$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa File: 96f64204-fd73-4c1d-b9a9-36fef424cb34.roa (raw, json) Hash identifier: 1inNwXBTsMzPjffPt4n75GLRNYLpVF6c+XAw0VGKyNA= Subject key identifier: A4:39:C0:75:2F:98:DB:4C:B3:80:15:7B:6E:42:BF:3A:CB:8C:C3:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73E6EF0DC38DE98D7D6ACC73D913BD059929929E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa Signing time: Sat 23 Aug 2025 00:21:10 +0000 ROA not before: Sat 23 Aug 2025 00:21:10 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e6:ef:0d:c3:8d:e9:8d:7d:6a:cc:73:d9:13:bd:05:99:29:92:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:21:10 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=e43a11e9b4d6c9c301cab343b84883ffa74b8f7c5fa4b7f423cda19ab905e55a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:60:1b:96:93:59:00:76:41:79:fc:24:9c: 7f:ea:ab:59:06:d4:49:33:2c:a8:46:10:f2:a7:b5: 06:1f:72:60:59:c4:fa:17:e5:72:b9:1a:26:ca:b3: 7a:1a:9d:c2:d4:16:36:94:90:55:f8:38:ce:c9:f2: de:cb:4a:bf:06:81:9c:6e:71:aa:bd:7a:02:dc:79: e1:ea:d8:f3:26:20:a9:9d:29:e5:d6:dd:83:c4:e7: c8:99:51:5b:14:33:21:1f:c9:78:b5:02:1b:d7:6e: 17:16:4c:63:20:9d:4d:4a:f2:4e:2f:e0:0d:d6:9f: 5e:95:5b:2f:24:ce:54:8f:8a:5b:f3:6c:58:31:4a: 80:9c:dd:57:55:ce:8c:0b:d6:cc:c4:b0:89:3b:da: 4d:fc:1a:3c:9b:5c:79:8c:03:4c:10:c2:3d:23:58: 19:76:8f:f6:d7:c4:07:e6:3b:b8:c0:dd:0b:15:93: b6:7a:2a:3b:8b:56:a3:f5:bb:ce:22:79:32:25:7e: ac:4b:2d:c6:27:b4:4e:cc:cf:3a:6d:54:dc:f4:42: 97:d7:95:30:c4:49:dc:5f:41:2b:f6:cf:38:1c:9d: cc:74:a2:af:22:32:03:df:87:96:dd:c7:64:4f:54: 93:a6:22:12:08:e2:10:aa:7b:8d:8f:b6:14:52:27: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:39:C0:75:2F:98:DB:4C:B3:80:15:7B:6E:42:BF:3A:CB:8C:C3:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 08:f1:ed:9d:e6:a4:98:f9:e9:dc:0c:9f:5e:c7:48:80:2f:b2: 1a:2f:bd:5a:94:46:9c:53:c4:f9:71:0b:c2:9f:5b:02:28:2c: 70:56:e0:a0:f1:f2:61:a2:33:8a:6f:96:59:5a:89:0a:a1:2c: 53:a4:3e:a0:cf:65:d2:4c:4c:ba:39:8f:db:29:ac:c2:80:08: a8:71:7f:cb:a5:79:ed:b2:3a:a0:70:32:6b:03:b9:c6:c9:46: e6:e8:c6:5a:cd:09:8b:75:58:ff:9f:d1:eb:0c:9c:d4:a2:d9: 87:69:2c:50:77:cf:94:70:48:73:5a:fc:0b:f1:ae:9d:af:60: 85:68:33:fd:f9:4b:71:e5:db:04:be:d0:58:b1:9d:34:47:93: 1f:cd:e7:38:89:e0:f4:8b:40:0d:62:e0:1a:23:3b:fe:49:40: 64:30:0f:5f:b4:39:c6:65:2a:bb:a7:70:cd:11:b1:12:f0:29: b0:7f:4a:2e:c3:44:b3:1c:a2:d7:ae:74:80:be:de:af:35:54: 7e:43:1b:b6:9e:bc:95:e1:59:c1:06:d7:28:10:62:2d:3e:3b: ef:7f:97:80:b1:c6:7a:0c:45:c5:6b:c8:89:c5:ad:3c:19:e9: 90:31:52:45:69:28:9d:8a:0a:e8:fa:ee:32:8b:b9:15:fa:93: 97:86:c3:07 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc+bvDcON6Y19asxz2RO9BZkpkp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMjExMFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAZTQzYTExZTliNGQ2YzljMzAxY2Fi MzQzYjg0ODgzZmZhNzRiOGY3YzVmYTRiN2Y0MjNjZGExOWFiOTA1ZTU1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyJgG5aTWQB2QXn8JJx/6qtZBtRJ MyyoRhDyp7UGH3JgWcT6F+VyuRomyrN6Gp3C1BY2lJBV+DjOyfLey0q/BoGcbnGq vXoC3Hnh6tjzJiCpnSnl1t2DxOfImVFbFDMhH8l4tQIb124XFkxjIJ1NSvJOL+AN 1p9elVsvJM5Uj4pb82xYMUqAnN1XVc6MC9bMxLCJO9pN/Bo8m1x5jANMEMI9I1gZ do/218QH5ju4wN0LFZO2eio7i1aj9bvOInkyJX6sSy3GJ7ROzM86bVTc9EKX15Uw xEncX0Er9s84HJ3MdKKvIjID34eW3cdkT1STpiISCOIQqnuNj7YUUifxPwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKQ5wHUvmNtMs4AVe25CvzrLjMMTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2ZjY0MjA0LWZkNzMtNGMxZC1iOWE5LTM2ZmVmNDI0Y2IzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUDAMA0GCSqGSIb3DQEBCwUAA4IBAQAI8e2d5qSY+encDJ9e x0iAL7IaL71alEacU8T5cQvCn1sCKCxwVuCg8fJhojOKb5ZZWokKoSxTpD6gz2XS TEy6OY/bKazCgAiocX/LpXntsjqgcDJrA7nGyUbm6MZazQmLdVj/n9HrDJzUotmH aSxQd8+UcEhzWvwL8a6dr2CFaDP9+Utx5dsEvtBYsZ00R5Mfzec4ieD0i0ANYuAa Izv+SUBkMA9ftDnGZSq7p3DNEbES8Cmwf0ouw0SzHKLXrnSAvt6vNVR+Qxu2nryV 4VnBBtcoEGItPjvvf5eAscZ6DEXFa8iJxa08GemQMVJFaSidigro+u4yi7kV+pOX hsMH -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:31 2025 by rpki-client