$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa File: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (raw, json) Hash identifier: xQO1wnKvetpsF+feWgIvq9A3g8NXj+xFCYGVWoa7USY= Subject key identifier: 8C:F2:C5:3E:22:FA:CF:8C:AB:54:05:71:FA:A2:A5:4F:7B:CF:25:1F Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5B0A715CD30E7B4766A572EE0AA5A73494FEADCC Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa Signing time: Sat 18 Oct 2025 00:00:05 +0000 ROA not before: Sat 18 Oct 2025 00:00:05 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0a:71:5c:d3:0e:7b:47:66:a5:72:ee:0a:a5:a7:34:94:fe:ad:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 18 00:00:05 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f1d6fcf904ae1b444a505464e11b5cf5ad0e83da207175fc02db4b3434a25569, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:70:36:6a:2c:03:f7:18:15:3c:ea:09:ee: cd:7b:32:87:5c:d7:8f:c0:3d:d2:a3:1e:78:6d:6b: 18:10:b2:d8:8a:7a:cf:ea:94:3c:ac:9f:93:a4:06: b3:0f:c7:33:9d:13:ed:31:e5:ba:3f:c3:43:9c:d5: 21:39:05:88:a6:b1:10:88:15:08:60:78:bf:41:bb: f8:89:d1:7d:b3:9c:b6:3f:85:90:69:71:fe:73:82: db:ab:41:27:14:f2:2f:21:4b:19:68:20:8d:37:ce: 02:b5:4f:d0:55:c8:82:a9:f8:37:f2:c9:24:63:72: ea:29:cc:80:88:7e:af:04:c0:22:dd:9e:2c:30:07: 89:eb:c7:bd:42:ac:11:05:f9:15:8a:62:78:4b:ed: 9d:66:7c:eb:7f:9c:b6:52:6f:98:2a:c1:fc:34:97: 62:36:75:80:53:76:b7:62:c4:db:eb:b0:3b:ea:da: 86:e4:36:39:b3:22:e5:54:9a:b4:3e:27:f1:0b:03: ce:4d:3f:79:a0:94:e8:01:21:0b:94:25:a6:a8:4a: 20:c1:13:48:2b:1a:5a:5f:a2:dd:22:cb:00:7b:a6: ee:a3:c7:95:13:8c:df:16:df:c4:33:78:9e:55:42: 82:d4:9c:42:e5:29:8c:ce:66:3d:f6:87:db:83:ee: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F2:C5:3E:22:FA:CF:8C:AB:54:05:71:FA:A2:A5:4F:7B:CF:25:1F X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/48 Signature Algorithm: sha256WithRSAEncryption 88:db:9d:9d:f6:8b:9d:d4:5e:77:a3:0a:de:74:98:31:15:b6: ce:d0:d9:63:d9:d2:19:4e:f2:d1:8b:4c:33:ff:4f:0b:8a:55: f0:d5:8b:f6:60:85:2c:e0:10:a3:ca:d8:0a:79:d9:d7:67:5f: 6a:3b:4a:d5:d9:2d:c9:af:51:36:41:69:0f:40:05:35:b7:8c: f3:40:35:57:a8:37:36:a4:90:38:eb:f1:f9:1e:50:ef:5d:da: c7:94:39:dd:3d:83:6a:50:5c:af:ff:b8:90:37:99:3b:92:13: d4:32:e7:b1:6c:b7:cb:39:cd:2b:b3:7c:c2:a9:43:03:2f:76: 79:80:24:8f:13:85:62:e9:48:59:e6:b5:1f:c8:d0:b4:be:84: 8c:7d:eb:97:ec:1f:f0:11:ef:9d:24:20:12:fc:34:06:21:63: 2c:be:d7:69:4b:91:19:bd:56:be:20:47:b8:bb:ce:35:78:15: 9b:95:70:7e:47:89:4e:78:b8:0a:27:0f:c0:de:93:20:be:35: ae:3c:19:5a:da:bd:ae:72:3f:2c:6f:cf:d2:e9:da:ab:5c:5b: 82:a5:83:93:39:e6:ec:80:db:25:ed:70:c9:a5:d6:a5:cf:3b: 01:a5:5c:0a:02:11:dd:23:11:ff:a5:f9:a3:61:1d:43:35:ef: 64:af:76:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWwpxXNMOe0dmpXLuCqWnNJT+rcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MTAxODAwMDAwNVoX DTI1MTEyMjIzNTk1OVowejFJMEcGA1UEBRNAZjFkNmZjZjkwNGFlMWI0NDRhNTA1 NDY0ZTExYjVjZjVhZDBlODNkYTIwNzE3NWZjMDJkYjRiMzQzNGEyNTU2OTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43VwNmosA/cYFTzqCe7NezKHXNeP wD3Sox54bWsYELLYinrP6pQ8rJ+TpAazD8cznRPtMeW6P8NDnNUhOQWIprEQiBUI YHi/Qbv4idF9s5y2P4WQaXH+c4Lbq0EnFPIvIUsZaCCNN84CtU/QVciCqfg38skk Y3LqKcyAiH6vBMAi3Z4sMAeJ68e9QqwRBfkVimJ4S+2dZnzrf5y2Um+YKsH8NJdi NnWAU3a3YsTb67A76tqG5DY5syLlVJq0PifxCwPOTT95oJToASELlCWmqEogwRNI KxpaX6LdIssAe6buo8eVE4zfFt/EM3ieVUKC1JxC5SmMzmY99ofbg+5/3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIzyxT4i+s+Mq1QFcfqipU97zyUfMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzM4MWZjNmU2LTVkNDktNDFiYy1iNTg0LWQ5NDM3YzY4ZTNjZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCI252d9oud1F53owre dJgxFbbO0Nlj2dIZTvLRi0wz/08LilXw1Yv2YIUs4BCjytgKednXZ19qO0rV2S3J r1E2QWkPQAU1t4zzQDVXqDc2pJA46/H5HlDvXdrHlDndPYNqUFyv/7iQN5k7khPU MuexbLfLOc0rs3zCqUMDL3Z5gCSPE4Vi6UhZ5rUfyNC0voSMfeuX7B/wEe+dJCAS /DQGIWMsvtdpS5EZvVa+IEe4u841eBWblXB+R4lOeLgKJw/A3pMgvjWuPBla2r2u cj8sb8/S6dqrXFuCpYOTOebsgNsl7XDJpdalzzsBpVwKAhHdIxH/pfmjYR1DNe9k r3ZL -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:18 2025 by rpki-client