$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa File: 24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa (raw, json) Hash identifier: m0WDTJTAHuw8vDJ300OY3O+yMqXg7qBVyoWMyneoub0= Subject key identifier: FE:A2:A4:BB:62:F1:F9:70:B4:52:74:42:1B:26:C5:C4:AC:4D:1F:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D78C47D14DE2FAF71FE9BE74C1CCB0CFD4A446E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa Signing time: Tue 14 Oct 2025 00:10:25 +0000 ROA not before: Tue 14 Oct 2025 00:10:25 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:78:c4:7d:14:de:2f:af:71:fe:9b:e7:4c:1c:cb:0c:fd:4a:44:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:25 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=c1532962b3f7d244ae7ec1ee640854b28085c6320b861877d02c8c3b45b16d2e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:8a:34:8c:77:93:c5:c5:ec:88:af:4f:29: b4:3e:92:a0:08:4b:ca:3f:4c:c9:de:2a:19:57:db: af:85:dc:f6:76:00:4f:73:3a:f7:0c:e0:8f:07:ad: bd:65:65:96:79:a7:86:91:79:02:1e:59:6e:ed:99: ab:c8:1b:06:78:7f:c9:25:46:9a:90:b3:76:e3:e1: 4b:60:08:ac:da:d8:a5:ab:91:97:f9:e8:52:f2:28: df:34:cf:38:85:aa:a9:ec:ae:5f:69:bc:f3:62:3f: 66:33:3f:26:b6:4b:6c:3a:0f:fa:5b:25:cf:ec:63: 2d:c1:e7:3e:27:85:86:33:82:53:dc:11:3f:f1:51: 2b:32:c0:29:eb:c4:17:b5:1f:af:aa:f7:b4:a2:33: 72:46:8c:0f:6b:ce:07:e4:07:10:79:92:55:23:38: d6:87:f2:82:0b:b5:a5:88:93:06:12:2c:64:68:fa: 2a:f1:80:82:25:e9:47:6e:4d:35:13:97:13:21:2d: c3:f4:05:8d:af:c5:b9:55:d1:14:1e:fb:bb:9e:ad: c9:ee:e1:af:f4:b8:64:04:3a:d7:c4:45:78:14:5e: cc:79:b1:d8:85:7d:1f:5e:e4:4c:f9:1f:1a:b7:ae: 38:2b:cd:41:95:a4:d6:dc:18:ae:ee:a3:1a:d0:c1: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A2:A4:BB:62:F1:F9:70:B4:52:74:42:1B:26:C5:C4:AC:4D:1F:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24ce6680-4055-4278-9a9d-a2a2f3e1edb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8080::/48 Signature Algorithm: sha256WithRSAEncryption 70:29:2d:5a:cf:d0:62:86:0b:02:b0:6c:ec:8d:07:ec:9d:46: 40:db:74:17:8a:1f:cc:27:7e:f3:75:8f:0c:8a:d3:34:da:f0: be:1b:c4:53:1f:d4:cb:ee:64:dd:c6:f6:ac:88:58:46:56:2b: e0:76:48:87:e9:f9:29:71:f3:7a:fb:24:cb:57:cd:91:e1:6c: 54:7f:4c:be:f9:81:88:55:ef:e3:66:a4:ca:c7:b8:b8:91:1a: 43:5c:74:18:e3:19:11:a6:00:b8:28:4d:47:b8:15:a8:8c:2c: 95:04:50:8c:8f:d4:1c:ea:12:97:75:61:92:f9:eb:8e:a3:ae: 64:5f:63:24:63:73:e5:4e:45:8f:17:44:fd:9b:8c:e4:47:30: c7:be:6b:72:87:76:85:bc:60:c8:f4:ba:d2:0e:43:4f:2a:78: 61:f5:b9:fd:92:2d:0d:5b:7f:41:51:2f:3a:32:79:b6:21:b6: 36:6a:9f:df:bb:d1:3b:ea:6d:9f:51:e7:89:05:6b:36:eb:73: 76:10:bc:aa:85:43:ab:14:4a:de:f1:44:7f:c0:85:72:c8:a4: d3:79:5a:83:8b:ff:ed:2a:1b:eb:26:a2:3b:c2:6c:f1:e9:ec: dc:85:76:b5:8d:f0:8c:bc:f2:30:31:5b:0b:e5:3e:86:2a:4d: 2f:c9:40:52 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXXjEfRTeL69x/pvnTBzLDP1KRG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAyNVoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAYzE1MzI5NjJiM2Y3ZDI0NGFlN2Vj MWVlNjQwODU0YjI4MDg1YzYzMjBiODYxODc3ZDAyYzhjM2I0NWIxNmQyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4eKNIx3k8XF7IivTym0PpKgCEvK P0zJ3ioZV9uvhdz2dgBPczr3DOCPB629ZWWWeaeGkXkCHllu7ZmryBsGeH/JJUaa kLN24+FLYAis2tilq5GX+ehS8ijfNM84haqp7K5fabzzYj9mMz8mtktsOg/6WyXP 7GMtwec+J4WGM4JT3BE/8VErMsAp68QXtR+vqve0ojNyRowPa84H5AcQeZJVIzjW h/KCC7WliJMGEixkaPoq8YCCJelHbk01E5cTIS3D9AWNr8W5VdEUHvu7nq3J7uGv 9LhkBDrXxEV4FF7MebHYhX0fXuRM+R8at644K81BlaTW3Biu7qMa0MFjUwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP6ipLti8flwtFJ0QhsmxcSsTR9RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0Y2U2NjgwLTQwNTUtNDI3OC05YTlkLWEyYTJmM2UxZWRiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAICAMA0GCSqGSIb3DQEBCwUAA4IBAQBwKS1az9BihgsCsGzs jQfsnUZA23QXih/MJ37zdY8MitM02vC+G8RTH9TL7mTdxvasiFhGVivgdkiH6fkp cfN6+yTLV82R4WxUf0y++YGIVe/jZqTKx7i4kRpDXHQY4xkRpgC4KE1HuBWojCyV BFCMj9Qc6hKXdWGS+euOo65kX2MkY3PlTkWPF0T9m4zkRzDHvmtyh3aFvGDI9LrS DkNPKnhh9bn9ki0NW39BUS86Mnm2IbY2ap/fu9E76m2fUeeJBWs263N2ELyqhUOr FEre8UR/wIVyyKTTeVqDi//tKhvrJqI7wmzx6ezchXa1jfCMvPIwMVsL5T6GKk0v yUBS -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:33 2025 by rpki-client