$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa File: 762f9af4-6b86-42f6-babd-ee50573eb662.roa (raw, json) Hash identifier: zf8mcPJ4yX28fSGOvrr6UKAiAZVhp7wXmIh+y5xXpP4= Subject key identifier: 1A:1D:5E:EB:A3:62:44:79:C7:98:84:81:82:91:29:85:D8:F5:53:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 096E7A6A4D06AAAE1B0E5A87EF571FAAC2175D6A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa Signing time: Sat 08 Nov 2025 00:20:53 +0000 ROA not before: Sat 08 Nov 2025 00:20:53 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6e:7a:6a:4d:06:aa:ae:1b:0e:5a:87:ef:57:1f:aa:c2:17:5d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:53 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=c26aa1af2783be769aa66c7a51505c786bfeffa10d41c25f7ffd43b268ac7a3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:95:d2:e6:54:97:31:22:04:a9:9c:a8:c5: af:12:e5:9c:32:5f:6b:55:93:76:d6:5e:5c:31:06: be:ae:43:0f:21:f9:f5:b7:4d:02:ba:95:1b:be:39: da:a2:87:85:40:42:7b:ff:ac:fd:26:f6:90:f7:cc: 44:b8:05:65:b7:e0:fc:25:df:48:a6:38:4d:cb:06: 08:68:09:a9:56:42:50:8f:02:e8:47:22:42:70:f5: 9c:a1:fc:2e:0a:e6:ea:19:6f:cb:48:26:9f:da:6f: e7:28:c2:1f:68:52:99:2e:95:62:3e:21:09:d1:cb: 14:55:70:c2:b8:cb:60:6b:16:a5:4d:87:fe:90:d8: c4:2a:46:8d:ec:16:df:3f:56:65:95:37:c2:a3:c4: 04:cd:90:18:b8:d6:02:f5:f6:48:01:b6:2f:d1:55: dd:f1:ef:9d:77:a6:73:d1:5b:da:28:57:bb:1d:b2: 88:f5:56:fb:3d:c1:c5:cd:13:6c:70:4f:b7:27:41: 72:24:18:8d:8b:27:66:ab:26:b5:f2:8d:2e:0f:ee: 42:22:96:6d:9b:55:6b:96:47:1e:6f:b9:f3:72:57: 8a:45:13:58:cd:66:f3:b8:80:05:38:4e:bb:41:f2: a1:36:8d:9d:20:9a:f4:52:30:a0:d9:d6:f3:3b:4d: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:5E:EB:A3:62:44:79:C7:98:84:81:82:91:29:85:D8:F5:53:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 43:c5:0b:af:70:1a:fb:9f:b2:6a:d8:63:39:4c:14:32:bf:c6: e2:bf:16:67:f2:20:3c:60:eb:65:1d:4e:b4:32:7c:de:74:ba: 71:14:a7:17:fd:be:7e:f5:8d:40:59:2a:69:61:e0:39:69:44: 7a:c1:fd:ee:e6:0a:8d:ed:77:55:10:a4:57:8d:ba:fe:4e:59: b6:2f:eb:b1:49:a5:84:14:ed:fb:17:29:b3:55:3a:2f:01:2f: fc:3f:3d:31:e9:e2:c8:72:13:95:d1:91:8b:d4:14:04:60:b2: 30:07:73:97:10:c3:c1:68:8a:22:82:7c:f6:0e:b7:80:34:40: 2f:8f:3d:d7:d3:6d:c6:4e:1f:6c:49:c4:fe:77:e4:53:f5:42: 55:32:dd:a9:a6:61:72:d6:1d:85:e9:fc:2a:e5:57:39:78:8b: a9:af:85:48:e8:3b:66:d0:d1:0b:93:0c:ce:18:fe:a5:01:42: 58:5e:01:7b:8f:b2:a7:71:c8:37:3d:1b:f3:25:70:06:ec:73: 99:80:34:31:a3:40:f1:3b:3c:b3:97:32:69:aa:ba:14:bd:57: b7:8a:3b:66:7d:91:54:f4:86:ae:86:f9:77:37:d4:92:e9:a0: e8:22:fe:63:0d:a7:8c:c9:50:4b:6c:19:a4:f7:4c:85:3a:97: 4c:3a:86:dd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCW56ak0Gqq4bDlqH71cfqsIXXWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjA1M1oX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAYzI2YWExYWYyNzgzYmU3NjlhYTY2 YzdhNTE1MDVjNzg2YmZlZmZhMTBkNDFjMjVmN2ZmZDQzYjI2OGFjN2EzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiV0uZUlzEiBKmcqMWvEuWcMl9r VZN21l5cMQa+rkMPIfn1t00CupUbvjnaooeFQEJ7/6z9JvaQ98xEuAVlt+D8Jd9I pjhNywYIaAmpVkJQjwLoRyJCcPWcofwuCubqGW/LSCaf2m/nKMIfaFKZLpViPiEJ 0csUVXDCuMtgaxalTYf+kNjEKkaN7BbfP1ZllTfCo8QEzZAYuNYC9fZIAbYv0VXd 8e+dd6Zz0VvaKFe7HbKI9Vb7PcHFzRNscE+3J0FyJBiNiydmqya18o0uD+5CIpZt m1Vrlkceb7nzcleKRRNYzWbzuIAFOE67QfKhNo2dIJr0UjCg2dbzO01QPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBodXuujYkR5x5iEgYKRKYXY9VPYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2MmY5YWY0LTZiODYtNDJmNi1iYWJkLWVlNTA1NzNlYjY2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALDAMA0GCSqGSIb3DQEBCwUAA4IBAQBDxQuvcBr7n7Jq2GM5 TBQyv8bivxZn8iA8YOtlHU60MnzedLpxFKcX/b5+9Y1AWSppYeA5aUR6wf3u5gqN 7XdVEKRXjbr+Tlm2L+uxSaWEFO37FymzVTovAS/8Pz0x6eLIchOV0ZGL1BQEYLIw B3OXEMPBaIoignz2DreANEAvjz3X023GTh9sScT+d+RT9UJVMt2ppmFy1h2F6fwq 5Vc5eIupr4VI6Dtm0NELkwzOGP6lAUJYXgF7j7Knccg3PRvzJXAG7HOZgDQxo0Dx OzyzlzJpqroUvVe3ijtmfZFU9Iauhvl3N9SS6aDoIv5jDaeMyVBLbBmk90yFOpdM Oobd -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:52 2025 by rpki-client