$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa File: 2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa (raw, json) Hash identifier: HDGe6tTDazRTEgf9Oc4DyAMhVAnsdQYVHX5ygHkNfgs= Subject key identifier: 1C:03:61:0B:59:5A:68:D5:6A:9A:FD:DE:C8:24:8F:19:97:96:8B:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E2F6B086D9AA1C36AB5CE8F578EAAD6A5FA9AD9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa Signing time: Sun 09 Nov 2025 01:00:10 +0000 ROA not before: Sun 09 Nov 2025 01:00:10 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2f:6b:08:6d:9a:a1:c3:6a:b5:ce:8f:57:8e:aa:d6:a5:fa:9a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 01:00:10 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=f21eaf8a9491dd798f248da93cb506cc30f6b22aaddd41b0ba766677cea0607b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:7b:1a:b0:35:3d:94:d5:3b:df:14:97:f5: 2d:a1:73:a2:b7:a2:7f:88:26:64:c7:43:54:8d:d4: e9:30:93:61:ba:85:2a:9e:ce:8c:86:69:39:1c:12: 23:dd:56:34:d8:e4:c3:d6:2d:91:ce:01:57:c0:64: 5c:29:aa:cc:c5:b9:b9:bd:6f:e1:d1:14:df:bb:d2: 1d:28:62:6e:f2:30:52:d5:5d:d0:32:71:81:e6:b4: 96:35:cc:2a:8d:91:82:a7:72:4e:2a:e9:bf:33:55: dd:cb:fa:61:d5:aa:ad:b1:c2:44:15:d1:63:13:dc: f6:4d:1b:aa:e3:37:1e:8d:82:ed:ee:b5:69:32:fd: 86:d7:71:f6:b4:4d:21:6f:0a:c9:3b:5d:e6:a7:54: 3b:ba:57:f4:d5:95:b2:a2:17:43:be:3e:ac:b7:6e: a1:0e:56:8f:18:b9:b7:c6:14:49:52:e6:5d:65:ff: df:7c:27:84:84:27:0a:76:34:12:30:37:71:8b:a1: 12:80:6a:3a:48:62:8d:af:33:bb:9a:32:33:29:4c: 6f:ec:f2:98:d8:ce:a4:30:a9:8c:cb:42:d5:5d:a4: 04:a0:13:72:5e:33:05:54:a1:08:71:27:51:42:fb: 76:03:4d:78:b7:b1:b1:e4:f5:41:46:32:d2:93:15: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:03:61:0B:59:5A:68:D5:6A:9A:FD:DE:C8:24:8F:19:97:96:8B:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:800::/38 Signature Algorithm: sha256WithRSAEncryption 17:3b:43:f4:ad:70:cb:77:7e:2a:fb:af:16:cf:d9:a7:a6:eb: c4:6e:30:a6:7a:08:49:0d:c8:04:cd:c7:d8:3c:dc:43:af:60: 30:e2:a5:f3:75:ba:e8:a6:78:2b:2b:d8:0d:28:42:3a:9e:e1: 95:c8:96:34:a3:84:50:94:7f:63:34:ae:bd:92:36:4b:0b:7d: 7f:f3:41:e5:33:fe:1d:7b:eb:ef:60:4e:94:0c:be:90:79:e2: ce:54:31:3e:fb:21:64:b1:5b:19:5f:4b:31:55:78:c7:eb:3f: fc:7f:91:7d:86:75:c0:3f:ea:e5:5c:f1:6a:1f:7d:e1:b6:4b: 76:c4:6d:30:1c:c7:1c:3e:30:52:cb:5a:72:a1:5a:18:5f:bd: b5:4b:89:3a:95:2b:13:ce:be:4e:9a:25:df:74:8c:2e:76:68: 51:00:67:b9:4b:3b:3d:b2:90:96:3e:f0:cb:e1:47:b9:c6:90: 52:95:57:4c:eb:2b:40:87:e2:04:2a:c5:a3:95:43:43:d8:3a: a0:44:65:9f:ab:3c:8a:a1:38:70:94:64:51:e4:33:dc:88:2f: bf:0e:6a:16:7b:95:75:a5:83:4d:2f:33:03:9a:61:0a:a6:6e: 18:66:e2:9c:a3:f8:b4:75:20:65:a4:e6:2a:a0:ed:42:44:f1: b1:8c:99:ec -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHi9rCG2aocNqtc6PV46q1qX6mtkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAxMDAxMFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAZjIxZWFmOGE5NDkxZGQ3OThmMjQ4 ZGE5M2NiNTA2Y2MzMGY2YjIyYWFkZGQ0MWIwYmE3NjY2NzdjZWEwNjA3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY97GrA1PZTVO98Ul/UtoXOit6J/ iCZkx0NUjdTpMJNhuoUqns6Mhmk5HBIj3VY02OTD1i2RzgFXwGRcKarMxbm5vW/h 0RTfu9IdKGJu8jBS1V3QMnGB5rSWNcwqjZGCp3JOKum/M1Xdy/ph1aqtscJEFdFj E9z2TRuq4zcejYLt7rVpMv2G13H2tE0hbwrJO13mp1Q7ulf01ZWyohdDvj6st26h DlaPGLm3xhRJUuZdZf/ffCeEhCcKdjQSMDdxi6ESgGo6SGKNrzO7mjIzKUxv7PKY 2M6kMKmMy0LVXaQEoBNyXjMFVKEIcSdRQvt2A014t7Gx5PVBRjLSkxWwWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBwDYQtZWmjVapr93sgkjxmXlovMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyMTg2NDRmLWJjMTEtNDkyZC1iOWE5LThkMThkNWJlYmQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQgwDQYJKoZIhvcNAQELBQADggEBABc7Q/StcMt3fir7rxbP 2aem68RuMKZ6CEkNyATNx9g83EOvYDDipfN1uuimeCsr2A0oQjqe4ZXIljSjhFCU f2M0rr2SNksLfX/zQeUz/h176+9gTpQMvpB54s5UMT77IWSxWxlfSzFVeMfrP/x/ kX2GdcA/6uVc8WoffeG2S3bEbTAcxxw+MFLLWnKhWhhfvbVLiTqVKxPOvk6aJd90 jC52aFEAZ7lLOz2ykJY+8MvhR7nGkFKVV0zrK0CH4gQqxaOVQ0PYOqBEZZ+rPIqh OHCUZFHkM9yIL78OahZ7lXWlg00vMwOaYQqmbhhm4pyj+LR1IGWk5iqg7UJE8bGM mew= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:08 2025 by rpki-client