$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7e1628-c7f2-442f-84e3-ed0ed8d86421.roa File: 5a7e1628-c7f2-442f-84e3-ed0ed8d86421.roa (raw, json) Hash identifier: FOZ3FuUDrEMPtzivIOqUHSNwTTq4A1dr1IAggvPh6HA= Subject key identifier: 43:F0:10:6B:47:45:E2:A6:6B:A1:A9:CC:AB:9D:F3:3D:EE:E7:00:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F9AF58AE1577026C6B4FE950FE815EC0DBC03BF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7e1628-c7f2-442f-84e3-ed0ed8d86421.roa Signing time: Tue 07 Oct 2025 00:00:51 +0000 ROA not before: Tue 07 Oct 2025 00:00:51 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9a:f5:8a:e1:57:70:26:c6:b4:fe:95:0f:e8:15:ec:0d:bc:03:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:51 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=b1f55151fa719c9459d23aa7dee7789742067fb5061068e7380c310350cc313e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:98:6f:dc:2a:80:56:0b:5e:09:5c:f2:52: 3c:c0:8c:ea:4a:7e:a4:25:b0:f7:d9:79:89:5d:e8: 2c:1f:51:54:36:ed:40:fe:a7:66:6d:e8:f4:fc:b4: e1:09:f4:2a:21:81:7a:9c:84:29:ec:16:63:be:2a: 75:87:ba:2d:13:2e:f0:fd:a5:b7:fd:16:0c:7d:7f: e2:ae:1f:e3:05:7d:01:7c:36:a3:89:9c:9a:e1:56: ae:3f:42:13:b4:cd:fb:bb:3b:b5:b3:ca:8b:be:d1: c7:53:c9:78:7f:a7:a6:5b:a3:ed:21:b1:f6:e0:82: 89:ae:55:3c:0f:ca:6f:c7:5b:eb:95:a2:c6:68:16: 1d:d9:a9:a5:71:4d:e0:f0:f4:8b:d8:be:a1:aa:94: 3d:fb:fc:69:d8:4a:a2:e4:ef:f7:56:52:7f:f5:b9: 56:4a:3e:4b:cf:6a:3d:aa:6d:67:68:d1:4a:75:26: 3c:94:90:f8:4c:ee:32:db:e2:a2:b0:20:cd:c8:d8: 4f:ba:63:32:f0:02:9b:34:62:f3:03:12:91:7d:a3: 75:74:ec:9e:78:d8:bb:fc:52:13:66:a7:fc:76:5e: 1e:bd:92:76:a6:87:e3:aa:c1:55:da:5e:88:3a:6d: c4:17:f8:03:76:d2:6a:e8:b7:5b:64:4d:97:cf:9f: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F0:10:6B:47:45:E2:A6:6B:A1:A9:CC:AB:9D:F3:3D:EE:E7:00:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7e1628-c7f2-442f-84e3-ed0ed8d86421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:c800::/40 Signature Algorithm: sha256WithRSAEncryption 6b:47:8d:70:ea:f0:1c:20:94:e2:d2:03:21:ed:93:1a:7a:f9: 17:b9:57:47:ef:b0:2e:64:31:8a:22:0b:de:0b:51:6b:a6:a8: 09:24:40:b9:0a:6a:4e:84:91:e4:a7:9e:37:2e:a6:cc:b6:d5: 5e:ba:10:c4:64:cf:12:34:fa:b5:09:cd:02:0c:4e:e9:51:c6: 4e:4d:76:4e:dd:bb:b9:1d:e4:46:86:af:19:5e:08:fb:15:b0: 21:eb:f7:67:4f:b2:6d:1d:8f:b6:d4:53:93:9b:21:58:6e:c0: 0d:6e:27:ba:07:4d:7b:46:95:dc:38:77:12:9f:36:3c:f9:64: 3f:77:8b:65:e6:1e:e9:e6:5e:cb:61:a0:4e:8b:7d:65:f3:8f: 23:54:df:bf:fc:a4:66:35:9e:ab:bf:5c:26:40:a7:08:9e:e6: 42:6a:cf:77:a9:78:27:91:df:56:3f:00:0a:ef:ae:b6:36:a5: 07:e9:d7:57:08:8e:60:f5:e6:e6:df:b9:8c:4a:cd:9e:9d:cd: c6:94:89:73:1d:e4:44:9d:43:6f:3e:a2:81:78:93:f9:dc:21: c6:7b:f0:fb:6e:db:a2:8a:e8:13:f6:2d:09:84:f2:2d:d6:e9: 59:e2:92:0e:89:e1:f3:35:5c:a4:8d:98:9c:76:52:28:a2:f3: bb:71:92:19 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf5r1iuFXcCbGtP6VD+gV7A28A78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDA1MVoX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNAYjFmNTUxNTFmYTcxOWM5NDU5ZDIz YWE3ZGVlNzc4OTc0MjA2N2ZiNTA2MTA2OGU3MzgwYzMxMDM1MGNjMzEzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcGYb9wqgFYLXglc8lI8wIzqSn6k JbD32XmJXegsH1FUNu1A/qdmbej0/LThCfQqIYF6nIQp7BZjvip1h7otEy7w/aW3 /RYMfX/irh/jBX0BfDajiZya4VauP0ITtM37uzu1s8qLvtHHU8l4f6emW6PtIbH2 4IKJrlU8D8pvx1vrlaLGaBYd2amlcU3g8PSL2L6hqpQ9+/xp2Eqi5O/3VlJ/9blW Sj5Lz2o9qm1naNFKdSY8lJD4TO4y2+KisCDNyNhPumMy8AKbNGLzAxKRfaN1dOye eNi7/FITZqf8dl4evZJ2pofjqsFV2l6IOm3EF/gDdtJq6LdbZE2Xz59IjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEPwEGtHReKma6GpzKud8z3u5wB0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhN2UxNjI4LWM3ZjItNDQyZi04NGUzLWVkMGVkOGQ4NjQyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9MgwDQYJKoZIhvcNAQELBQADggEBAGtHjXDq8BwglOLSAyHt kxp6+Re5V0fvsC5kMYoiC94LUWumqAkkQLkKak6EkeSnnjcupsy21V66EMRkzxI0 +rUJzQIMTulRxk5Ndk7du7kd5EaGrxleCPsVsCHr92dPsm0dj7bUU5ObIVhuwA1u J7oHTXtGldw4dxKfNjz5ZD93i2XmHunmXsthoE6LfWXzjyNU37/8pGY1nqu/XCZA pwie5kJqz3epeCeR31Y/AArvrrY2pQfp11cIjmD15ubfuYxKzZ6dzcaUiXMd5ESd Q28+ooF4k/ncIcZ78Ptu26KK6BP2LQmE8i3W6Vnikg6J4fM1XKSNmJx2Uiii87tx khk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:33 2025 by rpki-client