$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa File: 78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa (raw, json) Hash identifier: TWUaPgPdP/ZVBtDwFHA8LlUSHCSrf2g6uJyPs8O8ny0= Subject key identifier: 15:48:DB:41:2B:0D:8C:A9:DB:3B:C4:19:8D:FD:02:AC:B4:4A:3A:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67AB9F09C93E97FBEC5E5037E17F213D0FCD2020 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa Signing time: Mon 06 Oct 2025 15:10:09 +0000 ROA not before: Mon 06 Oct 2025 15:10:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ab:9f:09:c9:3e:97:fb:ec:5e:50:37:e1:7f:21:3d:0f:cd:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 15:10:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=15178df36161cf0098021a9bf90354e9bde7dcab5e23ca512786719d83f67a0c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:23:c4:16:23:2a:d0:6f:35:55:36:43:a8: 7a:0d:ea:9b:af:0b:98:06:90:fb:7d:e6:d1:45:fc: 52:aa:52:0b:55:94:02:2f:38:fa:c3:a6:b1:d1:2c: fe:0c:0a:a8:c4:33:9c:85:a0:ab:3a:84:a5:2a:50: 58:f6:4d:ce:70:20:75:3d:b6:71:a6:dc:5a:a6:9a: be:fd:0a:95:02:e5:bb:b4:0f:44:8c:e8:b8:b7:30: b6:57:e6:7b:cc:c6:0c:d6:f0:cc:6c:23:3c:b4:72: 2b:fd:c0:ae:6b:af:22:f9:58:ea:73:03:d9:9c:1d: a2:fc:30:00:6e:df:8e:07:fa:08:76:9a:6f:90:ea: bc:e1:6b:85:31:39:0c:dd:bf:77:75:78:15:35:f0: 0e:2a:b4:34:30:6f:26:2f:17:c3:60:96:d6:b7:a0: 79:c2:83:8f:a5:a2:16:46:95:30:17:e6:56:e6:83: f7:dd:68:b3:7f:26:1c:07:cb:6f:58:65:f9:4e:ab: 75:15:1a:94:6e:53:48:6d:a2:96:16:15:13:08:16: fa:2c:fc:d2:8b:1b:8f:03:c7:05:5c:7d:c6:8e:be: 97:ce:2d:52:a0:0f:1b:d0:b7:96:39:04:a1:59:c4: d8:06:c7:84:ec:c5:51:f4:8d:08:80:18:1a:de:c4: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:DB:41:2B:0D:8C:A9:DB:3B:C4:19:8D:FD:02:AC:B4:4A:3A:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:9000::/40 Signature Algorithm: sha256WithRSAEncryption 19:28:5b:04:49:95:6c:d6:cc:44:c4:55:3a:dc:76:ca:92:4d: d6:af:7a:e9:56:68:4a:cb:11:fc:82:63:94:ad:63:dd:1a:8f: 02:d6:c7:07:97:d8:00:17:6b:cd:06:a2:9c:b8:af:3f:95:f6: 96:d0:f2:56:66:13:b1:b1:a5:ba:c3:74:3c:5d:40:6d:a0:4b: bd:74:09:ab:07:28:eb:5d:22:c2:10:47:74:7a:f8:ed:80:57: a8:da:46:c6:87:56:59:fe:2e:83:a8:8b:97:58:8a:fe:6f:45: 4e:2d:e3:be:87:a7:5e:a5:b1:46:17:10:1e:be:a5:20:70:8c: 19:71:39:c1:f4:d6:6b:55:33:7a:80:97:ee:b4:ba:2b:66:22: 82:11:57:6b:30:35:d0:1e:0a:ea:8b:72:2e:41:58:76:3c:e5: 82:fb:8a:79:2a:41:b0:b3:15:55:62:6e:3c:46:2f:8e:f1:0d: 8a:d3:b2:e7:ae:d2:c6:b7:31:28:4e:2f:8c:1b:3e:ef:19:5b: ba:b1:20:be:98:f3:58:74:2c:8c:1e:3b:07:aa:4a:b7:a3:aa: 25:b7:ee:b0:f1:44:a0:b7:34:97:f4:48:97:2d:16:94:2e:fb: 51:35:e8:cb:13:c6:16:d7:ac:88:41:49:c3:2f:da:bd:73:9c: 08:f8:33:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ6ufCck+l/vsXlA34X8hPQ/NICAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNjE1MTAwOVoX DTI1MTExMDIzNTk1OVowejFJMEcGA1UEBRNAMTUxNzhkZjM2MTYxY2YwMDk4MDIx YTliZjkwMzU0ZTliZGU3ZGNhYjVlMjNjYTUxMjc4NjcxOWQ4M2Y2N2EwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM4jxBYjKtBvNVU2Q6h6DeqbrwuY BpD7febRRfxSqlILVZQCLzj6w6ax0Sz+DAqoxDOchaCrOoSlKlBY9k3OcCB1PbZx ptxappq+/QqVAuW7tA9EjOi4tzC2V+Z7zMYM1vDMbCM8tHIr/cCua68i+VjqcwPZ nB2i/DAAbt+OB/oIdppvkOq84WuFMTkM3b93dXgVNfAOKrQ0MG8mLxfDYJbWt6B5 woOPpaIWRpUwF+ZW5oP33WizfyYcB8tvWGX5Tqt1FRqUblNIbaKWFhUTCBb6LPzS ixuPA8cFXH3Gjr6Xzi1SoA8b0LeWOQShWcTYBseE7MVR9I0IgBga3sS9VQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBVI20ErDYyp2zvEGY39Aqy0SjqUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4MzQzNzU0LTVkNmUtNGRlZC05YjRjLWQ5ZDcwYjZjY2FjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ZAwDQYJKoZIhvcNAQELBQADggEBABkoWwRJlWzWzETEVTrc dsqSTdaveulWaErLEfyCY5StY90ajwLWxweX2AAXa80Gopy4rz+V9pbQ8lZmE7Gx pbrDdDxdQG2gS710CasHKOtdIsIQR3R6+O2AV6jaRsaHVln+LoOoi5dYiv5vRU4t 476Hp16lsUYXEB6+pSBwjBlxOcH01mtVM3qAl+60uitmIoIRV2swNdAeCuqLci5B WHY85YL7inkqQbCzFVVibjxGL47xDYrTsueu0sa3MShOL4wbPu8ZW7qxIL6Y81h0 LIweOweqSrejqiW37rDxRKC3NJf0SJctFpQu+1E16MsTxhbXrIhBScMv2r1znAj4 M9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:11 2025 by rpki-client