$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa File: 3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa (raw, json) Hash identifier: s1tXvCRotbACc3vO8nxxokPChYZ3zb2RJsbysdo3Hz0= Subject key identifier: F7:7A:8F:AA:D2:78:16:35:80:27:A5:C4:F4:DD:A1:AF:CB:AF:01:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67249288FC5420A2A9A6E75B4164C0F1453871CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa Signing time: Fri 03 Oct 2025 00:00:09 +0000 ROA not before: Fri 03 Oct 2025 00:00:09 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:24:92:88:fc:54:20:a2:a9:a6:e7:5b:41:64:c0:f1:45:38:71:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 3 00:00:09 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=e087c3fcc07821c809f4b3218f15ecf53929c9b7351721a1e9ca81ea8826ee70, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:bc:3d:f0:db:8a:1f:52:33:75:97:d5:88: 35:8b:3c:7f:56:91:f8:35:dd:dd:94:93:52:0d:2e: 38:1b:da:66:02:39:3b:70:f3:67:ab:9c:3a:fc:5c: 23:32:3b:e2:22:11:9e:e6:ce:51:39:53:be:39:a3: f1:17:cd:b8:8b:9b:43:c1:3d:73:55:19:88:81:fb: 29:3a:8f:30:39:44:1a:a8:06:30:cd:48:93:c0:2e: ec:60:4e:c6:71:fd:62:c3:0b:47:8c:f0:ba:f9:55: a7:0d:54:33:4d:6e:0d:72:65:6b:dc:8c:66:85:8a: 61:ba:20:d1:49:a3:9c:3c:d4:92:76:e3:1d:9d:d7: 0f:6b:c5:fd:49:5e:ef:23:91:3d:6d:ab:37:d7:b0: f8:46:65:94:69:e1:9a:d6:c1:77:b5:d0:ac:9b:c9: bb:fa:ab:dc:17:fe:a6:ea:e1:8a:18:5a:2e:a4:2c: bc:b1:b4:25:11:5a:e5:ea:a8:e5:07:69:d2:a3:7b: 37:2d:80:2a:04:83:2a:58:93:35:20:98:a1:7a:73: 97:b3:1b:7b:a1:7e:12:b4:8e:6c:5e:c7:85:30:2b: 90:36:8d:f4:61:c9:17:57:82:67:92:e9:e8:12:6e: 8c:2b:22:99:98:01:41:75:28:ae:49:d3:9e:46:b8: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7A:8F:AA:D2:78:16:35:80:27:A5:C4:F4:DD:A1:AF:CB:AF:01:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f319ba4-4f75-49fd-9a3b-a90c938a24af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:4000::/40 Signature Algorithm: sha256WithRSAEncryption 3e:42:18:17:4a:2f:ab:d1:c9:86:44:c4:1b:f2:38:ee:40:b0: d5:f3:7e:91:04:25:89:1d:70:9e:06:0b:e3:8f:2b:24:d4:8c: 47:3b:34:56:1c:36:43:6d:73:92:1d:77:c5:d8:23:b0:4c:58: c6:62:55:47:df:24:26:df:4c:c4:a2:7d:56:ba:80:02:ce:a9: 8f:3d:67:a3:fd:e6:50:04:94:01:3a:d7:15:61:d6:4f:5f:7d: 52:9a:d9:4d:cb:ac:f3:af:ef:66:64:49:fa:13:3e:7f:5b:96: 30:e6:62:5a:c5:e8:57:22:89:18:ab:ea:8a:eb:1e:e1:95:66: 1f:36:2d:0b:8b:04:39:a0:81:e1:c7:8d:1e:82:4d:b0:10:b8: b7:a4:6b:32:da:d2:19:12:8c:c8:67:38:da:5e:74:c3:b8:51: f1:bf:1d:ac:3e:f2:3a:6a:cb:9d:cb:4c:b8:04:85:bc:49:39: 10:4c:6d:80:4c:5a:df:ca:21:ca:97:7b:b6:c6:43:47:d1:6b: f8:b5:6c:cb:ca:8c:b9:ae:4d:a4:b9:26:d2:d1:02:0d:cc:08: 61:88:96:93:65:38:57:b1:75:af:e8:4a:63:4e:4a:2c:60:ac: 80:96:8f:c8:2e:d1:f4:fa:7b:e0:c9:cc:71:61:03:be:e9:2d: 8f:c1:59:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZySSiPxUIKKppudbQWTA8UU4cc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwMzAwMDAwOVoX DTI1MTEwNzIzNTk1OVowejFJMEcGA1UEBRNAZTA4N2MzZmNjMDc4MjFjODA5ZjRi MzIxOGYxNWVjZjUzOTI5YzliNzM1MTcyMWExZTljYTgxZWE4ODI2ZWU3MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0K8PfDbih9SM3WX1Yg1izx/VpH4 Nd3dlJNSDS44G9pmAjk7cPNnq5w6/FwjMjviIhGe5s5ROVO+OaPxF824i5tDwT1z VRmIgfspOo8wOUQaqAYwzUiTwC7sYE7Gcf1iwwtHjPC6+VWnDVQzTW4NcmVr3Ixm hYphuiDRSaOcPNSSduMdndcPa8X9SV7vI5E9bas317D4RmWUaeGa1sF3tdCsm8m7 +qvcF/6m6uGKGFoupCy8sbQlEVrl6qjlB2nSo3s3LYAqBIMqWJM1IJihenOXsxt7 oX4StI5sXseFMCuQNo30YckXV4JnkunoEm6MKyKZmAFBdSiuSdOeRrgmzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPd6j6rSeBY1gCelxPTdoa/LrwGNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNmMzE5YmE0LTRmNzUtNDlmZC05YTNiLWE5MGM5MzhhMjRhZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMkAwDQYJKoZIhvcNAQELBQADggEBAD5CGBdKL6vRyYZExBvy OO5AsNXzfpEEJYkdcJ4GC+OPKyTUjEc7NFYcNkNtc5Idd8XYI7BMWMZiVUffJCbf TMSifVa6gALOqY89Z6P95lAElAE61xVh1k9ffVKa2U3LrPOv72ZkSfoTPn9bljDm YlrF6FciiRir6orrHuGVZh82LQuLBDmggeHHjR6CTbAQuLekazLa0hkSjMhnONpe dMO4UfG/Haw+8jpqy53LTLgEhbxJORBMbYBMWt/KIcqXe7bGQ0fRa/i1bMvKjLmu TaS5JtLRAg3MCGGIlpNlOFexda/oSmNOSixgrICWj8gu0fT6e+DJzHFhA77pLY/B WTI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:32 2025 by rpki-client