$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a6b91f2-ca3c-48be-8409-9e275b3c89e5.roa File: 1a6b91f2-ca3c-48be-8409-9e275b3c89e5.roa (raw, json) Hash identifier: pTtaoVXbsYJIZWU+tLtpjt5SXQncbT1Oxav0c7nmSfA= Subject key identifier: 38:8F:56:62:B6:A5:A4:B8:2E:C0:01:DE:36:9B:8D:63:18:EB:2A:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5976DCBE50D94D17F1D0463868EFB6D5550ACD28 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a6b91f2-ca3c-48be-8409-9e275b3c89e5.roa Signing time: Fri 19 Sep 2025 00:20:05 +0000 ROA not before: Fri 19 Sep 2025 00:20:05 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:76:dc:be:50:d9:4d:17:f1:d0:46:38:68:ef:b6:d5:55:0a:cd:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:20:05 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=e0c8473ef50381835917c4456711b13509bd40b1be45dda2b93b57d52e472063, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:86:54:5e:8c:91:ac:84:eb:f6:5d:2d:32: 28:bc:fc:b5:2b:f6:9f:84:fa:9a:46:68:3a:63:2c: 88:a1:ae:7a:89:0e:88:c2:7d:b7:bd:de:f8:e0:99: 69:6f:ea:c2:6d:b2:94:56:c5:e3:f1:00:0e:50:bd: 2a:38:e6:af:3a:b9:3d:57:b2:25:06:34:22:2e:74: c9:ac:21:82:a1:67:93:e7:b2:25:7e:39:22:44:b3: 86:a4:d5:2a:d9:7d:31:00:49:66:5d:66:e5:2e:ae: 12:22:98:36:8d:12:83:94:b9:1c:1d:e5:d9:68:03: 05:63:a9:d5:9f:65:78:a9:72:d2:c4:a8:66:b3:91: 35:89:92:1a:4f:c6:aa:fe:f4:9c:80:ce:0e:1d:21: 02:98:79:d4:02:cc:ed:8e:b9:4a:c1:45:d5:d3:16: 89:fb:11:20:b7:52:70:07:28:62:7c:e3:b4:29:a8: 32:c7:ad:d7:45:51:cf:e9:b6:66:aa:1f:8b:1a:33: 17:47:98:85:5f:73:81:e9:53:d9:d5:33:24:ab:b8: b4:18:d6:21:87:c4:09:65:1c:bb:3c:37:9a:a1:94: cd:7c:70:60:a4:15:d0:ec:1d:3a:01:4c:1a:08:5d: 7f:ff:43:38:82:6b:9b:ce:61:5f:7a:cc:48:d0:05: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8F:56:62:B6:A5:A4:B8:2E:C0:01:DE:36:9B:8D:63:18:EB:2A:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a6b91f2-ca3c-48be-8409-9e275b3c89e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:800::/40 Signature Algorithm: sha256WithRSAEncryption 55:53:1e:49:c9:39:2c:c4:5b:64:16:c6:01:10:a9:13:ea:cb: 9b:61:54:08:ca:f7:7d:2c:33:09:57:b3:6a:8b:ec:ef:04:5d: d0:65:1f:67:21:50:d4:eb:1f:49:3c:01:ba:50:88:26:f6:2a: 0f:55:bc:07:bc:f5:92:a9:9f:ee:bf:8a:1c:a5:24:42:6e:6f: 71:82:61:e0:36:4a:3f:c7:4d:64:99:95:01:7e:cd:58:30:c2: ef:0c:c5:73:a6:7e:f8:66:0e:c1:97:09:eb:93:80:0f:ed:7f: c0:00:5b:59:12:16:75:06:b9:c4:0a:01:d8:bf:63:3d:5f:95: d1:a3:fc:e5:e8:bc:86:d8:5e:6d:45:33:5b:68:27:43:44:72: 47:bc:7e:07:9b:9d:01:5b:9b:69:f0:2e:87:ed:35:b3:08:08: 77:b0:21:d9:d6:07:15:ab:29:9e:83:63:4f:b0:cc:89:24:05: 9b:63:26:b4:31:68:78:9d:15:47:e9:a2:90:21:09:f2:32:9b: 97:b4:ea:70:85:09:97:fd:0f:f4:ec:cb:6e:61:57:b0:80:de: e3:ea:63:80:9f:93:14:61:47:69:67:9b:a4:ee:c6:8e:05:d6: d7:d2:a2:59:7f:b6:13:06:d9:b1:67:0e:43:a7:33:16:11:4b: 17:42:51:e4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWXbcvlDZTRfx0EY4aO+21VUKzSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMjAwNVoX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAZTBjODQ3M2VmNTAzODE4MzU5MTdj NDQ1NjcxMWIxMzUwOWJkNDBiMWJlNDVkZGEyYjkzYjU3ZDUyZTQ3MjA2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqmGVF6MkayE6/ZdLTIovPy1K/af hPqaRmg6YyyIoa56iQ6Iwn23vd744Jlpb+rCbbKUVsXj8QAOUL0qOOavOrk9V7Il BjQiLnTJrCGCoWeT57IlfjkiRLOGpNUq2X0xAElmXWblLq4SIpg2jRKDlLkcHeXZ aAMFY6nVn2V4qXLSxKhms5E1iZIaT8aq/vScgM4OHSECmHnUAsztjrlKwUXV0xaJ +xEgt1JwByhifOO0Kagyx63XRVHP6bZmqh+LGjMXR5iFX3OB6VPZ1TMkq7i0GNYh h8QJZRy7PDeaoZTNfHBgpBXQ7B06AUwaCF1//0M4gmubzmFfesxI0AX7OwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDiPVmK2paS4LsAB3jabjWMY6yqwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFhNmI5MWYyLWNhM2MtNDhiZS04NDA5LTllMjc1YjNjODllNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaQgwDQYJKoZIhvcNAQELBQADggEBAFVTHknJOSzEW2QWxgEQ qRPqy5thVAjK930sMwlXs2qL7O8EXdBlH2chUNTrH0k8AbpQiCb2Kg9VvAe89ZKp n+6/ihylJEJub3GCYeA2Sj/HTWSZlQF+zVgwwu8MxXOmfvhmDsGXCeuTgA/tf8AA W1kSFnUGucQKAdi/Yz1fldGj/OXovIbYXm1FM1toJ0NEcke8fgebnQFbm2nwLoft NbMICHewIdnWBxWrKZ6DY0+wzIkkBZtjJrQxaHidFUfpopAhCfIym5e06nCFCZf9 D/Tsy25hV7CA3uPqY4CfkxRhR2lnm6Tuxo4F1tfSoll/thMG2bFnDkOnMxYRSxdC UeQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:43 2025 by rpki-client