$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fc7dac5-8246-401a-90b2-80ba037b852e.roa File: 8fc7dac5-8246-401a-90b2-80ba037b852e.roa (raw, json) Hash identifier: 8c10ng89EztDyFND8y3IxuUqmfVslCnmiikCuSYKiZs= Subject key identifier: AA:71:7E:8F:4F:73:71:F0:2C:E6:4A:C1:BA:04:87:95:F1:58:D7:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11FE0FF1EE5B5DA51247B80E08D231157A868820 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fc7dac5-8246-401a-90b2-80ba037b852e.roa Signing time: Wed 15 Oct 2025 00:40:15 +0000 ROA not before: Wed 15 Oct 2025 00:40:15 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fe:0f:f1:ee:5b:5d:a5:12:47:b8:0e:08:d2:31:15:7a:86:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:15 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=6db0367aab925b014b61753d4795c83da0d06505b41a383d4175abc20a1ecd13, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:d8:85:2c:42:1e:25:b3:65:c4:e5:d0:35: 34:38:6e:35:cf:a5:94:20:18:2f:6e:ca:96:f5:31: ce:05:d3:c9:0b:a8:57:2d:cd:29:8c:2c:4f:6a:5f: be:69:07:d6:5f:1e:23:ee:a8:b6:ae:a3:bd:30:ca: 52:88:ab:39:72:9d:3a:d2:2b:a8:95:17:7c:b4:92: bc:89:4f:96:04:84:ce:11:3c:c3:d4:64:39:d0:2f: a8:f9:e0:cb:da:c2:9e:c6:ef:aa:a8:65:58:ee:b4: 5e:ea:78:fc:a7:80:81:6a:97:da:e1:f3:33:b9:d7: 75:f8:4d:11:2d:a1:80:f5:12:2a:0e:a7:11:63:64: a5:67:ae:d4:2b:7f:cd:0a:aa:0e:8c:5c:c2:80:55: 55:3b:64:ca:76:3e:32:65:78:e2:9e:7f:1e:fc:86: 3c:de:cd:e5:fc:36:01:18:af:31:6b:cc:f7:cb:71: 4a:4f:ca:63:66:a2:8b:9e:15:98:79:8e:3f:80:48: ae:51:1b:d2:54:88:de:4b:25:04:f7:69:de:a2:89: 37:29:cf:23:5a:f8:08:2d:24:e8:39:85:08:01:43: 1f:c2:64:e8:ff:62:33:8d:9b:fc:05:d1:0f:8b:fc: 7b:33:89:07:40:cf:98:45:42:63:ef:b3:70:de:26: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:71:7E:8F:4F:73:71:F0:2C:E6:4A:C1:BA:04:87:95:F1:58:D7:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fc7dac5-8246-401a-90b2-80ba037b852e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e:800::/38 Signature Algorithm: sha256WithRSAEncryption 64:c0:9d:98:86:4c:a3:25:be:2f:76:4e:82:50:21:a2:ce:1e: 10:01:06:eb:ff:fd:a7:0c:ad:cd:ba:5e:bb:1c:cb:9c:92:0e: c8:01:b8:f2:ca:50:f5:e7:18:85:6c:63:30:8c:1c:cc:95:c2: 1c:61:d2:56:f5:c1:8c:82:c0:6b:15:71:19:cf:06:c0:05:cb: d1:31:af:22:ff:46:37:71:18:8c:c5:07:74:de:09:dd:5b:f8: 92:f6:5b:a5:21:a8:9c:68:4e:17:18:b2:ec:05:ca:60:05:25: d3:f6:f7:57:02:dd:fe:43:90:5c:ac:ef:16:64:e9:d4:1f:84: 5b:e4:17:4b:83:e4:35:68:99:f0:eb:f1:d7:cb:a9:d1:5e:98: 98:c0:f7:89:ed:36:97:fe:4e:f7:94:6a:aa:b0:e9:79:99:07: 37:1d:8e:31:8f:41:7b:ff:13:3f:1b:74:ba:8b:3e:4d:32:37: b9:dd:7b:09:5e:4e:30:1a:a3:b6:c4:40:5f:1e:7c:0e:eb:97: 89:2f:c2:c4:e6:6b:ea:2f:f6:51:d2:06:cd:a6:f5:68:a6:13: 9a:72:8c:a0:ea:35:d7:af:b5:f4:7d:d0:07:63:08:3f:80:88: 71:f9:bd:78:fe:3a:bd:7b:da:cc:87:34:b9:d4:d9:84:ec:a6: ff:91:76:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEf4P8e5bXaUSR7gOCNIxFXqGiCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDAxNVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNANmRiMDM2N2FhYjkyNWIwMTRiNjE3 NTNkNDc5NWM4M2RhMGQwNjUwNWI0MWEzODNkNDE3NWFiYzIwYTFlY2QxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04vYhSxCHiWzZcTl0DU0OG41z6WU IBgvbsqW9THOBdPJC6hXLc0pjCxPal++aQfWXx4j7qi2rqO9MMpSiKs5cp060iuo lRd8tJK8iU+WBITOETzD1GQ50C+o+eDL2sKexu+qqGVY7rRe6nj8p4CBapfa4fMz udd1+E0RLaGA9RIqDqcRY2SlZ67UK3/NCqoOjFzCgFVVO2TKdj4yZXjinn8e/IY8 3s3l/DYBGK8xa8z3y3FKT8pjZqKLnhWYeY4/gEiuURvSVIjeSyUE92neook3Kc8j WvgILSToOYUIAUMfwmTo/2IzjZv8BdEPi/x7M4kHQM+YRUJj77Nw3iYLywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKpxfo9Pc3HwLOZKwboEh5XxWNdbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmYzdkYWM1LTgyNDYtNDAxYS05MGIyLTgwYmEwMzdiODUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHggwDQYJKoZIhvcNAQELBQADggEBAGTAnZiGTKMlvi92ToJQ IaLOHhABBuv//acMrc26Xrscy5ySDsgBuPLKUPXnGIVsYzCMHMyVwhxh0lb1wYyC wGsVcRnPBsAFy9ExryL/RjdxGIzFB3TeCd1b+JL2W6UhqJxoThcYsuwFymAFJdP2 91cC3f5DkFys7xZk6dQfhFvkF0uD5DVomfDr8dfLqdFemJjA94ntNpf+TveUaqqw 6XmZBzcdjjGPQXv/Ez8bdLqLPk0yN7ndewleTjAao7bEQF8efA7rl4kvwsTma+ov 9lHSBs2m9WimE5pyjKDqNdevtfR90AdjCD+AiHH5vXj+Or172syHNLnU2YTspv+R diM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:37 2025 by rpki-client