$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa File: f593232f-0244-4a16-ab0c-ae29ea60c65f.roa (raw, json) Hash identifier: XALDYVMx87yTveDlNEYH2OqG0+bpXV8Owqj4Pz9ocmc= Subject key identifier: 14:A4:A9:69:B3:71:18:76:8E:0B:3E:25:27:0B:B1:24:A8:79:A7:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05562EEE7BF9D2B7784F04439A34E69EAC56CAF4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa Signing time: Wed 15 Oct 2025 00:10:37 +0000 ROA not before: Wed 15 Oct 2025 00:10:37 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:56:2e:ee:7b:f9:d2:b7:78:4f:04:43:9a:34:e6:9e:ac:56:ca:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:10:37 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=ee7fab8d7f2915a5160b65f1dc413f0797366f0934baf06c29fdd340eab07971, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:bf:bb:49:6d:67:b7:a1:66:5e:b5:36:83: ad:93:ef:a9:f4:5c:1b:d5:54:a8:02:f5:bd:8f:2b: 39:ff:b6:e2:1b:b0:5a:02:13:6b:de:b4:ff:c9:1a: 78:67:8a:a5:7f:d2:b5:2c:d2:ab:51:90:c6:65:df: 74:fe:c6:b5:60:b0:56:ef:b4:8e:64:8b:17:d8:99: 01:fc:e4:91:6f:33:65:e2:85:88:87:54:52:6d:92: 1f:f5:c8:51:0b:f0:ff:6b:00:44:0a:1e:b8:81:f7: 70:04:05:e7:9f:04:99:a9:55:34:07:3c:3e:d4:d6: be:a9:b3:4d:61:6a:d9:b9:d7:22:c0:0e:fb:85:57: 97:c6:a7:28:5d:7f:a9:9f:87:72:ce:1c:b7:7c:3d: 14:61:da:82:03:07:76:b9:3b:c0:10:37:86:7c:de: 40:6a:b2:f2:83:1c:3d:43:59:64:94:2a:99:e2:95: 3d:e5:1e:a6:96:04:e1:19:98:52:c9:e4:1d:cd:0b: 2b:1d:f6:4c:d4:e7:d7:d9:17:f3:13:50:c5:8d:9f: 7a:e8:22:29:c0:05:ee:41:ba:75:5c:c6:e6:c2:ff: 71:ee:a2:1b:75:44:3b:6a:e1:49:d5:72:75:a7:8c: 14:5d:f9:d0:03:5b:09:6c:15:67:44:8e:10:d8:63: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A4:A9:69:B3:71:18:76:8E:0B:3E:25:27:0B:B1:24:A8:79:A7:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:f000::/40 Signature Algorithm: sha256WithRSAEncryption c0:0f:23:ce:7c:e2:0f:83:c3:1d:92:83:c6:ee:79:5b:58:f4: 06:51:03:99:69:03:bb:a3:45:01:a4:fb:fa:3b:f6:8e:69:54: 17:88:f7:e2:32:bc:c9:89:8a:44:6f:1d:59:63:6c:df:cc:c5: 17:5c:46:92:9b:99:16:52:1d:c1:21:e4:ea:ed:15:11:50:c1: 70:fd:d9:9e:a9:92:00:10:f3:99:e3:e2:57:b7:5d:21:8a:bc: c0:d7:36:71:6a:a6:53:85:85:0c:69:c3:0f:fc:b8:0b:34:88: a8:1f:15:35:be:ab:d8:25:66:7d:95:74:79:20:b3:6f:94:fb: c9:5f:74:e3:2a:df:f3:94:07:3b:e2:c9:95:ab:67:e4:c3:28: 77:cd:a8:74:41:6b:00:65:3c:62:c7:11:7a:81:5b:0d:00:d2: 06:af:d3:f5:a3:d0:25:ce:0f:a4:5c:a7:bd:75:d9:89:8c:85: 6a:0d:19:87:84:de:76:41:b2:a1:48:92:7d:ec:9d:29:64:11: 6d:a1:73:a4:cc:80:3e:e7:9c:d1:a6:d9:ba:ef:62:fd:14:67: 83:21:2e:06:5b:96:9d:3e:80:64:17:55:74:26:e1:41:2b:05: ec:68:29:67:4b:de:6a:43:1e:0c:00:f0:d8:2b:10:be:d6:a6: 99:fc:bb:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBVYu7nv50rd4TwRDmjTmnqxWyvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMTAzN1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAZWU3ZmFiOGQ3ZjI5MTVhNTE2MGI2 NWYxZGM0MTNmMDc5NzM2NmYwOTM0YmFmMDZjMjlmZGQzNDBlYWIwNzk3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEK/u0ltZ7ehZl61NoOtk++p9Fwb 1VSoAvW9jys5/7biG7BaAhNr3rT/yRp4Z4qlf9K1LNKrUZDGZd90/sa1YLBW77SO ZIsX2JkB/OSRbzNl4oWIh1RSbZIf9chRC/D/awBECh64gfdwBAXnnwSZqVU0Bzw+ 1Na+qbNNYWrZudciwA77hVeXxqcoXX+pn4dyzhy3fD0UYdqCAwd2uTvAEDeGfN5A arLygxw9Q1lklCqZ4pU95R6mlgThGZhSyeQdzQsrHfZM1OfX2RfzE1DFjZ966CIp wAXuQbp1XMbmwv9x7qIbdUQ7auFJ1XJ1p4wUXfnQA1sJbBVnRI4Q2GMXFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBSkqWmzcRh2jgs+JScLsSSoeadjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1OTMyMzJmLTAyNDQtNGExNi1hYjBjLWFlMjllYTYwYzY1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaPAwDQYJKoZIhvcNAQELBQADggEBAMAPI8584g+Dwx2Sg8bu eVtY9AZRA5lpA7ujRQGk+/o79o5pVBeI9+IyvMmJikRvHVljbN/MxRdcRpKbmRZS HcEh5OrtFRFQwXD92Z6pkgAQ85nj4le3XSGKvMDXNnFqplOFhQxpww/8uAs0iKgf FTW+q9glZn2VdHkgs2+U+8lfdOMq3/OUBzviyZWrZ+TDKHfNqHRBawBlPGLHEXqB Ww0A0gav0/Wj0CXOD6Rcp7112YmMhWoNGYeE3nZBsqFIkn3snSlkEW2hc6TMgD7n nNGm2brvYv0UZ4MhLgZblp0+gGQXVXQm4UErBexoKWdL3mpDHgwA8NgrEL7Wppn8 u20= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:34 2025 by rpki-client