$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa File: 167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa (raw, json) Hash identifier: 8tWCVuWoegxKGceAaEZSTtuLUgrDhQKkILmaWdvHBEg= Subject key identifier: 42:33:19:BC:54:3D:7F:94:1C:E0:EA:1F:7D:F3:04:61:55:E3:6D:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D5C079209A3F66A1EDF036AAEF8329245892F97 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa Signing time: Mon 29 Sep 2025 15:00:49 +0000 ROA not before: Mon 29 Sep 2025 15:00:49 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5c:07:92:09:a3:f6:6a:1e:df:03:6a:ae:f8:32:92:45:89:2f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 29 15:00:49 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=dd3f93192c8188ec5db44180df530ebbc61b09d6cd67d103280bf40384397323, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:2c:e7:2b:05:bc:4b:12:11:bb:83:5a:81: f0:ce:cd:0e:1e:a4:cb:be:20:7c:f6:49:d9:7a:e0: 52:bf:30:c7:ae:f9:59:e0:4e:03:17:d8:4e:c2:fa: dd:11:ad:b7:6c:f8:6c:cc:63:a0:0e:df:7a:69:e5: b0:8e:0d:85:ff:9b:d1:3c:c6:50:62:1d:9c:22:04: a5:b4:6e:3a:8c:f3:61:22:7e:09:47:23:e5:6d:40: ac:d5:c3:13:33:d7:51:b9:e1:d4:ef:6a:12:cf:a7: 07:30:13:be:09:44:45:e7:74:55:a5:ff:0c:8e:57: 69:b1:5c:43:86:31:7a:d1:38:5b:0d:8d:08:4e:9b: f6:b2:7a:7d:a3:1f:67:86:65:9d:66:45:ad:d0:ef: 0b:83:dd:1e:39:f4:55:8c:3b:51:83:32:c1:b4:b9: 6f:8c:d6:99:33:7b:39:33:24:c6:35:d3:c7:89:84: d5:3c:49:a3:c1:24:5b:a5:c0:e3:4b:70:b6:d6:1d: 27:15:28:fe:64:a3:fe:d0:e6:e6:a2:f9:c2:c4:46: 44:19:a5:9d:05:2a:52:52:3c:10:5c:e0:9d:f3:c2: c1:cc:90:94:d7:b4:74:82:93:ab:33:6e:2f:bc:e1: 74:b8:77:5b:58:89:17:02:06:cd:20:8f:9e:eb:3f: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:33:19:BC:54:3D:7F:94:1C:E0:EA:1F:7D:F3:04:61:55:E3:6D:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4000::/40 Signature Algorithm: sha256WithRSAEncryption 36:5a:6d:22:41:0c:a6:8c:c4:2f:30:0a:df:81:d4:64:b2:1e: 93:a7:1e:b4:a5:86:d9:70:e1:d9:58:c2:51:a2:24:6d:bf:67: ca:fe:de:8a:11:89:ba:2c:d2:0f:9e:5c:9d:0e:df:29:73:d4: 22:49:38:fd:fd:a9:75:13:f2:10:13:f5:57:62:7e:6f:98:ec: cd:ae:fd:73:da:4a:1f:a7:0f:7f:77:ee:9c:ab:7c:ce:c7:c0: fb:2a:a1:b7:31:28:de:26:8f:1e:b6:fe:5c:bb:51:cd:c5:ef: 4f:87:a6:06:d2:97:b6:8a:3e:6d:fc:54:27:5d:38:13:60:3b: db:8d:92:4d:eb:73:6c:71:0d:c7:70:40:8b:0f:3f:a4:e3:67: 33:6e:af:46:12:4c:1a:19:c0:de:c4:77:f2:85:81:99:7b:d3: d3:50:33:78:d8:0d:f2:ce:19:94:1f:0d:30:c5:25:72:7e:a8: 44:d9:23:c6:08:fd:19:57:27:c1:ce:47:43:5e:f2:ce:54:1f: a5:99:a2:ec:6f:4e:71:c6:21:c9:67:01:85:0d:be:0a:3f:cc: d5:21:bd:09:86:10:bb:38:04:27:75:15:cd:71:d2:62:2d:76: a6:bf:e8:c0:de:67:a2:0c:6f:39:68:cf:97:dd:1c:da:f8:77: f4:b8:dd:8e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHVwHkgmj9moe3wNqrvgykkWJL5cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyOTE1MDA0OVoX DTI1MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAZGQzZjkzMTkyYzgxODhlYzVkYjQ0 MTgwZGY1MzBlYmJjNjFiMDlkNmNkNjdkMTAzMjgwYmY0MDM4NDM5NzMyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocss5ysFvEsSEbuDWoHwzs0OHqTL viB89knZeuBSvzDHrvlZ4E4DF9hOwvrdEa23bPhszGOgDt96aeWwjg2F/5vRPMZQ Yh2cIgSltG46jPNhIn4JRyPlbUCs1cMTM9dRueHU72oSz6cHMBO+CURF53RVpf8M jldpsVxDhjF60ThbDY0ITpv2snp9ox9nhmWdZkWt0O8Lg90eOfRVjDtRgzLBtLlv jNaZM3s5MyTGNdPHiYTVPEmjwSRbpcDjS3C21h0nFSj+ZKP+0ObmovnCxEZEGaWd BSpSUjwQXOCd88LBzJCU17R0gpOrM24vvOF0uHdbWIkXAgbNII+e6z9TkwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEIzGbxUPX+UHODqH33zBGFV421mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE2NzczM2ZlLTZhYjEtNDQzZC1iYzdkLTcwMmE2YmZhNmRiYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7UAwDQYJKoZIhvcNAQELBQADggEBADZabSJBDKaMxC8wCt+B 1GSyHpOnHrSlhtlw4dlYwlGiJG2/Z8r+3ooRibos0g+eXJ0O3ylz1CJJOP39qXUT 8hAT9Vdifm+Y7M2u/XPaSh+nD3937pyrfM7HwPsqobcxKN4mjx62/ly7Uc3F70+H pgbSl7aKPm38VCddOBNgO9uNkk3rc2xxDcdwQIsPP6TjZzNur0YSTBoZwN7Ed/KF gZl709NQM3jYDfLOGZQfDTDFJXJ+qETZI8YI/RlXJ8HOR0Ne8s5UH6WZouxvTnHG IclnAYUNvgo/zNUhvQmGELs4BCd1Fc1x0mItdqa/6MDeZ6IMbzloz5fdHNr4d/S4 3Y4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:19 2025 by rpki-client