$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa File: d27f281e-d864-4e2b-a72c-0bb082ea8455.roa (raw, json) Hash identifier: 5/NP2bbGJd3iIZNA3H9MpIGf/4ttwbeZaA+L1BxBz+g= Subject key identifier: D6:50:AA:44:B9:CA:30:60:B7:28:0E:07:F6:A3:AA:EB:60:1A:25:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A24D9E87CBC192A2DD60E2B1A6E9000E68F2744 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa Signing time: Fri 22 Aug 2025 00:01:21 +0000 ROA not before: Fri 22 Aug 2025 00:01:21 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:24:d9:e8:7c:bc:19:2a:2d:d6:0e:2b:1a:6e:90:00:e6:8f:27:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 22 00:01:21 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=9feb7f57fe7a3c6d6ecec76d5b664260bf9786f6008dac703ace62f010378654, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:48:b9:63:70:69:ed:20:ea:c3:80:c3:41: fe:38:6a:e3:8c:d2:6d:15:3f:16:b1:51:8a:62:61: 88:3c:55:6e:37:d0:b4:d4:1e:20:d2:65:e2:41:ba: ac:0b:b7:69:38:30:b0:52:ec:cb:96:76:38:60:55: da:c4:db:b8:bf:7a:da:41:d8:c3:86:2f:fc:53:12: ad:f7:5f:19:05:08:4e:a5:5c:5f:b8:4b:70:a9:f5: 65:7d:ca:86:04:3e:88:d0:c5:ac:eb:b9:2e:dd:23: 6d:a7:80:cb:79:09:a0:b9:c1:db:53:44:e6:91:a2: 99:6e:5c:5a:7f:82:d1:98:56:ae:7f:73:77:69:a7: b9:44:6d:fc:a6:d8:0b:95:bf:0d:77:63:45:5b:3d: 4a:d4:a8:0e:d3:4d:30:cd:0b:c4:c4:12:7d:ce:c4: 52:6b:c1:6a:55:d9:dc:ab:c6:38:0c:73:89:92:6a: 1f:e9:0c:d1:15:98:24:98:ad:fb:94:ca:fd:16:b2: d7:fb:50:08:88:5d:09:42:8a:f1:49:4d:8a:dd:56: 7d:7c:4d:ed:7d:d2:b1:2a:76:21:42:25:d0:27:e2: b0:0e:12:cb:e7:3f:b5:a9:22:d8:ba:3c:e2:2a:12: 28:53:0d:80:d1:5c:55:fb:35:73:e4:43:6d:90:c3: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:AA:44:B9:CA:30:60:B7:28:0E:07:F6:A3:AA:EB:60:1A:25:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c060::/48 Signature Algorithm: sha256WithRSAEncryption 3d:40:fb:87:ef:01:ed:9d:91:9b:db:97:fa:33:df:1c:ad:27: 29:b2:7b:31:20:75:be:16:51:c6:f1:bb:b9:e1:75:6f:73:15: 24:e5:02:6f:c8:5b:52:ba:bc:a1:91:47:cb:ac:44:e5:bf:b0: ba:e5:62:00:30:2c:48:ff:8b:d4:3a:9c:dd:f1:4e:c4:ad:ab: f6:77:9e:6e:a0:59:c7:63:4e:6d:cd:99:52:fa:36:5d:a1:72: 40:a9:ab:50:cc:5c:cb:82:0a:34:e9:b7:32:1d:af:f1:f7:ee: 07:4b:8e:c4:32:a7:76:db:7f:d7:84:a8:6f:c9:3a:ac:64:66: 56:16:fc:c2:1b:11:25:bd:9f:7e:4b:13:72:f4:a4:58:05:12: cb:15:a0:34:d1:fc:b5:bd:16:99:51:42:12:e5:c7:67:f6:64: 26:2a:23:fa:dc:7e:3f:ef:25:d3:e5:5e:1b:8e:a5:cd:6d:bc: 86:a3:98:32:70:a5:fb:b8:90:84:57:46:33:c4:89:9f:7d:50: a1:a7:e9:be:30:06:45:47:8b:90:a7:1c:bd:d5:f0:a4:e7:ab: fe:9e:82:5e:cc:56:9d:2f:ba:fd:1d:f4:c6:48:e7:11:22:00: f2:17:bf:cd:88:cc:fb:30:e5:53:58:59:20:02:da:13:a3:b1: a8:7e:d9:d5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWiTZ6Hy8GSot1g4rGm6QAOaPJ0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMjAwMDEyMVoX DTI1MDkyNjIzNTk1OVowejFJMEcGA1UEBRNAOWZlYjdmNTdmZTdhM2M2ZDZlY2Vj NzZkNWI2NjQyNjBiZjk3ODZmNjAwOGRhYzcwM2FjZTYyZjAxMDM3ODY1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b9IuWNwae0g6sOAw0H+OGrjjNJt FT8WsVGKYmGIPFVuN9C01B4g0mXiQbqsC7dpODCwUuzLlnY4YFXaxNu4v3raQdjD hi/8UxKt918ZBQhOpVxfuEtwqfVlfcqGBD6I0MWs67ku3SNtp4DLeQmgucHbU0Tm kaKZblxaf4LRmFauf3N3aae5RG38ptgLlb8Nd2NFWz1K1KgO000wzQvExBJ9zsRS a8FqVdncq8Y4DHOJkmof6QzRFZgkmK37lMr9FrLX+1AIiF0JQorxSU2K3VZ9fE3t fdKxKnYhQiXQJ+KwDhLL5z+1qSLYujziKhIoUw2A0VxV+zVz5ENtkMNDYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNZQqkS5yjBgtygOB/ajqutgGiUbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyN2YyODFlLWQ4NjQtNGUyYi1hNzJjLTBiYjA4MmVhODQ1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMBgMA0GCSqGSIb3DQEBCwUAA4IBAQA9QPuH7wHtnZGb25f6 M98crScpsnsxIHW+FlHG8bu54XVvcxUk5QJvyFtSuryhkUfLrETlv7C65WIAMCxI /4vUOpzd8U7Erav2d55uoFnHY05tzZlS+jZdoXJAqatQzFzLggo06bcyHa/x9+4H S47EMqd223/XhKhvyTqsZGZWFvzCGxElvZ9+SxNy9KRYBRLLFaA00fy1vRaZUUIS 5cdn9mQmKiP63H4/7yXT5V4bjqXNbbyGo5gycKX7uJCEV0YzxImffVChp+m+MAZF R4uQpxy91fCk56v+noJezFadL7r9HfTGSOcRIgDyF7/NiMz7MOVTWFkgAtoTo7Go ftnV -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:28 2025 by rpki-client