$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa File: cdf78925-b4b0-4234-91cb-647243232823.roa (raw, json) Hash identifier: jncxjk+bm18hcIihSYuwALI8H0KkurUipcwq7UQgJWs= Subject key identifier: 95:D7:01:5E:96:15:DF:49:7E:F9:EE:05:45:B2:81:4B:83:D4:9F:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11D11424159B19C845CE033B2AF26644C3982A1D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa Signing time: Sat 23 Aug 2025 00:41:00 +0000 ROA not before: Sat 23 Aug 2025 00:41:00 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d1:14:24:15:9b:19:c8:45:ce:03:3b:2a:f2:66:44:c3:98:2a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:41:00 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=906d75fbab8f53ccc7d9a8178c1d60864d670bb6b944270f21a0105f5d301d6c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:5b:f9:15:d7:8b:7a:d6:b5:4d:e1:38:0f: ab:48:5b:a9:e3:b1:d0:1b:11:50:c2:79:96:ea:00: ba:6b:d0:fc:54:0f:ff:0a:ce:a7:c3:da:99:1d:fc: a9:85:51:c6:f2:38:a6:b1:a7:35:44:e6:c9:c7:5f: ed:54:40:e5:91:68:99:26:56:31:4c:fe:57:20:66: 32:d2:3b:d3:8e:72:00:a8:bb:81:94:cb:1c:97:bb: b7:96:75:5d:87:56:53:d5:b8:a3:ab:f1:53:0d:1a: 21:31:42:d3:2e:48:69:0f:d6:a7:c2:3d:9d:40:b4: 66:ab:56:85:01:4f:17:a7:fc:4e:af:d0:72:11:0d: a3:a2:5e:ac:02:29:79:c3:90:3a:b5:ce:3e:2c:f3: 9b:64:8a:ca:d9:cf:dd:6b:3e:62:6a:9e:5d:c3:c8: 34:49:8b:1c:47:94:76:2b:78:dc:4c:39:0b:6c:fd: 35:2d:f2:0a:85:d5:c6:73:4d:79:ac:41:cc:42:c0: b0:83:bd:6e:e5:5b:d6:65:7c:25:d4:07:d8:c6:6d: c4:9d:e5:69:7c:e5:ba:59:b4:f3:2e:16:ab:34:fa: 46:52:74:a7:4f:8b:61:a2:66:ab:b7:70:f0:8f:1e: 32:50:88:49:cf:20:e7:fe:ca:8c:1f:68:c6:97:2b: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D7:01:5E:96:15:DF:49:7E:F9:EE:05:45:B2:81:4B:83:D4:9F:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6000::/40 Signature Algorithm: sha256WithRSAEncryption 1d:a3:fb:b7:44:f6:94:0e:40:ec:9c:3b:db:6d:1c:4e:12:e0: 56:38:3a:19:e8:80:a5:ac:22:dd:94:71:21:61:49:59:f8:83: fe:23:08:92:08:a6:9f:c3:40:23:95:fe:d5:09:3f:57:29:86: 99:00:58:6e:36:fe:14:25:36:40:a4:51:73:45:93:8b:65:03: e2:98:09:a7:e1:b5:c5:40:e3:79:fa:b0:3a:ae:23:bd:f9:4d: ed:a3:d7:cb:22:47:d2:4e:e9:24:b4:71:36:5c:bb:d1:41:ef: 5b:0a:1f:59:07:9f:f1:94:e1:4e:00:62:09:cc:95:1c:52:f9: 69:90:05:df:d3:9e:06:f3:f2:e7:9d:c9:b4:c0:11:5f:43:67: d9:68:99:66:a5:2c:1b:f5:e5:ee:fb:24:6e:46:da:d7:5d:a0: 37:da:d2:89:e0:d3:16:a2:3c:28:4b:63:ed:4b:20:31:0e:0b: 2d:6f:78:ea:32:d1:a6:a1:fa:3a:66:44:a3:4f:3f:c6:d4:91: b2:e7:07:3b:a1:1a:dd:a5:20:30:fe:8e:ef:2a:b0:46:d8:27: c5:b1:ed:aa:b8:4a:75:ae:0f:4f:84:04:2d:65:7c:b3:42:79: 29:d9:5e:ea:63:75:69:bc:e7:be:85:29:cb:7b:8f:d1:9e:80: 06:36:ce:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEdEUJBWbGchFzgM7KvJmRMOYKh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNDEwMFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAOTA2ZDc1ZmJhYjhmNTNjY2M3ZDlh ODE3OGMxZDYwODY0ZDY3MGJiNmI5NDQyNzBmMjFhMDEwNWY1ZDMwMWQ2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzZb+RXXi3rWtU3hOA+rSFup47HQ GxFQwnmW6gC6a9D8VA//Cs6nw9qZHfyphVHG8jimsac1RObJx1/tVEDlkWiZJlYx TP5XIGYy0jvTjnIAqLuBlMscl7u3lnVdh1ZT1bijq/FTDRohMULTLkhpD9anwj2d QLRmq1aFAU8Xp/xOr9ByEQ2jol6sAil5w5A6tc4+LPObZIrK2c/daz5iap5dw8g0 SYscR5R2K3jcTDkLbP01LfIKhdXGc015rEHMQsCwg71u5VvWZXwl1AfYxm3EneVp fOW6WbTzLharNPpGUnSnT4thomart3Dwjx4yUIhJzyDn/sqMH2jGlysQhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJXXAV6WFd9JfvnuBUWygUuD1J90MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NkZjc4OTI1LWI0YjAtNDIzNC05MWNiLTY0NzI0MzIzMjgyMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYWAwDQYJKoZIhvcNAQELBQADggEBAB2j+7dE9pQOQOycO9tt HE4S4FY4OhnogKWsIt2UcSFhSVn4g/4jCJIIpp/DQCOV/tUJP1cphpkAWG42/hQl NkCkUXNFk4tlA+KYCafhtcVA43n6sDquI735Te2j18siR9JO6SS0cTZcu9FB71sK H1kHn/GU4U4AYgnMlRxS+WmQBd/Tngbz8uedybTAEV9DZ9lomWalLBv15e77JG5G 2tddoDfa0ong0xaiPChLY+1LIDEOCy1veOoy0aah+jpmRKNPP8bUkbLnBzuhGt2l IDD+ju8qsEbYJ8Wx7aq4SnWuD0+EBC1lfLNCeSnZXupjdWm8576FKct7j9GegAY2 zg0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:57 2025 by rpki-client