$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed72331d-bbd1-45c2-9d41-bea51c97f1be.roa File: ed72331d-bbd1-45c2-9d41-bea51c97f1be.roa (raw, json) Hash identifier: CWZRBSkk8n3B8MDIJ/lPr7aK7I2G//MuHYkxnWroEd4= Subject key identifier: AE:CD:79:12:06:28:69:08:49:6E:97:EC:EC:0A:55:9B:4A:9E:A6:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70BA73F93E8B3333FF56A1DC821C6A19B17465FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed72331d-bbd1-45c2-9d41-bea51c97f1be.roa Signing time: Mon 18 Aug 2025 15:00:18 +0000 ROA not before: Mon 18 Aug 2025 15:00:18 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ba:73:f9:3e:8b:33:33:ff:56:a1:dc:82:1c:6a:19:b1:74:65:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:18 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=f36acb2325168341c368fce8473ea3cd613dcc4379d374c08ff334555be7af67, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:2e:25:3f:7f:fc:90:b8:ec:f8:f1:12:a3: 19:33:d6:83:79:c4:6b:4d:91:c4:5a:24:4c:9f:41: 95:45:57:9e:ff:6a:bb:a3:35:b7:a4:20:a4:1f:a0: 60:5f:10:48:7d:9a:ba:f0:c8:0f:34:82:fe:81:19: be:1b:0c:1e:54:24:c8:48:fa:2e:2b:1a:7d:1d:94: 5f:59:08:0d:cd:4d:7a:80:2b:2e:d2:5c:41:bd:7c: 8f:7f:25:ee:1f:9c:80:a5:a6:8d:5a:68:b2:18:ad: 25:98:c2:22:19:2f:21:27:d2:ad:3a:86:60:10:d7: f8:b2:ab:ab:e8:ea:23:21:0f:8d:1e:03:71:9c:bf: d6:41:e4:ba:3f:b8:9e:e3:aa:7f:2c:d1:b6:29:ab: f7:4b:0b:ee:e3:46:c0:5c:65:8b:90:82:ee:2e:03: 9e:10:9a:10:91:26:bf:8e:b1:1c:fd:86:41:c1:f2: 2c:a9:26:10:c3:da:f6:59:6f:ec:28:0d:8b:f5:4c: 4b:2d:4d:55:62:79:83:ba:5c:44:d9:a3:2a:21:0a: de:10:c5:6a:0e:f8:bf:cc:e2:7f:ac:5f:ab:8f:c2: 88:9f:56:5c:8d:04:20:8c:18:a2:ec:23:5d:94:a5: 4f:ca:14:36:41:b3:f3:58:55:40:bf:65:a6:64:01: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:79:12:06:28:69:08:49:6E:97:EC:EC:0A:55:9B:4A:9E:A6:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed72331d-bbd1-45c2-9d41-bea51c97f1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:7000::/40 Signature Algorithm: sha256WithRSAEncryption 81:b3:8c:f8:79:5b:d8:ca:1b:00:04:52:59:9f:2f:95:52:a4: 14:94:33:2c:da:ca:43:69:8d:cb:0b:3b:d2:d8:53:06:a6:65: 99:72:37:03:8d:12:52:a5:99:8d:27:eb:28:3a:e3:f7:e4:55: 81:ed:bb:46:a6:fa:97:15:96:97:9c:95:6e:c7:38:f1:2f:23: 88:34:2b:6f:71:85:42:c4:55:6c:26:7e:e9:c1:1f:ff:7e:8f: bc:6d:04:cb:af:41:58:e1:41:46:13:08:f0:09:5c:d5:02:cd: 52:64:50:59:7a:d9:0f:97:f9:31:26:27:53:65:60:af:6e:a8: f8:94:7c:58:c2:83:30:b5:0c:32:5b:09:e4:e5:74:62:f9:6c: 6c:f7:80:65:07:11:f4:18:17:32:25:70:5b:ad:6d:c4:3f:c9: 9c:72:bb:7a:74:09:a3:94:4f:ee:a8:21:4a:87:7f:9b:50:c7: 58:e5:b8:a1:8a:f7:16:75:99:b0:a2:f7:df:78:4d:af:f6:ef: 85:dc:38:04:93:a9:66:0f:38:e3:34:08:77:a5:6f:1f:d7:2d: 39:1b:42:10:f5:b1:ee:bb:76:b5:7e:40:36:d1:59:59:67:16: f8:b9:65:3c:7d:d6:9e:df:05:32:29:4f:04:c9:b9:ae:3a:96: 8a:ba:76:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcLpz+T6LMzP/VqHcghxqGbF0Zf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDAxOFoX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAZjM2YWNiMjMyNTE2ODM0MWMzNjhm Y2U4NDczZWEzY2Q2MTNkY2M0Mzc5ZDM3NGMwOGZmMzM0NTU1YmU3YWY2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E4uJT9//JC47PjxEqMZM9aDecRr TZHEWiRMn0GVRVee/2q7ozW3pCCkH6BgXxBIfZq68MgPNIL+gRm+GwweVCTISPou Kxp9HZRfWQgNzU16gCsu0lxBvXyPfyXuH5yApaaNWmiyGK0lmMIiGS8hJ9KtOoZg ENf4squr6OojIQ+NHgNxnL/WQeS6P7ie46p/LNG2Kav3Swvu40bAXGWLkILuLgOe EJoQkSa/jrEc/YZBwfIsqSYQw9r2WW/sKA2L9UxLLU1VYnmDulxE2aMqIQreEMVq Dvi/zOJ/rF+rj8KIn1ZcjQQgjBii7CNdlKVPyhQ2QbPzWFVAv2WmZAF1BQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK7NeRIGKGkISW6X7OwKVZtKnqaUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkNzIzMzFkLWJiZDEtNDVjMi05ZDQxLWJlYTUxYzk3ZjFiZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauXAwDQYJKoZIhvcNAQELBQADggEBAIGzjPh5W9jKGwAEUlmf L5VSpBSUMyzaykNpjcsLO9LYUwamZZlyNwONElKlmY0n6yg64/fkVYHtu0am+pcV lpeclW7HOPEvI4g0K29xhULEVWwmfunBH/9+j7xtBMuvQVjhQUYTCPAJXNUCzVJk UFl62Q+X+TEmJ1NlYK9uqPiUfFjCgzC1DDJbCeTldGL5bGz3gGUHEfQYFzIlcFut bcQ/yZxyu3p0CaOUT+6oIUqHf5tQx1jluKGK9xZ1mbCi9994Ta/274XcOASTqWYP OOM0CHelbx/XLTkbQhD1se67drV+QDbRWVlnFvi5ZTx91p7fBTIpTwTJua46loq6 dlc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:10:38 2025 by rpki-client