$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa File: 7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa (raw, json) Hash identifier: m7rgm7m92aSD7aWsQ9QYeiSJMlpZ4sr6NDByZUOyN6U= Subject key identifier: 5F:92:83:D6:93:3D:1D:6C:CF:0E:CC:2A:FA:7D:23:60:6B:BB:4C:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 271F90575D0AC1367CF261450AA66A654B3D16AF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa Signing time: Tue 14 Oct 2025 00:10:27 +0000 ROA not before: Tue 14 Oct 2025 00:10:27 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1f:90:57:5d:0a:c1:36:7c:f2:61:45:0a:a6:6a:65:4b:3d:16:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:27 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=31dbca7a2e869e1eece7b03a48bf6ca078d7fa71558f81cd0b56b1e208baa50b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:3e:8c:5a:a6:c5:d8:61:2d:43:8a:97:1d: 69:f3:fe:a6:c1:76:97:b2:52:cf:52:a2:ce:33:1a: 5b:dd:6e:9b:36:d2:8a:6e:be:ab:aa:27:f3:0e:ee: 4d:52:6d:a5:12:eb:f2:52:5d:05:12:a2:5e:ad:bd: 48:19:69:6b:83:b6:c0:10:f9:29:89:96:42:51:ab: 35:a1:ee:87:f4:1a:69:a7:c1:47:47:5c:00:de:0e: e6:35:25:11:0c:f4:10:41:03:ec:6e:a9:35:ab:4d: 36:c3:50:79:6a:53:fa:f8:43:b1:e0:c7:3c:58:0a: e3:e8:ef:87:70:12:16:a5:32:03:35:7d:ed:f8:08: 38:89:d8:13:3f:7f:4a:0e:eb:9a:82:5b:e1:7d:6f: fa:52:47:69:12:e5:27:51:e0:7a:92:47:96:48:93: ed:05:6e:f4:ec:03:1c:81:b6:fb:9e:6e:73:7f:0f: 43:3f:34:d3:c9:c1:12:53:dd:d9:59:6c:45:b9:f9: 62:68:b9:8d:e2:c4:53:f3:3b:43:e5:7f:38:e8:9c: 59:d2:7f:56:f1:ec:be:7e:ad:2e:06:3f:01:39:47: 99:c4:c5:68:ed:2d:2b:3b:6a:15:3d:06:bc:8d:8d: b2:14:2c:69:cb:2e:4a:1b:ac:17:a2:df:8f:f3:ee: 07:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:83:D6:93:3D:1D:6C:CF:0E:CC:2A:FA:7D:23:60:6B:BB:4C:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1080::/48 Signature Algorithm: sha256WithRSAEncryption 34:9c:43:64:fe:ce:6f:cc:d8:e6:10:83:42:b6:17:a4:dc:e9: 29:de:de:3c:f6:39:61:a6:d2:ce:e6:80:cd:a7:32:3b:9d:53: 61:1c:11:c6:c3:9a:92:ec:8f:29:69:a4:e4:d8:cd:7a:55:10: dc:a5:6e:fa:cd:7d:39:a9:be:1a:b5:ac:4e:ea:81:2e:60:ae: 92:7e:9b:38:87:51:91:30:00:89:27:8c:49:3f:40:85:a4:08: 66:1e:d0:93:e5:b3:ef:e0:30:4f:d5:1d:60:e9:ad:88:a0:d0: 8e:b5:70:8b:25:49:62:94:ee:9a:32:1f:21:27:a8:e0:ed:c7: 69:c7:03:72:92:f8:30:bc:ff:06:77:2d:0c:8d:6d:ee:96:7f: 55:54:7f:7a:d0:da:a2:e3:87:55:78:6d:f5:69:0d:e4:cf:1d: 88:20:5c:88:19:25:9a:dd:f5:68:73:97:3a:8b:41:e9:4a:27: eb:d4:cf:46:90:00:f0:ca:be:81:42:99:b8:dc:c7:db:5d:77: 5a:ae:51:ab:f2:37:55:01:30:eb:f1:4f:1c:8e:e3:6c:0e:bc: dd:b2:9b:dd:f3:4d:95:ba:da:cc:f6:ef:32:73:2c:e5:75:77: 96:c9:f8:cb:f0:6c:53:10:16:dd:d9:30:86:24:9c:64:c4:c7: 51:fc:7b:83 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJx+QV10KwTZ88mFFCqZqZUs9Fq8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAyN1oX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAMzFkYmNhN2EyZTg2OWUxZWVjZTdi MDNhNDhiZjZjYTA3OGQ3ZmE3MTU1OGY4MWNkMGI1NmIxZTIwOGJhYTUwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwec+jFqmxdhhLUOKlx1p8/6mwXaX slLPUqLOMxpb3W6bNtKKbr6rqifzDu5NUm2lEuvyUl0FEqJerb1IGWlrg7bAEPkp iZZCUas1oe6H9Bppp8FHR1wA3g7mNSURDPQQQQPsbqk1q002w1B5alP6+EOx4Mc8 WArj6O+HcBIWpTIDNX3t+Ag4idgTP39KDuuaglvhfW/6UkdpEuUnUeB6kkeWSJPt BW707AMcgbb7nm5zfw9DPzTTycESU93ZWWxFufliaLmN4sRT8ztD5X846JxZ0n9W 8ey+fq0uBj8BOUeZxMVo7S0rO2oVPQa8jY2yFCxpyy5KG6wXot+P8+4HewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF+Sg9aTPR1szw7MKvp9I2Bru0zFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdhYzUwOGI4LTMzYzMtNDdkNC1hYzhhLTFjMjVmMzdkYjNjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xCAMA0GCSqGSIb3DQEBCwUAA4IBAQA0nENk/s5vzNjmEINC thek3Okp3t489jlhptLO5oDNpzI7nVNhHBHGw5qS7I8paaTk2M16VRDcpW76zX05 qb4ataxO6oEuYK6Sfps4h1GRMACJJ4xJP0CFpAhmHtCT5bPv4DBP1R1g6a2IoNCO tXCLJUlilO6aMh8hJ6jg7cdpxwNykvgwvP8Gdy0MjW3uln9VVH960Nqi44dVeG31 aQ3kzx2IIFyIGSWa3fVoc5c6i0HpSifr1M9GkADwyr6BQpm43MfbXXdarlGr8jdV ATDr8U8cjuNsDrzdspvd802VutrM9u8ycyzldXeWyfjL8GxTEBbd2TCGJJxkxMdR /HuD -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:14 2025 by rpki-client