$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f9672a8-f3e3-47ab-837d-dca0c77071c9.roa File: 9f9672a8-f3e3-47ab-837d-dca0c77071c9.roa (raw, json) Hash identifier: avLRENELUKScShrhQqtPIm6PXKJxyh84+XbyuCYX/lU= Subject key identifier: 1B:D7:10:AD:E5:5D:CC:02:77:00:C0:F3:B6:9F:36:EC:B7:F9:0E:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F936BD0848B7B20DDD8DEA3934FBFA47A052D22 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f9672a8-f3e3-47ab-837d-dca0c77071c9.roa Signing time: Mon 06 Oct 2025 15:10:59 +0000 ROA not before: Mon 06 Oct 2025 15:10:59 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafd:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:93:6b:d0:84:8b:7b:20:dd:d8:de:a3:93:4f:bf:a4:7a:05:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 15:10:59 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=846009d57c169a9f4f87300932441c7022e302cc874d0881dac7085cbfc640c3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:6e:d6:da:10:5b:e1:12:1b:5b:15:38:7c: 96:51:34:5f:1f:e4:f2:84:29:43:a3:6c:7a:62:15: 31:dc:04:56:28:49:92:a7:8b:ac:8f:cf:11:de:63: 6d:7d:9b:93:54:b2:0c:7c:5e:63:51:da:ec:2c:e0: 77:ca:23:63:44:3f:e9:d1:a0:7e:c1:7b:cc:f7:5a: 84:32:09:9c:2b:84:4c:06:2d:97:67:68:18:9c:3b: 2c:6f:d8:1e:7b:c2:e4:4f:b1:74:36:22:f1:67:62: 24:2f:76:9f:2a:d8:ba:a6:30:cf:8f:94:ee:29:3c: 70:41:9f:7c:b7:36:4d:d6:1e:b5:1e:fd:db:13:7a: 69:c4:09:c3:36:d9:a6:39:48:6d:19:bb:2b:ca:85: 96:03:b1:b8:c1:20:64:a8:c6:0f:64:31:ed:97:27: 99:99:60:85:a2:8c:8e:0d:55:7b:56:fd:01:e9:a3: 09:37:bb:f3:41:68:e6:20:2b:19:79:a2:54:c0:bc: 63:ee:87:43:eb:0f:ae:19:95:9e:54:f3:2a:82:a7: 9d:bb:bc:2b:7e:33:c2:39:b3:b3:97:61:51:f7:54: 0f:fe:6b:74:d6:4f:58:a0:a1:27:32:99:1d:08:58: 22:b3:f4:7b:82:2f:ad:c3:a1:da:5c:40:17:ac:4d: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D7:10:AD:E5:5D:CC:02:77:00:C0:F3:B6:9F:36:EC:B7:F9:0E:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f9672a8-f3e3-47ab-837d-dca0c77071c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafd:4000::/40 Signature Algorithm: sha256WithRSAEncryption 38:e9:c4:75:a7:e4:b8:a2:34:47:39:25:9f:2b:b2:51:ee:0e: 37:4b:60:c8:89:4c:5d:c9:90:65:76:31:51:9c:46:64:95:35: 83:50:87:7b:e0:3b:0f:2f:7c:55:e5:d8:45:cb:3f:cc:15:9c: d7:7d:72:fb:bc:37:c7:57:c5:71:5b:f3:dc:c3:eb:13:7b:6e: b6:83:29:7c:99:36:70:8e:a8:46:df:00:c6:c6:eb:0d:a4:ac: eb:d5:f8:2d:bc:e8:f8:a4:3e:5e:c1:95:97:7a:ed:67:50:d4: 44:7d:00:be:ff:37:47:2e:8e:da:f9:b3:2d:c9:35:69:fa:84: 20:9a:2d:80:c0:14:48:3b:06:f3:e1:20:bc:f3:0d:89:c1:96: 5a:23:86:2e:9e:9f:8f:8a:cb:3f:e5:64:dd:1d:e9:33:35:ae: f0:7a:a6:af:f4:3a:56:1e:b0:0f:ee:17:b0:c4:c5:bb:60:89: aa:8a:cd:11:0e:77:37:62:73:59:c1:3f:f1:83:26:90:41:8b: b8:6f:1a:f6:86:84:c2:36:eb:96:f4:f7:70:4d:ee:42:d2:fb: fd:d4:97:84:42:30:56:1d:68:e2:a3:0c:1f:1e:05:2e:55:ad: 76:ed:78:22:73:e8:20:99:ba:79:23:9f:e5:19:8c:01:c3:dc: 56:39:b4:9e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT5Nr0ISLeyDd2N6jk0+/pHoFLSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNjE1MTA1OVoX DTI1MTExMDIzNTk1OVowejFJMEcGA1UEBRNAODQ2MDA5ZDU3YzE2OWE5ZjRmODcz MDA5MzI0NDFjNzAyMmUzMDJjYzg3NGQwODgxZGFjNzA4NWNiZmM2NDBjMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvpu1toQW+ESG1sVOHyWUTRfH+Ty hClDo2x6YhUx3ARWKEmSp4usj88R3mNtfZuTVLIMfF5jUdrsLOB3yiNjRD/p0aB+ wXvM91qEMgmcK4RMBi2XZ2gYnDssb9gee8LkT7F0NiLxZ2IkL3afKti6pjDPj5Tu KTxwQZ98tzZN1h61Hv3bE3ppxAnDNtmmOUhtGbsryoWWA7G4wSBkqMYPZDHtlyeZ mWCFooyODVV7Vv0B6aMJN7vzQWjmICsZeaJUwLxj7odD6w+uGZWeVPMqgqedu7wr fjPCObOzl2FR91QP/mt01k9YoKEnMpkdCFgis/R7gi+tw6HaXEAXrE25CwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBvXEK3lXcwCdwDA87afNuy3+Q7CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmOTY3MmE4LWYzZTMtNDdhYi04MzdkLWRjYTBjNzcwNzFjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/UAwDQYJKoZIhvcNAQELBQADggEBADjpxHWn5LiiNEc5JZ8r slHuDjdLYMiJTF3JkGV2MVGcRmSVNYNQh3vgOw8vfFXl2EXLP8wVnNd9cvu8N8dX xXFb89zD6xN7braDKXyZNnCOqEbfAMbG6w2krOvV+C286PikPl7BlZd67WdQ1ER9 AL7/N0cujtr5sy3JNWn6hCCaLYDAFEg7BvPhILzzDYnBllojhi6en4+Kyz/lZN0d 6TM1rvB6pq/0OlYesA/uF7DExbtgiaqKzREOdzdic1nBP/GDJpBBi7hvGvaGhMI2 65b093BN7kLS+/3Ul4RCMFYdaOKjDB8eBS5VrXbteCJz6CCZunkjn+UZjAHD3FY5 tJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:57 2025 by rpki-client