$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa File: 762f9af4-6b86-42f6-babd-ee50573eb662.roa (raw, json) Hash identifier: EW/z6Xw3AfcEJwLo6t4+p677edg7nYVYfWBZNrGE3qE= Subject key identifier: FE:8A:AA:1C:80:20:2D:D6:7A:75:9E:09:F5:EF:C9:2F:AA:F4:EB:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58C3160AEF15B74D099B30E1CF87E72467AE37CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa Signing time: Tue 14 Oct 2025 00:00:43 +0000 ROA not before: Tue 14 Oct 2025 00:00:43 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c3:16:0a:ef:15:b7:4d:09:9b:30:e1:cf:87:e7:24:67:ae:37:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:00:43 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=651ace6d14337ee0960505fee3a77ea46b83b68d41eab2a8c22755eb38d99a14, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:e5:17:75:3a:50:c9:b9:e6:10:74:fe:48: e3:d1:a2:dd:1c:11:ae:af:9c:70:b9:98:06:12:1d: 84:68:35:b9:f8:de:d8:8f:26:f1:a8:af:b6:4b:20: 13:d3:8c:e9:fb:d3:f7:71:b4:d2:a7:96:56:0c:fe: c8:e4:21:ee:70:ff:cd:39:14:aa:e8:0b:28:c0:06: 5c:56:10:ad:1f:9a:81:70:74:7e:fa:89:a9:03:2a: c0:3c:a7:bb:e5:74:8d:bf:90:14:15:d2:c6:9d:a8: 40:d6:45:32:b5:28:51:40:8b:51:77:15:b8:3f:c1: bd:bd:f3:af:c6:a9:8d:af:25:55:8a:99:0c:ea:7b: 9a:ae:c2:81:35:40:30:67:78:18:5c:aa:01:45:38: 78:da:41:73:b7:fc:77:eb:a2:ef:5b:fc:dc:25:37: d3:4c:84:3e:19:b4:48:c0:e8:e4:6d:df:2e:ab:22: 8c:59:35:fe:52:27:92:6f:d0:c5:4e:b9:58:ab:0d: 6e:a8:ff:04:81:73:df:f8:81:2c:f5:15:6c:dd:c7: 09:d1:95:11:4c:6c:2c:dd:b8:4f:3c:74:42:32:d4: a4:55:c8:2b:82:f2:c7:90:6a:bc:ca:11:42:ea:a2: 76:f5:8f:5b:bf:46:cb:f3:3d:f7:31:f5:6d:f1:ff: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:AA:1C:80:20:2D:D6:7A:75:9E:09:F5:EF:C9:2F:AA:F4:EB:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 57:ad:33:f7:2f:ac:c1:06:14:08:c6:12:55:73:47:94:8b:91: 2a:f1:5e:93:d1:6f:cb:39:f0:48:89:6a:84:92:09:15:fb:64: a1:4b:05:68:7c:05:99:5c:43:bc:73:b2:f4:f7:05:00:12:14: 0a:f8:68:a7:d1:75:15:72:90:f0:79:0c:78:a8:61:58:11:54: d9:c5:d4:ef:77:7c:b4:a0:b8:ac:ec:75:57:2d:08:c7:09:18: af:f4:78:e0:ac:fa:da:22:48:59:bf:fa:08:fa:bb:17:26:4f: 9c:1d:7c:fa:55:5f:56:af:48:bf:b3:ad:aa:87:32:00:67:9e: b0:01:56:e5:38:aa:21:4a:44:d0:1d:42:e3:4b:fb:cb:a4:1b: 99:7f:86:02:e0:be:57:20:2f:79:ce:b2:ea:0e:2a:7f:91:d7: d1:4b:c8:b4:ef:d5:4c:49:15:68:c5:06:cd:22:af:98:19:75: 09:9b:78:72:fd:dd:65:95:2e:c9:22:81:ed:a9:57:bd:80:ce: 3a:57:99:dc:96:89:a2:3d:6e:dc:f7:5f:a7:02:1b:8c:6b:66: 71:99:b5:6a:50:57:41:e4:ea:2b:25:eb:f6:08:6a:64:4e:0d: cf:55:33:27:46:34:86:a1:b8:82:43:ba:e2:7f:27:04:6f:d6: 6c:0a:82:fa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWMMWCu8Vt00JmzDhz4fnJGeuN80wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMDA0M1oX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNANjUxYWNlNmQxNDMzN2VlMDk2MDUw NWZlZTNhNzdlYTQ2YjgzYjY4ZDQxZWFiMmE4YzIyNzU1ZWIzOGQ5OWExNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PTlF3U6UMm55hB0/kjj0aLdHBGu r5xwuZgGEh2EaDW5+N7YjybxqK+2SyAT04zp+9P3cbTSp5ZWDP7I5CHucP/NORSq 6AsowAZcVhCtH5qBcHR++ompAyrAPKe75XSNv5AUFdLGnahA1kUytShRQItRdxW4 P8G9vfOvxqmNryVVipkM6nuarsKBNUAwZ3gYXKoBRTh42kFzt/x366LvW/zcJTfT TIQ+GbRIwOjkbd8uqyKMWTX+UieSb9DFTrlYqw1uqP8EgXPf+IEs9RVs3ccJ0ZUR TGws3bhPPHRCMtSkVcgrgvLHkGq8yhFC6qJ29Y9bv0bL8z33MfVt8f8XwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP6KqhyAIC3WenWeCfXvyS+q9OtDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2MmY5YWY0LTZiODYtNDJmNi1iYWJkLWVlNTA1NzNlYjY2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALDAMA0GCSqGSIb3DQEBCwUAA4IBAQBXrTP3L6zBBhQIxhJV c0eUi5Eq8V6T0W/LOfBIiWqEkgkV+2ShSwVofAWZXEO8c7L09wUAEhQK+Gin0XUV cpDweQx4qGFYEVTZxdTvd3y0oLis7HVXLQjHCRiv9HjgrPraIkhZv/oI+rsXJk+c HXz6VV9Wr0i/s62qhzIAZ56wAVblOKohSkTQHULjS/vLpBuZf4YC4L5XIC95zrLq Dip/kdfRS8i079VMSRVoxQbNIq+YGXUJm3hy/d1llS7JIoHtqVe9gM46V5nclomi PW7c91+nAhuMa2ZxmbVqUFdB5OorJev2CGpkTg3PVTMnRjSGobiCQ7rifycEb9Zs CoL6 -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:15 2025 by rpki-client