$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa File: 5a0d1930-a322-4bbd-8eef-91ba17b37082.roa (raw, json) Hash identifier: /3TCa9YrdIDziJfm0olmfDaF/Vmu8d8J2slhGr8dKrc= Subject key identifier: 17:64:3F:38:B1:A2:88:71:DE:7C:DF:33:C4:2D:F5:19:E5:58:6A:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 645DA9409E579201851DB3A5500D37628F1790B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa Signing time: Mon 13 Oct 2025 15:20:09 +0000 ROA not before: Mon 13 Oct 2025 15:20:09 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5d:a9:40:9e:57:92:01:85:1d:b3:a5:50:0d:37:62:8f:17:90:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:20:09 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=f03e309e816dc416e308899ce340b5d0b407ab83e4c389498dcdc55e29656a48, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:5c:d6:3d:f9:b4:d6:75:1a:87:af:67:bf: 50:90:07:4b:05:92:0b:e4:e9:c1:be:15:6c:c8:81: fe:f0:9a:cb:fb:6a:86:92:a0:d7:20:e8:d8:ee:f5: 72:37:7c:f6:cb:7b:bf:d1:a9:2a:5b:af:ad:ac:08: 36:86:94:8e:96:44:f9:c9:dd:2e:a6:c1:69:dc:3e: c3:f2:3a:83:02:2a:2b:4f:4d:89:76:55:aa:16:a1: 53:7c:f5:38:f3:cd:19:67:bb:6f:9e:d4:aa:24:ce: 29:5b:ae:19:a9:9f:fc:db:79:e3:c2:cc:c0:46:ba: d6:02:0c:27:32:c2:de:75:73:ba:10:f1:d8:ec:f7: 35:e3:47:37:fc:fe:ac:1b:3a:c8:78:ab:d9:b3:46: 43:bf:14:ce:eb:b3:f3:34:9b:a6:be:b6:ba:45:34: 48:72:45:26:cb:91:c8:33:9a:70:6a:e4:96:96:3c: 2e:e3:13:76:be:f1:66:aa:a5:0a:b2:6e:95:64:49: d5:14:cc:4b:6b:c6:b5:f3:60:2b:5d:1e:45:0f:a6: fa:82:2e:92:77:5a:ff:7b:cb:24:89:c9:7b:1d:cc: 09:a9:52:ab:44:86:e6:ff:2d:09:91:07:65:03:66: 10:8e:b5:4a:19:20:0e:fe:60:42:b6:af:eb:24:a9: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:3F:38:B1:A2:88:71:DE:7C:DF:33:C4:2D:F5:19:E5:58:6A:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption ba:e3:2c:bb:3e:8f:f0:93:71:45:8f:4e:a5:73:84:ba:69:96: b4:70:2c:bb:9c:07:70:f4:17:4f:ee:5d:29:1d:b4:27:19:f6: d8:c1:11:6e:af:3e:5b:6a:3e:93:59:bd:ae:fc:2c:6a:c7:bf: 01:c0:c2:18:c1:84:c7:91:59:fc:16:c6:95:92:57:4a:7d:56: dd:50:5c:7a:24:da:66:de:09:2e:eb:c1:bf:f4:25:ff:5a:d6: c9:9b:4b:5b:24:3b:c9:17:71:d5:ed:da:44:4a:9a:00:e0:84: c1:ab:24:10:4a:d2:cd:a8:21:0b:79:db:d7:a2:6c:3c:ac:46: 70:32:78:c8:ec:45:ef:be:d4:8a:e5:de:41:8c:cf:0d:3d:03: 8b:f9:b9:1c:29:67:f8:36:18:f7:80:d9:12:4e:74:a6:83:35: b6:36:eb:72:9e:cd:1c:0d:eb:2f:ce:c0:47:28:59:dd:0e:4c: 11:77:01:98:7c:07:7c:35:82:42:5c:4d:cc:c6:73:9e:04:c5: 3e:c4:9d:f1:ee:2e:5a:01:8d:90:52:cd:93:d1:3e:b6:4d:e8: 84:c0:02:40:a5:52:85:a1:16:a3:f5:4f:33:8e:6e:f0:37:6d: 38:fe:6d:50:94:c4:a9:01:29:82:bc:b1:e4:c2:36:85:3e:9d: ab:13:71:de -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZF2pQJ5XkgGFHbOlUA03Yo8XkLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MjAwOVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAZjAzZTMwOWU4MTZkYzQxNmUzMDg4 OTljZTM0MGI1ZDBiNDA3YWI4M2U0YzM4OTQ5OGRjZGM1NWUyOTY1NmE0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Bc1j35tNZ1GoevZ79QkAdLBZIL 5OnBvhVsyIH+8JrL+2qGkqDXIOjY7vVyN3z2y3u/0akqW6+trAg2hpSOlkT5yd0u psFp3D7D8jqDAiorT02JdlWqFqFTfPU4880ZZ7tvntSqJM4pW64ZqZ/823njwszA RrrWAgwnMsLedXO6EPHY7Pc140c3/P6sGzrIeKvZs0ZDvxTO67PzNJumvra6RTRI ckUmy5HIM5pwauSWljwu4xN2vvFmqqUKsm6VZEnVFMxLa8a182ArXR5FD6b6gi6S d1r/e8skicl7HcwJqVKrRIbm/y0JkQdlA2YQjrVKGSAO/mBCtq/rJKnJbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBdkPzixoohx3nzfM8Qt9RnlWGrhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhMGQxOTMwLWEzMjItNGJiZC04ZWVmLTkxYmExN2IzNzA4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYeDAMA0GCSqGSIb3DQEBCwUAA4IBAQC64yy7Po/wk3FFj06l c4S6aZa0cCy7nAdw9BdP7l0pHbQnGfbYwRFurz5baj6TWb2u/Cxqx78BwMIYwYTH kVn8FsaVkldKfVbdUFx6JNpm3gku68G/9CX/WtbJm0tbJDvJF3HV7dpESpoA4ITB qyQQStLNqCELedvXomw8rEZwMnjI7EXvvtSK5d5BjM8NPQOL+bkcKWf4Nhj3gNkS TnSmgzW2Nutyns0cDesvzsBHKFndDkwRdwGYfAd8NYJCXE3MxnOeBMU+xJ3x7i5a AY2QUs2T0T62TeiEwAJApVKFoRaj9U8zjm7wN204/m1QlMSpASmCvLHkwjaFPp2r E3He -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:01 2025 by rpki-client