$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa File: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (raw, json) Hash identifier: zwcPWnYArAZVLpt/G7O+elUyq5aa8j+XVNVGlvHcIz4= Subject key identifier: 7F:C2:67:C2:97:CB:CD:AB:A7:6D:5A:34:BC:32:E8:BE:5C:C6:F1:F6 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 294AD7839426BDD2A63A4B782F070E029B07AE9B Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa Signing time: Fri 24 Oct 2025 00:00:01 +0000 ROA not before: Fri 24 Oct 2025 00:00:01 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4a:d7:83:94:26:bd:d2:a6:3a:4b:78:2f:07:0e:02:9b:07:ae:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 24 00:00:01 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=30be1e64c8e5d22f4381d3d8ff5443ecac76810da8bd6b2cc10883e47f4fba5d, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:77:de:30:5b:53:d0:0c:44:59:24:82:71: 73:a0:f2:da:65:4c:4c:e2:ab:3f:48:b1:21:fa:79: 14:ca:d5:e5:03:8c:7b:18:6b:11:a4:16:d5:57:5c: 7b:6a:c3:bb:65:c2:21:23:be:32:a6:b7:e1:4e:b8: ad:b6:88:27:e4:18:54:c4:9d:ee:ff:c9:b3:00:d0: 7b:8f:c7:15:0e:ad:d2:b5:3f:31:1e:ae:7d:66:eb: d8:f9:b5:62:b5:80:84:d2:b4:f3:ee:2e:6e:50:80: 42:be:c4:a4:a5:7d:bc:41:83:c7:91:3e:96:7f:56: 93:f1:aa:7c:c2:60:c8:5d:cd:f8:2d:3b:fd:1b:64: ca:21:96:0b:a5:fb:b5:12:a9:d3:a4:07:a7:e4:2f: 4a:b8:ed:73:0f:5c:21:26:eb:c8:3d:c6:14:65:9f: 75:c8:ad:4f:80:28:8d:2c:1c:7b:52:73:94:42:28: b7:10:99:06:97:a6:d1:01:3b:cf:78:c1:48:51:29: 0b:f7:af:6b:ab:16:58:8d:b0:24:a3:0a:ed:91:a0: a1:2f:52:70:c8:88:3a:ea:3b:b5:f1:0d:9d:d7:03: 94:64:ad:22:45:99:18:80:33:40:5d:37:17:9d:5b: fa:1c:77:5f:14:e2:a7:4f:10:8a:53:46:29:d0:b6: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:67:C2:97:CB:CD:AB:A7:6D:5A:34:BC:32:E8:BE:5C:C6:F1:F6 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/32 Signature Algorithm: sha256WithRSAEncryption 33:56:c0:ef:f5:a2:96:13:e5:9b:22:e6:e2:a9:8f:cd:d6:9d: 9b:58:53:9d:8a:58:08:aa:52:94:33:02:25:d9:00:5a:53:ba: 15:d3:69:f0:35:28:7e:f7:25:e4:05:b4:46:f2:05:de:ce:b7: ca:4c:54:c2:66:ac:43:b8:cf:e4:cb:48:ba:df:52:5d:58:1a: 99:14:34:92:6f:5d:3f:2d:04:bf:e6:57:f4:e7:c4:29:30:53: 85:71:e4:b4:40:98:ed:e5:36:cf:8e:99:e6:a6:c9:51:e9:06: d7:b9:33:e6:ca:ba:74:22:79:72:64:3c:6f:34:c1:e4:7a:ad: 90:2e:47:d0:d2:07:a9:5a:b9:ed:76:58:b8:84:ea:5d:1a:47: 3e:9f:a0:97:77:63:82:78:2c:3c:ff:91:ca:05:b5:e5:a5:49: 2a:f1:6b:2c:58:74:d2:fb:89:e2:c0:48:c0:42:a2:e4:f4:3c: 0b:cf:3f:a3:9f:79:84:a3:d1:6e:c5:df:36:bb:07:14:1c:14: 51:bb:a2:0b:56:e3:e0:71:38:61:c8:0f:b9:4a:70:3d:b7:fa: f9:58:6e:60:e8:ee:9c:7b:f1:6d:44:d0:b4:fe:c2:90:c8:f1: 15:84:66:8a:d0:cc:c2:5f:00:b9:74:8d:8e:d7:7b:13:07:3d: b0:b2:59:d4 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUKUrXg5QmvdKmOkt4LwcOApsHrpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MTAyNDAwMDAwMVoX DTI1MTEyODIzNTk1OVowejFJMEcGA1UEBRNAMzBiZTFlNjRjOGU1ZDIyZjQzODFk M2Q4ZmY1NDQzZWNhYzc2ODEwZGE4YmQ2YjJjYzEwODgzZTQ3ZjRmYmE1ZDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bR33jBbU9AMRFkkgnFzoPLaZUxM 4qs/SLEh+nkUytXlA4x7GGsRpBbVV1x7asO7ZcIhI74yprfhTrittogn5BhUxJ3u /8mzANB7j8cVDq3StT8xHq59ZuvY+bVitYCE0rTz7i5uUIBCvsSkpX28QYPHkT6W f1aT8ap8wmDIXc34LTv9G2TKIZYLpfu1EqnTpAen5C9KuO1zD1whJuvIPcYUZZ91 yK1PgCiNLBx7UnOUQii3EJkGl6bRATvPeMFIUSkL969rqxZYjbAkowrtkaChL1Jw yIg66ju18Q2d1wOUZK0iRZkYgDNAXTcXnVv6HHdfFOKnTxCKU0Yp0LYaLwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFH/CZ8KXy82rp21aNLwy6L5cxvH2MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi L2NjMmY3MDkzLTIxYTYtNDAwZi05ZGIxLTkzYzJmZTAyYmMxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAOzADANBgkqhkiG9w0BAQsFAAOCAQEAM1bA7/WilhPlmyLm4qmP zdadm1hTnYpYCKpSlDMCJdkAWlO6FdNp8DUofvcl5AW0RvIF3s63ykxUwmasQ7jP 5MtIut9SXVgamRQ0km9dPy0Ev+ZX9OfEKTBThXHktECY7eU2z46Z5qbJUekG17kz 5sq6dCJ5cmQ8bzTB5HqtkC5H0NIHqVq57XZYuITqXRpHPp+gl3djgngsPP+RygW1 5aVJKvFrLFh00vuJ4sBIwEKi5PQ8C88/o595hKPRbsXfNrsHFBwUUbuiC1bj4HE4 YcgPuUpwPbf6+VhuYOjunHvxbUTQtP7CkMjxFYRmitDMwl8AuXSNjtd7Ewc9sLJZ 1A== -----END CERTIFICATE-----Generated at Sun Nov 2 02:56:04 2025 by rpki-client