$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa File: 02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa (raw, json) Hash identifier: TR4Acy4qSLTrPJvx08iREO+GKza8o4cO6IwlSdKlH+k= Subject key identifier: 1A:CF:44:68:4C:84:40:FD:C3:32:82:1B:89:CC:81:26:4C:37:0B:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 680B06EC043248127F2E690C19A0515DEE78ACF5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa Signing time: Tue 14 Oct 2025 00:10:06 +0000 ROA not before: Tue 14 Oct 2025 00:10:06 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0b:06:ec:04:32:48:12:7f:2e:69:0c:19:a0:51:5d:ee:78:ac:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:06 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=642550935883ded6c7cef39d49fedecd9adcb2c297d88b1beb91811e379a6740, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:4b:66:fc:1a:83:ae:2c:69:85:b8:24:7b: 11:b7:bc:15:03:a2:d4:13:c1:da:98:46:74:ec:4d: 2c:cb:5c:61:f8:0d:43:3f:5e:be:75:08:ab:5f:48: 63:4c:7b:2d:de:54:97:49:2a:b9:3f:e3:9f:9a:58: 82:02:ae:a1:18:23:13:e7:4b:86:d7:14:19:81:41: 92:f5:5c:cf:a7:3e:9d:91:0e:54:07:c9:08:d9:df: 47:37:62:2d:de:26:11:9a:07:2a:5a:f1:55:c6:1e: 89:53:c1:fa:51:3d:51:44:74:65:07:46:a3:66:36: 94:90:69:75:44:9d:d6:65:84:2e:a7:0d:39:74:e0: 85:87:96:eb:c6:9e:f4:11:18:ec:a7:4b:6b:e5:8a: 41:65:5b:08:27:07:28:54:5f:b3:8e:07:46:3e:40: 2d:7a:0d:3e:dd:fc:8b:d3:95:dc:88:05:fa:89:02: 27:b4:bd:c0:27:5f:5a:88:4c:ad:10:52:d5:f6:00: a2:39:8e:4e:e7:9c:ea:81:a4:ce:c5:ac:15:80:e3: 55:20:ed:33:68:ad:38:b5:b4:89:a7:ce:db:ba:9f: 04:1d:86:b2:3f:03:65:7b:b5:98:6f:21:72:96:66: 49:17:7f:6f:f4:01:b1:c7:99:1b:23:71:0b:9d:b9: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CF:44:68:4C:84:40:FD:C3:32:82:1B:89:CC:81:26:4C:37:0B:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d4e2a1-b855-4dc9-b76f-9f661a0dff14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:9000::/40 Signature Algorithm: sha256WithRSAEncryption b0:55:dd:0f:85:95:d2:90:a4:0f:74:96:27:94:fb:40:43:37: 2e:6d:09:ea:6d:90:1e:cf:3b:2e:6d:41:9f:e8:eb:23:94:66: 64:f1:44:6a:94:bc:86:8d:61:92:46:81:87:b1:b1:fe:4f:7f: c5:6f:18:fb:6f:19:15:6a:1e:2b:09:fd:29:ee:65:30:0a:fb: 06:17:6e:f8:80:70:54:a6:e0:a5:2d:6a:7c:9b:c9:87:7d:1a: 5c:50:d4:78:a0:83:d7:b7:ac:da:a5:ad:2d:02:c4:af:97:b5: 3c:58:ab:f2:d7:f4:bb:f1:7d:18:b1:a8:d8:c7:01:ae:86:a9: 9e:be:16:37:4d:97:a6:1b:00:ef:e0:49:20:0d:01:ec:d2:17: 6a:b1:ec:79:6e:18:4e:7f:ef:32:89:bf:9d:49:6d:d7:c9:26: 18:3d:9b:af:86:a3:e4:17:20:02:0d:c3:de:e3:00:5b:cb:a1: 96:ba:49:a3:1e:89:e1:97:97:da:04:fc:85:89:26:06:9b:5a: 53:1c:e8:1c:d9:9d:ad:9c:ed:52:1d:33:36:f5:a6:03:25:0f: 72:7e:84:fb:97:af:ef:4c:db:c3:28:4a:10:d8:19:49:ab:94: a7:1d:9e:de:0e:13:80:e4:f1:e5:c7:a0:ce:22:05:21:aa:53: a3:57:25:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaAsG7AQySBJ/LmkMGaBRXe54rPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAwNloX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNANjQyNTUwOTM1ODgzZGVkNmM3Y2Vm MzlkNDlmZWRlY2Q5YWRjYjJjMjk3ZDg4YjFiZWI5MTgxMWUzNzlhNjc0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4tLZvwag64saYW4JHsRt7wVA6LU E8HamEZ07E0sy1xh+A1DP16+dQirX0hjTHst3lSXSSq5P+OfmliCAq6hGCMT50uG 1xQZgUGS9VzPpz6dkQ5UB8kI2d9HN2It3iYRmgcqWvFVxh6JU8H6UT1RRHRlB0aj ZjaUkGl1RJ3WZYQupw05dOCFh5brxp70ERjsp0tr5YpBZVsIJwcoVF+zjgdGPkAt eg0+3fyL05XciAX6iQIntL3AJ19aiEytEFLV9gCiOY5O55zqgaTOxawVgONVIO0z aK04tbSJp87bup8EHYayPwNle7WYbyFylmZJF39v9AGxx5kbI3ELnbmuGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBrPRGhMhED9wzKCG4nMgSZMNwu5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyZDRlMmExLWI4NTUtNGRjOS1iNzZmLTlmNjYxYTBkZmYxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYZAwDQYJKoZIhvcNAQELBQADggEBALBV3Q+FldKQpA90lieU +0BDNy5tCeptkB7POy5tQZ/o6yOUZmTxRGqUvIaNYZJGgYexsf5Pf8VvGPtvGRVq HisJ/SnuZTAK+wYXbviAcFSm4KUtanybyYd9GlxQ1Higg9e3rNqlrS0CxK+XtTxY q/LX9LvxfRixqNjHAa6GqZ6+FjdNl6YbAO/gSSANAezSF2qx7HluGE5/7zKJv51J bdfJJhg9m6+Go+QXIAINw97jAFvLoZa6SaMeieGXl9oE/IWJJgabWlMc6BzZna2c 7VIdMzb1pgMlD3J+hPuXr+9M28MoShDYGUmrlKcdnt4OE4Dk8eXHoM4iBSGqU6NX JVg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:50 2025 by rpki-client