$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9cef150-9fbc-4bd4-ba7c-48636358bea6.roa File: e9cef150-9fbc-4bd4-ba7c-48636358bea6.roa (raw, json) Hash identifier: 1bl8NYkwIt/YFgi+yb7spTmXeX9VoQs5GIx0yKdA+ZU= Subject key identifier: 15:1C:A5:64:66:86:A1:BE:57:37:CF:21:46:A4:52:FA:59:55:5C:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30ECF6E5F4329C591E51FCF8C2E69B716EA2627E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9cef150-9fbc-4bd4-ba7c-48636358bea6.roa Signing time: Wed 15 Oct 2025 00:10:33 +0000 ROA not before: Wed 15 Oct 2025 00:10:33 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ec:f6:e5:f4:32:9c:59:1e:51:fc:f8:c2:e6:9b:71:6e:a2:62:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:10:33 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=3d3a76a69efb249dd296ecb70a37feed4661f95e34fa9d540c8f98a719d34b7d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:66:2c:b3:7e:c4:25:1f:2f:1b:36:c7:f2: d7:cd:e6:d3:c3:b8:ed:90:57:94:7e:10:16:a2:54: 45:c3:9c:16:f5:1d:22:4a:3a:7e:d2:17:cc:a6:72: 50:3d:1c:c1:15:3b:bb:31:0a:2c:64:97:87:33:f5: 9f:08:1e:29:db:27:ce:ec:84:11:ff:4d:c4:6c:48: 04:75:96:fa:6a:e7:61:5a:8c:68:f1:ec:d1:05:1a: 16:70:68:92:21:7a:63:59:8c:15:1f:da:81:f7:d9: 70:3e:d5:2e:91:9a:9a:54:70:75:35:89:6d:29:19: 60:be:19:50:f2:ba:61:30:ed:10:94:e1:9d:7e:88: 03:f5:4c:94:41:28:bb:64:46:ee:1f:db:c9:43:be: 35:6a:e7:ec:2e:09:8f:c3:a7:16:f9:87:a5:c2:28: 53:39:18:8c:ef:fa:84:f3:8f:56:5b:8d:c2:34:b7: e5:57:15:f0:5a:15:87:7c:d6:91:45:4a:b3:86:e7: c9:8a:64:88:e7:13:ea:43:0e:27:ba:25:1f:51:f8: bd:5a:76:1b:57:9e:1e:c6:25:4f:a6:ae:1c:c4:c2: dd:14:50:bd:26:34:29:2e:9f:b5:10:e8:04:50:59: 8a:2e:32:84:0f:64:86:9b:a0:98:48:53:79:a1:97: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:A5:64:66:86:A1:BE:57:37:CF:21:46:A4:52:FA:59:55:5C:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9cef150-9fbc-4bd4-ba7c-48636358bea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:c800::/40 Signature Algorithm: sha256WithRSAEncryption cb:02:54:8e:e9:4e:6e:1e:36:6b:09:36:d2:c5:e9:02:46:bc: b0:52:f5:9f:06:4a:f8:6a:92:8d:cd:26:d1:93:58:24:fe:9a: 11:b1:fe:bf:c1:47:73:b5:67:ee:45:46:8e:2c:67:93:23:c4: cf:90:b6:43:4d:4a:1e:0c:e8:55:61:59:0c:b5:2b:97:b5:a3: c8:dc:53:2f:87:53:74:e1:b1:a1:6c:f6:36:f3:60:8d:8c:df: 3a:24:6e:50:ec:c5:e3:33:35:73:b7:4f:af:24:bf:5e:da:86: 21:ec:9d:d7:dc:9d:58:9e:45:cf:f1:06:e0:35:25:80:7a:2d: 6d:b0:80:4f:df:f1:d0:f9:cb:36:24:06:15:85:f7:72:39:e6: 49:cc:b2:3b:af:da:9e:25:96:88:9f:b3:f2:19:5d:a8:e0:ec: 09:04:cb:af:00:77:04:ae:ff:5d:d0:05:c5:c9:ca:e2:ab:62: 15:68:7f:61:0b:b5:1c:c5:27:ab:70:bd:86:95:07:e5:ff:40: 80:a9:de:cc:bb:05:bf:64:d5:d2:78:59:cb:09:53:86:2f:4f: 36:60:4c:e2:2e:e8:67:30:6b:9a:1f:34:b6:d5:af:3d:f6:82: c0:57:c8:3a:f9:18:72:cc:e1:1f:bc:61:86:0a:8c:f3:6e:33: fc:6b:39:d2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMOz25fQynFkeUfz4wuabcW6iYn4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMTAzM1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAM2QzYTc2YTY5ZWZiMjQ5ZGQyOTZl Y2I3MGEzN2ZlZWQ0NjYxZjk1ZTM0ZmE5ZDU0MGM4Zjk4YTcxOWQzNGI3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUFmLLN+xCUfLxs2x/LXzebTw7jt kFeUfhAWolRFw5wW9R0iSjp+0hfMpnJQPRzBFTu7MQosZJeHM/WfCB4p2yfO7IQR /03EbEgEdZb6audhWoxo8ezRBRoWcGiSIXpjWYwVH9qB99lwPtUukZqaVHB1NYlt KRlgvhlQ8rphMO0QlOGdfogD9UyUQSi7ZEbuH9vJQ741aufsLgmPw6cW+YelwihT ORiM7/qE849WW43CNLflVxXwWhWHfNaRRUqzhufJimSI5xPqQw4nuiUfUfi9WnYb V54exiVPpq4cxMLdFFC9JjQpLp+1EOgEUFmKLjKED2SGm6CYSFN5oZdh/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBUcpWRmhqG+VzfPIUakUvpZVVxiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U5Y2VmMTUwLTlmYmMtNGJkNC1iYTdjLTQ4NjM2MzU4YmVhNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8cgwDQYJKoZIhvcNAQELBQADggEBAMsCVI7pTm4eNmsJNtLF 6QJGvLBS9Z8GSvhqko3NJtGTWCT+mhGx/r/BR3O1Z+5FRo4sZ5MjxM+QtkNNSh4M 6FVhWQy1K5e1o8jcUy+HU3ThsaFs9jbzYI2M3zokblDsxeMzNXO3T68kv17ahiHs ndfcnVieRc/xBuA1JYB6LW2wgE/f8dD5yzYkBhWF93I55knMsjuv2p4lloifs/IZ Xajg7AkEy68AdwSu/13QBcXJyuKrYhVof2ELtRzFJ6twvYaVB+X/QICp3sy7Bb9k 1dJ4WcsJU4YvTzZgTOIu6Gcwa5ofNLbVrz32gsBXyDr5GHLM4R+8YYYKjPNuM/xr OdI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:07 2025 by rpki-client