$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: DR6z5IcA+w5v7M8yMG3U5ZExC58cvJbNBi0dyO/WQ68= Subject key identifier: 53:F4:11:B3:AD:86:50:2A:26:2E:09:6D:1F:FB:1D:F1:4A:1C:B2:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5673A75335C5A43F60BB74491C01F28CAED2B2C6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Tue 14 Oct 2025 00:00:42 +0000 ROA not before: Tue 14 Oct 2025 00:00:42 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:a7:53:35:c5:a4:3f:60:bb:74:49:1c:01:f2:8c:ae:d2:b2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:00:42 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=b4b11c7b812668a572cc91fe64f0b909a4ffa4b6e4411165f1b123fa4f432258, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:72:f5:20:e5:0e:52:23:be:5f:bb:ca:1b: 9d:7d:f7:ee:1d:84:29:53:37:12:fc:38:de:e5:ca: ad:3f:f2:c9:94:75:8a:c5:a1:44:1e:0f:6a:6c:6b: 7f:6c:a3:03:1e:00:41:21:11:76:ff:a9:84:1b:c6: d9:b4:f1:b2:a1:1f:8a:9e:65:4c:da:2d:76:c7:6f: ed:dc:42:8b:e9:34:7c:80:fb:2b:0b:ff:c1:5e:28: 56:10:06:57:df:3f:8e:47:81:ea:4f:96:d2:c1:1f: 7c:55:0c:e7:27:72:cf:a4:e8:76:e7:54:db:b0:c7: 9a:4b:2f:8d:3e:d7:d4:b5:03:88:e2:ef:5d:a2:5a: 95:3c:ff:b5:6a:0f:1a:0a:31:e2:6e:d1:b0:12:32: 26:51:ef:74:c0:32:67:44:69:bc:68:cd:8b:17:ec: 5d:a2:00:b9:fa:92:85:02:64:56:3d:2c:9d:ae:8e: d6:d3:db:de:db:6f:ea:7d:7f:80:cc:07:3a:cf:13: ef:74:3d:7d:c8:b0:05:fa:bc:3e:41:48:f8:36:9b: f4:98:b5:fb:96:3c:aa:a4:f7:cd:70:4a:a3:09:31: 92:25:99:59:d0:fe:a2:1a:26:cb:ec:0c:a5:85:b5: f3:ea:28:99:f0:52:ee:d0:0b:14:5a:b6:2c:03:1d: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F4:11:B3:AD:86:50:2A:26:2E:09:6D:1F:FB:1D:F1:4A:1C:B2:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption bf:c8:85:41:f3:3a:4a:05:41:05:c8:a2:4e:df:bf:ef:01:c9: fb:24:1a:37:38:ad:c3:1d:a2:eb:01:e5:35:4e:22:b4:19:03: da:9b:63:c9:fa:ee:bd:74:49:17:5c:f3:57:95:77:3b:b6:a3: 7b:f2:d2:77:c5:e2:20:cd:db:0b:19:6a:15:0e:f6:82:b7:0c: 37:4d:73:d5:9a:36:58:c2:4f:52:a5:15:7f:e5:8d:ce:ae:43: 7e:b0:67:f1:e8:c0:01:6f:41:a9:19:f9:04:bd:f4:45:dd:d3: 33:d1:6a:82:cd:48:1e:0a:76:84:49:18:2d:cf:e2:23:9a:0c: ab:59:e9:1d:ec:e2:69:31:32:66:0f:48:e5:9f:a6:40:7c:5e: 3e:c6:3f:ed:2d:ef:5f:37:24:1c:ab:d2:df:ff:10:c4:81:28: 97:a4:cf:e0:d8:b3:3c:fe:42:97:a5:fe:85:bd:16:bd:32:06: 86:6b:61:3e:d4:4a:05:07:98:27:ad:02:5a:85:ef:36:c1:50: be:5d:2a:fa:78:d9:79:27:71:91:42:5c:41:12:ce:38:3e:16: 02:c6:61:72:76:00:9e:91:ad:5c:54:ca:4f:1e:3f:9e:69:ff: fa:10:83:6c:50:d4:d1:6a:d8:3a:54:23:94:22:31:6c:98:a8: 8b:7a:44:7e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVnOnUzXFpD9gu3RJHAHyjK7SssYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMDA0MloX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAYjRiMTFjN2I4MTI2NjhhNTcyY2M5 MWZlNjRmMGI5MDlhNGZmYTRiNmU0NDExMTY1ZjFiMTIzZmE0ZjQzMjI1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3By9SDlDlIjvl+7yhudfffuHYQp UzcS/Dje5cqtP/LJlHWKxaFEHg9qbGt/bKMDHgBBIRF2/6mEG8bZtPGyoR+KnmVM 2i12x2/t3EKL6TR8gPsrC//BXihWEAZX3z+OR4HqT5bSwR98VQznJ3LPpOh251Tb sMeaSy+NPtfUtQOI4u9dolqVPP+1ag8aCjHibtGwEjImUe90wDJnRGm8aM2LF+xd ogC5+pKFAmRWPSydro7W09ve22/qfX+AzAc6zxPvdD19yLAF+rw+QUj4Npv0mLX7 ljyqpPfNcEqjCTGSJZlZ0P6iGibL7AylhbXz6iiZ8FLu0AsUWrYsAx0xtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFP0EbOthlAqJi4JbR/7HfFKHLIFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQC/yIVB8zpKBUEFyKJO 37/vAcn7JBo3OK3DHaLrAeU1TiK0GQPam2PJ+u69dEkXXPNXlXc7tqN78tJ3xeIg zdsLGWoVDvaCtww3TXPVmjZYwk9SpRV/5Y3OrkN+sGfx6MABb0GpGfkEvfRF3dMz 0WqCzUgeCnaESRgtz+IjmgyrWekd7OJpMTJmD0jln6ZAfF4+xj/tLe9fNyQcq9Lf /xDEgSiXpM/g2LM8/kKXpf6FvRa9MgaGa2E+1EoFB5gnrQJahe82wVC+XSr6eNl5 J3GRQlxBEs44PhYCxmFydgCeka1cVMpPHj+eaf/6EINsUNTRatg6VCOUIjFsmKiL ekR+ -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:24 2025 by rpki-client