$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa File: 79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa (raw, json) Hash identifier: lBPywYawAmWrEJ4OQotNL29MhvCVynH8EWsz8WiTtnQ= Subject key identifier: 5C:8C:33:D7:7E:2A:18:01:D9:AE:4D:9B:48:9F:6A:B3:A9:50:A5:8C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78AE691599F9DB4E862EE3252FFF0811CE232ECA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa Signing time: Sat 04 Oct 2025 00:00:58 +0000 ROA not before: Sat 04 Oct 2025 00:00:58 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ae:69:15:99:f9:db:4e:86:2e:e3:25:2f:ff:08:11:ce:23:2e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:58 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=24f55dc0fb1d51cdc317df7e49cecf310583a236d8005816cbcce2fed31669d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:a5:ea:8f:ba:b1:0f:27:cd:64:5c:d9:8c: e1:71:34:2e:b3:7e:db:c8:4a:df:6d:06:54:a4:5d: ec:35:14:3b:b8:43:7f:40:e0:6f:db:b8:30:c4:18: b1:91:09:1d:33:85:75:6c:7e:35:40:f4:ea:76:2b: 00:74:3f:67:b6:df:de:f6:5f:0c:f5:08:a5:f7:27: 15:76:61:c1:08:43:8c:3f:c9:f8:6a:de:0e:d4:3a: 48:25:22:34:be:a9:11:f2:cc:98:7d:f3:b7:01:41: ca:fe:82:f8:a4:57:17:5a:43:d3:a4:4f:1c:7b:40: ee:cb:d7:fe:7e:26:f1:74:79:e1:d8:e4:c2:26:71: 25:9e:26:3f:bb:78:9b:99:84:1e:59:4e:13:a5:44: 69:01:17:f8:d3:53:5d:df:98:58:13:b5:55:7d:43: d4:45:25:68:40:a1:ca:fe:9e:5d:1a:2d:df:44:73: 55:c8:85:0b:71:2d:37:b1:66:8f:fb:c7:39:54:6e: 7a:21:b2:d7:ef:41:f7:04:86:ec:4c:94:26:e0:f9: f3:4b:82:13:60:89:55:5a:89:c1:5a:f5:75:0f:35: bb:07:20:bb:bd:2c:aa:0e:c1:4c:16:b7:db:be:22: c7:36:39:96:d2:15:4d:1f:c7:a5:72:e8:92:a3:0d: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8C:33:D7:7E:2A:18:01:D9:AE:4D:9B:48:9F:6A:B3:A9:50:A5:8C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:880::/46 Signature Algorithm: sha256WithRSAEncryption 0a:55:99:f4:48:0e:7a:b6:ab:54:e3:35:dc:1d:b3:6a:ee:21: ee:12:16:48:91:00:ea:39:e0:bf:71:a0:25:86:00:c4:4f:88: 59:ed:46:b3:cb:eb:48:10:b0:97:9c:28:ea:08:ba:58:e3:31: 50:6c:fa:4f:8f:1e:28:1f:b6:e8:6b:73:27:36:bd:14:2c:ba: 84:86:3b:e7:eb:35:4c:7f:31:38:c8:67:b2:23:c5:e4:59:32: 15:1f:e1:22:64:fe:e1:53:64:dc:ee:e7:d8:bd:95:e7:12:cc: 39:6e:54:36:3b:55:28:0e:de:50:cb:7c:d5:53:82:00:65:73: 60:2f:8c:43:02:3c:eb:69:be:6e:41:09:33:d6:90:41:80:c9: 15:c4:71:59:57:0c:7c:c3:23:a5:0c:57:11:b7:e3:7c:e8:be: e8:df:63:ea:4d:ff:4b:e6:7a:83:83:2b:8f:a6:c6:ad:0a:dc: e2:fa:dd:07:b3:40:16:17:47:00:f6:6f:ef:15:76:74:c5:3c: 7e:6b:f7:e7:07:aa:e2:15:ab:86:05:c5:81:c3:4d:98:99:b0: 08:9c:7f:45:8e:b1:8b:d4:b6:0f:8b:4d:e6:d4:9a:1c:d2:ea: 7d:6a:76:e4:9f:6d:80:98:5e:2d:cb:a3:6b:05:aa:ec:f8:cc: 97:f3:47:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeK5pFZn5206GLuMlL/8IEc4jLsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMDA1OFoX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMjRmNTVkYzBmYjFkNTFjZGMzMTdk ZjdlNDljZWNmMzEwNTgzYTIzNmQ4MDA1ODE2Y2JjY2UyZmVkMzE2NjlkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKCl6o+6sQ8nzWRc2YzhcTQus37b yErfbQZUpF3sNRQ7uEN/QOBv27gwxBixkQkdM4V1bH41QPTqdisAdD9ntt/e9l8M 9Qil9ycVdmHBCEOMP8n4at4O1DpIJSI0vqkR8syYffO3AUHK/oL4pFcXWkPTpE8c e0Duy9f+fibxdHnh2OTCJnElniY/u3ibmYQeWU4TpURpARf401Nd35hYE7VVfUPU RSVoQKHK/p5dGi3fRHNVyIULcS03sWaP+8c5VG56IbLX70H3BIbsTJQm4PnzS4IT YIlVWonBWvV1DzW7ByC7vSyqDsFMFrfbviLHNjmW0hVNH8elcuiSow3iqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFyMM9d+KhgB2a5Nm0ifarOpUKWMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5ZGZiMmZiLTFmOWYtNDBhMi05YTc2LTg1NGQ3MzhmMjhmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8wiAMA0GCSqGSIb3DQEBCwUAA4IBAQAKVZn0SA56tqtU4zXc HbNq7iHuEhZIkQDqOeC/caAlhgDET4hZ7Uazy+tIELCXnCjqCLpY4zFQbPpPjx4o H7boa3MnNr0ULLqEhjvn6zVMfzE4yGeyI8XkWTIVH+EiZP7hU2Tc7ufYvZXnEsw5 blQ2O1UoDt5Qy3zVU4IAZXNgL4xDAjzrab5uQQkz1pBBgMkVxHFZVwx8wyOlDFcR t+N86L7o32PqTf9L5nqDgyuPpsatCtzi+t0Hs0AWF0cA9m/vFXZ0xTx+a/fnB6ri FauGBcWBw02YmbAInH9FjrGL1LYPi03m1Joc0up9anbkn22AmF4ty6NrBars+MyX 80d3 -----END CERTIFICATE-----Generated at Thu Oct 9 01:05:40 2025 by rpki-client