$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95723d87-e403-4a3f-8c2d-be6b316ed860.roa File: 95723d87-e403-4a3f-8c2d-be6b316ed860.roa (raw, json) Hash identifier: PPNRX3gUw3ADvOjcOkyDxRZnxWSBLZvCSjInigUQyWg= Subject key identifier: 25:52:D0:25:8E:F4:C2:9B:B1:5C:B4:D3:FC:DE:C1:23:1B:1A:12:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 460DD0363F21BA9343A63C19F024101443ACE20C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95723d87-e403-4a3f-8c2d-be6b316ed860.roa Signing time: Wed 23 Jul 2025 00:01:15 +0000 ROA not before: Wed 23 Jul 2025 00:01:15 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0d:d0:36:3f:21:ba:93:43:a6:3c:19:f0:24:10:14:43:ac:e2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:01:15 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=22a62f396e20ba434d9a1e50de3563a64d07975a580f753c8e66750188790c3b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:6b:35:f2:e1:34:7b:4f:67:f4:da:d4:bb: d4:ae:9f:7e:40:89:af:56:de:1f:cd:28:94:3e:af: 60:ce:f3:40:19:74:55:50:e5:e2:07:46:f7:54:91: 8c:78:15:ec:db:56:87:8f:ac:78:8b:5b:1e:5b:2b: ad:45:e5:c0:b5:45:cc:f1:04:4e:38:c9:0d:5e:dc: cb:67:b0:79:f5:fa:98:84:d1:8c:06:5a:b6:04:b1: 5d:fd:2f:8d:2f:58:a1:64:26:89:f0:dd:f1:f1:07: 31:37:e9:ae:a5:8c:3f:7f:80:06:14:74:0d:06:62: 77:ba:8d:4f:93:4f:07:af:72:77:b2:2c:7f:c6:d0: c6:86:f8:3c:43:16:d0:da:9c:2c:89:88:77:e3:3d: 7d:48:c4:d5:47:c6:26:22:b4:7d:91:5a:17:c8:2d: e9:3e:98:e7:b0:4b:e5:08:bc:7c:b4:3c:17:ac:da: 94:f9:d3:d1:f6:11:28:c6:85:05:ed:a9:bc:0e:2a: 42:3c:f6:9e:ee:36:1d:10:6b:a8:4f:d0:55:6d:3d: 59:0a:2d:94:13:fe:d3:b9:db:38:54:7b:ca:4c:d7: a1:f5:4f:3d:1c:cc:bc:35:12:53:77:d8:66:43:5d: 8c:8e:d9:aa:b3:53:00:e7:c1:fa:43:b0:22:dc:8d: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:52:D0:25:8E:F4:C2:9B:B1:5C:B4:D3:FC:DE:C1:23:1B:1A:12:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95723d87-e403-4a3f-8c2d-be6b316ed860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:8800::/40 Signature Algorithm: sha256WithRSAEncryption 07:5f:8d:f6:e2:a4:44:b8:47:58:33:69:dc:23:78:2a:7b:96: b1:70:1e:d9:a4:01:ca:05:d9:2a:47:7e:61:6b:11:ee:de:83: 50:97:d4:41:5b:5f:a2:7a:17:95:46:e1:85:27:3a:a5:bc:57: 95:f1:e0:40:a1:a9:7e:48:72:c2:3f:c8:ff:d7:a8:e2:97:e7: ac:94:63:f4:80:64:31:b7:7a:8b:a1:d4:a3:dd:43:e6:20:ae: 93:b4:9c:8f:bc:e2:55:1f:7d:d8:9d:ad:a2:a3:07:e7:84:48: d1:f7:69:43:c0:df:c8:3b:70:b1:b0:c4:1f:ed:d7:5f:d2:a5: 75:fc:09:1d:3e:67:26:4d:14:f2:8a:83:1a:f0:56:2c:8b:55: 36:8f:9f:7b:70:78:2c:ad:ce:fa:1b:a3:8f:e5:5a:b7:3c:76: ea:a5:05:c2:7b:34:99:a3:05:11:9a:f5:92:fe:f9:dc:27:b3: e2:2b:7a:9a:3e:d4:37:08:a1:df:79:db:58:f9:4c:4b:c3:11: 4f:d5:37:4f:c4:d2:db:09:86:e9:d5:2f:b6:39:75:0c:24:b6: ad:c8:83:3e:6b:fe:5e:3a:0e:65:c0:79:97:9c:4d:6e:bc:70: ae:64:9c:7f:e6:ce:6e:c4:c7:a0:ab:c2:3e:6a:92:a7:1c:6e: 40:bf:ed:d5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURg3QNj8hupNDpjwZ8CQQFEOs4gwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDExNVoX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAMjJhNjJmMzk2ZTIwYmE0MzRkOWEx ZTUwZGUzNTYzYTY0ZDA3OTc1YTU4MGY3NTNjOGU2Njc1MDE4ODc5MGMzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5xrNfLhNHtPZ/Ta1LvUrp9+QImv Vt4fzSiUPq9gzvNAGXRVUOXiB0b3VJGMeBXs21aHj6x4i1seWyutReXAtUXM8QRO OMkNXtzLZ7B59fqYhNGMBlq2BLFd/S+NL1ihZCaJ8N3x8QcxN+mupYw/f4AGFHQN BmJ3uo1Pk08Hr3J3six/xtDGhvg8QxbQ2pwsiYh34z19SMTVR8YmIrR9kVoXyC3p PpjnsEvlCLx8tDwXrNqU+dPR9hEoxoUF7am8DipCPPae7jYdEGuoT9BVbT1ZCi2U E/7Tuds4VHvKTNeh9U89HMy8NRJTd9hmQ12Mjtmqs1MA58H6Q7Ai3I35xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCVS0CWO9MKbsVy00/zewSMbGhJ7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1NzIzZDg3LWU0MDMtNGEzZi04YzJkLWJlNmIzMTZlZDg2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9IgwDQYJKoZIhvcNAQELBQADggEBAAdfjfbipES4R1gzadwj eCp7lrFwHtmkAcoF2SpHfmFrEe7eg1CX1EFbX6J6F5VG4YUnOqW8V5Xx4EChqX5I csI/yP/XqOKX56yUY/SAZDG3eouh1KPdQ+YgrpO0nI+84lUffdidraKjB+eESNH3 aUPA38g7cLGwxB/t11/SpXX8CR0+ZyZNFPKKgxrwViyLVTaPn3tweCytzvobo4/l Wrc8duqlBcJ7NJmjBRGa9ZL++dwns+Irepo+1DcIod9521j5TEvDEU/VN0/E0tsJ hunVL7Y5dQwktq3Igz5r/l46DmXAeZecTW68cK5knH/mzm7Ex6Crwj5qkqccbkC/ 7dU= -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:21 2025 by rpki-client