$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa File: f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa (raw, json) Hash identifier: it/nvpwEDG2g/CIh//q5nfNxv3E9q+Yd2u5x4tng+Dg= Subject key identifier: 94:B5:2D:E1:1D:26:50:4C:32:09:CF:CA:D9:2C:62:BC:44:F5:82:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A4F7374E8675113BF1211150425A513FAAFE036 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa Signing time: Sat 23 Aug 2025 00:11:23 +0000 ROA not before: Sat 23 Aug 2025 00:11:23 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4f:73:74:e8:67:51:13:bf:12:11:15:04:25:a5:13:fa:af:e0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:11:23 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=3de59a729987a9a30996e58dbe72f64977f87d7d4f77cf8fb07f331e66ac5ed8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:49:c0:2c:2b:1a:ef:70:d0:c8:ac:7a:73: c7:18:2b:39:fc:5c:d1:35:2a:44:f0:eb:b3:7b:68: 3c:1c:4f:c1:6d:64:7f:a3:40:c4:26:a7:7c:9c:5c: c7:ce:c1:ed:cc:2c:c2:8d:38:73:fb:57:99:2e:1f: df:60:5a:e5:ca:53:e7:28:26:ca:6c:59:c9:bf:82: 94:37:1f:a7:d4:98:93:ac:82:10:1a:b9:de:9f:de: ca:f2:fa:77:5d:c0:30:58:bb:98:d7:47:9c:f6:aa: 29:7a:51:f7:0f:1b:f9:84:ae:0a:ee:7f:ce:52:14: 08:d2:c0:54:40:7d:46:ea:21:b5:a6:5d:3d:c1:b6: ed:51:1c:e3:a3:3f:bc:9e:68:55:45:4c:61:8a:3e: d9:a2:ed:d1:c8:81:ca:6c:cf:26:fc:9b:3e:99:69: c9:c9:22:63:f3:74:f9:b0:f9:c0:70:31:87:87:5b: 8e:7f:d6:de:25:ec:b2:9f:da:68:91:d6:8d:c7:ed: cb:fa:91:33:23:d2:1d:db:28:f7:6f:3c:d1:2e:50: 54:50:1e:8d:b7:9e:08:43:91:54:9a:ce:a6:71:d2: 4d:08:e4:c4:bd:bb:1a:b0:70:38:77:db:15:e1:6d: ee:ae:0a:ef:ac:a6:ce:fa:2b:d8:91:d2:17:6e:5c: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B5:2D:E1:1D:26:50:4C:32:09:CF:CA:D9:2C:62:BC:44:F5:82:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7000::/40 Signature Algorithm: sha256WithRSAEncryption 1e:c4:91:30:8a:77:ed:d8:12:73:e2:d2:fb:e8:82:bc:ed:45: 02:1f:8e:00:71:7c:d1:3d:e5:7f:5c:5f:3e:0c:b6:67:df:19: ac:b4:e7:b2:18:e4:12:3a:9e:2e:97:ab:5e:c5:6a:88:39:1a: 1d:41:f3:9a:da:43:aa:d3:d4:29:58:22:a7:71:6f:8e:df:e8: d8:2f:bb:7e:6e:e4:33:67:87:8e:fb:39:54:da:7f:8a:64:41: ca:3c:bc:93:b7:80:ae:14:fe:04:fc:d4:07:cb:43:60:4a:ab: 5b:4e:fa:51:41:12:a4:e6:e7:4a:fa:6a:2e:07:99:b1:3d:9b: 94:f3:3c:fd:0d:a1:c8:d7:5a:4c:5c:39:5c:83:d0:ba:27:8b: 8e:c3:ae:7c:88:01:bb:8a:ab:76:de:56:66:7f:b9:2f:a5:a0: 53:02:62:d8:a4:f1:62:2d:4d:36:49:b2:f1:b8:22:45:2d:9b: 97:f3:4d:d7:e5:09:92:e0:f7:92:bb:5a:ac:4b:8a:4e:b3:9f: e8:7d:33:78:c9:a5:37:ae:5f:d1:ab:d2:3b:b4:60:bc:c9:99: 21:e7:d4:ac:23:27:e6:96:e1:98:51:30:ac:a4:fe:16:93:3c: 27:93:f9:4c:29:f0:6a:f2:22:27:f5:52:cf:6e:7f:5f:a2:47: 4f:46:10:52 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUak9zdOhnURO/EhEVBCWlE/qv4DYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMTEyM1oX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAM2RlNTlhNzI5OTg3YTlhMzA5OTZl NThkYmU3MmY2NDk3N2Y4N2Q3ZDRmNzdjZjhmYjA3ZjMzMWU2NmFjNWVkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZFJwCwrGu9w0MisenPHGCs5/FzR NSpE8Ouze2g8HE/BbWR/o0DEJqd8nFzHzsHtzCzCjThz+1eZLh/fYFrlylPnKCbK bFnJv4KUNx+n1JiTrIIQGrnen97K8vp3XcAwWLuY10ec9qopelH3Dxv5hK4K7n/O UhQI0sBUQH1G6iG1pl09wbbtURzjoz+8nmhVRUxhij7Zou3RyIHKbM8m/Js+mWnJ ySJj83T5sPnAcDGHh1uOf9beJeyyn9pokdaNx+3L+pEzI9Id2yj3bzzRLlBUUB6N t54IQ5FUms6mcdJNCOTEvbsasHA4d9sV4W3urgrvrKbO+ivYkdIXblySkQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJS1LeEdJlBMMgnPytksYrxE9YIgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4NjMzNTVjLTBhMzMtNGViMS1iMmJiLWIwYzQwYzA2OTNjZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/3AwDQYJKoZIhvcNAQELBQADggEBAB7EkTCKd+3YEnPi0vvo grztRQIfjgBxfNE95X9cXz4MtmffGay057IY5BI6ni6Xq17Faog5Gh1B85raQ6rT 1ClYIqdxb47f6Ngvu35u5DNnh477OVTaf4pkQco8vJO3gK4U/gT81AfLQ2BKq1tO +lFBEqTm50r6ai4HmbE9m5TzPP0NocjXWkxcOVyD0Loni47DrnyIAbuKq3beVmZ/ uS+loFMCYtik8WItTTZJsvG4IkUtm5fzTdflCZLg95K7WqxLik6zn+h9M3jJpTeu X9Gr0ju0YLzJmSHn1KwjJ+aW4ZhRMKyk/haTPCeT+Uwp8GryIif1Us9uf1+iR09G EFI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:34 2025 by rpki-client