$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21152065-60c9-41ef-ae06-c350c175101e.roa File: 21152065-60c9-41ef-ae06-c350c175101e.roa (raw, json) Hash identifier: Ky1yFfaqecKyzm+ss1qkNQtZd5mhijpp2jdCtYOWpfk= Subject key identifier: 7D:5E:39:A9:33:E1:AB:18:69:D9:5C:4F:E8:65:10:D2:BD:1D:AA:E6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B1849640819C0DCC598D4D3C65857E9E619C191 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21152065-60c9-41ef-ae06-c350c175101e.roa Signing time: Wed 06 Aug 2025 00:01:20 +0000 ROA not before: Wed 06 Aug 2025 00:01:20 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:18:49:64:08:19:c0:dc:c5:98:d4:d3:c6:58:57:e9:e6:19:c1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 6 00:01:20 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=fd98f81b141ea27a76b3adff7e11f17ae3237d3aba28505795a0d9f463d9cd32, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:b3:66:37:fd:ab:34:26:e1:66:43:40:ac: d2:b3:c9:5b:d0:0c:46:d3:31:f5:3f:53:ab:e4:d7: 3d:f5:b5:d8:03:73:90:14:b1:07:fe:a5:2e:30:58: 57:c7:3c:fb:08:d8:10:9f:1a:3f:2f:a6:df:05:7a: 69:58:09:9e:00:0e:98:d6:4f:96:8d:5f:27:8d:a1: a9:81:96:09:d8:e8:6e:a8:d9:04:4e:dc:16:fc:3b: 41:3e:73:b7:19:08:83:46:13:1b:22:35:08:65:c2: 55:10:a7:bd:e6:28:44:45:4e:e9:55:3f:ad:25:dc: 7c:f8:47:65:bf:30:71:b6:fa:3f:87:f3:f1:ee:c2: a6:f5:8a:82:0c:1c:6c:0d:44:2c:91:34:11:f9:8a: 62:98:a7:96:10:6e:d8:8a:77:8b:56:f1:03:40:e6: 35:41:1e:32:f4:2f:91:1f:93:d5:8d:99:e0:a4:07: 2a:35:a3:50:e5:a6:c7:9f:cc:d6:81:43:26:10:2e: e8:d9:67:39:0d:be:7b:8d:cd:96:8e:f9:55:55:93: 44:6f:cb:23:78:4c:12:0a:3a:26:45:88:2c:6c:6f: bb:a9:39:c8:76:1f:50:7a:76:96:3e:d9:49:9f:7a: 45:57:e4:4a:fb:5b:04:af:37:7a:d8:d5:a9:8a:0c: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5E:39:A9:33:E1:AB:18:69:D9:5C:4F:E8:65:10:D2:BD:1D:AA:E6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21152065-60c9-41ef-ae06-c350c175101e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:b000::/40 Signature Algorithm: sha256WithRSAEncryption b7:52:3e:ce:0f:d1:6d:2c:43:d5:df:10:71:2b:66:ae:90:97: d0:56:61:57:bf:ec:04:63:ce:ae:46:b6:6a:5b:71:95:48:e6: 47:ad:4c:ed:29:41:dc:cc:b5:79:42:a1:bc:cc:84:6d:18:65: 75:50:2a:65:d7:75:9d:0a:72:d0:25:84:ce:4a:a6:f3:fe:3c: 50:d3:cb:2c:8b:2d:6a:1f:e8:d2:7f:4d:16:f5:08:1c:c3:40: bf:30:14:66:72:ff:dd:6e:65:fb:55:8d:4c:39:f1:bd:ce:7f: 69:e3:35:0c:a3:ef:66:e7:9c:2f:e7:60:7a:c5:99:09:f3:ad: 39:cd:b4:5e:75:0d:28:90:ba:ed:97:7a:7b:30:e1:31:96:59: 74:ba:e5:a3:9f:69:f1:65:49:d2:df:e1:55:e7:1f:44:48:06: 7f:0d:9d:0a:85:86:27:7a:fc:ff:da:86:2b:40:84:25:5e:62: a3:12:88:99:d9:41:19:ee:1f:2d:f7:df:1d:ec:ee:e7:5c:1d: 14:3a:16:7a:43:f3:75:6c:1c:17:69:07:26:c5:83:fa:1c:e2: 69:47:87:3e:a5:bd:c0:f2:a3:07:02:8f:aa:5e:fa:20:2d:15: dd:2d:c6:19:dc:87:51:f1:d2:13:41:bb:6f:bb:e5:87:66:c2: 92:b7:7a:8f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKxhJZAgZwNzFmNTTxlhX6eYZwZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNjAwMDEyMFoX DTI1MDkxMDIzNTk1OVowejFJMEcGA1UEBRNAZmQ5OGY4MWIxNDFlYTI3YTc2YjNh ZGZmN2UxMWYxN2FlMzIzN2QzYWJhMjg1MDU3OTVhMGQ5ZjQ2M2Q5Y2QzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOGzZjf9qzQm4WZDQKzSs8lb0AxG 0zH1P1Or5Nc99bXYA3OQFLEH/qUuMFhXxzz7CNgQnxo/L6bfBXppWAmeAA6Y1k+W jV8njaGpgZYJ2OhuqNkETtwW/DtBPnO3GQiDRhMbIjUIZcJVEKe95ihERU7pVT+t Jdx8+EdlvzBxtvo/h/Px7sKm9YqCDBxsDUQskTQR+YpimKeWEG7YineLVvEDQOY1 QR4y9C+RH5PVjZngpAcqNaNQ5abHn8zWgUMmEC7o2Wc5Db57jc2WjvlVVZNEb8sj eEwSCjomRYgsbG+7qTnIdh9QenaWPtlJn3pFV+RK+1sErzd62NWpigycmQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH1eOakz4asYadlcT+hlENK9HarmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIxMTUyMDY1LTYwYzktNDFlZi1hZTA2LWMzNTBjMTc1MTAxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba77AwDQYJKoZIhvcNAQELBQADggEBALdSPs4P0W0sQ9XfEHEr Zq6Ql9BWYVe/7ARjzq5GtmpbcZVI5ketTO0pQdzMtXlCobzMhG0YZXVQKmXXdZ0K ctAlhM5KpvP+PFDTyyyLLWof6NJ/TRb1CBzDQL8wFGZy/91uZftVjUw58b3Of2nj NQyj72bnnC/nYHrFmQnzrTnNtF51DSiQuu2Xensw4TGWWXS65aOfafFlSdLf4VXn H0RIBn8NnQqFhid6/P/ahitAhCVeYqMSiJnZQRnuHy333x3s7udcHRQ6FnpD83Vs HBdpBybFg/oc4mlHhz6lvcDyowcCj6pe+iAtFd0txhnch1Hx0hNBu2+75YdmwpK3 eo8= -----END CERTIFICATE-----Generated at Wed Aug 6 05:13:09 2025 by rpki-client