$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa File: e2dd8ffd-5ddf-4d66-8796-87f096579505.roa (raw, json) Hash identifier: ej2Ly4DOxHqfqAF819x1nsp1+C7HYF30mADRL2nQJqs= Subject key identifier: EF:D6:CC:E4:C0:C8:B5:F9:01:99:6A:F0:E6:C7:ED:A4:84:DE:38:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 025D04D041D102A958CD20798FA6B34E84AA8F25 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa Signing time: Tue 12 Aug 2025 00:00:05 +0000 ROA not before: Tue 12 Aug 2025 00:00:05 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5d:04:d0:41:d1:02:a9:58:cd:20:79:8f:a6:b3:4e:84:aa:8f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 12 00:00:05 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=98e5b4d28dcf97293586ff2fd135d77612c4e72e92eae902fa9876d5d62cbd5c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:46:3b:78:4d:50:7a:50:c0:1b:20:d1:6a: f9:5c:6c:97:05:e0:69:30:b8:5c:1f:b4:59:a9:a0: 9d:d6:57:b5:40:d3:34:e7:36:b7:67:a9:68:b3:0e: 3e:e5:cd:5e:fd:8b:5b:39:83:83:b2:fa:35:f6:46: 25:f6:47:d7:3a:fb:bf:e9:05:f5:da:6f:56:05:cc: 03:1b:04:d7:c2:5e:38:84:75:1e:8e:f0:6c:6d:9c: d5:61:11:79:fb:8c:a8:e9:ef:5f:d2:15:34:0c:97: 4b:70:cc:83:f9:7f:16:06:89:67:55:9b:f5:f7:45: 79:8d:b3:53:e2:51:8f:cc:e0:e0:1c:e9:80:51:52: a7:f7:12:02:da:46:34:a0:3f:5c:8e:9b:ba:a9:40: 39:97:74:c5:8c:1a:a3:4e:e8:36:77:0b:45:8e:34: 8f:96:7b:1d:26:24:01:dd:95:bd:d8:6c:47:07:9f: f8:e4:94:a7:34:88:43:f4:e1:6f:ad:90:49:60:55: 3b:0f:c3:12:f1:08:d0:67:f5:2c:6c:1b:bb:01:9d: 82:29:42:77:2f:96:74:39:45:04:5f:78:62:80:36: 67:20:67:0c:ff:68:8d:7e:80:d6:b1:4b:05:a8:3f: 29:32:91:72:a9:f1:46:d4:ac:fc:21:af:e9:ed:58: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:CC:E4:C0:C8:B5:F9:01:99:6A:F0:E6:C7:ED:A4:84:DE:38:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption 2d:d6:bd:f0:fe:ea:e3:11:00:6c:0c:80:f7:40:e5:3c:b7:27: 83:b3:98:e6:69:20:6b:73:ef:37:e3:a3:a7:4c:ae:1c:9e:99: e0:e3:7f:48:91:eb:0c:a5:d7:d0:58:22:09:3d:4f:1c:7f:19: 65:5c:e3:96:00:f6:30:4d:dd:7e:1b:9f:a9:ff:9a:a9:45:76: 86:e9:1b:05:99:7a:8c:f5:8c:b7:21:cb:ff:7b:dc:5f:0b:ae: 20:25:4d:2b:2e:fe:17:dd:16:87:f5:bf:05:e4:8a:ae:8b:07: 02:6a:ae:15:38:11:e6:75:4f:cf:4c:dd:0c:5e:27:78:f0:32: 3c:27:c7:db:95:52:0f:00:f7:6b:22:55:7c:76:a0:84:fd:e4: 62:4f:46:1b:03:d1:0d:97:04:8f:e3:2a:49:11:49:a9:34:7f: 8a:ba:4d:28:48:e9:7a:50:31:14:95:fe:40:26:22:3b:55:92: 29:8f:40:b3:ab:c2:29:d3:c5:d3:54:eb:45:81:3f:f6:79:f2: 60:5f:a3:07:9b:78:d7:96:6a:96:5b:08:bd:65:5f:8d:b6:93: a0:e9:ad:dc:e5:f4:7b:97:98:5d:24:fe:b8:d2:98:90:97:32: c1:65:48:f9:66:2d:df:5e:f3:04:60:7a:fa:8a:63:2f:42:ab: db:1a:dc:51 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUAl0E0EHRAqlYzSB5j6azToSqjyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxMjAwMDAwNVoX DTI1MDkxNjIzNTk1OVowejFJMEcGA1UEBRNAOThlNWI0ZDI4ZGNmOTcyOTM1ODZm ZjJmZDEzNWQ3NzYxMmM0ZTcyZTkyZWFlOTAyZmE5ODc2ZDVkNjJjYmQ1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDBGO3hNUHpQwBsg0Wr5XGyXBeBp MLhcH7RZqaCd1le1QNM05za3Z6losw4+5c1e/YtbOYODsvo19kYl9kfXOvu/6QX1 2m9WBcwDGwTXwl44hHUejvBsbZzVYRF5+4yo6e9f0hU0DJdLcMyD+X8WBolnVZv1 90V5jbNT4lGPzODgHOmAUVKn9xIC2kY0oD9cjpu6qUA5l3TFjBqjTug2dwtFjjSP lnsdJiQB3ZW92GxHB5/45JSnNIhD9OFvrZBJYFU7D8MS8QjQZ/UsbBu7AZ2CKUJ3 L5Z0OUUEX3higDZnIGcM/2iNfoDWsUsFqD8pMpFyqfFG1Kz8Ia/p7Vi/DwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFO/WzOTAyLX5AZlq8ObH7aSE3jh8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UyZGQ4ZmZkLTVkZGYtNGQ2Ni04Nzk2LTg3ZjA5NjU3OTUwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEALda98P7q4xEAbAyA90Dl PLcng7OY5mkga3PvN+Ojp0yuHJ6Z4ON/SJHrDKXX0FgiCT1PHH8ZZVzjlgD2ME3d fhufqf+aqUV2hukbBZl6jPWMtyHL/3vcXwuuICVNKy7+F90Wh/W/BeSKrosHAmqu FTgR5nVPz0zdDF4nePAyPCfH25VSDwD3ayJVfHaghP3kYk9GGwPRDZcEj+MqSRFJ qTR/irpNKEjpelAxFJX+QCYiO1WSKY9As6vCKdPF01TrRYE/9nnyYF+jB5t415Zq llsIvWVfjbaToOmt3OX0e5eYXST+uNKYkJcywWVI+WYt317zBGB6+opjL0Kr2xrc UQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:43 2025 by rpki-client