$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa File: f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa (raw, json) Hash identifier: ylsZfRi1FR8fjPvhO5cBuQTBj5AdU8znqKg7innd5Mo= Subject key identifier: D4:2B:D8:5B:36:74:9B:CB:19:39:F9:26:14:5F:16:A1:BE:22:E2:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 718350615D0D18CA4AADBD0BFD3F05A3D7789396 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa Signing time: Wed 15 Oct 2025 00:00:11 +0000 ROA not before: Wed 15 Oct 2025 00:00:11 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:83:50:61:5d:0d:18:ca:4a:ad:bd:0b:fd:3f:05:a3:d7:78:93:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:00:11 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=98e05a6880403990170f667aa86810defca1b78c9fc3f06bddbb7a41554c51b6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:4a:65:d1:f9:b0:0f:bb:2f:a7:8d:20:cf: 5d:5f:3a:ed:46:66:59:53:6f:1b:f1:4f:cc:a3:25: f2:90:55:a0:07:f8:bd:0b:e8:45:d4:c5:0a:02:b5: 24:35:52:b5:c4:9c:8e:8e:e4:65:cd:01:a2:af:48: 2e:56:64:d0:00:9c:8b:5a:35:f7:ba:48:54:db:4d: 70:39:39:d4:fc:4e:31:88:21:16:67:88:b9:04:8e: a9:4e:d9:be:9c:58:88:a5:1b:e8:b6:96:a7:05:20: ac:81:50:85:c3:20:0c:ef:fd:54:fa:b0:73:41:9d: f3:e0:30:e7:14:14:d7:ef:d1:a8:ab:de:fa:a6:f5: 1e:e9:82:d3:a2:d3:51:34:fb:ec:d1:ef:ab:8a:fc: 18:fe:3e:d9:13:a7:e4:6b:1f:9a:a0:30:d6:ca:d6: 99:a9:86:64:d9:04:4c:1f:a2:9e:5a:28:72:24:ed: cf:02:32:0b:6a:aa:88:eb:ec:df:b3:57:4b:f8:b6: 60:9e:40:41:7f:24:fa:1b:04:f2:a0:92:3f:12:5c: d6:60:ee:88:77:b1:44:9b:e8:51:82:ac:84:a8:1f: a5:cc:09:02:85:ae:b4:14:32:28:71:07:f2:70:e2: 7a:2a:a7:be:8d:e5:13:56:e2:de:95:08:00:c9:b5: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2B:D8:5B:36:74:9B:CB:19:39:F9:26:14:5F:16:A1:BE:22:E2:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:e000::/40 Signature Algorithm: sha256WithRSAEncryption c1:8b:5e:27:b8:50:71:f0:d0:70:b7:b8:8d:74:61:52:76:31: 05:22:da:15:f8:87:2e:ee:01:a4:c3:91:4c:43:bf:36:f2:ad: 6a:bf:46:44:d0:21:6c:ef:20:05:a2:46:6d:69:4b:2b:80:d6: a0:1e:7c:78:11:69:72:40:87:da:b7:38:5c:ea:c9:64:bb:b0: bd:ee:31:a8:3c:88:15:65:72:83:d7:b8:0d:70:b1:35:66:f0: ad:33:6b:72:f1:e4:41:e6:ab:87:81:fa:19:82:87:1e:ea:98: 4c:30:44:5c:01:77:95:e5:d3:45:51:46:e8:94:44:d0:12:68: e0:f1:d7:87:12:f1:f6:ad:bc:dd:47:5d:0b:ef:3c:d0:bd:94: 48:c0:72:0b:92:c3:2d:3b:b9:3f:86:02:88:27:21:5d:1e:8c: 1f:dc:0f:f6:9a:f8:27:a3:33:93:1e:a5:12:a1:6d:94:a1:39: 35:4a:a2:ac:4e:60:dc:32:c1:c5:04:04:c0:d6:c3:8f:d5:8b: ba:16:33:4c:a8:1f:61:b8:30:34:7f:85:8a:7d:72:36:70:39: 0b:42:3b:9d:40:75:cc:a3:df:f3:88:3b:60:85:c2:f5:fd:65: 83:5e:26:af:8a:30:37:9e:36:97:e2:cf:10:e4:d6:c4:ca:72: e5:36:e8:0e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcYNQYV0NGMpKrb0L/T8Fo9d4k5YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMDAxMVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAOThlMDVhNjg4MDQwMzk5MDE3MGY2 NjdhYTg2ODEwZGVmY2ExYjc4YzlmYzNmMDZiZGRiYjdhNDE1NTRjNTFiNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28tKZdH5sA+7L6eNIM9dXzrtRmZZ U28b8U/MoyXykFWgB/i9C+hF1MUKArUkNVK1xJyOjuRlzQGir0guVmTQAJyLWjX3 ukhU201wOTnU/E4xiCEWZ4i5BI6pTtm+nFiIpRvotpanBSCsgVCFwyAM7/1U+rBz QZ3z4DDnFBTX79Goq976pvUe6YLTotNRNPvs0e+rivwY/j7ZE6fkax+aoDDWytaZ qYZk2QRMH6KeWihyJO3PAjILaqqI6+zfs1dL+LZgnkBBfyT6GwTyoJI/ElzWYO6I d7FEm+hRgqyEqB+lzAkCha60FDIocQfycOJ6Kqe+jeUTVuLelQgAybWMOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNQr2Fs2dJvLGTn5JhRfFqG+IuKrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2MzgwMjU4LWYyZTItNGUxMS1hMDNlLTVkMzAzY2VlYTBkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaueAwDQYJKoZIhvcNAQELBQADggEBAMGLXie4UHHw0HC3uI10 YVJ2MQUi2hX4hy7uAaTDkUxDvzbyrWq/RkTQIWzvIAWiRm1pSyuA1qAefHgRaXJA h9q3OFzqyWS7sL3uMag8iBVlcoPXuA1wsTVm8K0za3Lx5EHmq4eB+hmChx7qmEww RFwBd5Xl00VRRuiURNASaODx14cS8fatvN1HXQvvPNC9lEjAcguSwy07uT+GAogn IV0ejB/cD/aa+CejM5MepRKhbZShOTVKoqxOYNwywcUEBMDWw4/Vi7oWM0yoH2G4 MDR/hYp9cjZwOQtCO51Adcyj3/OIO2CFwvX9ZYNeJq+KMDeeNpfizxDk1sTKcuU2 6A4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:03:26 2025 by rpki-client