$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa File: 61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa (raw, json) Hash identifier: e4EsoEF8326z8vtcmzIsd4UKj27c/K/s7RWbZa9TNUE= Subject key identifier: CD:FC:18:DD:D9:E6:29:C5:4C:CB:97:56:F8:16:7F:EA:16:BA:0E:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D46E8914820C25C904068E1EFB6359128658127 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa Signing time: Fri 07 Nov 2025 00:00:11 +0000 ROA not before: Fri 07 Nov 2025 00:00:11 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:46:e8:91:48:20:c2:5c:90:40:68:e1:ef:b6:35:91:28:65:81:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:11 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=471305239667ed4822d9b42795e0624163d8f1d3f9a0ab8c1b90848326751aad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:be:b5:61:b2:56:a1:3c:31:2f:3f:a2:fb: 59:10:78:b6:78:c9:d9:36:04:e6:8c:33:26:3b:71: 1a:3d:fb:fa:28:29:db:1e:86:2d:d1:61:ba:c1:7a: d8:7c:e3:5d:c0:56:f4:85:16:53:58:f4:c7:10:2d: 8a:1c:f8:6d:14:dc:7c:9b:80:9d:67:b4:61:e3:80: 8c:79:2f:fb:ef:53:46:57:97:2a:0b:9e:6a:df:3e: ae:fe:da:c1:8d:a5:d6:c9:8b:31:bb:d1:3a:fa:69: ee:19:6a:77:73:1a:20:d8:b0:ef:c0:a8:ac:45:1c: 86:11:1d:03:6e:8d:c3:58:67:ea:2e:23:40:ed:db: 18:41:24:c5:50:04:27:7f:d6:a0:21:7b:f9:71:55: 7b:13:66:47:9f:13:27:40:9b:28:24:ec:43:84:39: 65:37:9e:ff:e8:0d:17:cc:f3:17:4f:20:d4:b3:96: aa:8f:73:32:71:6a:ba:39:f7:e3:5e:ef:6a:00:c8: fd:92:7a:ad:7f:09:b2:ff:5f:a2:19:40:39:3a:e5: 95:88:6c:e5:3b:58:10:97:98:cc:43:7a:37:ab:21: dc:8d:c2:25:a3:8a:aa:90:1e:c9:28:ce:63:31:25: 41:0b:d8:02:0d:f9:25:ff:d8:93:d5:3e:b7:f0:e5: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FC:18:DD:D9:E6:29:C5:4C:CB:97:56:F8:16:7F:EA:16:BA:0E:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2020::/48 Signature Algorithm: sha256WithRSAEncryption 3f:97:48:a8:66:f0:e2:3b:09:f2:36:c3:21:47:70:05:a9:76: 8f:7b:bf:a9:3b:c6:53:29:e1:b0:6b:c0:a2:a2:a2:20:9d:36: 6f:ee:cd:0a:4d:0c:b4:b5:79:f7:49:ca:2a:4e:23:68:e2:30: 40:73:d6:4d:54:18:d6:90:a0:be:56:b7:c0:79:54:14:b0:d9: a4:c3:6a:35:0d:de:00:94:cb:c1:e4:c5:18:58:61:98:a5:0f: 14:88:92:03:5b:57:2c:cd:af:f9:84:82:71:52:05:49:78:5c: b1:6b:45:4a:27:d1:6d:94:78:26:07:97:63:d1:d1:9f:46:5f: c6:bb:61:36:f8:ee:2e:3e:57:20:0b:04:db:4f:f4:56:f9:d7: 5c:6e:5d:01:fe:11:7c:b0:4c:05:0f:4b:6e:33:57:31:f7:7b: 55:f8:d7:03:79:be:9d:e2:8c:8b:15:80:4e:62:44:2c:59:4d: 6d:56:0f:7c:83:16:94:70:d2:5f:3b:ea:fe:96:59:c5:24:e5: 32:f3:88:aa:a4:26:3b:1b:58:e5:d6:d7:5e:40:7c:e5:80:0d: 51:51:a0:ee:58:39:05:eb:68:a8:aa:89:8f:ed:8a:b8:77:53: e9:c3:bd:7a:6b:4d:1d:8f:a4:46:30:b6:75:f5:a1:47:98:8f: 65:26:f7:4a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULUbokUggwlyQQGjh77Y1kShlgScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDAxMVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANDcxMzA1MjM5NjY3ZWQ0ODIyZDli NDI3OTVlMDYyNDE2M2Q4ZjFkM2Y5YTBhYjhjMWI5MDg0ODMyNjc1MWFhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslS+tWGyVqE8MS8/ovtZEHi2eMnZ NgTmjDMmO3EaPfv6KCnbHoYt0WG6wXrYfONdwFb0hRZTWPTHEC2KHPhtFNx8m4Cd Z7Rh44CMeS/771NGV5cqC55q3z6u/trBjaXWyYsxu9E6+mnuGWp3cxog2LDvwKis RRyGER0Dbo3DWGfqLiNA7dsYQSTFUAQnf9agIXv5cVV7E2ZHnxMnQJsoJOxDhDll N57/6A0XzPMXTyDUs5aqj3MycWq6OffjXu9qAMj9knqtfwmy/1+iGUA5OuWViGzl O1gQl5jMQ3o3qyHcjcIlo4qqkB7JKM5jMSVBC9gCDfkl/9iT1T638OUV2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM38GN3Z5inFTMuXVvgWf+oWug4pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYzJmMWE4LWE5NjQtNDhhYi05ZDY5LTk0MjhjZjk4ZDRmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8iAgMA0GCSqGSIb3DQEBCwUAA4IBAQA/l0ioZvDiOwnyNsMh R3AFqXaPe7+pO8ZTKeGwa8CioqIgnTZv7s0KTQy0tXn3ScoqTiNo4jBAc9ZNVBjW kKC+VrfAeVQUsNmkw2o1Dd4AlMvB5MUYWGGYpQ8UiJIDW1csza/5hIJxUgVJeFyx a0VKJ9FtlHgmB5dj0dGfRl/Gu2E2+O4uPlcgCwTbT/RW+ddcbl0B/hF8sEwFD0tu M1cx93tV+NcDeb6d4oyLFYBOYkQsWU1tVg98gxaUcNJfO+r+llnFJOUy84iqpCY7 G1jl1tdeQHzlgA1RUaDuWDkF62ioqomP7Yq4d1Ppw716a00dj6RGMLZ19aFHmI9l JvdK -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:16 2025 by rpki-client