$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa File: db727801-736f-41c5-bf1a-e19ab3b36eff.roa (raw, json) Hash identifier: g25Cju96rq4Zy4p3FNQsJnq83UzbVM5Y4nxWS+P+BKc= Subject key identifier: F3:0C:EA:BF:87:2E:89:36:17:34:09:68:AB:84:E9:FC:1E:BD:50:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63533BEB520D6AAC3C4DFD6A28EA9F69878F945F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa Signing time: Sat 23 Aug 2025 00:00:29 +0000 ROA not before: Sat 23 Aug 2025 00:00:29 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:53:3b:eb:52:0d:6a:ac:3c:4d:fd:6a:28:ea:9f:69:87:8f:94:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:00:29 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=ce9b676bf810ce6729c942788bee0bf3161ea82c1b944e4d0f939393699c06ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:f7:a6:3a:77:a4:22:b0:aa:71:58:c8:72: 60:42:ff:74:e8:1b:da:2e:dc:9e:a2:88:0c:79:df: 84:66:65:49:63:77:6a:a9:a6:da:b1:fe:b4:99:65: 57:52:ba:ad:39:3f:86:50:cc:95:46:42:40:c2:6c: dc:92:df:20:8b:8a:21:cf:b1:3b:9b:6a:9b:c2:7a: 4a:fa:58:f6:eb:4e:35:6f:9a:8e:4f:2f:c6:44:d1: a5:13:14:aa:0a:0c:2f:66:0a:49:3c:b0:7b:aa:df: 50:57:19:5f:86:47:41:6b:c6:6d:8f:62:6a:26:54: fe:ed:25:fc:cf:83:79:bb:7c:1f:9d:ae:e0:da:52: 15:90:1d:80:e3:39:a7:d7:63:41:33:4b:de:56:3a: 88:94:fd:54:6b:d9:b7:db:3c:af:20:75:62:96:b3: 9a:f9:d4:2c:ee:69:ce:94:19:39:1c:ec:31:83:fd: b8:16:f7:f8:d8:5f:c5:94:51:8b:4b:75:40:a0:71: b9:b5:fa:65:af:4f:83:1e:b8:ed:2b:07:19:9c:f8: 81:c3:dc:a2:0d:0d:29:15:a2:c0:76:27:d8:c5:99: 51:88:65:1b:27:41:a3:3c:63:fd:1c:a6:fe:18:c5: 60:d6:a4:96:ba:ae:90:51:d1:80:56:5f:07:36:63: aa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0C:EA:BF:87:2E:89:36:17:34:09:68:AB:84:E9:FC:1E:BD:50:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8880::/48 Signature Algorithm: sha256WithRSAEncryption b1:09:c9:1e:aa:07:47:47:f8:15:5f:7a:46:12:96:c5:32:41: 68:0d:75:84:f1:35:db:97:2e:ba:7d:c6:07:14:38:4c:21:54: 70:41:ca:17:71:3a:9c:ae:aa:4e:b5:29:3f:4f:af:7c:c1:e4: e3:13:5d:03:16:33:46:7a:6e:ad:b4:a3:66:6d:97:21:48:14: eb:b3:41:26:79:08:92:e7:53:4d:2a:ad:9e:97:53:ae:58:60: a0:b8:09:23:f2:f9:8d:54:a5:60:d4:6f:ba:da:38:60:62:48: 93:da:f8:c1:08:da:96:30:22:3f:6f:8a:dc:84:f5:68:d6:c2: e4:0c:44:e7:46:d9:d3:aa:3c:97:28:65:8c:53:26:59:38:d1: 59:62:99:05:8f:3b:5f:d2:8b:f4:96:69:c3:34:2b:0a:16:8c: 2b:a3:7f:8f:41:d2:0d:bf:46:da:b0:47:ca:7e:51:5b:37:94: 02:6f:54:1c:2a:8b:10:39:fe:f7:bc:5b:54:3d:c2:7b:45:51: 62:14:b3:bc:10:ff:3c:2f:31:fd:c8:f2:a7:12:ab:72:d6:65: 39:a2:25:1a:1c:85:bb:fc:82:29:c2:73:29:aa:9c:85:e0:4d: fc:bb:04:cd:44:28:8f:57:e8:c1:ff:3a:cb:4a:31:59:b5:b1: c9:65:d4:fc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY1M761INaqw8Tf1qKOqfaYePlF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMDAyOVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAY2U5YjY3NmJmODEwY2U2NzI5Yzk0 Mjc4OGJlZTBiZjMxNjFlYTgyYzFiOTQ0ZTRkMGY5MzkzOTM2OTljMDZhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1P3pjp3pCKwqnFYyHJgQv906Bva LtyeoogMed+EZmVJY3dqqabasf60mWVXUrqtOT+GUMyVRkJAwmzckt8gi4ohz7E7 m2qbwnpK+lj26041b5qOTy/GRNGlExSqCgwvZgpJPLB7qt9QVxlfhkdBa8Ztj2Jq JlT+7SX8z4N5u3wfna7g2lIVkB2A4zmn12NBM0veVjqIlP1Ua9m32zyvIHVilrOa +dQs7mnOlBk5HOwxg/24Fvf42F/FlFGLS3VAoHG5tfplr0+DHrjtKwcZnPiBw9yi DQ0pFaLAdifYxZlRiGUbJ0GjPGP9HKb+GMVg1qSWuq6QUdGAVl8HNmOqpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPMM6r+HLok2FzQJaKuE6fwevVCBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiNzI3ODAxLTczNmYtNDFjNS1iZjFhLWUxOWFiM2IzNmVmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oiAMA0GCSqGSIb3DQEBCwUAA4IBAQCxCckeqgdHR/gVX3pG EpbFMkFoDXWE8TXbly66fcYHFDhMIVRwQcoXcTqcrqpOtSk/T698weTjE10DFjNG em6ttKNmbZchSBTrs0EmeQiS51NNKq2el1OuWGCguAkj8vmNVKVg1G+62jhgYkiT 2vjBCNqWMCI/b4rchPVo1sLkDETnRtnTqjyXKGWMUyZZONFZYpkFjztf0ov0lmnD NCsKFowro3+PQdINv0basEfKflFbN5QCb1QcKosQOf73vFtUPcJ7RVFiFLO8EP88 LzH9yPKnEqty1mU5oiUaHIW7/IIpwnMpqpyF4E38uwTNRCiPV+jB/zrLSjFZtbHJ ZdT8 -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:22 2025 by rpki-client