$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa File: b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa (raw, json) Hash identifier: PACu5q8feE2QCGUP50JOZBbT2xs3b86+Oxh/Yu+Jre0= Subject key identifier: A0:70:6B:80:2C:14:B0:95:90:61:09:02:C1:CC:6F:BD:65:91:75:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40ABF192B7E4AFD5D20145D31749624999095351 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa Signing time: Sat 04 Oct 2025 00:10:23 +0000 ROA not before: Sat 04 Oct 2025 00:10:23 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ab:f1:92:b7:e4:af:d5:d2:01:45:d3:17:49:62:49:99:09:53:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:10:23 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=fa233ea90f6f6634f9bfdf11c9d763407077be44c75fa1b6e34aea9d3a3e3440, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:cb:be:8e:cb:06:31:3f:e8:92:65:27:e6: 77:6a:46:2e:78:db:1a:8b:cb:94:6e:c7:f4:c2:b6: 96:0d:89:9e:4e:33:34:76:c7:c8:0f:52:de:05:1e: 47:64:87:d9:ba:c4:d5:0d:10:19:11:b2:9b:e6:61: 0d:d3:8a:6c:5f:3f:68:7c:9d:54:bb:56:91:8d:72: 3c:00:34:69:5b:43:a9:bd:a6:67:1c:72:3a:b3:44: 02:0f:02:83:fa:99:77:03:c0:69:7f:3d:85:a9:9e: e6:b4:3d:e2:b3:65:f5:bd:ef:c7:52:da:93:5d:71: b9:c1:33:32:3c:a1:3b:fa:f5:b1:39:70:74:68:74: 71:32:c8:76:5a:dd:7a:70:e3:a3:1f:f2:8a:dd:0c: 98:3b:60:6a:81:9b:48:c7:da:d6:3c:b9:68:03:c1: f9:b3:d8:75:f3:f7:d8:65:b9:cc:fd:00:d9:3c:fe: 3d:95:a5:83:90:cb:0a:12:e7:7e:7d:ba:e4:5e:24: 9f:ef:79:76:95:49:c6:47:fe:84:17:fd:5c:67:73: 7f:47:f6:b2:ff:79:4e:96:45:05:46:2a:4e:12:b3: 04:d3:0a:d9:45:51:19:c5:9b:db:91:da:f7:1d:6e: 8a:80:a1:51:b4:c1:bd:ac:2d:0b:f0:37:2a:64:84: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:70:6B:80:2C:14:B0:95:90:61:09:02:C1:CC:6F:BD:65:91:75:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0ca5e8d-a5db-413e-a44b-fb88d0d8f8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:9000::/40 Signature Algorithm: sha256WithRSAEncryption 2b:0e:32:e3:82:05:b7:f5:3b:4b:31:5e:8b:24:48:92:41:1a: 7e:24:72:7a:5e:6a:9a:ec:4c:01:98:9c:1d:b3:3d:56:c5:2f: 92:f6:99:2c:9e:77:e4:db:64:37:ef:56:10:ef:02:e4:d8:2e: e7:e4:15:90:a0:58:20:07:29:2f:5a:6b:a1:22:4b:7b:9e:04: 66:6f:77:03:c0:b3:5d:94:44:c1:64:72:cf:68:47:62:fc:ed: ed:7f:7c:95:8d:66:01:ad:bc:e0:5d:49:88:b8:8e:c6:b8:a7: 0a:e2:2d:09:b3:5c:e7:e5:2d:65:ae:fa:7b:30:d4:38:2d:1b: 35:4b:8e:44:35:94:5b:87:53:79:e3:46:1f:00:c4:fe:f5:0d: 6d:19:29:76:39:22:cf:cb:85:f3:ec:b8:18:98:76:5a:35:83: e0:33:4e:57:cc:4e:39:d4:fd:aa:a2:9b:7f:97:18:3a:e6:db: 9b:3e:64:68:08:8f:b5:1e:02:5a:78:be:f3:bb:23:8c:ce:ef: 96:0c:37:49:6a:b0:85:53:e3:ac:05:d1:27:a1:f1:6d:23:f8: fb:ee:c7:81:4c:db:a0:cd:e2:e9:19:48:7b:a8:2e:65:f8:32: 1d:5d:46:00:7d:22:3d:02:bb:26:e3:c8:a2:0c:69:91:df:20: cd:a5:cb:14 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQKvxkrfkr9XSAUXTF0liSZkJU1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMTAyM1oX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAZmEyMzNlYTkwZjZmNjYzNGY5YmZk ZjExYzlkNzYzNDA3MDc3YmU0NGM3NWZhMWI2ZTM0YWVhOWQzYTNlMzQ0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR3Lvo7LBjE/6JJlJ+Z3akYueNsa i8uUbsf0wraWDYmeTjM0dsfID1LeBR5HZIfZusTVDRAZEbKb5mEN04psXz9ofJ1U u1aRjXI8ADRpW0OpvaZnHHI6s0QCDwKD+pl3A8Bpfz2FqZ7mtD3is2X1ve/HUtqT XXG5wTMyPKE7+vWxOXB0aHRxMsh2Wt16cOOjH/KK3QyYO2BqgZtIx9rWPLloA8H5 s9h18/fYZbnM/QDZPP49laWDkMsKEud+fbrkXiSf73l2lUnGR/6EF/1cZ3N/R/ay /3lOlkUFRipOErME0wrZRVEZxZvbkdr3HW6KgKFRtMG9rC0L8DcqZIT0xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKBwa4AsFLCVkGEJAsHMb71lkXW7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwY2E1ZThkLWE1ZGItNDEzZS1hNDRiLWZiODhkMGQ4ZjhjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba85AwDQYJKoZIhvcNAQELBQADggEBACsOMuOCBbf1O0sxXosk SJJBGn4kcnpeaprsTAGYnB2zPVbFL5L2mSyed+TbZDfvVhDvAuTYLufkFZCgWCAH KS9aa6EiS3ueBGZvdwPAs12URMFkcs9oR2L87e1/fJWNZgGtvOBdSYi4jsa4pwri LQmzXOflLWWu+nsw1DgtGzVLjkQ1lFuHU3njRh8AxP71DW0ZKXY5Is/LhfPsuBiY dlo1g+AzTlfMTjnU/aqim3+XGDrm25s+ZGgIj7UeAlp4vvO7I4zO75YMN0lqsIVT 46wF0Seh8W0j+Pvux4FM26DN4ukZSHuoLmX4Mh1dRgB9Ij0CuybjyKIMaZHfIM2l yxQ= -----END CERTIFICATE-----Generated at Thu Oct 9 01:05:40 2025 by rpki-client