$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa File: cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa (raw, json) Hash identifier: eJ5tWwt3Qn39Ia40HAl0TUdQL67W563OQVCRLnd2LlM= Subject key identifier: 47:1E:B9:5D:6F:38:51:4D:3B:C3:9F:B2:6E:72:26:0E:19:CA:14:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 627C680A565AC0371C8300B35C7A5D63C732CD8C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa Signing time: Mon 29 Sep 2025 15:00:23 +0000 ROA not before: Mon 29 Sep 2025 15:00:23 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7c:68:0a:56:5a:c0:37:1c:83:00:b3:5c:7a:5d:63:c7:32:cd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 29 15:00:23 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=97de2e9e040761f7b00bb912a92318bd84a08c4991246215e9af13436b271b69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:38:c0:4c:6f:91:e1:e8:bb:f0:ca:28:78: 5e:ae:62:36:56:6e:c0:11:b8:dc:5d:57:45:9a:87: 7c:c2:77:c2:fb:da:ff:a0:e9:80:65:66:ee:9b:0d: 76:85:7d:6d:52:a4:74:08:56:98:b2:f0:89:63:c9: cc:33:95:b4:d6:8d:09:65:d4:f1:1a:a9:d5:a7:af: de:b0:0b:04:e2:b7:9f:9c:08:ba:7a:c7:95:c6:6f: 19:7b:18:de:6a:ae:11:92:59:56:a0:5c:cf:57:ee: 0a:48:53:c9:82:89:fd:32:2b:54:ab:28:84:aa:f5: 63:5b:66:57:ba:8f:cc:d6:9f:da:d0:a8:3e:8b:cb: 29:a5:30:9a:2a:e6:a7:48:1e:72:1c:84:de:7b:76: d9:b2:a2:42:77:31:ed:f3:2e:58:62:1a:52:22:0c: 0c:eb:9a:aa:f2:12:6b:b2:ea:2f:46:4f:12:bb:45: 7c:67:3c:ae:85:e3:ee:ec:67:d4:55:37:ca:26:0e: 07:89:7c:b2:3b:ae:b1:87:38:c8:46:c6:a5:6a:63: 79:d9:33:62:ee:65:cf:dc:76:7c:1b:65:c1:59:65: 37:73:51:95:a5:e8:67:ce:99:b1:3d:47:70:49:6f: 3d:53:2b:3f:f2:7d:b9:1e:7f:28:7e:b3:fd:61:0f: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1E:B9:5D:6F:38:51:4D:3B:C3:9F:B2:6E:72:26:0E:19:CA:14:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8000::/37 Signature Algorithm: sha256WithRSAEncryption 93:1e:65:f2:4b:ee:e6:c5:ef:1f:a0:5b:4e:48:f8:c7:44:13: b9:8f:ec:80:7d:8a:a9:35:e3:b8:2a:98:e5:36:9a:33:d9:e4: c6:1f:42:47:aa:c6:3b:0b:31:6f:33:ce:fd:39:62:67:a6:84: ff:df:fb:b2:92:00:4d:71:f0:ab:b0:45:33:f8:be:6a:5c:13: 4d:dc:29:af:8b:34:7d:31:8d:68:48:51:3e:c1:90:52:96:22: 13:a7:a8:87:d7:1d:c5:8a:fb:22:bb:e1:13:2b:ff:4f:d9:df: 2a:0b:bd:cb:97:3a:cd:f1:95:ba:93:f8:4d:51:d0:4e:38:bb: 03:ee:e8:2e:06:89:98:65:e2:f8:02:c7:a8:12:03:53:33:91: 20:5d:8f:5e:a4:a8:cd:ee:33:c4:2d:37:69:8f:2f:a6:ae:1b: 6b:66:2c:51:a4:bb:6a:52:a5:13:21:30:95:24:36:64:39:a7: 02:cc:81:89:69:66:7a:de:bf:7b:6e:de:e0:98:fb:eb:7e:74: 0b:aa:a5:f2:e6:eb:0f:71:ad:48:d6:51:2a:f7:e5:ec:57:e2: 50:39:e4:e1:3c:8b:8c:22:24:fb:2f:12:a4:4b:59:e9:19:e6: e7:93:6e:76:79:98:30:7d:b0:e8:98:f3:77:c8:4d:ef:c7:a9: ce:06:cd:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYnxoClZawDccgwCzXHpdY8cyzYwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyOTE1MDAyM1oX DTI1MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAOTdkZTJlOWUwNDA3NjFmN2IwMGJi OTEyYTkyMzE4YmQ4NGEwOGM0OTkxMjQ2MjE1ZTlhZjEzNDM2YjI3MWI2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7I4wExvkeHou/DKKHhermI2Vm7A EbjcXVdFmod8wnfC+9r/oOmAZWbumw12hX1tUqR0CFaYsvCJY8nMM5W01o0JZdTx GqnVp6/esAsE4refnAi6eseVxm8Zexjeaq4RkllWoFzPV+4KSFPJgon9MitUqyiE qvVjW2ZXuo/M1p/a0Kg+i8sppTCaKuanSB5yHITee3bZsqJCdzHt8y5YYhpSIgwM 65qq8hJrsuovRk8Su0V8ZzyuhePu7GfUVTfKJg4HiXyyO66xhzjIRsalamN52TNi 7mXP3HZ8G2XBWWU3c1GVpehnzpmxPUdwSW89Uys/8n25Hn8ofrP9YQ+yHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEceuV1vOFFNO8Ofsm5yJg4ZyhRMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NjN2Y4MWE5LTZmNGItNDJjNC04MGQ3LWFkOTkzNDNmNDllMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKIAwDQYJKoZIhvcNAQELBQADggEBAJMeZfJL7ubF7x+gW05I +MdEE7mP7IB9iqk147gqmOU2mjPZ5MYfQkeqxjsLMW8zzv05YmemhP/f+7KSAE1x 8KuwRTP4vmpcE03cKa+LNH0xjWhIUT7BkFKWIhOnqIfXHcWK+yK74RMr/0/Z3yoL vcuXOs3xlbqT+E1R0E44uwPu6C4GiZhl4vgCx6gSA1MzkSBdj16kqM3uM8QtN2mP L6auG2tmLFGku2pSpRMhMJUkNmQ5pwLMgYlpZnrev3tu3uCY++t+dAuqpfLm6w9x rUjWUSr35exX4lA55OE8i4wiJPsvEqRLWekZ5ueTbnZ5mDB9sOiY83fITe/Hqc4G zcQ= -----END CERTIFICATE-----Generated at Thu Oct 9 01:18:57 2025 by rpki-client