$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa File: 7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa (raw, json) Hash identifier: J/WRAKJxS8u8DEX0vOJ1DtWOvqOCg1Fny5GszoIj3h0= Subject key identifier: 1E:A5:2A:89:74:ED:0F:B0:DC:9A:52:60:89:BB:8E:FF:C0:5A:CF:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 036F808C4FADC645768635ABC84569988460CB81 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa Signing time: Sat 11 Oct 2025 00:00:10 +0000 ROA not before: Sat 11 Oct 2025 00:00:10 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6f:80:8c:4f:ad:c6:45:76:86:35:ab:c8:45:69:98:84:60:cb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:00:10 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=f071f37c436ebde6c28b1d35755293af6b51bba03b8d07ab95ae9a6034f9eb7f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:12:42:a3:f0:4a:10:26:d0:70:44:aa:d9: 05:1b:c5:7d:8c:76:0f:99:dc:9c:f4:0a:b0:41:de: a4:0d:87:4b:94:ee:6c:88:9a:83:d5:fb:69:68:0c: 3a:44:48:29:bd:15:05:60:a2:42:a0:3f:aa:17:43: f0:c3:6e:48:a2:77:41:46:e6:47:4e:84:1d:ca:04: 99:48:ef:01:8c:2a:eb:57:df:2a:dc:0d:e3:80:b3: be:32:9f:6f:1d:76:b2:25:e4:15:79:4e:ff:89:c6: 79:f5:10:5f:9a:54:93:29:f0:9d:42:fe:13:5c:59: a3:cd:64:22:c3:be:6e:4b:fa:07:36:e1:76:08:b3: 7c:be:66:21:04:95:f7:a4:ce:7a:4e:20:3d:e4:01: b9:c3:99:c4:2d:2a:7e:98:f5:c1:09:e1:ec:38:c6: 8c:47:fe:2e:bc:ab:91:14:f3:9e:9d:19:08:49:95: cc:b7:78:00:6f:df:c3:36:a2:d9:00:cc:24:6e:5f: b4:49:25:1a:fc:78:4c:84:41:20:1b:89:1c:e7:f1: 8f:13:6d:82:10:1c:12:5e:1b:43:3d:2b:47:6e:d2: 27:73:ac:cb:68:d4:35:a7:9c:fd:3f:7e:27:ef:c1: 09:d1:2e:99:15:49:2c:b0:c9:a1:f3:23:1a:ff:19: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A5:2A:89:74:ED:0F:B0:DC:9A:52:60:89:BB:8E:FF:C0:5A:CF:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7676a4ae-69f1-4600-8f79-2d24ed7e0307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8840::/48 Signature Algorithm: sha256WithRSAEncryption 47:e7:6c:ef:82:b6:48:9a:46:8e:f8:cc:4a:13:7f:1f:d1:f0: cb:3c:2a:98:38:d2:ad:17:2a:a7:4f:e4:10:d5:e3:39:f9:a9: 74:a7:84:d8:a3:01:ea:79:61:99:23:76:56:61:a9:d2:32:0f: 08:50:ce:fa:85:b0:38:30:dc:b7:1e:0d:eb:58:cc:fe:e6:15: d6:63:1a:f2:ba:79:ef:96:8e:cb:9c:d7:04:aa:2d:d8:e4:4f: c7:72:b6:fb:d8:8b:c6:c5:1b:79:7c:5e:90:68:ef:78:93:e0: e8:49:e8:37:51:1b:23:53:bb:51:cf:9d:ca:09:51:2c:b9:1d: 6c:da:19:8c:49:e3:70:36:87:a2:0a:40:4d:40:c0:e8:c4:84: ea:d6:97:23:e1:9f:9c:09:78:08:0c:62:a1:0d:d1:5b:6a:ad: 3c:e2:3a:92:f1:ab:ef:81:a8:46:07:ba:e6:07:f8:63:47:dd: 1b:13:30:73:d6:ad:4e:be:ee:27:44:2a:6c:cc:7d:38:03:94: 6e:a2:43:ed:03:05:aa:a2:a1:79:81:ce:2b:9a:72:ca:f9:0c: 3d:0e:43:86:af:89:2e:29:a7:b0:a7:be:32:87:23:ff:e7:f3: 00:ec:fc:97:a1:91:c9:4c:f1:f8:b0:4b:89:93:a7:ea:bf:34: 28:21:dd:0e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUA2+AjE+txkV2hjWryEVpmIRgy4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMDAxMFoX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAZjA3MWYzN2M0MzZlYmRlNmMyOGIx ZDM1NzU1MjkzYWY2YjUxYmJhMDNiOGQwN2FiOTVhZTlhNjAzNGY5ZWI3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc0SQqPwShAm0HBEqtkFG8V9jHYP mdyc9AqwQd6kDYdLlO5siJqD1ftpaAw6REgpvRUFYKJCoD+qF0Pww25IondBRuZH ToQdygSZSO8BjCrrV98q3A3jgLO+Mp9vHXayJeQVeU7/icZ59RBfmlSTKfCdQv4T XFmjzWQiw75uS/oHNuF2CLN8vmYhBJX3pM56TiA95AG5w5nELSp+mPXBCeHsOMaM R/4uvKuRFPOenRkISZXMt3gAb9/DNqLZAMwkbl+0SSUa/HhMhEEgG4kc5/GPE22C EBwSXhtDPStHbtInc6zLaNQ1p5z9P34n78EJ0S6ZFUkssMmh8yMa/xn5uwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB6lKol07Q+w3JpSYIm7jv/AWs//MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2NzZhNGFlLTY5ZjEtNDYwMC04Zjc5LTJkMjRlZDdlMDMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ohAMA0GCSqGSIb3DQEBCwUAA4IBAQBH52zvgrZImkaO+MxK E38f0fDLPCqYONKtFyqnT+QQ1eM5+al0p4TYowHqeWGZI3ZWYanSMg8IUM76hbA4 MNy3Hg3rWMz+5hXWYxryunnvlo7LnNcEqi3Y5E/Hcrb72IvGxRt5fF6QaO94k+Do Seg3URsjU7tRz53KCVEsuR1s2hmMSeNwNoeiCkBNQMDoxITq1pcj4Z+cCXgIDGKh DdFbaq084jqS8avvgahGB7rmB/hjR90bEzBz1q1Ovu4nRCpszH04A5RuokPtAwWq oqF5gc4rmnLK+Qw9DkOGr4kuKaewp74yhyP/5/MA7PyXoZHJTPH4sEuJk6fqvzQo Id0O -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:05 2025 by rpki-client