$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90d3a0e7-4708-4742-80f0-23bb48bd8f35.roa File: 90d3a0e7-4708-4742-80f0-23bb48bd8f35.roa (raw, json) Hash identifier: CKx71DNPM7Vebcc9jIr6LPKfnaCT47EnO+X5YsldXig= Subject key identifier: B6:1E:D3:DF:AB:4D:0A:2D:B4:1E:79:86:B2:64:04:C8:A1:EE:F3:A1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C9ACBEAAA107F6B2C8CE4DD8D6196223851286A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90d3a0e7-4708-4742-80f0-23bb48bd8f35.roa Signing time: Fri 17 Oct 2025 00:01:57 +0000 ROA not before: Fri 17 Oct 2025 00:01:57 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:9a:cb:ea:aa:10:7f:6b:2c:8c:e4:dd:8d:61:96:22:38:51:28:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 17 00:01:57 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=a6c2c736521e3d5b6f0c12644b9c3a3a4f58aa80a54ebe72c80abe7bb3f3c663, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:db:73:cb:2d:82:97:2d:54:93:d5:7c:e1: 8a:ab:54:54:07:85:2e:2a:78:af:7f:24:3b:2f:ef: a2:af:e5:83:01:d8:f2:52:1d:10:e0:0f:f1:4c:b7: 7f:f6:56:0b:ac:23:43:0e:eb:44:1a:06:1b:2f:d9: 06:68:a8:9a:71:d8:67:f8:58:16:52:f1:88:62:35: 2a:31:2b:20:b9:c7:7e:7e:58:71:65:81:f2:b3:e9: da:58:31:f4:6f:5b:59:dd:be:56:a1:5d:f2:3f:44: 40:a7:ce:3b:09:18:09:a4:b3:03:62:14:1d:29:5f: e8:79:ef:9d:ef:85:82:d4:d9:ca:2a:66:eb:ce:ce: 82:4f:f1:75:24:37:b5:b1:1a:6c:93:dc:dd:c4:6a: d1:54:e9:ed:4d:d4:b9:32:d1:17:4b:b7:8a:ae:df: 4f:b5:cf:b6:20:c2:3f:95:95:22:7a:f9:31:c0:c9: bd:13:44:0e:ea:63:ce:37:f7:6d:43:8e:85:46:4f: 2e:cf:39:1e:36:ec:bb:e4:72:90:fd:15:d5:a9:f5: 2f:69:80:f5:1a:57:95:22:91:fc:48:38:32:04:50: 3a:3f:40:0c:03:e3:d9:d3:33:16:99:d6:26:e3:a6: d0:e8:50:73:36:23:74:08:c9:56:c3:29:24:d9:87: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1E:D3:DF:AB:4D:0A:2D:B4:1E:79:86:B2:64:04:C8:A1:EE:F3:A1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90d3a0e7-4708-4742-80f0-23bb48bd8f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:7000::/40 Signature Algorithm: sha256WithRSAEncryption 47:39:6f:47:a0:6e:af:e8:59:09:b4:4c:b4:6f:56:1f:45:b8: 54:27:bd:8a:cb:5b:86:af:5e:a9:c6:b3:b3:5a:c6:79:89:49: 99:5f:50:13:ab:d0:8f:6a:61:40:b8:db:c7:de:d0:c7:c2:de: e8:8d:d4:11:6e:67:a1:48:6a:8b:83:2c:17:e4:f8:71:7c:1f: 61:f5:04:b3:74:c0:b4:de:e7:a2:2b:b2:80:f2:e4:36:41:60: 56:56:2f:c7:e7:ce:62:83:74:4e:0d:14:54:89:65:92:95:17: c8:bc:d2:12:f2:e7:8e:6c:22:2b:91:1f:d3:67:25:a3:94:08: 9f:93:7e:4b:ef:33:1d:12:ae:c2:72:87:fe:6a:ae:29:00:59: 8d:1d:af:86:12:58:98:aa:0a:16:25:33:93:1f:46:24:bd:58: 02:f6:be:c1:44:db:7b:6b:35:a3:33:8b:35:bd:1b:8b:13:5a: 33:bd:a6:a5:1d:c3:c7:4e:03:a5:bf:fc:27:1e:f2:f4:f3:a2: ee:e7:49:d9:a7:80:c0:ac:39:1b:55:39:7f:0c:1b:31:3b:ba: 41:34:c0:e1:46:37:b2:55:e7:07:22:e1:a3:49:b1:57:8f:9b: 9e:81:b1:b9:69:b0:48:5c:f4:ab:5a:3e:ec:68:be:86:fd:8a: 3a:0a:a6:2e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXJrL6qoQf2ssjOTdjWGWIjhRKGowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNzAwMDE1N1oX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAYTZjMmM3MzY1MjFlM2Q1YjZmMGMx MjY0NGI5YzNhM2E0ZjU4YWE4MGE1NGViZTcyYzgwYWJlN2JiM2YzYzY2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Pbc8stgpctVJPVfOGKq1RUB4Uu KnivfyQ7L++ir+WDAdjyUh0Q4A/xTLd/9lYLrCNDDutEGgYbL9kGaKiacdhn+FgW UvGIYjUqMSsgucd+flhxZYHys+naWDH0b1tZ3b5WoV3yP0RAp847CRgJpLMDYhQd KV/oee+d74WC1NnKKmbrzs6CT/F1JDe1sRpsk9zdxGrRVOntTdS5MtEXS7eKrt9P tc+2IMI/lZUievkxwMm9E0QO6mPON/dtQ46FRk8uzzkeNuy75HKQ/RXVqfUvaYD1 GleVIpH8SDgyBFA6P0AMA+PZ0zMWmdYm46bQ6FBzNiN0CMlWwykk2YctDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLYe09+rTQottB55hrJkBMih7vOhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwZDNhMGU3LTQ3MDgtNDc0Mi04MGYwLTIzYmI0OGJkOGYzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/nAwDQYJKoZIhvcNAQELBQADggEBAEc5b0egbq/oWQm0TLRv Vh9FuFQnvYrLW4avXqnGs7NaxnmJSZlfUBOr0I9qYUC428fe0MfC3uiN1BFuZ6FI aouDLBfk+HF8H2H1BLN0wLTe56IrsoDy5DZBYFZWL8fnzmKDdE4NFFSJZZKVF8i8 0hLy545sIiuRH9NnJaOUCJ+TfkvvMx0SrsJyh/5qrikAWY0dr4YSWJiqChYlM5Mf RiS9WAL2vsFE23trNaMzizW9G4sTWjO9pqUdw8dOA6W//Cce8vTzou7nSdmngMCs ORtVOX8MGzE7ukE0wOFGN7JV5wci4aNJsVePm56BsblpsEhc9KtaPuxovob9ijoK pi4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:24 2025 by rpki-client