$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b388e43-5501-4c94-b15f-b02861508541.roa File: 9b388e43-5501-4c94-b15f-b02861508541.roa (raw, json) Hash identifier: PvZTZGSpVSJBF019ZifgCTkyL3j+L7swoDbJm+7sjlc= Subject key identifier: 80:39:7F:DF:CD:E8:DA:8D:09:77:AF:43:8F:25:A5:23:AB:BC:68:2D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A98F176330C9625CF2A69EEDCBA2289D32D5790 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b388e43-5501-4c94-b15f-b02861508541.roa Signing time: Fri 22 Aug 2025 00:10:18 +0000 ROA not before: Fri 22 Aug 2025 00:10:18 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:98:f1:76:33:0c:96:25:cf:2a:69:ee:dc:ba:22:89:d3:2d:57:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:10:18 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=040d37965dfd2dc4ce8baa4f7fed9b355837ecfac4b664e52681e8cba95c6c14, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:0b:8c:69:68:de:7c:52:e2:f9:f7:71:52: 02:c1:44:be:b6:16:6c:01:6a:b4:83:7b:54:b2:87: c7:3b:f8:72:db:b8:c8:f4:3b:9c:2d:f4:0f:d8:73: e2:f4:b9:71:c1:92:86:16:c3:34:1e:9b:fb:32:de: 9b:23:fb:cf:04:62:d8:77:50:f3:02:3f:86:6d:7a: d0:e3:a9:4d:b2:f2:06:db:dc:db:a4:d3:16:65:b9: e8:0b:40:e1:7c:ca:26:fe:df:ca:9e:76:b8:22:ef: 23:6b:38:43:0c:b4:ac:c8:89:84:9c:42:c7:9d:9c: 67:0d:7b:9c:8c:29:7b:3c:07:65:b1:09:3a:dd:0c: 26:85:16:24:95:1b:1f:f5:c2:a5:46:a6:b6:41:1c: 31:04:ae:e2:4f:b1:e6:6f:99:d0:5c:bc:e9:5f:d0: e7:c1:22:73:3d:cb:74:21:4a:52:7f:eb:49:91:af: 9f:e7:3c:5e:9c:67:3c:4c:1e:ab:d0:df:77:47:bf: ea:39:33:56:29:07:27:7b:b7:9e:70:05:e3:43:ae: a2:8e:ee:4f:cd:73:c3:15:72:45:57:cd:64:22:a3: a5:93:8e:2d:16:71:92:31:60:32:a4:e9:30:3c:55: 5d:a7:f7:6a:f7:1b:09:23:10:b7:4c:39:54:9e:50: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:39:7F:DF:CD:E8:DA:8D:09:77:AF:43:8F:25:A5:23:AB:BC:68:2D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b388e43-5501-4c94-b15f-b02861508541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 05:c1:36:84:31:ce:87:71:8d:a4:29:17:2d:e0:80:47:ba:cb: 42:9e:da:e1:24:5f:4a:1f:6a:0c:de:f9:00:84:07:c8:b2:80: e8:a8:77:b8:33:09:6d:c4:bc:56:94:a7:36:2f:cd:96:6e:d9: 71:74:41:af:0d:36:a1:4a:6f:f8:0e:57:03:2f:6b:b1:eb:34: 15:ec:a8:ac:c1:29:5c:51:18:8a:36:29:98:b7:20:70:68:5a: 2c:aa:a1:5d:1e:dc:94:3a:b0:d0:92:a8:f5:d5:86:de:bf:b1: 24:9a:9c:45:c5:ce:8b:0d:36:5d:91:b8:49:92:2b:bd:1e:9b: b6:c9:e4:8b:f2:70:58:a1:e4:47:75:ff:9a:48:d1:d0:30:20: 50:7e:61:5d:45:f7:be:5e:99:2a:12:cd:f1:27:66:28:39:bb: 7d:75:d1:27:ed:8d:66:b3:95:b4:a1:ed:cb:9a:b3:5e:01:cc: 41:ce:cc:d2:6f:6f:0f:d7:29:86:dd:e6:24:2c:b0:6c:32:2f: 33:3f:15:08:5c:f4:ac:05:7a:96:8c:96:94:9f:55:4e:07:88: d1:9b:b9:fb:d1:73:5d:88:8f:39:a0:bd:87:21:41:c4:9f:27: e8:47:25:1e:f7:d1:f6:9e:5c:30:4c:8d:ef:c1:0f:c6:f5:e8: 8f:09:d1:0c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCpjxdjMMliXPKmnu3LoiidMtV5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMTAxOFoX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAMDQwZDM3OTY1ZGZkMmRjNGNlOGJh YTRmN2ZlZDliMzU1ODM3ZWNmYWM0YjY2NGU1MjY4MWU4Y2JhOTVjNmMxNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPULjGlo3nxS4vn3cVICwUS+thZs AWq0g3tUsofHO/hy27jI9DucLfQP2HPi9LlxwZKGFsM0Hpv7Mt6bI/vPBGLYd1Dz Aj+GbXrQ46lNsvIG29zbpNMWZbnoC0DhfMom/t/Knna4Iu8jazhDDLSsyImEnELH nZxnDXucjCl7PAdlsQk63QwmhRYklRsf9cKlRqa2QRwxBK7iT7Hmb5nQXLzpX9Dn wSJzPct0IUpSf+tJka+f5zxenGc8TB6r0N93R7/qOTNWKQcne7eecAXjQ66iju5P zXPDFXJFV81kIqOlk44tFnGSMWAypOkwPFVdp/dq9xsJIxC3TDlUnlCbIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIA5f9/N6NqNCXevQ48lpSOrvGgtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzliMzg4ZTQzLTU1MDEtNGM5NC1iMTVmLWIwMjg2MTUwODU0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUjAMA0GCSqGSIb3DQEBCwUAA4IBAQAFwTaEMc6HcY2kKRct 4IBHustCntrhJF9KH2oM3vkAhAfIsoDoqHe4MwltxLxWlKc2L82WbtlxdEGvDTah Sm/4DlcDL2ux6zQV7KiswSlcURiKNimYtyBwaFosqqFdHtyUOrDQkqj11Ybev7Ek mpxFxc6LDTZdkbhJkiu9Hpu2yeSL8nBYoeRHdf+aSNHQMCBQfmFdRfe+XpkqEs3x J2YoObt9ddEn7Y1ms5W0oe3LmrNeAcxBzszSb28P1ymG3eYkLLBsMi8zPxUIXPSs BXqWjJaUn1VOB4jRm7n70XNdiI85oL2HIUHEnyfoRyUe99H2nlwwTI3vwQ/G9eiP CdEM -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:15 2025 by rpki-client