$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa File: 783b05b4-a0a1-4e31-b7b4-cc8368668534.roa (raw, json) Hash identifier: W0DOpEQ3Rfcsn9Lul6vrVQS59oL/OiqRIry9ild+Mvg= Subject key identifier: A5:2E:8B:59:48:20:6A:67:95:12:CA:0E:39:77:CD:74:9F:91:78:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D36B162A6D65B083C0E539B4FB0652595DBCFA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa Signing time: Fri 22 Aug 2025 00:10:52 +0000 ROA not before: Fri 22 Aug 2025 00:10:52 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:36:b1:62:a6:d6:5b:08:3c:0e:53:9b:4f:b0:65:25:95:db:cf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:10:52 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=5d90e13ac3175d54c7b86e5a84d58ffb5d77105a05f03d02de6069eab2170e11, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:d0:c6:15:26:2c:e4:d8:ef:34:25:15:ad: 6c:4b:cf:42:90:27:b9:30:a2:b3:bd:43:88:eb:97: 97:9f:73:7f:fa:e1:a7:e1:50:b6:dd:e8:e8:45:8e: af:a6:a5:4d:99:b7:1f:61:2c:df:cf:97:42:7d:14: 75:90:b6:67:bf:61:fe:a9:5b:1b:89:25:3d:65:6e: 50:b8:6a:8e:4a:b4:f5:f4:a9:86:67:73:28:26:6b: 93:b1:10:87:cf:2e:48:c0:46:0f:48:a8:d8:23:9e: 25:b4:61:c0:d2:4e:88:40:c3:c2:44:d3:44:45:d6: 97:43:90:c7:84:67:6c:ea:a2:a8:b3:a3:70:f1:a2: 29:9c:17:fa:a7:1e:c5:fa:2b:4b:a8:1a:60:da:48: 33:3c:13:8c:1a:be:bd:ac:6d:16:0b:ac:eb:2b:45: c2:f7:77:63:15:78:ab:32:93:68:80:90:26:e2:d2: 54:6e:be:7c:9f:71:f8:59:bb:8a:c2:1b:a2:c8:bd: 81:ba:a3:7e:b7:b0:10:6f:d5:21:5f:42:45:e0:d3: fe:b3:bf:2a:95:93:a7:3e:44:7d:99:22:ca:a0:87: f0:4e:ab:ab:fa:eb:3e:da:68:57:e3:a1:1b:1a:1b: 0d:2d:b7:dc:b0:10:6e:34:fe:a3:65:06:0c:06:45: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2E:8B:59:48:20:6A:67:95:12:CA:0E:39:77:CD:74:9F:91:78:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c000::/40 Signature Algorithm: sha256WithRSAEncryption aa:62:38:b7:a6:9b:a3:33:78:a7:91:aa:e0:88:f7:af:e4:ae: fb:ef:ec:25:2c:16:f8:79:38:e6:b2:d3:ac:60:21:91:45:30: c8:f4:d4:9b:9f:9e:25:72:2e:02:b8:c7:45:07:cb:5f:08:13: 87:3c:c0:db:f6:e5:2d:e5:f5:38:d8:13:c4:ec:82:31:37:d3: 3f:c9:2b:56:31:bd:b8:47:de:c8:e8:6b:43:aa:61:57:4f:04: e9:9c:9f:74:83:dd:c2:b1:bf:82:7f:c4:0b:b4:93:fd:bd:1b: 12:12:26:5a:74:e0:64:56:f4:61:4a:c6:b9:d1:68:10:d7:e4: a4:f5:ce:4d:e9:5c:07:a0:6f:9d:40:60:a8:e3:b4:7c:85:33: 7b:ab:78:f9:35:b8:bd:72:92:b7:64:81:19:92:37:0e:8c:b2: d6:b0:56:42:26:8d:de:f2:85:b5:67:df:a6:c0:f0:d7:e6:77: e3:4e:dc:20:dd:bc:bd:20:7a:2d:b3:24:84:e0:bd:d8:d8:df: 10:41:60:53:86:6b:fa:55:10:b3:40:bc:b3:3e:a6:4c:8f:03: dd:cf:ad:9d:ab:1c:9c:42:7d:a5:6a:36:a3:90:e3:cf:e2:15: fe:04:fd:43:97:dc:e7:6b:c1:e3:c3:52:9b:3b:07:50:bf:ad: a7:11:ea:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbTaxYqbWWwg8DlObT7BlJZXbz6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMTA1MloX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNANWQ5MGUxM2FjMzE3NWQ1NGM3Yjg2 ZTVhODRkNThmZmI1ZDc3MTA1YTA1ZjAzZDAyZGU2MDY5ZWFiMjE3MGUxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4rQxhUmLOTY7zQlFa1sS89CkCe5 MKKzvUOI65eXn3N/+uGn4VC23ejoRY6vpqVNmbcfYSzfz5dCfRR1kLZnv2H+qVsb iSU9ZW5QuGqOSrT19KmGZ3MoJmuTsRCHzy5IwEYPSKjYI54ltGHA0k6IQMPCRNNE RdaXQ5DHhGds6qKos6Nw8aIpnBf6px7F+itLqBpg2kgzPBOMGr69rG0WC6zrK0XC 93djFXirMpNogJAm4tJUbr58n3H4WbuKwhuiyL2BuqN+t7AQb9UhX0JF4NP+s78q lZOnPkR9mSLKoIfwTqur+us+2mhX46EbGhsNLbfcsBBuNP6jZQYMBkWgBwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKUui1lIIGpnlRLKDjl3zXSfkXjjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4M2IwNWI0LWEwYTEtNGUzMS1iN2I0LWNjODM2ODY2ODUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sAwDQYJKoZIhvcNAQELBQADggEBAKpiOLemm6MzeKeRquCI 96/krvvv7CUsFvh5OOay06xgIZFFMMj01JufniVyLgK4x0UHy18IE4c8wNv25S3l 9TjYE8TsgjE30z/JK1YxvbhH3sjoa0OqYVdPBOmcn3SD3cKxv4J/xAu0k/29GxIS Jlp04GRW9GFKxrnRaBDX5KT1zk3pXAegb51AYKjjtHyFM3urePk1uL1ykrdkgRmS Nw6MstawVkImjd7yhbVn36bA8Nfmd+NO3CDdvL0gei2zJITgvdjY3xBBYFOGa/pV ELNAvLM+pkyPA93PrZ2rHJxCfaVqNqOQ48/iFf4E/UOX3OdrwePDUps7B1C/racR 6ng= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:47 2025 by rpki-client