$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa File: 61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa (raw, json) Hash identifier: +o6IR3RQN1qZIsH1FSEXoaJVpqXkdLuLlp8NGJaQsz8= Subject key identifier: 71:A3:44:53:5D:46:F6:D8:87:29:B1:EF:EE:E1:3D:DE:4B:F1:F7:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FDCEF99B72D3E1B338263884355228DFA8CA56C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa Signing time: Wed 15 Oct 2025 00:10:05 +0000 ROA not before: Wed 15 Oct 2025 00:10:05 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dc:ef:99:b7:2d:3e:1b:33:82:63:88:43:55:22:8d:fa:8c:a5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:10:05 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=b308b9772896ac209aa321c92c93145978a68c4a85ca1ea5e469e8585d3ebe5c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:23:0c:df:9b:6d:84:8e:e2:89:c9:5f:25: d5:9d:b6:5f:11:d3:db:b6:c4:a4:2f:94:b7:2c:9d: 9f:01:32:67:b8:e7:92:98:8d:67:f4:e4:ae:b2:8e: 4f:74:e2:3b:b6:1a:93:5d:cd:8a:c4:fb:84:1c:4e: 70:cd:9f:b4:89:ea:43:77:92:2a:df:86:e9:1c:ad: a8:0c:64:8b:de:1b:f9:be:9c:2d:d0:d2:8e:1b:a5: b4:de:b6:6d:d0:12:a0:72:2a:5a:be:b2:80:c8:a2: 21:4e:32:a6:b8:03:07:0a:6e:f3:b4:4d:0d:5e:cb: 6d:26:e0:de:b3:07:f2:f2:c2:6a:0a:cd:05:c6:2e: 81:dc:44:e3:cd:ba:6b:3b:70:82:6a:18:3d:17:2d: 90:83:c0:0e:0c:33:fd:47:34:23:dc:c2:fc:4e:07: ef:df:80:0a:27:a0:41:69:8c:28:3e:2a:89:d0:92: b9:34:45:b9:59:c1:47:2c:88:70:65:a4:96:a3:5d: cf:be:cf:00:27:0e:10:ab:e8:19:d8:c5:0a:20:81: dd:07:fe:ea:0e:17:c2:f0:8e:a8:32:6b:5a:1d:49: 26:62:6f:01:2e:31:20:f0:e9:c0:01:91:a8:c4:00: 7d:f2:eb:09:f7:94:f4:4e:d6:8b:59:d7:29:3c:2f: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A3:44:53:5D:46:F6:D8:87:29:B1:EF:EE:E1:3D:DE:4B:F1:F7:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 9c:94:2e:a6:e9:24:5d:d2:56:44:e6:fd:e4:99:91:07:0f:0a: 14:6f:07:1a:f0:2a:3f:44:64:f4:6c:4e:01:fc:fd:fd:3c:63: b9:9f:b0:e0:71:9d:97:f4:6a:e5:4a:76:cf:6a:ba:f6:35:2d: 63:0f:1c:fd:4a:29:0c:b7:d4:08:c8:e1:be:be:8c:e2:47:a9: 12:ef:31:d6:52:8d:4c:59:c9:cc:c9:4f:0e:77:5e:45:72:e8: 6e:36:86:a0:ec:6d:a5:1e:1b:8e:bd:c9:f5:4e:b4:61:7f:2a: d7:cf:df:ed:f4:83:b1:de:d4:cf:fc:7f:1a:3e:15:93:b7:e6: c0:0d:f8:02:cc:07:e0:a4:bc:e6:d9:08:11:e0:9a:0d:94:a9: a1:a2:91:7f:c6:3d:f7:cf:59:b4:5a:6a:f6:d9:df:64:a3:be: dd:dd:18:3f:bc:62:60:ff:5a:71:4f:96:6c:34:13:40:64:fc: 07:a7:72:00:29:60:c7:2c:f0:b4:43:19:ad:70:bd:15:62:c8: 87:83:25:9b:74:a8:14:f5:b7:ff:b3:db:26:96:a2:38:08:7e: 54:7a:d4:88:69:33:dc:1a:e3:2c:3b:20:8f:a4:00:f3:d1:85: 36:33:eb:e4:60:81:7a:15:26:cc:a5:e1:ab:31:0b:d5:51:b7: 98:9f:90:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX9zvmbctPhszgmOIQ1UijfqMpWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMTAwNVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAYjMwOGI5NzcyODk2YWMyMDlhYTMy MWM5MmM5MzE0NTk3OGE2OGM0YTg1Y2ExZWE1ZTQ2OWU4NTg1ZDNlYmU1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJsjDN+bbYSO4onJXyXVnbZfEdPb tsSkL5S3LJ2fATJnuOeSmI1n9OSuso5PdOI7thqTXc2KxPuEHE5wzZ+0iepDd5Iq 34bpHK2oDGSL3hv5vpwt0NKOG6W03rZt0BKgcipavrKAyKIhTjKmuAMHCm7ztE0N XsttJuDeswfy8sJqCs0Fxi6B3ETjzbprO3CCahg9Fy2Qg8AODDP9RzQj3ML8Tgfv 34AKJ6BBaYwoPiqJ0JK5NEW5WcFHLIhwZaSWo13Pvs8AJw4Qq+gZ2MUKIIHdB/7q DhfC8I6oMmtaHUkmYm8BLjEg8OnAAZGoxAB98usJ95T0TtaLWdcpPC+/eQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHGjRFNdRvbYhymx7+7hPd5L8feVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYjlmZGMwLTE4MzYtNGI2My05NDliLTRhMGUyYjk1NTE2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMAwDQYJKoZIhvcNAQELBQADggEBAJyULqbpJF3SVkTm/eSZ kQcPChRvBxrwKj9EZPRsTgH8/f08Y7mfsOBxnZf0auVKds9quvY1LWMPHP1KKQy3 1AjI4b6+jOJHqRLvMdZSjUxZyczJTw53XkVy6G42hqDsbaUeG469yfVOtGF/KtfP 3+30g7He1M/8fxo+FZO35sAN+ALMB+CkvObZCBHgmg2UqaGikX/GPffPWbRaavbZ 32Sjvt3dGD+8YmD/WnFPlmw0E0Bk/AencgApYMcs8LRDGa1wvRViyIeDJZt0qBT1 t/+z2yaWojgIflR61IhpM9wa4yw7II+kAPPRhTYz6+RggXoVJsyl4asxC9VRt5if kMg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:29:41 2025 by rpki-client