$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfe072b6-e9bc-4b34-8ab0-f448e34f3b82.roa File: dfe072b6-e9bc-4b34-8ab0-f448e34f3b82.roa (raw, json) Hash identifier: /LrC1GkjrKbwpFtKl34h6zCCfFEXA4Fo4m5BX9duRM4= Subject key identifier: 81:AC:F8:FB:9B:EE:C7:8C:0F:20:E6:2E:E5:43:07:7C:8B:70:2A:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21DA470E281F6CE72A2F7BD55B195BD6ABC27FF2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfe072b6-e9bc-4b34-8ab0-f448e34f3b82.roa Signing time: Mon 06 Oct 2025 15:00:12 +0000 ROA not before: Mon 06 Oct 2025 15:00:12 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafd:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:da:47:0e:28:1f:6c:e7:2a:2f:7b:d5:5b:19:5b:d6:ab:c2:7f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 15:00:12 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=f1e1b05d008e46709497bd1dbbb8aba2ff24d7350c3e887c634a008dcf7f9afa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:ba:fc:f4:09:36:b3:ab:6b:71:ab:2c:69: a2:ef:2a:f6:46:e9:3d:ca:a7:65:9a:f8:87:65:c2: 1a:91:df:a6:f1:70:0f:13:36:67:f7:f8:19:cc:fb: 8d:e2:a5:39:64:20:a3:cc:4c:68:9e:c3:d2:35:43: 4c:09:f1:c5:ea:8a:b0:56:bd:da:6d:21:8c:87:a8: 4e:2c:9e:8c:b2:02:fd:8a:9a:df:75:89:8a:49:18: 46:b9:4e:24:03:15:41:07:0d:19:66:a6:67:29:25: b9:7d:19:7b:11:e5:76:cc:85:e9:43:4d:42:82:f8: e8:b9:e3:29:56:67:ad:b2:6f:a5:6a:f5:87:16:14: af:44:ec:e7:b5:d9:7f:94:a7:9f:f5:6a:39:9e:b3: 3b:5a:e5:2c:f1:a9:c1:39:a8:72:e7:a4:47:55:58: 27:d5:46:4f:4d:30:ff:cd:8f:1b:84:cc:14:1f:98: 4e:0c:bd:81:d7:6c:b6:5c:d3:4c:8c:cb:93:9a:84: db:32:f3:87:ab:8d:d4:a7:58:ae:32:bd:42:54:43: 8d:28:c2:76:04:14:5a:35:15:f5:08:7c:85:57:4b: ff:4a:4b:34:50:95:2c:9b:d6:4f:36:87:79:e4:61: 7f:b3:d0:44:b7:fd:47:de:b7:89:6b:e6:0b:52:86: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AC:F8:FB:9B:EE:C7:8C:0F:20:E6:2E:E5:43:07:7C:8B:70:2A:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfe072b6-e9bc-4b34-8ab0-f448e34f3b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafd:2080::/48 Signature Algorithm: sha256WithRSAEncryption a5:7f:b6:6a:02:42:11:03:19:0d:9e:6a:5e:db:de:44:6a:32: c4:43:54:38:ef:23:f1:a1:73:b5:1a:1c:17:cc:b5:12:6c:46: 0a:cc:eb:8b:a9:62:96:1a:7e:da:22:74:e8:78:ba:ff:3b:08: b2:ef:c0:2e:82:1d:02:76:80:12:0d:4e:99:89:38:1a:cb:ad: e3:ec:b3:90:e9:54:53:64:2a:ca:9e:ab:0c:36:28:a3:9d:4b: 75:98:d3:e2:08:94:47:71:69:ba:32:42:2d:c4:7b:b3:93:8e: 06:43:3b:0b:5a:b0:c4:45:39:2f:35:08:d8:a2:a5:ea:80:fb: 11:9a:82:18:b6:d7:76:e1:ae:1a:90:f7:a4:88:1e:3a:04:99: 48:a3:6c:6c:6e:6e:3b:ba:06:80:db:85:f2:c0:95:a4:76:f0: 22:b4:b1:49:b1:8f:54:7d:1b:56:a7:0d:95:13:89:15:51:25: 6f:bb:ae:47:6e:6a:0f:a4:55:41:5d:83:41:25:32:d5:2c:15: 7e:77:1e:c2:2a:5a:a8:3e:7f:07:56:d9:72:25:9f:c8:df:88: 78:65:3b:4a:7c:b6:e4:0a:1b:8b:dc:dd:a2:51:df:5c:63:d3: 66:27:c6:04:f3:4b:38:98:db:2e:3e:3d:67:6c:ba:ed:a1:59: 41:9d:90:87 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIdpHDigfbOcqL3vVWxlb1qvCf/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNjE1MDAxMloX DTI1MTExMDIzNTk1OVowejFJMEcGA1UEBRNAZjFlMWIwNWQwMDhlNDY3MDk0OTdi ZDFkYmJiOGFiYTJmZjI0ZDczNTBjM2U4ODdjNjM0YTAwOGRjZjdmOWFmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/K6/PQJNrOra3GrLGmi7yr2Ruk9 yqdlmviHZcIakd+m8XAPEzZn9/gZzPuN4qU5ZCCjzExonsPSNUNMCfHF6oqwVr3a bSGMh6hOLJ6MsgL9iprfdYmKSRhGuU4kAxVBBw0ZZqZnKSW5fRl7EeV2zIXpQ01C gvjoueMpVmetsm+lavWHFhSvROzntdl/lKef9Wo5nrM7WuUs8anBOahy56RHVVgn 1UZPTTD/zY8bhMwUH5hODL2B12y2XNNMjMuTmoTbMvOHq43Up1iuMr1CVEONKMJ2 BBRaNRX1CHyFV0v/Sks0UJUsm9ZPNod55GF/s9BEt/1H3reJa+YLUobh6wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIGs+Pub7seMDyDmLuVDB3yLcCrdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmZTA3MmI2LWU5YmMtNGIzNC04YWIwLWY0NDhlMzRmM2I4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/SCAMA0GCSqGSIb3DQEBCwUAA4IBAQClf7ZqAkIRAxkNnmpe 295EajLEQ1Q47yPxoXO1GhwXzLUSbEYKzOuLqWKWGn7aInToeLr/Owiy78Augh0C doASDU6ZiTgay63j7LOQ6VRTZCrKnqsMNiijnUt1mNPiCJRHcWm6MkItxHuzk44G QzsLWrDERTkvNQjYoqXqgPsRmoIYttd24a4akPekiB46BJlIo2xsbm47ugaA24Xy wJWkdvAitLFJsY9UfRtWpw2VE4kVUSVvu65HbmoPpFVBXYNBJTLVLBV+dx7CKlqo Pn8HVtlyJZ/I34h4ZTtKfLbkChuL3N2iUd9cY9NmJ8YE80s4mNsuPj1nbLrtoVlB nZCH -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:38 2025 by rpki-client