$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c327d37-0e2d-447d-aa31-66e378c4d35d.roa File: 7c327d37-0e2d-447d-aa31-66e378c4d35d.roa (raw, json) Hash identifier: SM1sv7Wzbkgq9wi5E51PTjfgsovyKejv8jKWYvgW51I= Subject key identifier: A9:7C:B9:30:4A:23:A8:41:03:03:26:A8:7E:DE:C6:40:93:F4:4C:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 504B4B977DBB6CDE09DF049DE7E2F2C0666D3FA9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c327d37-0e2d-447d-aa31-66e378c4d35d.roa Signing time: Sat 04 Oct 2025 00:00:59 +0000 ROA not before: Sat 04 Oct 2025 00:00:59 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4b:4b:97:7d:bb:6c:de:09:df:04:9d:e7:e2:f2:c0:66:6d:3f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:59 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=149b9179056fdaa96602e6cc11989b79a8692ae8dfc67f6af1785269677c0c01, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:fd:3b:27:b8:70:f4:8f:98:ce:26:90:7f: 51:56:ee:e9:66:07:2e:63:cb:5a:34:50:97:73:aa: 41:b9:42:81:c5:4c:bd:43:af:57:67:c1:e2:38:25: 8a:67:f1:1e:3b:43:23:d2:b7:83:c4:5f:1f:ba:f0: af:37:31:a4:3d:38:3e:8e:67:71:98:84:91:be:85: 78:66:2b:3c:9a:3a:04:dc:78:4c:f4:36:81:a2:1b: 9e:8a:37:41:85:90:2f:b7:a7:3d:24:bf:38:7f:82: db:17:64:81:ed:e8:83:b3:79:62:2b:41:87:20:20: 24:2f:7e:b2:cf:5d:a0:52:32:8f:8c:c2:10:77:88: 81:d0:e9:f1:7a:1b:64:df:19:b4:82:20:c4:47:d9: 1b:e4:1e:5a:28:16:20:cc:88:81:a7:88:db:71:97: a0:60:d9:73:94:69:7d:09:04:0d:b7:92:a2:a2:b1: c6:fc:91:75:a0:70:e7:76:45:8c:47:28:e0:69:b1: 42:59:19:aa:4e:cd:e4:8e:18:ec:4c:7b:ea:11:a8: 7c:c0:24:5d:da:d7:e2:2d:2c:54:f0:33:40:be:eb: a7:1e:16:a6:d8:33:27:9b:ac:ef:3a:d8:a5:45:55: b2:38:d1:eb:88:7f:b2:cb:07:03:44:5d:7c:88:56: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:B9:30:4A:23:A8:41:03:03:26:A8:7E:DE:C6:40:93:F4:4C:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c327d37-0e2d-447d-aa31-66e378c4d35d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b080::/46 Signature Algorithm: sha256WithRSAEncryption c9:3e:e0:c6:ab:6b:94:a6:3c:91:f4:21:8d:7e:53:42:f7:4e: f2:29:b9:4a:9d:7d:33:b1:c5:03:d5:4f:c0:5b:e8:4c:e6:d1: 4d:9c:b3:0e:ae:7e:8a:87:fb:4e:79:c8:76:d3:84:51:4f:3b: 11:90:bb:9d:e7:75:c0:4a:19:7d:76:7e:c3:a6:83:c5:ee:99: ec:d6:92:d4:42:61:7e:23:37:85:30:d3:d1:06:0b:91:c8:47: ef:68:bf:65:5c:2a:ab:03:f1:34:5f:d0:a3:9e:24:61:0d:57: 59:41:8b:3b:3a:79:a4:80:90:49:0d:84:f7:b0:c0:25:9d:95: 31:5a:58:61:16:e5:e3:5c:36:29:8c:2d:52:26:a8:72:47:45: 78:b4:9c:ce:cd:27:9a:22:e6:86:3a:7d:6f:a4:d9:a7:92:57: 14:d6:64:bf:38:77:fb:93:68:bf:66:10:9d:1b:a6:2f:48:f7: b1:2e:0b:24:e6:58:ab:f3:bf:93:57:5a:ae:6c:e6:27:6c:0c: bd:f5:56:08:d3:1e:bf:41:1e:02:d4:f3:8e:1f:7d:93:8c:fc: 49:50:67:20:64:7c:12:6e:0e:43:18:c8:09:e6:b1:b4:d9:84: 9c:2d:c4:71:ec:55:a8:14:b6:b1:0a:9e:be:15:9b:23:03:df: 57:ac:06:e9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUEtLl327bN4J3wSd5+LywGZtP6kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMDA1OVoX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMTQ5YjkxNzkwNTZmZGFhOTY2MDJl NmNjMTE5ODliNzlhODY5MmFlOGRmYzY3ZjZhZjE3ODUyNjk2NzdjMGMwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+b9Oye4cPSPmM4mkH9RVu7pZgcu Y8taNFCXc6pBuUKBxUy9Q69XZ8HiOCWKZ/EeO0Mj0reDxF8fuvCvNzGkPTg+jmdx mISRvoV4Zis8mjoE3HhM9DaBohueijdBhZAvt6c9JL84f4LbF2SB7eiDs3liK0GH ICAkL36yz12gUjKPjMIQd4iB0Onxehtk3xm0giDER9kb5B5aKBYgzIiBp4jbcZeg YNlzlGl9CQQNt5KiorHG/JF1oHDndkWMRyjgabFCWRmqTs3kjhjsTHvqEah8wCRd 2tfiLSxU8DNAvuunHham2DMnm6zvOtilRVWyONHriH+yywcDRF18iFbzVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKl8uTBKI6hBAwMmqH7exkCT9ExWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjMzI3ZDM3LTBlMmQtNDQ3ZC1hYTMxLTY2ZTM3OGM0ZDM1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba87CAMA0GCSqGSIb3DQEBCwUAA4IBAQDJPuDGq2uUpjyR9CGN flNC907yKblKnX0zscUD1U/AW+hM5tFNnLMOrn6Kh/tOech204RRTzsRkLud53XA Shl9dn7DpoPF7pns1pLUQmF+IzeFMNPRBguRyEfvaL9lXCqrA/E0X9CjniRhDVdZ QYs7OnmkgJBJDYT3sMAlnZUxWlhhFuXjXDYpjC1SJqhyR0V4tJzOzSeaIuaGOn1v pNmnklcU1mS/OHf7k2i/ZhCdG6YvSPexLgsk5lir87+TV1qubOYnbAy99VYI0x6/ QR4C1POOH32TjPxJUGcgZHwSbg5DGMgJ5rG02YScLcRx7FWoFLaxCp6+FZsjA99X rAbp -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:48 2025 by rpki-client