$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa File: b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa (raw, json) Hash identifier: GNpXTi9ER2ruLO7dHJZB4ZsoViAEYbzqvnjJkeU0U1M= Subject key identifier: 83:14:F2:3F:07:82:BD:B1:FB:4A:70:F6:68:08:94:74:E3:C0:DD:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2980CFC23366A65CD2C2B7A4896C6BAD7634C2A4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa Signing time: Wed 15 Oct 2025 00:10:56 +0000 ROA not before: Wed 15 Oct 2025 00:10:56 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:80:cf:c2:33:66:a6:5c:d2:c2:b7:a4:89:6c:6b:ad:76:34:c2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:10:56 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=fd4d37213fbfe9a2f9322ff8538b2bfb48ac863fdde14c6ebae413dec55d6607, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:d3:bd:be:b2:74:a1:10:0b:74:f8:41:3b: 27:bb:71:d2:d3:a8:49:d6:ba:47:36:32:97:15:cf: fe:7d:be:2e:f6:0f:13:d5:ef:a9:c0:76:24:c1:9d: 1c:0f:6c:26:51:e1:59:47:d5:74:d2:3d:33:f1:4f: 14:64:e7:fa:ec:50:e0:18:97:e6:d9:d1:47:65:98: cb:35:ff:6b:35:66:fb:ec:2d:58:98:15:1a:05:d5: 6c:9a:58:5f:3e:76:5b:ea:f2:15:bc:b2:8b:6c:24: 89:0b:84:93:ae:23:69:1e:7b:9b:c2:3a:2a:ba:a7: b9:07:14:8b:28:94:16:bf:1a:5e:69:09:fe:79:fe: 51:2a:89:98:db:73:56:f9:6f:ba:bf:33:97:4f:4d: af:ed:af:32:1a:ac:96:0a:22:c7:d0:6b:73:11:7f: 78:17:6b:d1:b8:40:b4:75:e2:29:1e:be:5a:90:cd: 2f:a4:e8:39:98:2a:3f:0c:54:32:3d:d1:ff:ee:66: b5:55:66:fd:1c:45:1a:d9:58:9a:25:86:b4:91:b5: 4b:01:6e:67:b1:94:d2:e2:53:13:4f:78:e4:c8:04: ef:73:eb:14:c4:0f:b0:8f:6b:0b:c2:e0:b5:a9:05: f7:cd:ad:e0:d2:87:89:f1:33:c1:cc:7b:b7:9f:31: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:F2:3F:07:82:BD:B1:FB:4A:70:F6:68:08:94:74:E3:C0:DD:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7148a1a-4b2d-4045-ae74-1ae201ddcacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:b000::/40 Signature Algorithm: sha256WithRSAEncryption 07:a3:2d:59:8a:28:c2:76:3b:72:29:54:e7:37:b4:97:96:40: 7f:cc:55:59:8b:2f:ca:e7:62:c5:6f:24:50:2a:6e:8a:cc:bf: 8f:00:c5:c3:2a:63:6d:df:a5:54:76:51:44:d8:66:62:f0:b6: 9d:94:7f:9b:61:0e:e9:13:5a:8c:17:c8:1d:6f:a0:95:6b:85: 84:f5:26:b7:37:fa:99:12:74:4f:d9:9b:d6:e9:8a:2c:f3:ce: fc:3b:b6:3e:df:e6:d6:d1:49:b6:bb:d4:d3:03:72:35:4b:cf: 75:51:b3:10:93:64:11:c4:a9:78:81:2f:b9:7f:d8:c2:cf:c7: 27:a8:39:e7:fd:b4:1b:e0:2c:17:5c:98:51:04:21:5d:ec:d7: 6e:de:d6:a7:08:90:15:34:10:6b:86:17:c2:a9:b8:88:c3:2b: 91:f0:cb:cc:54:fc:4a:73:5a:19:66:ea:df:00:47:0f:07:e6: 15:e1:ce:db:f9:1b:a7:18:7e:74:0c:42:f0:e9:d9:f7:74:9d: 0a:60:92:65:27:2b:8e:35:c8:ea:c0:8f:27:7d:49:b6:61:70: b4:84:f7:69:a8:70:27:6e:44:d7:69:98:f2:7c:29:8b:59:05: a7:31:8b:bb:0f:b3:e0:4e:fc:65:cd:d2:93:4e:73:aa:e4:6c: 99:2b:ba:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKYDPwjNmplzSwrekiWxrrXY0wqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMTA1NloX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAZmQ0ZDM3MjEzZmJmZTlhMmY5MzIy ZmY4NTM4YjJiZmI0OGFjODYzZmRkZTE0YzZlYmFlNDEzZGVjNTVkNjYwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwLTvb6ydKEQC3T4QTsnu3HS06hJ 1rpHNjKXFc/+fb4u9g8T1e+pwHYkwZ0cD2wmUeFZR9V00j0z8U8UZOf67FDgGJfm 2dFHZZjLNf9rNWb77C1YmBUaBdVsmlhfPnZb6vIVvLKLbCSJC4STriNpHnubwjoq uqe5BxSLKJQWvxpeaQn+ef5RKomY23NW+W+6vzOXT02v7a8yGqyWCiLH0GtzEX94 F2vRuEC0deIpHr5akM0vpOg5mCo/DFQyPdH/7ma1VWb9HEUa2ViaJYa0kbVLAW5n sZTS4lMTT3jkyATvc+sUxA+wj2sLwuC1qQX3za3g0oeJ8TPBzHu3nzEq3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIMU8j8Hgr2x+0pw9mgIlHTjwN2NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MTQ4YTFhLTRiMmQtNDA0NS1hZTc0LTFhZTIwMWRkY2FjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaLAwDQYJKoZIhvcNAQELBQADggEBAAejLVmKKMJ2O3IpVOc3 tJeWQH/MVVmLL8rnYsVvJFAqborMv48AxcMqY23fpVR2UUTYZmLwtp2Uf5thDukT WowXyB1voJVrhYT1Jrc3+pkSdE/Zm9bpiizzzvw7tj7f5tbRSba71NMDcjVLz3VR sxCTZBHEqXiBL7l/2MLPxyeoOef9tBvgLBdcmFEEIV3s127e1qcIkBU0EGuGF8Kp uIjDK5Hwy8xU/EpzWhlm6t8ARw8H5hXhztv5G6cYfnQMQvDp2fd0nQpgkmUnK441 yOrAjyd9SbZhcLSE92mocCduRNdpmPJ8KYtZBacxi7sPs+BO/GXN0pNOc6rkbJkr ul0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:34:43 2025 by rpki-client