$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa File: 7c72c9cc-5e02-4b29-84f1-24b580f20438.roa (raw, json) Hash identifier: Jgg8BvXGJFLZzXXJzRhx4I+soewRoYzaSt84UDzbspU= Subject key identifier: BC:60:5A:F4:E1:D1:04:DE:47:0B:23:6F:D7:17:C9:7C:6D:5C:ED:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CD1DE4125A2DE37E8EA4E37799C8AA529DB31BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa Signing time: Wed 15 Oct 2025 00:38:45 +0000 ROA not before: Wed 15 Oct 2025 00:38:45 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d1:de:41:25:a2:de:37:e8:ea:4e:37:79:9c:8a:a5:29:db:31:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:38:45 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=99f94848a47dcdfaaacac501032bc269346e2b0177a871d423dbd8df7f864f9b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:30:ab:bd:56:4e:e7:bf:ca:6a:cc:88:d3: 5e:42:6a:c0:95:96:df:53:4e:cc:a4:5b:14:8f:14: 79:f3:7b:7e:70:8c:58:b2:2d:be:11:70:79:c2:4b: 7a:8e:44:c6:7b:c6:7e:47:df:ce:b7:9d:a7:83:8f: aa:d8:06:b6:03:5c:51:dd:fe:12:d2:8c:a3:05:b9: 6d:fc:2b:2b:ea:38:18:3f:73:0b:75:6d:1c:e7:7f: 6a:ab:82:c1:18:d9:6b:2e:0d:71:71:33:a0:91:9a: 39:c9:c3:c6:53:48:9a:00:56:4e:93:a0:32:da:b6: 8f:43:2a:3d:06:6e:64:9c:8b:cd:7d:6d:dd:2d:8c: 75:f8:95:0e:57:5e:54:cd:da:4e:19:6e:f7:e1:fb: fd:86:81:4f:67:d7:8a:d2:d1:91:ac:4f:4c:b2:04: 86:b6:2c:f1:1b:84:d9:89:8c:97:9c:19:ca:63:02: e5:c0:70:06:b0:ea:4c:b7:98:7e:d2:d7:46:53:33: 31:76:33:24:b7:be:81:60:91:5a:e5:01:f9:1e:77: 2d:cd:4a:a3:a6:da:1f:a3:ee:eb:4e:11:fd:91:5d: bd:15:04:77:cf:65:e8:ec:24:45:f1:11:5e:8f:9d: da:f1:ab:b9:a4:66:70:e7:ee:72:1c:d7:9c:f0:74: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:5A:F4:E1:D1:04:DE:47:0B:23:6F:D7:17:C9:7C:6D:5C:ED:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b:c00::/38 Signature Algorithm: sha256WithRSAEncryption ca:d5:b0:af:91:84:29:65:b1:a5:cd:41:46:73:df:8e:54:46: 59:de:fc:14:2e:81:63:7c:f1:33:6c:6b:4f:1b:99:ec:24:85: d7:df:d6:8d:fc:b3:e7:d3:95:a1:4e:c3:ed:3f:84:fe:70:8d: 82:f4:68:84:84:f3:62:2f:fc:a9:0f:4c:36:dc:07:75:d7:6d: 31:63:ec:94:5c:14:9d:47:87:0e:ec:fc:e4:de:99:73:09:e5: 58:d2:0f:c1:0a:45:f4:6e:cc:59:08:f2:e4:8d:88:89:3c:c8: 33:6f:da:01:e8:cb:41:79:4d:85:d9:cf:95:a7:92:9d:74:b6: 51:2f:34:b7:87:97:f5:60:cd:1c:cc:8b:79:a7:01:a1:14:7f: dd:60:ab:f8:e9:45:ea:c1:13:bb:8b:74:7b:05:19:ba:a4:b5: ae:67:8a:3b:f7:1e:ef:41:31:7b:70:b2:06:44:ba:71:fa:9f: 68:ad:8b:15:78:21:96:d6:0f:7a:3a:c0:c4:dc:c0:7f:c4:1f: ce:e5:ec:0d:b7:05:31:6c:e7:74:7d:58:f3:46:f8:bf:08:58: 5c:e5:ba:94:33:fd:fa:79:4f:3d:1a:d4:6c:b6:4a:de:83:89: 15:29:09:c3:3e:44:d8:00:39:20:9f:b0:f8:17:a6:40:a8:38: 83:17:f2:ce -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHNHeQSWi3jfo6k43eZyKpSnbMb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMzg0NVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAOTlmOTQ4NDhhNDdkY2RmYWFhY2Fj NTAxMDMyYmMyNjkzNDZlMmIwMTc3YTg3MWQ0MjNkYmQ4ZGY3Zjg2NGY5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWIwq71WTue/ymrMiNNeQmrAlZbf U07MpFsUjxR583t+cIxYsi2+EXB5wkt6jkTGe8Z+R9/Ot52ng4+q2Aa2A1xR3f4S 0oyjBblt/Csr6jgYP3MLdW0c539qq4LBGNlrLg1xcTOgkZo5ycPGU0iaAFZOk6Ay 2raPQyo9Bm5knIvNfW3dLYx1+JUOV15UzdpOGW734fv9hoFPZ9eK0tGRrE9MsgSG tizxG4TZiYyXnBnKYwLlwHAGsOpMt5h+0tdGUzMxdjMkt76BYJFa5QH5HnctzUqj ptofo+7rThH9kV29FQR3z2Xo7CRF8RFej53a8au5pGZw5+5yHNec8HS49QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLxgWvTh0QTeRwsjb9cXyXxtXO2oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjNzJjOWNjLTVlMDItNGIyOS04NGYxLTI0YjU4MGYyMDQzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwwwDQYJKoZIhvcNAQELBQADggEBAMrVsK+RhCllsaXNQUZz 345URlne/BQugWN88TNsa08bmewkhdff1o38s+fTlaFOw+0/hP5wjYL0aISE82Iv /KkPTDbcB3XXbTFj7JRcFJ1Hhw7s/OTemXMJ5VjSD8EKRfRuzFkI8uSNiIk8yDNv 2gHoy0F5TYXZz5Wnkp10tlEvNLeHl/VgzRzMi3mnAaEUf91gq/jpRerBE7uLdHsF Gbqkta5nijv3Hu9BMXtwsgZEunH6n2itixV4IZbWD3o6wMTcwH/EH87l7A23BTFs 53R9WPNG+L8IWFzlupQz/fp5Tz0a1Gy2St6DiRUpCcM+RNgAOSCfsPgXpkCoOIMX 8s4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:50 2025 by rpki-client