$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa File: b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa (raw, json) Hash identifier: FE/pn1qJrA8bwy5WYLBQl+BIj08E3QNza7KyJIJTkJM= Subject key identifier: BA:D4:39:C4:8E:99:DF:0C:F0:B9:E0:19:A9:4F:B1:3D:36:EF:C3:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A87B3F48526EBA12BD719CE8063A44AC3135BA7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa Signing time: Wed 15 Oct 2025 00:40:51 +0000 ROA not before: Wed 15 Oct 2025 00:40:51 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:87:b3:f4:85:26:eb:a1:2b:d7:19:ce:80:63:a4:4a:c3:13:5b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:51 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=a33f8050f6daee7ce5d092cf90d9d8100b81a84254c7a906e5ff8d5a85d97b79, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:90:99:13:2a:dd:88:52:5a:03:99:03:42: f3:85:14:35:8c:84:b7:5d:fd:bd:ff:76:49:24:6d: 68:b4:a2:ee:74:86:0a:83:e2:60:39:4a:9f:23:d0: 92:32:27:e5:fd:a8:3b:c3:8b:60:74:cb:85:79:2c: 70:66:6b:69:5e:1f:07:d2:f4:d6:b4:ff:e2:2b:bb: 5a:95:1f:da:2b:96:ce:35:11:80:08:6b:fb:f9:fc: fc:11:0f:e4:c4:62:7b:31:c6:58:49:42:18:79:38: 7d:4e:08:66:8b:3c:68:91:e9:6e:1e:12:90:da:78: f1:b6:6a:48:d3:f0:56:7b:93:29:d7:1a:60:72:bd: e2:e7:e9:46:8d:28:db:17:f0:0a:89:7e:4c:2b:38: 35:fa:70:21:a2:3b:cc:fc:54:b6:2d:ec:d7:34:4f: dc:15:0c:c0:40:33:97:b9:61:5b:c8:5d:85:16:8f: d2:88:fe:87:e7:01:ec:4c:b3:f4:4d:5c:ec:f3:36: 7a:c3:e1:e2:e8:1f:ae:a2:62:4c:68:c5:56:b7:ea: 22:50:8c:91:31:e6:33:96:10:1b:99:4a:af:3b:c4: fb:d6:89:68:24:47:42:cd:be:10:41:e3:cd:9c:3e: 77:b6:a8:66:ad:65:39:a7:0a:b5:34:19:05:22:a3: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D4:39:C4:8E:99:DF:0C:F0:B9:E0:19:A9:4F:B1:3D:36:EF:C3:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8800::/38 Signature Algorithm: sha256WithRSAEncryption ca:83:92:f0:44:b5:be:96:4d:74:46:80:98:62:07:ef:01:10: e6:86:db:78:1f:ff:0e:4d:2c:f9:00:51:c4:e4:1b:39:11:f9: ba:13:39:b8:7b:e8:31:57:bc:44:2c:61:4f:8c:3a:bd:8c:2d: 12:af:88:03:d5:07:09:33:4b:80:3a:a1:95:a4:16:dd:47:d5: bf:5d:50:27:56:96:4a:70:ed:fc:31:a6:94:4e:33:3d:1a:a0: e8:f5:2b:08:d0:0e:72:8b:10:80:fd:e7:44:31:c5:99:e1:0f: 73:ec:30:3b:db:5f:d5:f9:3e:bd:ec:d9:71:44:67:4b:7e:26: 94:f6:e9:96:1a:da:d0:f2:85:ec:6b:5b:37:94:aa:0c:37:3d: b6:f4:81:02:1a:e4:05:d5:53:4b:b7:59:1b:dd:52:7b:1c:e0: 1e:19:f4:98:e3:55:0e:e3:36:86:bd:9d:62:64:6b:9d:7f:bb: 30:64:5f:81:13:de:e2:56:fe:7b:5e:b1:38:60:1d:7e:a2:fa: 15:7f:bf:27:87:6c:48:a5:d8:66:d4:ba:3e:ed:a6:81:d1:15: 8e:9c:e2:78:e7:f4:2c:cd:56:20:48:06:c6:59:6e:94:67:b3: 3e:45:ee:86:f0:7e:c3:ac:37:40:2e:fd:55:21:1d:eb:5f:2a: 32:f8:55:66 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKoez9IUm66Er1xnOgGOkSsMTW6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDA1MVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAYTMzZjgwNTBmNmRhZWU3Y2U1ZDA5 MmNmOTBkOWQ4MTAwYjgxYTg0MjU0YzdhOTA2ZTVmZjhkNWE4NWQ5N2I3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/OQmRMq3YhSWgOZA0LzhRQ1jIS3 Xf29/3ZJJG1otKLudIYKg+JgOUqfI9CSMifl/ag7w4tgdMuFeSxwZmtpXh8H0vTW tP/iK7talR/aK5bONRGACGv7+fz8EQ/kxGJ7McZYSUIYeTh9TghmizxokeluHhKQ 2njxtmpI0/BWe5Mp1xpgcr3i5+lGjSjbF/AKiX5MKzg1+nAhojvM/FS2LezXNE/c FQzAQDOXuWFbyF2FFo/SiP6H5wHsTLP0TVzs8zZ6w+Hi6B+uomJMaMVWt+oiUIyR MeYzlhAbmUqvO8T71oloJEdCzb4QQePNnD53tqhmrWU5pwq1NBkFIqMGTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLrUOcSOmd8M8LngGalPsT0278NPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3YzY0NjhlLTBiNzktNDJjYy05OWY0LWM2ODE2YzZhMWY5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIgwDQYJKoZIhvcNAQELBQADggEBAMqDkvBEtb6WTXRGgJhi B+8BEOaG23gf/w5NLPkAUcTkGzkR+boTObh76DFXvEQsYU+MOr2MLRKviAPVBwkz S4A6oZWkFt1H1b9dUCdWlkpw7fwxppROMz0aoOj1KwjQDnKLEID950QxxZnhD3Ps MDvbX9X5Pr3s2XFEZ0t+JpT26ZYa2tDyhexrWzeUqgw3Pbb0gQIa5AXVU0u3WRvd Unsc4B4Z9JjjVQ7jNoa9nWJka51/uzBkX4ET3uJW/ntesThgHX6i+hV/vyeHbEil 2GbUuj7tpoHRFY6c4njn9CzNViBIBsZZbpRnsz5F7obwfsOsN0Au/VUhHetfKjL4 VWY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:59 2025 by rpki-client