$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa File: c7a048e9-67c5-415d-88d4-0acc3454af62.roa (raw, json) Hash identifier: Q7vriyTF1NLOeIqniN42lXl8A228XwfviPoNaYkFjLM= Subject key identifier: 3E:F3:A5:20:1F:08:61:C3:83:E5:4C:87:4C:A9:B5:B4:4E:59:88:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47F7C19611AB918F917F8161BADB53110C9ADB38 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa Signing time: Sun 09 Nov 2025 01:00:14 +0000 ROA not before: Sun 09 Nov 2025 01:00:14 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f7:c1:96:11:ab:91:8f:91:7f:81:61:ba:db:53:11:0c:9a:db:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 01:00:14 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=116c758f1d4edba7380f7c2506b3181dd0e0d9b9b1783fd2867b33ac3493ad6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:1c:fb:6f:7a:5d:ac:43:04:02:d3:4b:da: 9a:9e:40:23:84:80:7e:ed:ca:b6:56:33:13:7a:a9: cd:bc:1d:72:f6:a7:73:4f:41:3e:6a:ad:1e:e4:93: a2:e7:c5:2e:1c:22:ba:bd:bf:d8:50:8e:3b:8b:41: 66:6a:f6:13:55:c3:84:a8:c4:79:be:9c:96:12:f2: b5:71:21:68:92:c8:79:19:67:a6:91:02:6f:0a:ad: 32:39:7d:ab:4d:3c:00:3c:88:ce:3a:a7:be:04:1a: 80:e5:27:6f:5d:78:9e:72:21:c8:f9:dd:b9:9d:f0: 38:84:f3:41:ab:f5:81:05:c4:df:95:e4:44:5b:32: 88:af:b0:d2:68:9a:cc:da:69:07:1d:07:90:10:57: 2d:05:e1:85:dd:23:41:8f:40:fb:ac:d1:fd:d6:c6: ac:b8:b5:c5:e3:35:47:d7:fe:51:57:b9:70:24:18: 29:ef:22:4e:cb:8c:2e:29:8a:a2:f4:86:29:e7:e8: bf:a3:31:dc:7a:ab:b5:22:3f:91:f0:14:2c:ca:1d: 69:9e:a7:6d:a2:9f:34:9d:65:a3:27:1e:05:2b:4a: a5:0c:ee:d0:2f:84:50:f0:b9:5a:de:47:7a:90:68: 40:ec:b0:d3:c0:b3:6b:38:dc:3e:89:c1:96:ea:f8: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:A5:20:1F:08:61:C3:83:E5:4C:87:4C:A9:B5:B4:4E:59:88:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7a048e9-67c5-415d-88d4-0acc3454af62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:8000::/40 Signature Algorithm: sha256WithRSAEncryption 73:f3:76:19:15:68:0b:6a:91:2a:76:da:ce:ab:64:13:63:65: ca:a2:1b:fc:7a:1f:02:98:43:f3:fb:76:9b:63:4c:84:ee:7c: 76:92:d2:df:4f:a2:85:27:b6:dd:02:e4:88:79:cd:2a:54:19: 36:a9:ed:55:c2:61:53:ae:47:a0:67:1b:d2:15:68:ab:b6:c3: fc:49:fc:b3:a8:d5:51:b9:dc:e1:11:15:8b:1b:8d:10:9e:d7: 3d:19:93:ae:b1:64:27:95:f9:b0:d6:c1:01:d5:ed:26:d1:d7: 2c:ec:48:84:18:67:4c:9a:68:7e:55:86:f0:83:46:42:26:d2: 33:0e:a3:39:4b:b3:1d:66:36:dd:c0:2a:79:35:97:1e:54:f5: 47:e3:10:74:c3:24:22:67:57:38:f0:58:dc:36:c0:6f:dd:0d: b9:b4:b8:c7:29:22:1d:6f:44:56:01:e1:a7:9e:25:7a:55:b7: ec:b1:1e:1f:e5:e4:d3:d6:30:3a:76:91:21:84:f6:6c:91:83: fa:ff:6c:a0:83:a3:02:70:84:64:92:97:cd:af:ec:d0:ea:60: 6b:f3:c2:88:d9:21:49:fd:23:7f:29:46:98:0a:82:9c:bf:06: bd:96:40:a4:11:c4:81:69:6a:9a:a0:6a:30:34:d7:76:35:b2: a3:1f:0d:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR/fBlhGrkY+Rf4FhuttTEQya2zgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAxMDAxNFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMTE2Yzc1OGYxZDRlZGJhNzM4MGY3 YzI1MDZiMzE4MWRkMGUwZDliOWIxNzgzZmQyODY3YjMzYWMzNDkzYWQ2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVoc+296XaxDBALTS9qankAjhIB+ 7cq2VjMTeqnNvB1y9qdzT0E+aq0e5JOi58UuHCK6vb/YUI47i0FmavYTVcOEqMR5 vpyWEvK1cSFoksh5GWemkQJvCq0yOX2rTTwAPIjOOqe+BBqA5SdvXXieciHI+d25 nfA4hPNBq/WBBcTfleREWzKIr7DSaJrM2mkHHQeQEFctBeGF3SNBj0D7rNH91sas uLXF4zVH1/5RV7lwJBgp7yJOy4wuKYqi9IYp5+i/ozHcequ1Ij+R8BQsyh1pnqdt op80nWWjJx4FK0qlDO7QL4RQ8Lla3kd6kGhA7LDTwLNrONw+icGW6vjSdQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD7zpSAfCGHDg+VMh0yptbROWYgPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YTA0OGU5LTY3YzUtNDE1ZC04OGQ0LTBhY2MzNDU0YWY2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/oAwDQYJKoZIhvcNAQELBQADggEBAHPzdhkVaAtqkSp22s6r ZBNjZcqiG/x6HwKYQ/P7dptjTITufHaS0t9PooUntt0C5Ih5zSpUGTap7VXCYVOu R6BnG9IVaKu2w/xJ/LOo1VG53OERFYsbjRCe1z0Zk66xZCeV+bDWwQHV7SbR1yzs SIQYZ0yaaH5VhvCDRkIm0jMOozlLsx1mNt3AKnk1lx5U9UfjEHTDJCJnVzjwWNw2 wG/dDbm0uMcpIh1vRFYB4aeeJXpVt+yxHh/l5NPWMDp2kSGE9myRg/r/bKCDowJw hGSSl82v7NDqYGvzwojZIUn9I38pRpgKgpy/Br2WQKQRxIFpapqgajA013Y1sqMf DTg= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:39 2025 by rpki-client