$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa File: 89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa (raw, json) Hash identifier: V6gjJQGsWWkGFzxYPMzeK/uI8pQc50iyjz2KTkdljG4= Subject key identifier: CD:B7:48:28:DC:34:F7:8E:16:E9:17:3B:43:65:4C:54:2A:DA:4D:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 073B189A9EA8882A204FC79C1FCC0E79D9D1B619 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa Signing time: Wed 15 Oct 2025 00:40:13 +0000 ROA not before: Wed 15 Oct 2025 00:40:13 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3b:18:9a:9e:a8:88:2a:20:4f:c7:9c:1f:cc:0e:79:d9:d1:b6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:13 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=82535b5bdfa87d6b0fcd2cd9d418c933e7db729e7d94995f284a0eca777bf492, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:11:69:f0:60:45:d9:ba:b4:f1:6a:82:8c: d4:bf:b3:c1:f2:0e:f8:99:a3:17:23:d2:74:2b:5e: 46:f9:84:08:3e:a1:2c:b1:c8:6b:30:88:1d:88:d6: 44:79:10:75:eb:65:45:1a:f7:76:c5:44:98:07:2b: 31:01:8d:c8:dc:33:d3:35:c7:fd:27:15:56:49:45: 96:f9:13:30:89:02:21:6e:5f:b9:3b:df:8f:62:93: 8e:a1:99:8c:34:62:26:18:33:56:37:54:cd:24:c6: 37:12:c1:92:74:2a:d7:f3:ef:e3:8c:70:db:4b:54: dc:85:74:57:d4:59:c3:b0:cf:17:99:d5:f7:46:1a: fe:c4:2c:14:24:35:7c:19:80:f5:aa:d3:d1:be:4c: 7a:9c:d9:82:98:42:c1:6a:ee:3e:07:3d:20:44:90: d8:7c:b4:2d:4e:58:23:16:04:39:91:ec:15:72:38: b7:27:75:c4:8d:09:71:4b:e5:b6:2c:5b:8f:58:37: 18:7c:14:ca:20:a5:f7:16:05:26:23:ba:c4:25:de: 83:46:6f:b3:e1:f5:77:f7:48:60:d2:b2:6b:c4:1a: ff:d9:f1:8a:d1:72:5d:7f:40:54:65:68:ee:29:df: ac:1b:c8:22:57:a4:57:65:e3:5f:02:df:85:62:97: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:48:28:DC:34:F7:8E:16:E9:17:3B:43:65:4C:54:2A:DA:4D:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:400::/38 Signature Algorithm: sha256WithRSAEncryption 87:c9:80:27:92:79:c6:9a:e5:38:a9:bd:00:74:49:a1:2e:5d: 4f:29:28:83:1e:2a:4d:45:1e:e6:35:dd:f8:06:98:50:b4:79: 54:f0:e4:74:14:2b:92:03:dd:62:d4:5a:83:6f:e5:29:ee:ac: a8:12:d8:f0:44:06:a8:58:e4:a3:08:20:46:57:de:e7:fb:94: 54:cc:ab:99:8c:7d:4e:76:46:a8:26:b4:07:b6:7f:ca:55:e6: 69:41:67:ca:bf:ab:fc:b2:4f:0d:97:7e:b4:d8:d1:3e:6f:1d: 65:56:a9:c6:2f:8f:d1:1c:ac:94:f4:e7:c4:b1:64:95:8b:a0: 21:36:56:4f:bc:96:5a:7a:3c:da:f9:1c:1c:a8:98:0a:d6:34: d2:2b:e7:75:fe:48:a0:09:99:9f:ed:79:73:5e:85:ae:cc:74: 1f:22:38:01:05:9e:50:f6:3d:75:5b:32:65:46:9e:8d:94:90: a9:f3:3f:b0:cc:dd:e4:69:65:8d:2f:b5:c5:75:de:06:4e:f1: dd:ab:83:af:03:72:78:9e:24:54:8a:a8:74:62:62:2d:33:eb: 73:da:73:a9:99:a3:c2:c0:17:34:ac:85:38:ff:e1:af:de:d7: 93:03:b3:ed:d2:ac:6a:26:20:31:8f:ae:82:6b:dd:f7:13:d9: db:bf:2e:ec -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBzsYmp6oiCogT8ecH8wOednRthkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDAxM1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAODI1MzViNWJkZmE4N2Q2YjBmY2Qy Y2Q5ZDQxOGM5MzNlN2RiNzI5ZTdkOTQ5OTVmMjg0YTBlY2E3NzdiZjQ5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtQRafBgRdm6tPFqgozUv7PB8g74 maMXI9J0K15G+YQIPqEsschrMIgdiNZEeRB162VFGvd2xUSYBysxAY3I3DPTNcf9 JxVWSUWW+RMwiQIhbl+5O9+PYpOOoZmMNGImGDNWN1TNJMY3EsGSdCrX8+/jjHDb S1TchXRX1FnDsM8XmdX3Rhr+xCwUJDV8GYD1qtPRvkx6nNmCmELBau4+Bz0gRJDY fLQtTlgjFgQ5kewVcji3J3XEjQlxS+W2LFuPWDcYfBTKIKX3FgUmI7rEJd6DRm+z 4fV390hg0rJrxBr/2fGK0XJdf0BUZWjuKd+sG8giV6RXZeNfAt+FYpeqHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM23SCjcNPeOFukXO0NlTFQq2k0PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmM1NmQ2LWIwYWMtNDRhZC1iMDFmLTkzZGJjZDkyMTNmYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwQwDQYJKoZIhvcNAQELBQADggEBAIfJgCeSecaa5TipvQB0 SaEuXU8pKIMeKk1FHuY13fgGmFC0eVTw5HQUK5ID3WLUWoNv5SnurKgS2PBEBqhY 5KMIIEZX3uf7lFTMq5mMfU52RqgmtAe2f8pV5mlBZ8q/q/yyTw2XfrTY0T5vHWVW qcYvj9EcrJT058SxZJWLoCE2Vk+8llp6PNr5HByomArWNNIr53X+SKAJmZ/teXNe ha7MdB8iOAEFnlD2PXVbMmVGno2UkKnzP7DM3eRpZY0vtcV13gZO8d2rg68Dcnie JFSKqHRiYi0z63Pac6mZo8LAFzSshTj/4a/e15MDs+3SrGomIDGProJr3fcT2du/ Luw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:41 2025 by rpki-client