$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa File: d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa (raw, json) Hash identifier: s4pj7i1J5rCMitVhkazOAHz5AxQVwOIJdEffBhlXW0k= Subject key identifier: 28:D5:C4:F5:F2:BF:01:24:00:FA:A6:9A:BC:DD:5A:6D:47:21:0F:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 22E4255C9477BB02D72B398D545FBEF2671041BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa Signing time: Mon 18 Aug 2025 15:00:41 +0000 ROA not before: Mon 18 Aug 2025 15:00:41 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da20::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e4:25:5c:94:77:bb:02:d7:2b:39:8d:54:5f:be:f2:67:10:41:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:41 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=76d57c75864f58a92c49550c7be705402c66ac957b9ff1ceb796457eb471ad9d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:d1:dc:82:88:cf:6a:cc:46:38:e3:84:9f: e7:ae:0b:52:ec:e9:a0:28:05:24:7e:01:4d:12:6a: f5:b0:e8:df:c9:e3:a2:83:54:22:5a:1d:2c:6c:6d: 6f:9e:3f:55:60:70:ea:7f:bf:3b:d2:5a:94:93:1d: b7:0d:f4:81:84:17:7d:1f:35:cd:88:2a:2a:69:4e: 1c:0e:e5:0d:da:43:8e:d4:c5:15:ba:c6:f2:22:b6: 01:c2:00:26:33:40:ff:a0:bd:8f:c1:e8:60:01:a5: fe:59:dc:ca:1b:57:b6:83:63:57:ed:00:8c:c5:00: 4c:68:c9:70:7d:14:8b:c3:b8:6d:2c:16:4f:6d:09: 63:be:3a:ce:db:9a:e0:51:c3:76:af:49:3b:62:50: ea:d8:5b:32:69:c6:83:5b:d5:8e:f2:c8:b1:5c:d0: ba:98:0c:00:be:25:50:9f:34:03:3b:8d:48:34:75: e9:96:cd:fa:8c:7e:02:82:47:a3:5a:fd:32:07:13: 5d:2c:39:a1:75:f4:14:65:87:87:3a:68:6b:57:e9: ea:1d:be:2f:bc:2d:99:bf:2b:e2:1c:89:f0:e5:f6: f9:37:af:55:55:5b:ba:07:87:fc:b3:97:b9:7d:54: b5:e0:19:7c:5d:d4:27:56:04:0e:78:26:39:3b:b3: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D5:C4:F5:F2:BF:01:24:00:FA:A6:9A:BC:DD:5A:6D:47:21:0F:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da20::/28 Signature Algorithm: sha256WithRSAEncryption aa:78:86:4d:2d:d0:bc:f8:56:bb:5a:37:75:ac:24:86:79:22: 50:49:22:07:19:e5:fa:ea:9b:66:46:d7:9d:8a:e9:a6:8e:3d: e2:52:ac:95:f5:ab:33:0a:59:4e:00:3f:52:ef:b0:66:9e:0e: 61:ae:c2:08:d8:9a:10:af:4c:20:88:80:70:72:07:ef:9d:41: 62:da:2e:ef:33:ea:8a:40:1d:fb:2f:8f:44:22:0a:c0:ea:bd: bc:27:6c:3a:96:78:f3:8b:c0:eb:cf:d0:8f:22:f8:96:1f:72: a0:fe:7b:e6:11:ca:e9:93:41:b4:f0:0e:1b:19:80:a5:5f:af: 4e:41:a3:b2:c7:f9:c2:e0:87:25:b0:c3:cd:2f:a5:9d:87:80: 32:bd:cd:ae:ca:b9:50:51:c4:96:3f:25:58:ec:3a:93:c1:77: b1:09:74:0a:36:59:b5:00:04:f7:01:66:90:28:f2:28:5b:ed: 2a:11:d6:71:09:fe:c8:a3:4c:9d:92:38:3f:28:dc:94:61:09: e4:9a:4c:ea:d1:92:e1:9b:10:c8:69:bd:ac:c3:72:d2:a3:f7: 6d:9f:84:c2:12:4f:b1:de:cc:6d:bf:5d:50:d8:fa:30:46:5d: 87:72:ca:54:7f:c5:98:28:bb:bd:78:59:c6:e6:d1:da:49:c8: 7f:23:6b:51 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUIuQlXJR3uwLXKzmNVF++8mcQQb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDA0MVoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNANzZkNTdjNzU4NjRmNThhOTJjNDk1 NTBjN2JlNzA1NDAyYzY2YWM5NTdiOWZmMWNlYjc5NjQ1N2ViNDcxYWQ5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHDR3IKIz2rMRjjjhJ/nrgtS7Omg KAUkfgFNEmr1sOjfyeOig1QiWh0sbG1vnj9VYHDqf7870lqUkx23DfSBhBd9HzXN iCoqaU4cDuUN2kOO1MUVusbyIrYBwgAmM0D/oL2PwehgAaX+WdzKG1e2g2NX7QCM xQBMaMlwfRSLw7htLBZPbQljvjrO25rgUcN2r0k7YlDq2FsyacaDW9WO8sixXNC6 mAwAviVQnzQDO41INHXpls36jH4CgkejWv0yBxNdLDmhdfQUZYeHOmhrV+nqHb4v vC2ZvyviHInw5fb5N69VVVu6B4f8s5e5fVS14Bl8XdQnVgQOeCY5O7PpuwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCjVxPXyvwEkAPqmmrzdWm1HIQ+sMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3M2MwYTUxLWFiN2ItNDg3OC1iZGZmLWUwOGI2MTgxZWRiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUEJAbaIDANBgkqhkiG9w0BAQsFAAOCAQEAqniGTS3QvPhWu1o3dawk hnkiUEkiBxnl+uqbZkbXnYrppo494lKslfWrMwpZTgA/Uu+wZp4OYa7CCNiaEK9M IIiAcHIH751BYtou7zPqikAd+y+PRCIKwOq9vCdsOpZ484vA68/QjyL4lh9yoP57 5hHK6ZNBtPAOGxmApV+vTkGjssf5wuCHJbDDzS+lnYeAMr3Nrsq5UFHElj8lWOw6 k8F3sQl0CjZZtQAE9wFmkCjyKFvtKhHWcQn+yKNMnZI4PyjclGEJ5JpM6tGS4ZsQ yGm9rMNy0qP3bZ+EwhJPsd7Mbb9dUNj6MEZdh3LKVH/FmCi7vXhZxubR2knIfyNr UQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:28 2025 by rpki-client