$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa File: 830000fc-9d46-461c-8155-e409ef5fadcc.roa (raw, json) Hash identifier: vxzEFtQ9fEZtjg4+HI0Txk1aPCVawOWpncSIC1hNJaQ= Subject key identifier: B7:E2:CF:4B:BD:08:F1:3C:52:7F:E4:93:FE:D1:15:9F:BB:50:79:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5244A9BFB542BBBED6609FDAAA66840807A590BF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa Signing time: Fri 22 Aug 2025 00:00:09 +0000 ROA not before: Fri 22 Aug 2025 00:00:09 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:44:a9:bf:b5:42:bb:be:d6:60:9f:da:aa:66:84:08:07:a5:90:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:00:09 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=a32659af3023956488736a2b947a93ff89383a7b1adb44502a53ecc157c10a23, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:f6:8c:00:63:36:18:a0:1e:00:ad:d6:74: 57:28:a4:98:f1:46:03:0c:cd:c6:e3:4a:c0:ea:b7: 74:d6:2b:58:ca:84:bc:67:9f:5a:2f:43:a7:79:9b: 77:1b:33:80:49:38:27:b6:3c:0c:0b:ec:49:36:b1: d9:aa:78:00:b4:63:36:d9:4d:8e:f2:47:79:38:a0: 95:be:8b:29:e6:7e:12:e2:47:eb:bd:80:54:03:e7: 99:19:81:4f:99:ef:de:0a:ed:4a:3b:77:64:06:8f: 9b:98:66:4b:70:1c:29:90:9e:9a:22:9f:4f:ac:f1: 85:27:65:9f:f9:66:31:e3:f3:8c:0c:ed:39:27:f8: 23:9e:db:06:fd:fe:1a:c6:ae:0f:33:43:29:d8:1d: aa:c1:72:b3:78:80:b5:80:70:58:a2:c0:d8:59:07: 80:6e:9f:c3:8c:c7:7c:dd:66:82:09:30:81:6f:64: 26:e2:08:00:b5:4c:f6:a2:93:77:52:a8:b1:7f:40: 59:e7:18:95:5d:e4:96:18:ff:57:a0:04:c9:d9:99: a8:57:e3:fa:4d:fe:b8:c5:d5:41:5c:00:d9:8a:69: d0:51:0b:d3:1e:a8:a6:3d:48:52:58:dd:04:5a:bd: 43:4c:22:76:22:d0:0b:6c:e4:44:49:6a:fd:28:f3: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:CF:4B:BD:08:F1:3C:52:7F:E4:93:FE:D1:15:9F:BB:50:79:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f080::/48 Signature Algorithm: sha256WithRSAEncryption 72:bb:59:2a:1d:aa:02:a3:3f:48:ea:f7:3f:f0:92:f7:cc:3a: aa:de:9e:4c:41:c2:d0:f0:7a:f8:fd:66:a5:7c:76:b4:a1:7b: 74:bf:4b:91:bc:22:9b:5a:16:85:86:22:b2:10:4e:67:04:b5: fb:57:6d:4a:37:7b:f2:34:bf:7c:f3:38:b1:b8:d0:b7:ac:de: 08:74:2a:bd:36:c8:62:d4:12:30:3f:21:3a:fd:44:3b:c2:67: fd:a4:c0:1b:3d:29:b1:67:c5:b5:33:38:31:7a:94:dc:3c:44: 44:b8:74:2d:80:c2:0e:54:0a:31:3f:7d:ab:68:90:be:28:9f: 7a:3b:c9:87:a1:a8:a9:67:cb:2f:80:48:9e:be:a2:65:40:ed: 91:ff:f8:73:f5:9c:98:95:c2:30:4a:0d:56:55:2c:f9:77:0b: 03:37:97:42:87:fb:3b:55:55:55:2a:35:2c:a8:92:4e:5a:3f: 3b:4c:65:5a:77:8b:5a:da:f4:89:b1:22:99:2e:07:7b:a5:7a: 74:32:8c:46:38:1f:5a:61:0f:80:1a:14:c9:b7:28:2d:bc:18: 78:f1:cb:6f:ea:d6:02:ee:e4:9f:a0:a3:fe:3a:87:0d:9d:86: d7:c1:e2:42:1a:f9:a0:6a:c4:92:a8:88:a4:26:eb:f0:3e:7a: b2:20:11:d1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUkSpv7VCu77WYJ/aqmaECAelkL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMDAwOVoX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAYTMyNjU5YWYzMDIzOTU2NDg4NzM2 YTJiOTQ3YTkzZmY4OTM4M2E3YjFhZGI0NDUwMmE1M2VjYzE1N2MxMGEyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPX2jABjNhigHgCt1nRXKKSY8UYD DM3G40rA6rd01itYyoS8Z59aL0OneZt3GzOASTgntjwMC+xJNrHZqngAtGM22U2O 8kd5OKCVvosp5n4S4kfrvYBUA+eZGYFPme/eCu1KO3dkBo+bmGZLcBwpkJ6aIp9P rPGFJ2Wf+WYx4/OMDO05J/gjntsG/f4axq4PM0Mp2B2qwXKzeIC1gHBYosDYWQeA bp/DjMd83WaCCTCBb2Qm4ggAtUz2opN3Uqixf0BZ5xiVXeSWGP9XoATJ2ZmoV+P6 Tf64xdVBXADZimnQUQvTHqimPUhSWN0EWr1DTCJ2ItALbORESWr9KPPriQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLfiz0u9CPE8Un/kk/7RFZ+7UHmVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMDAwMGZjLTlkNDYtNDYxYy04MTU1LWU0MDllZjVmYWRjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfCAMA0GCSqGSIb3DQEBCwUAA4IBAQByu1kqHaoCoz9I6vc/ 8JL3zDqq3p5MQcLQ8Hr4/WalfHa0oXt0v0uRvCKbWhaFhiKyEE5nBLX7V21KN3vy NL988zixuNC3rN4IdCq9Nshi1BIwPyE6/UQ7wmf9pMAbPSmxZ8W1MzgxepTcPERE uHQtgMIOVAoxP32raJC+KJ96O8mHoaipZ8svgEievqJlQO2R//hz9ZyYlcIwSg1W VSz5dwsDN5dCh/s7VVVVKjUsqJJOWj87TGVad4ta2vSJsSKZLgd7pXp0MoxGOB9a YQ+AGhTJtygtvBh48ctv6tYC7uSfoKP+OocNnYbXweJCGvmgasSSqIikJuvwPnqy IBHR -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:07 2025 by rpki-client