$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa File: ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa (raw, json) Hash identifier: SaBGpZt5VvBSqs3Q7hwBiXYcfU+Rq7wyVkAmGp6JhHo= Subject key identifier: 02:27:6E:DC:C7:B8:23:E0:D2:0E:21:E3:65:FF:8E:66:D1:1D:A4:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 018595B5355B19BBF53150D1C1D0016529367422 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa Signing time: Tue 07 Oct 2025 00:00:06 +0000 ROA not before: Tue 07 Oct 2025 00:00:06 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:95:b5:35:5b:19:bb:f5:31:50:d1:c1:d0:01:65:29:36:74:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:06 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=5eed047b2ed05e41cad192ff71ad54f1cc5162014e67ac30e2bdbb5cad69d29b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ec:98:8b:2f:36:7f:69:e7:7b:9a:e2:72:24: 81:94:06:8f:ca:0c:bd:db:4b:0e:76:8a:1f:6b:e8: 5e:75:cf:ff:2e:47:65:95:94:6d:90:12:05:94:81: 15:48:af:fa:ac:db:70:b8:c8:99:fd:0c:a0:39:20: fd:23:27:17:b3:55:69:85:63:c7:f5:f9:29:ba:93: 75:29:82:20:3a:73:dc:bd:86:c5:2d:c9:95:68:db: 4c:13:cf:27:fd:d6:32:57:bb:76:42:4e:d1:7f:39: 60:06:06:0b:dc:dc:31:01:4d:88:61:37:cb:6f:28: 84:78:a1:16:7d:15:b9:83:ac:83:dc:71:1c:ef:3c: 50:5a:6d:b2:4c:39:29:94:ec:c2:a1:04:a9:f2:49: 2a:30:fe:76:2b:de:ef:eb:1a:e7:0c:43:f6:93:8d: 06:98:b2:c1:93:76:35:75:da:ca:97:d7:86:c8:bd: a0:62:4e:cb:12:00:ae:15:4a:d4:0d:61:62:08:ef: 5c:62:cc:95:d0:c8:d0:ca:49:0f:a9:97:25:10:47: 6a:78:e7:ac:05:cc:16:ba:8f:61:e8:85:2d:88:a5: 71:71:53:a3:c0:48:e9:81:96:c9:f6:e9:dd:7e:9e: 97:64:22:0a:08:a1:f7:75:b7:ec:38:1f:fb:7e:e8: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:6E:DC:C7:B8:23:E0:D2:0E:21:E3:65:FF:8E:66:D1:1D:A4:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:800::/40 Signature Algorithm: sha256WithRSAEncryption ab:8a:4f:c8:4b:13:70:ee:99:c2:7b:25:30:8f:a8:e8:ca:26: d2:d4:a5:00:38:4c:54:61:6d:77:97:c7:08:84:64:4c:91:a2: 76:f8:43:6a:9a:7f:3d:ba:af:fa:40:d2:5e:c7:e4:55:4b:16: b3:c1:8c:75:ae:05:52:3b:83:5f:be:fb:33:1e:d5:d8:6e:c2: b9:0c:09:0c:26:ce:5f:19:7e:c1:f1:66:03:bd:f2:5e:5e:90: d7:44:6c:8e:4f:e3:3a:22:ab:99:db:1b:82:6b:ae:b1:57:9b: c6:2f:34:e3:d1:23:fc:20:03:eb:12:e3:65:8d:c7:58:88:e7: 7c:8a:59:be:7b:7b:4d:fb:20:07:87:ec:10:03:63:0e:1d:c1: 7b:30:2f:ba:52:4d:e9:5d:16:85:d3:b4:59:d0:90:e5:61:27: 04:24:68:0b:a0:6f:cb:83:a1:37:dc:86:c9:1e:f2:c2:92:0f: 4e:e0:0a:8e:d9:0c:ad:2d:51:d6:07:1f:0e:3f:4d:dd:db:b1: 90:0f:e0:cf:2c:fc:2c:ff:99:84:46:a7:20:ae:61:df:f6:da: 34:28:98:10:20:1a:d0:fa:c4:8b:c1:8e:b1:13:98:bd:68:d5: 32:ce:23:65:21:c7:e2:96:35:ba:98:4a:a1:40:54:a4:2f:97: ab:bc:5e:71 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAYWVtTVbGbv1MVDRwdABZSk2dCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDAwNloX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNANWVlZDA0N2IyZWQwNWU0MWNhZDE5 MmZmNzFhZDU0ZjFjYzUxNjIwMTRlNjdhYzMwZTJiZGJiNWNhZDY5ZDI5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eyYiy82f2nne5riciSBlAaPygy9 20sOdoofa+hedc//LkdllZRtkBIFlIEVSK/6rNtwuMiZ/QygOSD9IycXs1VphWPH 9fkpupN1KYIgOnPcvYbFLcmVaNtME88n/dYyV7t2Qk7RfzlgBgYL3NwxAU2IYTfL byiEeKEWfRW5g6yD3HEc7zxQWm2yTDkplOzCoQSp8kkqMP52K97v6xrnDEP2k40G mLLBk3Y1ddrKl9eGyL2gYk7LEgCuFUrUDWFiCO9cYsyV0MjQykkPqZclEEdqeOes BcwWuo9h6IUtiKVxcVOjwEjpgZbJ9undfp6XZCIKCKH3dbfsOB/7fuiTGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAInbtzHuCPg0g4h42X/jmbRHaQvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhOTFiYTRlLWUyOTktNGU0Mi1iNDYxLWQwM2QwMGMyZDUxYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauQgwDQYJKoZIhvcNAQELBQADggEBAKuKT8hLE3DumcJ7JTCP qOjKJtLUpQA4TFRhbXeXxwiEZEyRonb4Q2qafz26r/pA0l7H5FVLFrPBjHWuBVI7 g1+++zMe1dhuwrkMCQwmzl8ZfsHxZgO98l5ekNdEbI5P4zoiq5nbG4JrrrFXm8Yv NOPRI/wgA+sS42WNx1iI53yKWb57e037IAeH7BADYw4dwXswL7pSTeldFoXTtFnQ kOVhJwQkaAugb8uDoTfchske8sKSD07gCo7ZDK0tUdYHHw4/Td3bsZAP4M8s/Cz/ mYRGpyCuYd/22jQomBAgGtD6xIvBjrETmL1o1TLOI2Uhx+KWNbqYSqFAVKQvl6u8 XnE= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:35 2025 by rpki-client