$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e03c58f-b311-4557-ad93-f231e6efb4de.roa File: 9e03c58f-b311-4557-ad93-f231e6efb4de.roa (raw, json) Hash identifier: 9v1Nnl1ZyH1bqkjzeiUxUXKF1FfkN5hlg6R+px09+S8= Subject key identifier: 9B:B0:2B:A5:80:F2:00:16:F1:56:C2:7D:48:84:72:DC:5B:87:01:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 480E2BA428CF9656328A6D021632D78F0E567D3D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e03c58f-b311-4557-ad93-f231e6efb4de.roa Signing time: Fri 19 Sep 2025 00:20:16 +0000 ROA not before: Fri 19 Sep 2025 00:20:16 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0e:2b:a4:28:cf:96:56:32:8a:6d:02:16:32:d7:8f:0e:56:7d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:20:16 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=a601be381c5af6a679e0d002112287bfa09c02997a2910892cd01a5e7587c3ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:26:ab:f4:54:69:9d:b1:72:04:ea:4a:0d:86: 51:a4:a8:78:83:78:6f:fd:0a:9f:4f:e0:ac:73:db: e9:0f:3a:f3:e1:3d:70:ee:9f:6d:4e:3b:fd:44:1c: a1:fe:eb:4a:16:d2:1d:a3:06:e7:ea:fe:a5:e6:5e: 40:35:1b:0f:da:b7:52:91:bf:6e:62:a4:8f:d6:80: 62:1c:2e:3d:ed:82:3e:74:10:ec:d3:9e:03:49:45: 46:7d:c0:b2:c8:6d:80:03:81:77:89:76:36:0e:56: 38:f1:c7:0e:e8:d9:a7:16:1a:10:c6:3b:61:9b:45: 64:a0:09:67:79:04:40:0d:20:81:95:1b:10:ae:8d: 4b:27:f5:5b:9e:d2:8d:63:98:e3:02:6a:90:07:f2: c8:9d:e6:07:7b:81:59:f8:eb:91:cc:63:cd:59:91: 3a:01:ad:97:3b:23:da:01:7f:f5:db:66:14:36:68: 98:01:9c:bd:8b:b5:06:90:a9:d7:fc:6e:ef:6f:d2: a6:79:80:74:10:26:25:da:fa:0e:9a:14:94:a1:7f: ca:8e:b9:c9:be:16:b1:1c:0f:26:9d:71:7e:76:2f: e2:83:8e:2f:3e:ff:1a:6b:1e:73:e3:3c:e9:01:49: 84:1d:1a:fc:69:61:71:86:13:d6:34:0d:95:fd:e2: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B0:2B:A5:80:F2:00:16:F1:56:C2:7D:48:84:72:DC:5B:87:01:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e03c58f-b311-4557-ad93-f231e6efb4de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:f000::/40 Signature Algorithm: sha256WithRSAEncryption a7:a6:25:95:a3:50:63:e7:b9:1a:bc:4f:db:d5:94:b3:b6:87: 94:bb:25:cb:b5:55:20:25:1a:bb:25:25:16:2a:aa:d6:fd:0b: db:4a:38:2e:68:66:e9:5e:ab:ec:37:ed:99:44:47:8a:a1:60: 87:80:4c:e2:52:66:dd:4d:28:6c:2f:66:10:50:26:7c:38:0a: 56:36:5f:32:ae:b9:ba:d1:c2:2e:0b:39:64:9b:96:d1:55:7b: 89:3d:73:f3:35:a1:51:45:e3:b2:59:ca:df:e9:a8:e9:b7:a2: c3:ab:bf:ea:28:2e:45:5a:5c:80:9f:b6:d5:cf:89:05:1a:81: 2f:c0:6d:7f:fb:e7:a1:b3:0a:0e:57:6b:c0:fe:60:bc:3e:2e: 09:f4:01:c1:ee:8e:be:a6:dd:ed:05:80:77:12:d7:e7:69:e0: 86:c6:0a:ee:a0:5d:da:21:7c:6e:ae:99:39:4a:c1:2b:14:62: 97:a7:f3:5e:3b:a3:24:1d:eb:8c:ff:0b:f3:18:c9:94:47:f0: b7:f0:1d:15:1b:55:4e:e9:35:92:69:ce:25:fd:6a:68:86:60: 6b:d0:37:7c:3b:c8:93:fb:37:3a:da:8c:e1:4f:bf:31:3d:d7: e6:b3:0f:a6:f8:39:1c:2d:f1:a2:96:5f:4d:db:68:75:86:2b: 20:d1:04:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSA4rpCjPllYyim0CFjLXjw5WfT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMjAxNloX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAYTYwMWJlMzgxYzVhZjZhNjc5ZTBk MDAyMTEyMjg3YmZhMDljMDI5OTdhMjkxMDg5MmNkMDFhNWU3NTg3YzNlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyar9FRpnbFyBOpKDYZRpKh4g3hv /QqfT+Csc9vpDzrz4T1w7p9tTjv9RByh/utKFtIdowbn6v6l5l5ANRsP2rdSkb9u YqSP1oBiHC497YI+dBDs054DSUVGfcCyyG2AA4F3iXY2DlY48ccO6NmnFhoQxjth m0VkoAlneQRADSCBlRsQro1LJ/VbntKNY5jjAmqQB/LIneYHe4FZ+OuRzGPNWZE6 Aa2XOyPaAX/122YUNmiYAZy9i7UGkKnX/G7vb9KmeYB0ECYl2voOmhSUoX/KjrnJ vhaxHA8mnXF+di/ig44vPv8aax5z4zzpAUmEHRr8aWFxhhPWNA2V/eICywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJuwK6WA8gAW8VbCfUiEctxbhwG0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllMDNjNThmLWIzMTEtNDU1Ny1hZDkzLWYyMzFlNmVmYjRkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaafAwDQYJKoZIhvcNAQELBQADggEBAKemJZWjUGPnuRq8T9vV lLO2h5S7Jcu1VSAlGrslJRYqqtb9C9tKOC5oZuleq+w37ZlER4qhYIeATOJSZt1N KGwvZhBQJnw4ClY2XzKuubrRwi4LOWSbltFVe4k9c/M1oVFF47JZyt/pqOm3osOr v+ooLkVaXICfttXPiQUagS/AbX/756GzCg5Xa8D+YLw+Lgn0AcHujr6m3e0FgHcS 1+dp4IbGCu6gXdohfG6umTlKwSsUYpen8147oyQd64z/C/MYyZRH8LfwHRUbVU7p NZJpziX9amiGYGvQN3w7yJP7NzrajOFPvzE91+azD6b4ORwt8aKWX03baHWGKyDR BGg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:44 2025 by rpki-client