$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa File: 204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa (raw, json) Hash identifier: YODkjKJzec9qNLw7Bpln4PUmqM2RFDY7n9A0qiVsWqY= Subject key identifier: 6A:BB:1C:EB:6D:2C:28:30:CC:82:76:7D:32:60:86:DD:69:63:8E:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 09E59A5448CEC84434672C4AAEB54D84762AC8E3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa Signing time: Sat 04 Oct 2025 00:10:27 +0000 ROA not before: Sat 04 Oct 2025 00:10:27 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e5:9a:54:48:ce:c8:44:34:67:2c:4a:ae:b5:4d:84:76:2a:c8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:10:27 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=ca6cae30af58c90fc35e251e7ab33f32aea250fab54a631acf87c24b843443b3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:0e:72:6b:0f:a6:4f:05:ba:7b:6a:56:46: 9d:f2:07:c7:2c:0d:c7:27:b1:ed:9c:2b:15:c2:4c: 4f:de:77:67:7f:ab:19:22:b3:18:e8:95:c7:2f:ac: dc:43:11:85:75:39:e2:8a:79:04:da:3d:90:1a:98: f9:e2:7a:40:93:97:75:48:56:f9:23:46:98:ed:de: ea:d1:3a:6b:8e:50:7a:f0:46:d7:ed:c9:e5:d8:81: cf:1f:ff:38:19:91:1f:06:32:c4:7e:87:1d:26:70: 13:0e:f6:b7:10:59:36:29:f4:e2:99:3a:8a:b0:48: d2:d1:ff:3d:3e:d0:79:fc:d4:02:d3:11:4c:ba:ca: 92:98:d6:ff:01:70:10:4a:97:92:37:f6:6e:2f:9a: 02:48:f2:e2:46:99:0c:b4:e6:ea:c2:3a:45:e4:cf: 90:60:3f:75:99:dd:c5:92:d7:b6:7f:c2:fa:8c:81: 4a:59:23:df:8c:a1:68:56:96:e5:81:d9:d6:05:b6: 5a:06:36:8d:81:2e:d7:da:c2:84:70:f8:95:e0:ab: 33:f2:87:c1:2f:7f:dd:eb:48:c1:ab:ef:3d:85:9f: 7f:0a:ab:fb:41:25:61:37:83:f3:d6:c7:30:6f:be: eb:e6:6f:07:be:0d:dd:e0:66:5f:a8:68:c9:f6:c7: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BB:1C:EB:6D:2C:28:30:CC:82:76:7D:32:60:86:DD:69:63:8E:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/204d83c0-3f94-4ca8-b36c-2cd3ca927cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c840::/46 Signature Algorithm: sha256WithRSAEncryption 13:84:e1:6a:84:20:e3:84:54:74:b1:84:8d:c3:c1:87:ae:4c: a6:38:64:6e:32:80:39:7c:0a:3c:e6:88:87:92:c7:8c:1c:00: fd:da:dc:4e:44:28:32:62:73:53:71:c9:b9:78:17:e1:2d:03: ff:c1:66:3b:7a:42:6f:c0:70:15:aa:a9:5a:e1:0c:4e:8f:7d: 11:5a:40:d5:78:24:9f:b3:09:97:e4:e7:e8:69:74:4a:d8:94: eb:63:ab:54:4c:2b:2f:c3:1c:a5:62:68:d5:da:2c:55:a2:bc: 81:c4:a9:88:cb:85:48:c2:f5:ec:9f:be:12:5e:fe:1a:53:a5: a4:ab:33:fe:ad:b5:cf:cb:05:86:46:b1:62:f2:9a:9e:e2:d6: c4:6a:e9:3d:09:20:bb:8b:62:e9:61:ad:d5:39:69:b7:64:1b: 70:5d:f8:77:a8:87:78:14:79:3e:e6:12:5c:49:ab:d7:b8:b4: 74:e8:97:a7:95:40:ee:82:d5:b1:0d:02:41:d5:c7:a9:13:29: bc:70:99:5a:a7:d1:85:e7:47:54:8d:0e:f7:31:30:59:59:ad: a5:a5:6f:a6:3b:b9:f1:24:17:dd:49:85:86:3c:43:69:f6:d3: 3a:39:ab:ee:4f:f7:d6:03:60:1d:d5:34:85:e5:64:69:91:49: 34:ad:8d:c3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCeWaVEjOyEQ0ZyxKrrVNhHYqyOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMTAyN1oX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAY2E2Y2FlMzBhZjU4YzkwZmMzNWUy NTFlN2FiMzNmMzJhZWEyNTBmYWI1NGE2MzFhY2Y4N2MyNGI4NDM0NDNiMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo8OcmsPpk8FuntqVkad8gfHLA3H J7HtnCsVwkxP3ndnf6sZIrMY6JXHL6zcQxGFdTniinkE2j2QGpj54npAk5d1SFb5 I0aY7d7q0TprjlB68EbX7cnl2IHPH/84GZEfBjLEfocdJnATDva3EFk2KfTimTqK sEjS0f89PtB5/NQC0xFMusqSmNb/AXAQSpeSN/ZuL5oCSPLiRpkMtObqwjpF5M+Q YD91md3Fkte2f8L6jIFKWSPfjKFoVpblgdnWBbZaBjaNgS7X2sKEcPiV4Ksz8ofB L3/d60jBq+89hZ9/Cqv7QSVhN4Pz1scwb77r5m8Hvg3d4GZfqGjJ9scUmwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGq7HOttLCgwzIJ2fTJght1pY45RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNGQ4M2MwLTNmOTQtNGNhOC1iMzZjLTJjZDNjYTkyN2NmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88hAMA0GCSqGSIb3DQEBCwUAA4IBAQAThOFqhCDjhFR0sYSN w8GHrkymOGRuMoA5fAo85oiHkseMHAD92txORCgyYnNTccm5eBfhLQP/wWY7ekJv wHAVqqla4QxOj30RWkDVeCSfswmX5OfoaXRK2JTrY6tUTCsvwxylYmjV2ixVoryB xKmIy4VIwvXsn74SXv4aU6WkqzP+rbXPywWGRrFi8pqe4tbEauk9CSC7i2LpYa3V OWm3ZBtwXfh3qId4FHk+5hJcSavXuLR06JenlUDugtWxDQJB1cepEym8cJlap9GF 50dUjQ73MTBZWa2lpW+mO7nxJBfdSYWGPENp9tM6OavuT/fWA2Ad1TSF5WRpkUk0 rY3D -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:55 2025 by rpki-client