$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa File: df32b4dc-f216-4f87-832d-d0230fac751f.roa (raw, json) Hash identifier: hkVFiJZVbReX7xdsbVMhehPhYm79VfuHo7y8sgukQ/0= Subject key identifier: 9A:F5:4C:AD:48:DB:F6:A3:31:12:81:49:AE:D4:05:EA:68:47:E8:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 358C37C8EDE35C70D672B5FEA1A5A596ECB2E31C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa Signing time: Sat 23 Aug 2025 00:50:21 +0000 ROA not before: Sat 23 Aug 2025 00:50:21 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8c:37:c8:ed:e3:5c:70:d6:72:b5:fe:a1:a5:a5:96:ec:b2:e3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:50:21 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=bd93ccb55432780da92c8d278ebf5b959939c1638eacfc81bec295de3b17fe78, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:b7:07:58:fb:7e:aa:28:5d:e9:91:ca:c1: 6e:05:7c:80:90:72:ce:8c:06:fb:77:19:93:85:4e: d6:cb:e9:2f:92:ba:06:76:7d:e1:70:65:2b:03:5c: 18:55:f0:53:ac:fd:56:7b:91:0b:13:cf:3c:f7:61: 6b:91:9b:9d:67:79:7c:a9:a7:53:a7:35:2b:ce:37: 24:b1:f0:af:a7:09:ed:76:0e:b5:59:18:49:c4:07: a2:5c:9d:42:bb:77:80:ea:1e:d3:88:48:c9:20:91: 25:58:d3:be:1a:a4:0d:f6:fb:e2:a6:1e:61:2c:4d: 2a:df:4e:38:33:dd:f7:9a:2f:02:be:9f:c9:da:69: ee:00:7b:86:74:42:97:96:07:2c:d5:f8:02:54:80: b3:37:fd:09:32:fd:6b:f0:08:82:77:f0:0d:e0:76: 32:18:29:74:4c:ef:73:8a:47:10:e5:30:2e:bb:2b: 99:c7:d0:8e:45:e3:95:ca:4f:1c:77:17:4c:0c:b5: 7f:68:68:ac:2b:69:fc:45:4f:30:f1:04:90:05:5b: 19:f5:60:78:c4:7d:eb:44:81:a3:d7:c8:46:08:be: c9:b9:e2:9d:c3:01:f7:28:fc:d3:13:85:19:c0:19: e2:7d:a2:81:7e:64:f4:c4:c3:c7:33:b9:0e:f4:71: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F5:4C:AD:48:DB:F6:A3:31:12:81:49:AE:D4:05:EA:68:47:E8:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9000::/40 Signature Algorithm: sha256WithRSAEncryption 53:79:fa:14:27:27:73:7e:f1:74:9f:be:92:d0:85:c1:b2:e1: b3:fe:d9:91:82:b8:9b:0a:b2:7e:42:6f:29:dc:c5:ae:da:87: a8:38:d7:20:a6:da:b3:6e:87:3c:95:e7:9c:ef:35:7c:0a:b6: 03:70:4a:1e:c0:88:74:55:b5:0d:52:ca:45:c0:8e:fb:03:de: a2:e0:bd:30:5b:d0:43:44:20:78:da:db:0f:6b:e1:bd:93:d1: 21:84:c9:36:8b:77:65:f0:97:c6:96:70:6d:3f:1a:a4:12:64: 31:f6:a7:75:cf:14:c6:3d:80:5e:07:25:fa:97:e6:90:d7:dd: 09:d2:50:01:48:44:be:b9:5a:eb:4c:1a:d3:cc:61:8b:73:6c: a1:70:6e:c5:99:f9:82:5c:20:39:d8:d5:61:39:a1:a6:08:bb: f4:dd:9d:ec:74:f1:75:a2:5a:2b:07:33:82:53:bb:e3:00:71: b2:89:52:f1:86:bd:48:25:59:c0:a1:49:76:cc:e5:99:5f:d4: 7f:8b:76:1f:0c:eb:04:ec:ac:8f:d8:ee:ac:0f:26:21:1b:45: db:af:1c:5d:23:f6:fe:b9:b1:7b:32:c7:34:bc:e4:98:cd:e8: 20:3a:85:c8:c0:cc:c3:5c:fd:a2:4c:5c:51:ef:c1:7f:f0:6c: d9:f0:d4:d3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNYw3yO3jXHDWcrX+oaWlluyy4xwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwNTAyMVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAYmQ5M2NjYjU1NDMyNzgwZGE5MmM4 ZDI3OGViZjViOTU5OTM5YzE2MzhlYWNmYzgxYmVjMjk1ZGUzYjE3ZmU3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrO3B1j7fqooXemRysFuBXyAkHLO jAb7dxmThU7Wy+kvkroGdn3hcGUrA1wYVfBTrP1We5ELE88892FrkZudZ3l8qadT pzUrzjcksfCvpwntdg61WRhJxAeiXJ1Cu3eA6h7TiEjJIJElWNO+GqQN9vviph5h LE0q3044M933mi8Cvp/J2mnuAHuGdEKXlgcs1fgCVICzN/0JMv1r8AiCd/AN4HYy GCl0TO9zikcQ5TAuuyuZx9COReOVyk8cdxdMDLV/aGisK2n8RU8w8QSQBVsZ9WB4 xH3rRIGj18hGCL7JueKdwwH3KPzTE4UZwBnifaKBfmT0xMPHM7kO9HFQPQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJr1TK1I2/ajMRKBSa7UBepoR+gdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMzJiNGRjLWYyMTYtNGY4Ny04MzJkLWQwMjMwZmFjNzUxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8pAwDQYJKoZIhvcNAQELBQADggEBAFN5+hQnJ3N+8XSfvpLQ hcGy4bP+2ZGCuJsKsn5Cbyncxa7ah6g41yCm2rNuhzyV55zvNXwKtgNwSh7AiHRV tQ1SykXAjvsD3qLgvTBb0ENEIHja2w9r4b2T0SGEyTaLd2Xwl8aWcG0/GqQSZDH2 p3XPFMY9gF4HJfqX5pDX3QnSUAFIRL65WutMGtPMYYtzbKFwbsWZ+YJcIDnY1WE5 oaYIu/Tdnex08XWiWisHM4JTu+MAcbKJUvGGvUglWcChSXbM5Zlf1H+Ldh8M6wTs rI/Y7qwPJiEbRduvHF0j9v65sXsyxzS85JjN6CA6hcjAzMNc/aJMXFHvwX/wbNnw 1NM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:50 2025 by rpki-client