$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa File: 5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa (raw, json) Hash identifier: Us054+EyFlLCwNDzif9Anp4aDoSkOB+7GkUXAK2M7yk= Subject key identifier: 9F:86:69:9D:86:B9:82:A0:F2:2D:B5:E4:ED:42:34:C9:D0:4B:91:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E1280DB050D1C6E60B9C1DC8E85175F54B63489 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa Signing time: Sat 11 Oct 2025 00:10:59 +0000 ROA not before: Sat 11 Oct 2025 00:10:59 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:80:db:05:0d:1c:6e:60:b9:c1:dc:8e:85:17:5f:54:b6:34:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:10:59 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=7f82d4bbbfbdde4de6ba117fbf96c5649f784dd92a717985e40e8ececd3de5d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:5f:f7:e8:5a:47:30:c6:7c:26:51:7f:9a: 86:b9:94:57:be:97:ab:5c:0b:7c:52:2f:ac:73:33: fe:fa:18:07:c4:ae:bc:44:ee:99:28:b3:3a:8a:d7: 16:b4:82:25:16:dc:e7:54:c3:59:76:fb:ea:2c:44: 1d:0e:db:8e:93:ab:21:81:2c:b9:4c:21:5e:f2:41: 1d:9f:98:11:c4:78:a3:25:8b:73:10:a3:2a:ad:2c: ff:4a:1a:da:3e:58:be:95:78:32:8c:c8:65:58:50: 18:dc:f2:5a:82:35:e6:a6:28:25:89:dc:fa:ae:6e: d8:a6:07:57:74:b6:e1:f5:88:74:0f:49:1e:ad:07: 61:cd:48:2d:83:9f:0d:ff:56:31:a1:fa:20:ab:c3: 33:68:58:c7:12:1b:e0:52:82:16:c6:d4:97:11:73: 4c:43:68:3f:8e:4f:9e:04:00:b7:26:1d:f2:33:cd: e9:0c:4e:b9:50:f7:ec:a3:e6:7a:e6:e8:df:55:8b: 62:ee:30:d0:5e:ba:70:2a:25:10:36:20:3b:9a:79: 97:91:5a:3b:e5:0b:86:66:98:e4:41:3f:d8:20:7b: 76:56:21:e4:cc:0c:7f:7f:9d:c3:3b:ea:5a:32:1c: f0:dc:88:4f:01:9f:10:ac:9c:9a:31:37:cb:69:ca: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:69:9D:86:B9:82:A0:F2:2D:B5:E4:ED:42:34:C9:D0:4B:91:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6080::/48 Signature Algorithm: sha256WithRSAEncryption 59:d8:27:3d:42:cc:00:21:3e:22:05:76:e8:ac:05:d4:a8:62: 5f:b9:3a:fe:c3:53:da:be:87:a2:09:16:bd:1a:63:be:89:db: c1:61:f0:ca:f7:64:c9:13:9a:f5:35:04:08:ff:05:ff:2c:ac: aa:af:ea:1b:00:88:1e:09:ef:10:73:88:6b:af:f5:b9:e4:3d: 03:6b:b3:d6:b8:8a:8d:f3:44:46:ba:99:09:fb:61:e3:c0:dc: d1:74:46:da:9c:60:2d:20:b1:2e:91:c5:34:a1:4a:54:e8:c4: 6f:19:72:64:ec:4e:be:f8:14:3c:f8:bb:76:47:f6:c8:2e:02: 66:a3:13:80:3e:43:da:b2:1c:a5:60:39:f2:66:39:82:53:83: 4a:68:bd:8e:ae:09:5b:31:4e:a1:e0:78:25:e2:e4:f8:bd:f8: 29:8e:14:a1:e5:8d:ac:e8:ec:9e:79:86:b6:b1:8b:63:c7:41: ef:6d:c9:ed:0e:7c:ca:38:11:5b:32:ec:fe:54:8b:e8:94:ef: f2:cd:82:6c:da:41:c4:eb:58:f4:76:11:91:30:77:e0:e7:6a: 0b:10:e8:39:db:6a:b0:1b:a7:71:7d:80:cc:07:eb:4a:67:cf: a7:88:16:02:7a:40:52:8e:3d:3a:1c:81:e8:57:c4:5d:ed:48: 64:36:27:21 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbhKA2wUNHG5gucHcjoUXX1S2NIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMTA1OVoX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAN2Y4MmQ0YmJiZmJkZGU0ZGU2YmEx MTdmYmY5NmM1NjQ5Zjc4NGRkOTJhNzE3OTg1ZTQwZThlY2VjZDNkZTVkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnypf9+haRzDGfCZRf5qGuZRXvper XAt8Ui+sczP++hgHxK68RO6ZKLM6itcWtIIlFtznVMNZdvvqLEQdDtuOk6shgSy5 TCFe8kEdn5gRxHijJYtzEKMqrSz/ShraPli+lXgyjMhlWFAY3PJagjXmpiglidz6 rm7YpgdXdLbh9Yh0D0kerQdhzUgtg58N/1Yxofogq8MzaFjHEhvgUoIWxtSXEXNM Q2g/jk+eBAC3Jh3yM83pDE65UPfso+Z65ujfVYti7jDQXrpwKiUQNiA7mnmXkVo7 5QuGZpjkQT/YIHt2ViHkzAx/f53DO+paMhzw3IhPAZ8QrJyaMTfLacqmGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ+GaZ2GuYKg8i215O1CNMnQS5G3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmODA1YWE3LTc3NTctNGRmYy04ZGI4LTIyMjdlMjU2ZmIzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGCAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ2Cc9QswAIT4iBXbo rAXUqGJfuTr+w1PavoeiCRa9GmO+idvBYfDK92TJE5r1NQQI/wX/LKyqr+obAIge Ce8Qc4hrr/W55D0Da7PWuIqN80RGupkJ+2HjwNzRdEbanGAtILEukcU0oUpU6MRv GXJk7E6++BQ8+Lt2R/bILgJmoxOAPkPashylYDnyZjmCU4NKaL2OrglbMU6h4Hgl 4uT4vfgpjhSh5Y2s6OyeeYa2sYtjx0HvbcntDnzKOBFbMuz+VIvolO/yzYJs2kHE 61j0dhGRMHfg52oLEOg522qwG6dxfYDMB+tKZ8+niBYCekBSjj06HIHoV8Rd7Uhk Nich -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:28 2025 by rpki-client