$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa File: 561b2653-251b-4a06-91e6-d8a55b1ccb18.roa (raw, json) Hash identifier: Bun5uI/xkRWXnXWCtvqaXesnahgglPgFcIRpvG7vENU= Subject key identifier: FB:84:7B:7D:8F:A1:77:21:B2:C8:DC:8A:85:93:44:41:C0:B8:92:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6384D62B0A4B7BFF15AD2CA83AAFECED521A23FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa Signing time: Wed 15 Oct 2025 00:00:05 +0000 ROA not before: Wed 15 Oct 2025 00:00:05 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:84:d6:2b:0a:4b:7b:ff:15:ad:2c:a8:3a:af:ec:ed:52:1a:23:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:00:05 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=15a1560e25ecaf730eca4eaf3a6894b9a88affe047d25965ddd923da514d9475, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:44:9b:e9:95:75:be:ac:7f:5d:42:51:d0: 51:79:87:20:d6:01:4d:03:70:0b:ba:e8:20:be:28: 6d:08:a0:19:d8:21:c4:d8:58:72:87:e6:27:13:2b: 13:c3:27:2a:cc:b1:18:c1:dc:e8:6c:ee:c8:d4:73: 7c:26:4a:a1:52:16:ea:75:42:96:45:ba:05:8a:1a: d4:a3:6b:c7:21:87:36:04:96:7c:b5:90:5a:b0:67: 16:f1:d5:29:37:1d:27:43:37:f9:38:6c:8b:03:ea: 52:5f:eb:36:ec:19:79:81:13:c0:2a:e0:cd:57:94: cb:7c:5c:cb:66:b7:65:9e:89:81:f3:df:af:35:72: 63:4c:5b:a2:fc:7c:6d:d9:de:17:1b:7c:41:19:bc: 16:fb:8e:47:d8:50:3f:e9:57:d9:c5:b4:bd:f9:b8: bb:73:91:aa:40:11:38:04:9c:78:8a:ef:0f:e8:09: 59:3a:d6:4a:33:b1:e2:e5:83:04:50:47:25:05:69: 88:70:b2:86:62:c3:a3:a3:23:bd:07:da:2e:ca:ef: 0c:ff:4a:ee:e9:84:3d:e0:85:fb:ba:7e:ba:8a:3e: 74:d7:81:17:51:81:8b:e7:f3:9a:f0:43:bc:90:69: 68:45:67:ae:cd:ab:ef:eb:e5:d9:e1:ca:78:99:d7: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:7B:7D:8F:A1:77:21:B2:C8:DC:8A:85:93:44:41:C0:B8:92:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/561b2653-251b-4a06-91e6-d8a55b1ccb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:8800::/40 Signature Algorithm: sha256WithRSAEncryption 30:64:77:b8:53:56:21:74:f9:e1:59:29:7f:78:67:1f:55:7a: c2:32:64:82:0a:00:01:5d:97:b0:45:60:e4:70:b9:03:56:df: 8b:70:5a:50:0e:7c:eb:34:07:85:8f:b3:8a:73:60:48:d2:3c: 7f:a2:9f:e7:b4:fb:c5:6d:fc:d0:9d:ca:ee:b3:98:85:d6:5d: fc:24:e2:c6:f3:a5:90:8e:5b:8a:5f:18:a9:86:fe:7e:05:e8: 7b:48:ce:3b:51:e4:df:c1:e7:53:3e:0f:a0:c2:3f:e8:1b:22: 0f:ee:ef:95:89:a6:d6:7b:d5:75:91:f3:bd:c7:53:19:bc:5e: 18:9b:ac:bd:45:2a:01:86:35:e4:6a:55:16:45:0d:d2:1a:a4: 18:31:85:87:48:b2:3c:34:e8:75:c9:12:9a:62:1b:b7:95:38: 04:06:f8:95:67:08:ee:63:35:5b:4c:1d:f7:fc:f7:03:84:e9: 99:fe:ed:ab:93:c8:4c:94:6a:49:4a:3a:e9:8c:a8:c9:6d:c9: ba:3e:0d:6b:dc:df:04:70:29:3c:4f:80:21:87:fb:a3:ce:84: 84:fa:ad:f4:b8:3e:35:5c:b9:a3:9b:15:63:58:c2:6a:4f:18: 93:ad:34:63:81:99:9f:93:c9:b8:36:a4:b6:f6:bd:1a:ed:97: cc:31:47:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY4TWKwpLe/8VrSyoOq/s7VIaI/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMDAwNVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAMTVhMTU2MGUyNWVjYWY3MzBlY2E0 ZWFmM2E2ODk0YjlhODhhZmZlMDQ3ZDI1OTY1ZGRkOTIzZGE1MTRkOTQ3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgNEm+mVdb6sf11CUdBReYcg1gFN A3ALuuggvihtCKAZ2CHE2Fhyh+YnEysTwycqzLEYwdzobO7I1HN8JkqhUhbqdUKW RboFihrUo2vHIYc2BJZ8tZBasGcW8dUpNx0nQzf5OGyLA+pSX+s27Bl5gRPAKuDN V5TLfFzLZrdlnomB89+vNXJjTFui/Hxt2d4XG3xBGbwW+45H2FA/6VfZxbS9+bi7 c5GqQBE4BJx4iu8P6AlZOtZKM7Hi5YMEUEclBWmIcLKGYsOjoyO9B9ouyu8M/0ru 6YQ94IX7un66ij5014EXUYGL5/Oa8EO8kGloRWeuzavv6+XZ4cp4mdcB4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPuEe32PoXchssjcioWTREHAuJIrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MWIyNjUzLTI1MWItNGEwNi05MWU2LWQ4YTU1YjFjY2IxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMogwDQYJKoZIhvcNAQELBQADggEBADBkd7hTViF0+eFZKX94 Zx9VesIyZIIKAAFdl7BFYORwuQNW34twWlAOfOs0B4WPs4pzYEjSPH+in+e0+8Vt /NCdyu6zmIXWXfwk4sbzpZCOW4pfGKmG/n4F6HtIzjtR5N/B51M+D6DCP+gbIg/u 75WJptZ71XWR873HUxm8XhibrL1FKgGGNeRqVRZFDdIapBgxhYdIsjw06HXJEppi G7eVOAQG+JVnCO5jNVtMHff89wOE6Zn+7auTyEyUaklKOumMqMltybo+DWvc3wRw KTxPgCGH+6POhIT6rfS4PjVcuaObFWNYwmpPGJOtNGOBmZ+Tybg2pLb2vRrtl8wx R4o= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:14 2025 by rpki-client