$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63bd71f1-ad22-4426-9f28-aaa82ba31578.roa File: 63bd71f1-ad22-4426-9f28-aaa82ba31578.roa (raw, json) Hash identifier: 4tYH9KfW7sEhqnZEi5Vyo3eA2NE1Ie82WWJDT92GWX0= Subject key identifier: CE:7A:FC:34:A3:FF:2C:AE:88:8E:BD:6A:9F:B8:60:EA:85:7B:B3:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6514F626E36E04564A0003DB8F745BDB2F0F64A0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63bd71f1-ad22-4426-9f28-aaa82ba31578.roa Signing time: Fri 07 Nov 2025 00:20:07 +0000 ROA not before: Fri 07 Nov 2025 00:20:07 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:14:f6:26:e3:6e:04:56:4a:00:03:db:8f:74:5b:db:2f:0f:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:20:07 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=9052bfc9f4d4134f11d0b4e85f8b446e6aa29c51c7f11c629f82190128bbdb88, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:1a:3e:01:e7:99:28:60:12:ab:11:a2:1c: e6:1b:b5:75:70:84:56:f7:c1:b6:10:08:0a:c0:d5: ac:80:d2:61:99:f0:e6:52:e9:e3:ac:41:cb:e1:21: 5e:93:6a:4b:3b:cd:8f:10:9c:08:0f:7a:8f:40:a8: a5:ae:c9:11:c4:08:c7:af:62:7a:00:1f:7b:dc:af: 95:60:93:a4:92:35:31:c7:7f:cf:cf:35:eb:b5:e5: 7a:f2:5d:48:01:5f:39:fd:1a:a9:bc:bc:df:d2:c0: 9d:99:a7:ff:06:a0:11:3b:d1:26:c6:22:8e:e5:a7: fc:eb:4a:0d:ed:c5:f2:00:d6:27:9a:a3:c9:e6:22: ea:e4:67:98:08:22:10:6f:9a:25:03:7d:62:aa:20: 14:a1:ec:b4:6f:3e:d0:61:9d:d5:76:b1:f9:48:52: 99:58:a4:62:5e:07:da:79:1b:1f:8c:cf:78:e6:ae: 57:03:b8:51:54:7f:96:a2:ed:36:ea:76:cc:ab:d2: bb:b7:0b:ce:a1:d9:c9:bc:04:98:82:11:00:ba:66: 1f:de:0d:1c:a4:6a:64:c3:7d:41:5a:d0:4a:b0:db: 7a:76:f9:b7:4c:4c:d3:a4:4c:03:d7:db:5c:a3:07: d6:b8:23:89:d6:19:9c:fb:3e:ee:b0:60:73:72:0d: 22:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7A:FC:34:A3:FF:2C:AE:88:8E:BD:6A:9F:B8:60:EA:85:7B:B3:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63bd71f1-ad22-4426-9f28-aaa82ba31578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c880::/48 Signature Algorithm: sha256WithRSAEncryption 3d:85:c0:2c:97:ce:59:7d:4a:5f:82:1c:e2:18:70:30:ad:7d: 1d:cd:89:e3:64:92:f4:b3:c8:83:75:ef:ac:a4:18:6e:40:aa: 68:55:b0:ef:89:1d:7b:90:24:29:a1:a8:d7:42:04:b7:f9:23: 97:c4:49:d9:9b:61:31:bd:46:87:b3:05:61:64:e5:8e:61:ce: 7b:7f:9e:e4:5e:7a:7a:73:a2:da:52:2e:11:11:8f:cd:ef:cb: 85:19:cb:7b:e1:e1:c6:ae:23:b2:03:06:f7:bd:af:4a:bc:52: b7:bb:ef:73:97:9e:8d:06:4e:49:13:bc:f3:88:1e:cc:ff:ec: d5:73:4d:ca:5d:a5:9c:c9:c1:99:59:94:1c:6f:0f:8a:34:77: e7:ac:c9:5d:be:a5:fb:d7:1c:bd:c2:5e:85:75:26:62:8f:0e: 61:b3:1c:f8:91:da:6e:47:1d:44:19:92:4d:66:ab:b4:9f:1a: c6:ad:9d:55:0b:4a:a7:ab:13:40:fd:3a:17:be:e6:df:0a:e0: 4c:81:3c:0b:56:3f:ff:68:90:d0:01:71:82:ca:f2:9f:f6:a3: 0b:08:de:f3:fe:20:58:4f:89:e5:1f:0e:5f:93:59:7a:10:02: c0:c3:8b:1f:23:22:67:31:1c:47:45:3f:fb:05:e6:69:83:e5: 55:6b:52:47 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZRT2JuNuBFZKAAPbj3Rb2y8PZKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMjAwN1oX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAOTA1MmJmYzlmNGQ0MTM0ZjExZDBi NGU4NWY4YjQ0NmU2YWEyOWM1MWM3ZjExYzYyOWY4MjE5MDEyOGJiZGI4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0YaPgHnmShgEqsRohzmG7V1cIRW 98G2EAgKwNWsgNJhmfDmUunjrEHL4SFek2pLO82PEJwID3qPQKilrskRxAjHr2J6 AB973K+VYJOkkjUxx3/PzzXrteV68l1IAV85/RqpvLzf0sCdmaf/BqARO9EmxiKO 5af860oN7cXyANYnmqPJ5iLq5GeYCCIQb5olA31iqiAUoey0bz7QYZ3VdrH5SFKZ WKRiXgfaeRsfjM945q5XA7hRVH+Wou026nbMq9K7twvOodnJvASYghEAumYf3g0c pGpkw31BWtBKsNt6dvm3TEzTpEwD19tcowfWuCOJ1hmc+z7usGBzcg0iOwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM56/DSj/yyuiI69ap+4YOqFe7N4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzYmQ3MWYxLWFkMjItNDQyNi05ZjI4LWFhYTgyYmEzMTU3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMiAMA0GCSqGSIb3DQEBCwUAA4IBAQA9hcAsl85ZfUpfghzi GHAwrX0dzYnjZJL0s8iDde+spBhuQKpoVbDviR17kCQpoajXQgS3+SOXxEnZm2Ex vUaHswVhZOWOYc57f57kXnp6c6LaUi4REY/N78uFGct74eHGriOyAwb3va9KvFK3 u+9zl56NBk5JE7zziB7M/+zVc03KXaWcycGZWZQcbw+KNHfnrMldvqX71xy9wl6F dSZijw5hsxz4kdpuRx1EGZJNZqu0nxrGrZ1VC0qnqxNA/ToXvubfCuBMgTwLVj// aJDQAXGCyvKf9qMLCN7z/iBYT4nlHw5fk1l6EALAw4sfIyJnMRxHRT/7BeZpg+VV a1JH -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:24 2025 by rpki-client