$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa File: bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa (raw, json) Hash identifier: TBJG0zS/goDrWGANv62G9vPwE/b4OilWlxXpUrmKpEo= Subject key identifier: 6D:DF:BB:02:25:3F:E0:30:7C:ED:CA:7C:01:23:5F:73:7D:A9:02:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 453E26C5E4890EBA883FAA9C0F76C4F62B0939C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa Signing time: Sat 23 Aug 2025 00:10:53 +0000 ROA not before: Sat 23 Aug 2025 00:10:53 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3e:26:c5:e4:89:0e:ba:88:3f:aa:9c:0f:76:c4:f6:2b:09:39:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:10:53 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=75e8e52927620840c1f1cbd56e93b741a6edd0108164d60bd853c215c845d900, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:30:5c:65:41:4b:17:30:47:b5:e1:99:95: 3e:2c:f9:11:ab:ab:fa:09:5e:a0:bb:61:5f:7f:e7: 56:ba:37:46:70:d2:68:91:80:81:db:60:17:1c:aa: e0:1a:27:a1:77:b4:a6:2d:5d:df:04:27:27:4d:45: 17:f7:2c:f7:de:c4:1f:cb:96:3e:63:aa:e1:07:fd: 39:74:9b:39:ff:d4:7a:28:f4:40:2d:79:b3:17:d4: 32:f8:34:09:5f:a8:bb:b2:87:a1:d4:8c:ab:36:2a: 9f:15:0f:0a:b2:cf:ce:14:11:6a:7f:08:7e:71:6e: c0:b5:33:a1:66:87:2b:2a:1e:f3:aa:b0:9e:52:60: ff:1d:37:08:6a:8e:2f:bd:f7:a0:05:b1:3e:9b:da: 5f:0c:ec:7c:9f:64:07:2c:0a:1f:df:92:86:bc:14: 0f:a6:97:79:e3:9a:40:60:5a:e8:be:dd:61:64:e0: 20:94:91:9d:81:bd:70:5a:6d:f4:f7:ce:e6:d3:7c: 10:cd:04:36:a7:da:2e:f5:71:c7:63:b9:35:56:eb: ff:ab:ad:ee:8f:94:fa:53:5b:44:df:d8:6d:29:5c: 55:9d:ba:94:3d:2d:d3:15:d1:86:65:bb:1a:9e:b2: e5:1d:3b:df:33:ca:6e:10:de:d5:40:2e:2b:84:a0: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DF:BB:02:25:3F:E0:30:7C:ED:CA:7C:01:23:5F:73:7D:A9:02:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:7000::/40 Signature Algorithm: sha256WithRSAEncryption 19:29:4c:2e:a7:ce:52:41:6e:8b:d3:31:b1:33:0a:6d:86:55: 0e:c8:9d:19:c9:db:45:e6:88:11:f0:0b:72:6c:54:ac:17:8d: a6:d0:fe:8a:ce:58:41:48:84:86:f2:f3:ab:af:2c:d8:6a:5c: 1f:e0:d9:33:64:1f:b2:f9:89:fa:98:69:5b:c4:8f:db:85:b6: fd:ec:fc:e2:f6:d5:fd:e2:d0:89:0f:d7:65:32:99:70:ab:dd: 0d:b1:42:82:6c:80:41:db:0f:cc:17:04:fd:fc:97:64:85:b0: 2a:e8:fc:82:27:f7:eb:0a:ac:49:91:10:d2:67:86:9c:eb:1e: 28:fd:a3:4c:a9:af:2c:4a:c7:e9:e6:2a:6d:23:39:d1:a2:d2: 5a:46:fb:e8:b6:04:13:11:e5:37:c7:4b:0a:dd:68:86:36:ee: 92:ff:96:17:45:ab:31:b3:27:2a:2a:21:d1:28:1d:b4:c6:74: 0d:bc:fd:74:f3:47:64:21:6f:a0:d0:94:a3:32:c6:9f:93:dd: f6:d5:44:83:da:68:16:95:b5:27:0b:15:42:5d:df:d8:97:17: 79:92:61:ad:11:3f:1f:0d:9c:2c:8a:c6:72:31:9b:95:a1:af: 6a:c5:18:af:a2:72:92:6d:4a:93:c9:36:eb:d6:ca:af:fc:eb: bc:d2:ee:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURT4mxeSJDrqIP6qcD3bE9isJOckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMTA1M1oX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNANzVlOGU1MjkyNzYyMDg0MGMxZjFj YmQ1NmU5M2I3NDFhNmVkZDAxMDgxNjRkNjBiZDg1M2MyMTVjODQ1ZDkwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxMwXGVBSxcwR7XhmZU+LPkRq6v6 CV6gu2Fff+dWujdGcNJokYCB22AXHKrgGiehd7SmLV3fBCcnTUUX9yz33sQfy5Y+ Y6rhB/05dJs5/9R6KPRALXmzF9Qy+DQJX6i7soeh1IyrNiqfFQ8Kss/OFBFqfwh+ cW7AtTOhZocrKh7zqrCeUmD/HTcIao4vvfegBbE+m9pfDOx8n2QHLAof35KGvBQP ppd545pAYFrovt1hZOAglJGdgb1wWm30987m03wQzQQ2p9ou9XHHY7k1Vuv/q63u j5T6U1tE39htKVxVnbqUPS3TFdGGZbsanrLlHTvfM8puEN7VQC4rhKCWSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG3fuwIlP+AwfO3KfAEjX3N9qQIfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiMzNjNmU5LTgzYjktNDNjMy1iNDU4LTUzYWRmN2IzZTUzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAHAwDQYJKoZIhvcNAQELBQADggEBABkpTC6nzlJBbovTMbEz Cm2GVQ7InRnJ20XmiBHwC3JsVKwXjabQ/orOWEFIhIby86uvLNhqXB/g2TNkH7L5 ifqYaVvEj9uFtv3s/OL21f3i0IkP12UymXCr3Q2xQoJsgEHbD8wXBP38l2SFsCro /IIn9+sKrEmRENJnhpzrHij9o0ypryxKx+nmKm0jOdGi0lpG++i2BBMR5TfHSwrd aIY27pL/lhdFqzGzJyoqIdEoHbTGdA28/XTzR2Qhb6DQlKMyxp+T3fbVRIPaaBaV tScLFUJd39iXF3mSYa0RPx8NnCyKxnIxm5Whr2rFGK+icpJtSpPJNuvWyq/867zS 7kk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:05:07 2025 by rpki-client