$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9725a002-ebcc-4b84-98d3-40c085343993.roa File: 9725a002-ebcc-4b84-98d3-40c085343993.roa (raw, json) Hash identifier: ogVKVKGmiLn445I5BxuvH/AwDlbfSg76BObhK7M3+hU= Subject key identifier: 17:30:AE:19:22:6B:A4:81:B5:82:49:21:80:8D:8B:F2:38:8E:F4:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 378E9227EA8BE586CE682F7D3ED3B9FE4151CCB0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9725a002-ebcc-4b84-98d3-40c085343993.roa Signing time: Fri 01 Aug 2025 00:11:42 +0000 ROA not before: Fri 01 Aug 2025 00:11:42 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8e:92:27:ea:8b:e5:86:ce:68:2f:7d:3e:d3:b9:fe:41:51:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:11:42 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=12ef00b0a8bc6713fadf324c527c408f1f0e2bcc0da60c6b663f96824908e432, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:9d:96:f0:0e:bc:47:75:21:ca:f2:67:ee: 94:13:27:7d:e0:f4:dd:5e:14:0b:d0:3d:04:f1:b8: 23:2c:bd:d6:f4:56:f1:40:c8:21:ed:57:62:80:f5: 39:b0:b4:db:b3:95:c8:20:80:a2:4c:0a:08:21:4f: 1a:8f:ab:b8:3c:66:ca:a5:6d:82:02:40:3c:64:01: 0c:73:35:53:0e:78:21:19:7d:99:9c:07:23:cf:86: 9b:13:6b:21:ff:1e:45:ed:43:f8:39:0d:7d:1c:a6: 7a:41:f3:b5:f8:79:d3:bc:0c:54:41:11:78:70:b6: 0d:22:eb:be:23:80:33:c3:f6:cc:0d:7e:99:36:cc: 24:46:eb:5d:b5:c5:a5:04:1d:c0:ad:b3:2e:30:27: 74:d5:9a:a7:b3:52:65:7c:96:58:3f:be:7f:ee:ef: ec:5d:52:7e:de:69:79:17:05:e0:7d:0e:42:f2:fe: 13:7b:c5:81:1a:64:6e:b6:84:cb:f9:8c:77:bc:d8: 1c:d9:35:9b:7b:67:41:2c:c8:e3:08:e4:ad:27:bb: 45:87:17:6b:72:35:80:2d:fa:25:1d:d7:85:a6:30: e5:ce:a4:5e:24:e4:29:f1:db:71:6b:f0:4d:49:8a: 0b:93:1f:2c:fd:85:f8:84:28:a5:34:5a:9a:21:1b: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:30:AE:19:22:6B:A4:81:B5:82:49:21:80:8D:8B:F2:38:8E:F4:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9725a002-ebcc-4b84-98d3-40c085343993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:f000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:32:d2:e8:89:12:2c:1e:95:d3:33:05:c8:e7:d5:1e:1a:b9: fc:bf:24:b7:f2:a4:c3:e4:2b:a6:84:f4:9b:9b:0e:c3:89:51: f4:60:91:7e:da:78:73:9a:b3:22:6a:c2:df:d2:b0:28:eb:c6: f6:ee:6c:b8:86:6b:74:22:6a:62:19:5a:f3:fd:02:79:e9:bc: 89:2e:28:82:5c:e2:4a:b9:dd:6a:35:6d:73:36:4a:37:ca:fc: b6:9b:0c:89:2c:1c:70:45:68:17:e2:17:2b:03:55:88:66:a0: 38:df:c0:4f:16:da:f3:c1:cd:d7:37:30:86:57:51:d3:48:4c: a6:28:c6:59:9e:96:0a:0f:ee:13:f9:60:5d:70:2d:07:5b:c7: c1:69:f2:2c:8a:7b:f0:9a:f3:55:38:5e:0e:8c:dd:dc:f7:2d: b2:ee:0f:5f:c5:50:3f:0b:11:74:e2:f7:de:d8:a4:5f:0a:e2: 6d:71:a0:95:0d:11:02:55:b9:77:bb:d6:21:c1:c0:ac:d4:38: 66:75:60:e8:57:bd:0b:63:1a:9c:73:10:ae:fc:e8:d3:79:da: 34:9e:dc:50:44:fd:56:bc:6b:45:2f:3c:13:2c:2e:7b:0e:7e: ac:1a:b2:d8:2e:c6:6b:bf:44:a4:1f:54:9e:16:f0:78:4a:ab: 2c:b0:c9:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN46SJ+qL5YbOaC99PtO5/kFRzLAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMTE0MloX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAMTJlZjAwYjBhOGJjNjcxM2ZhZGYz MjRjNTI3YzQwOGYxZjBlMmJjYzBkYTYwYzZiNjYzZjk2ODI0OTA4ZTQzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiedlvAOvEd1IcryZ+6UEyd94PTd XhQL0D0E8bgjLL3W9FbxQMgh7VdigPU5sLTbs5XIIICiTAoIIU8aj6u4PGbKpW2C AkA8ZAEMczVTDnghGX2ZnAcjz4abE2sh/x5F7UP4OQ19HKZ6QfO1+HnTvAxUQRF4 cLYNIuu+I4Azw/bMDX6ZNswkRutdtcWlBB3ArbMuMCd01Zqns1JlfJZYP75/7u/s XVJ+3ml5FwXgfQ5C8v4Te8WBGmRutoTL+Yx3vNgc2TWbe2dBLMjjCOStJ7tFhxdr cjWALfolHdeFpjDlzqReJOQp8dtxa/BNSYoLkx8s/YX4hCilNFqaIRuuPQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBcwrhkia6SBtYJJIYCNi/I4jvR7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3MjVhMDAyLWViY2MtNGI4NC05OGQzLTQwYzA4NTM0Mzk5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMvAwDQYJKoZIhvcNAQELBQADggEBAHsy0uiJEiweldMzBcjn 1R4aufy/JLfypMPkK6aE9JubDsOJUfRgkX7aeHOasyJqwt/SsCjrxvbubLiGa3Qi amIZWvP9AnnpvIkuKIJc4kq53Wo1bXM2SjfK/LabDIksHHBFaBfiFysDVYhmoDjf wE8W2vPBzdc3MIZXUdNITKYoxlmelgoP7hP5YF1wLQdbx8Fp8iyKe/Ca81U4Xg6M 3dz3LbLuD1/FUD8LEXTi997YpF8K4m1xoJUNEQJVuXe71iHBwKzUOGZ1YOhXvQtj GpxzEK786NN52jSe3FBE/Va8a0UvPBMsLnsOfqwastguxmu/RKQfVJ4W8HhKqyyw yTg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:29:17 2025 by rpki-client