$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa File: a018f2e9-f03d-4656-89f3-616151515896.roa (raw, json) Hash identifier: s7PN+XbQnBnYcApu03SLNpB//NMPGunCpaAmDxw9vyc= Subject key identifier: B7:D8:49:D1:DD:26:60:3E:2A:B9:5B:A0:DD:65:25:29:19:0D:83:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48FBE28D550799A558749736849402CA32E1EA01 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa Signing time: Thu 31 Jul 2025 16:37:50 +0000 ROA not before: Thu 31 Jul 2025 16:37:50 +0000 ROA not after: Thu 04 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 126.191.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fb:e2:8d:55:07:99:a5:58:74:97:36:84:94:02:ca:32:e1:ea:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 16:37:50 2025 GMT Not After : Sep 4 23:59:59 2025 GMT Subject: serialNumber=ebc00757541651375b50c9d31ba2f450ceff4f898d9bab043601260d59ffb7c6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:de:d0:98:a5:e5:47:57:7b:ca:a9:d8:dd:15: 95:63:ce:73:8d:19:3e:8e:5f:0a:5c:d6:42:75:b9: 5d:e2:7e:bf:20:d5:6c:48:0d:81:e7:c9:52:62:18: 74:3f:0b:10:d3:64:04:dd:de:09:c1:c7:a1:1f:02: 48:66:53:d7:86:1f:d5:26:90:18:f0:1b:b9:e2:93: 26:09:7f:99:3e:c3:47:35:4b:84:ac:39:6b:fd:83: a1:f4:68:a3:72:a3:ec:b1:a7:71:0f:f1:0c:5e:08: 81:06:53:e7:be:f3:f2:8b:53:4e:d1:73:0d:98:88: 57:e2:42:cb:1c:f0:c0:67:83:c6:be:17:b6:0b:5f: 0c:1c:e3:bd:39:6c:20:31:fb:83:fa:0d:ad:8b:fd: d9:d6:74:9d:c4:d3:78:49:a2:97:cf:fd:4f:8e:38: 7a:69:ed:fe:6e:99:c0:cd:03:fa:97:3f:c9:78:cb: 16:ec:49:b9:e4:76:32:15:e0:50:7c:ce:d0:45:09: 35:57:76:11:41:ae:8e:ab:80:90:4b:1e:84:77:c1: cc:91:4e:59:c3:32:23:be:34:e2:5b:78:6b:aa:e9: 5a:e4:0d:97:77:53:6b:cd:c0:8f:29:18:4c:f8:45: 0d:1d:d0:58:1f:42:f0:97:c9:1d:75:5f:fe:dd:0e: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:49:D1:DD:26:60:3E:2A:B9:5B:A0:DD:65:25:29:19:0D:83:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.191.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:60:1b:3e:f8:33:96:dc:a6:ca:2b:cc:f6:3d:74:b8:22:e6: 9f:25:d3:ad:fd:bb:77:d4:8b:75:4d:76:4b:c4:89:d4:d9:42: 7a:41:bc:49:8c:a7:eb:48:a7:b3:7a:08:54:9c:5e:5b:a9:d1: 0c:74:41:70:89:19:d9:23:42:b2:68:2b:4b:5f:49:2b:b3:c6: a3:e4:59:1c:44:58:c2:b7:3c:cf:b2:d1:31:f8:f0:b9:73:da: 16:6c:83:70:b9:ee:60:61:48:57:c5:24:e7:a0:f9:ec:8d:17: cc:4f:c0:f5:f0:6d:3f:14:1d:8a:7b:42:dd:ee:24:25:07:01: 5e:ae:fd:28:5b:1a:33:52:e1:8e:0f:5e:76:d8:2d:1d:22:3b: 63:9a:e8:32:f5:c5:b8:75:d4:e5:c9:ec:22:e2:92:e4:ae:5f: 6b:9f:c1:d4:c3:3a:d5:97:0d:a6:dd:c3:ff:ad:d6:9a:92:5e: 11:e7:d6:10:b9:98:ac:4d:5e:eb:81:27:65:6a:64:ce:cc:ce: 0b:34:3c:60:66:41:3f:6e:4b:1c:62:2a:ad:d3:15:60:b5:09: ac:ea:b8:45:c2:4a:e7:9c:a9:f4:34:6a:42:a0:2a:8b:84:03: 0d:54:15:4c:02:24:81:70:a5:3c:07:ec:e8:e8:e7:76:b0:b2: 40:b4:16:02 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUSPvijVUHmaVYdJc2hJQCyjLh6gEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMTE2Mzc1MFoX DTI1MDkwNDIzNTk1OVowejFJMEcGA1UEBRNAZWJjMDA3NTc1NDE2NTEzNzViNTBj OWQzMWJhMmY0NTBjZWZmNGY4OThkOWJhYjA0MzYwMTI2MGQ1OWZmYjdjNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t7QmKXlR1d7yqnY3RWVY85zjRk+ jl8KXNZCdbld4n6/INVsSA2B58lSYhh0PwsQ02QE3d4JwcehHwJIZlPXhh/VJpAY 8Bu54pMmCX+ZPsNHNUuErDlr/YOh9GijcqPssadxD/EMXgiBBlPnvvPyi1NO0XMN mIhX4kLLHPDAZ4PGvhe2C18MHOO9OWwgMfuD+g2ti/3Z1nSdxNN4SaKXz/1Pjjh6 ae3+bpnAzQP6lz/JeMsW7Em55HYyFeBQfM7QRQk1V3YRQa6Oq4CQSx6Ed8HMkU5Z wzIjvjTiW3hrqula5A2Xd1NrzcCPKRhM+EUNHdBYH0Lwl8kddV/+3Q5GgwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLfYSdHdJmA+KrlboN1lJSkZDYPbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EwMThmMmU5LWYwM2QtNDY1Ni04OWYzLTYxNjE1MTUxNTg5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfr8wDQYJKoZIhvcNAQELBQADggEBAHlgGz74M5bcpsorzPY9dLgi 5p8l0639u3fUi3VNdkvEidTZQnpBvEmMp+tIp7N6CFScXlup0Qx0QXCJGdkjQrJo K0tfSSuzxqPkWRxEWMK3PM+y0TH48Llz2hZsg3C57mBhSFfFJOeg+eyNF8xPwPXw bT8UHYp7Qt3uJCUHAV6u/ShbGjNS4Y4PXnbYLR0iO2Oa6DL1xbh11OXJ7CLikuSu X2ufwdTDOtWXDabdw/+t1pqSXhHn1hC5mKxNXuuBJ2VqZM7Mzgs0PGBmQT9uSxxi Kq3TFWC1CazquEXCSuecqfQ0akKgKouEAw1UFUwCJIFwpTwH7Ojo53awskC0FgI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:13 2025 by rpki-client