmvcwYJTscZ4aEBa6qk0tQTAyw8OkquEVGPxcC6MqL elfmx5dlkznegWWyjqCaVJm7vdvkfcRq9uggumgfNqlYGr+/nsxAvUphY/ePdIBi /fOrleKTr/SQbIgvpq0V9ajSMVAfPZjZ9DtMTB1ZQH4Qzwl6+0dAU3nCSxqZa2Im AXffMKsEm2Z2lilcLfAzSIwSubyQ2Vl5z6T8hOMZ0O26lbYAKcVGV3UY0wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDe/NdNvDsLvPduVjHBgKjPmC2ljMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlYjA3ZTc0LTY5NjktNGNhNy05ZmY5LTg3OWRmYjI0YjFkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAAjAGAwQAJAbaMA0GCSqGSIb3DQEBCwUAA4IBAQAQDWh/c9bLZAAM6bwKo8kr iqwON7/6HTwLTTgYyI/07nR+QBEVuiRCfOZZAof6AwpiKz/qfKXcJ9g/xV6N4Lgt nW+zBAX+UD3/tDnlSFDDPdXGYKDkncBnqM3y0gSsHEyphi+n0Kp+XZs1mtPHi5kM X9w1Jtpvq+TDYvx0rtJ3UdLHyjc8FiioSYxk4Y0CnaAZWJchr1gcjmM3D6Kfv4JE xv/wk+B5CK4s6rWaV3le86KTmdFBNSVkoV3Qr6bGLItef+QYYnRUigYFiifAOnA8 0/Uaxc6PhvTNXlE51TYHyVbqRlMUKhqtTHjldHNl+KIN7L4m8dkjD7mb2OXd+Ysn -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:46 2025 by rpki-client